last executing test programs: 2.262162299s ago: executing program 1 (id=4148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046304}], 0x0, 0x0, 0x0}) 2.261414213s ago: executing program 1 (id=4150): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='user.incfs.size\x00') (fail_nth: 3) syz_fuse_handle_req(r0, &(0x7f000000fe00)="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", 0x2000, &(0x7f000000a080)={&(0x7f0000008dc0)={0x50, 0x0, 0x6, {0x7, 0x2b, 0xfffffff8, 0x80, 0xe57, 0xfc3, 0x5, 0x3ff, 0x0, 0x0, 0x8, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.353445985s ago: executing program 1 (id=4160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x600}]}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20085}, 0x20014) close_range(r3, 0xffffffffffffffff, 0x200000000000000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x10000, 0x4000, 0x8, 0xfd, 0x3, 0xd1, 0x40, 0x7, 0x0, 0x2e, 0x1d}, {0x1000, 0x80a0000, 0xa, 0x2, 0x40, 0x2, 0x7f, 0x6, 0x5, 0x7, 0x3, 0x1}, {0x10000, 0x4000, 0xe, 0x5, 0x1, 0x7, 0x3, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0xeeee0000, 0xd5dc0800, 0xa, 0x6, 0x3, 0x1, 0x1, 0xf8, 0x9, 0x1, 0xe}, {0x4000, 0x2000, 0x10, 0x0, 0x15, 0x2, 0xab, 0x2, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x80a0000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x1, 0x7}, {0x80a0000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x0, 0x70}, {0x100000, 0x8000000, 0xc, 0x5, 0xf, 0x9, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x3000, 0x30}, {0xd000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x8000009, 0x0, 0x3000, [0x6800000000000000, 0x9, 0xed3, 0x3]}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000440)=[@in_dx={0x82, 0x20, {0x640, 0x1}}, @cpuid={0x14, 0x18, {0xbf, 0xd7f3}}], 0x38}) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r6, &(0x7f0000000180)=""/174, 0xae) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000000)) 1.289349395s ago: executing program 3 (id=4161): r0 = socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x101, 0x7ff, 0x3, 0xd, 0x5, 0x0}) fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x1, 0x0, 0xe, 0x800000010000000, r4}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="4ff50101"], 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000018de44fec2d3c8530000000000ba4a3cc80aa23e6af580119a42995fe0a7701ef7517550fcf5f2541ebacf5859f39db0d5d3f02be5a2e0d91158f04cf15845c47ea6ab766249ecf4f26c82549662ed90c14914ec43b8dc3e2b95b6059e6f6fdbcf78ff2f703a1db9fe863ea291cac571a581e53489aca208e4b8679e92794c044b9a02649f01f813af26c83aed839b0916df"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x2480) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.203655506s ago: executing program 1 (id=4164): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x13}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x38}, 0x1, 0x800000400000000, 0x0, 0x4000}, 0x44080) semget$private(0x0, 0x6, 0x0) 1.1389457s ago: executing program 1 (id=4165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1, @local, 0x5}]}, &(0x7f0000000140)=0x10) listen(r0, 0xfff) r2 = accept$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x500}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) 806.790262ms ago: executing program 2 (id=4172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x200000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r4, 0x25, 0x2, @void}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r6}, 0x5) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 806.591318ms ago: executing program 2 (id=4173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x40, r1, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x8000000, 0x0, 0x20040095}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffff64}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c0041}, 0x804) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 355.195948ms ago: executing program 2 (id=4175): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x10500) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x1, 0xfffffff8, 0x51a, 0x1, 0x9044}) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10801, 0x74) finit_module(r1, &(0x7f00000000c0)='\x05.)\xb5/\\\x00', 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x110, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20044804) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000280)={0x2, r1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x0, 0x1d, 0x8, 0x8, 0x93, 0x7, &(0x7f00000002c0)="4ac4cd55b9cded3fd7add4841d821077e71c67e5fd46194ed3be0791723c022402d2be2f064007d62a6878190561de9d708ffa9fe5d713d8a56272d173c10169cd6a1ea62dd86cde865704164bf333918a1900b77cb1604bb330e3525ae7b32e957efe403ab22ed104a728e9a7828a9a7eb2c46302a6b8b2a626506d984f578ddddacefc61a34fe4c17c7096705cc252795082"}) (async, rerun: 32) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000003c0)="61bd4ab8ae8f916f05205b56bf46279357050d857578b98d061f654255026fa80b63f06b846385e13f7c84214f944c6502c8ba9b51bb98f27968908a0b18835da953e23fb77b26d3878af2b38f3bf495be5a739cc3491d23a937645792e78fd87679f429d9713ccf5ab707cb9def73288c1b8ecc32610073376468533eef352e32fbdbe339144780e6e88a9c036b56d2753fbe2143", 0x95) (async, rerun: 32) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000480)) (async) recvfrom$rxrpc(r1, &(0x7f0000000640)=""/23, 0x17, 0x20, &(0x7f0000000680)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) (async) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000006c0)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xfffffffffffffff8) r5 = syz_open_dev$loop(&(0x7f0000000700), 0x16f, 0x800) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000740)=0xffffffffffffffff) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000780)=[@set_irq_handler={0xbe, 0x20, {0xd5, 0x1}}, @uexit={0x0, 0x18, 0x41}, @in_dx={0x82, 0x20, {0xe779}}], 0x58}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000840)={0x4, 0x4, 0x2}) (async) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x204, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (async) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000a40)="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") (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) (async) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80801014}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x244, r11, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xa000000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf52d}, {0x6, 0x11, 0xa}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xa4}, {0x8, 0x13, 0xf}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x483}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5f}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000001000)={0x1, 0x9}) 354.986903ms ago: executing program 3 (id=4176): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/175, 0xaf}], 0x4, &(0x7f00000007c0)=""/211, 0xd3}, 0x101}], 0x1, 0x100, 0x0) 352.113572ms ago: executing program 3 (id=4178): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 351.101901ms ago: executing program 2 (id=4179): syz_open_dev$sndctrl(&(0x7f0000000000), 0xbd98, 0x20080) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 272.868517ms ago: executing program 0 (id=4180): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, 0x0, 0x0, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502200000ff02ff02002a000008000100ac1414aa0c0009000800281052"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000500)={0x7, 0x6bd6, 0x6}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40000) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r6, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1e, 0x0, &(0x7f0000000080)=""/86, 0x10, 0x30, 0x0, 0x1}) socket(0x9, 0x80000, 0x2) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) 272.669446ms ago: executing program 2 (id=4181): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (async) socket$netlink(0x10, 0x3, 0xe) 272.151496ms ago: executing program 3 (id=4182): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) fadvise64(0xffffffffffffffff, 0x5, 0x100000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x31, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) (async, rerun: 32) socket$inet6(0xa, 0x3, 0x5) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f00000000c0)={0x5000, 0x10000}) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 259.137665ms ago: executing program 3 (id=4183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x40, r1, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x8000000, 0x0, 0x20040095}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffff64}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c0041}, 0x804) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 258.523918ms ago: executing program 0 (id=4184): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc49c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800988, 0x0) 244.474415ms ago: executing program 1 (id=4185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000340)={r4, 0xfa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) close(0x3) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) getrandom(&(0x7f0000000080)=""/100, 0x64, 0x1) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x40016a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r11) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r11, 0xc0085504, &(0x7f0000000080)=0x3) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x20000000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 241.733759ms ago: executing program 2 (id=4186): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff3}, {0xd, 0xb}, {0xfff2, 0x8}}}, 0x24}}, 0x0) 153.640698ms ago: executing program 0 (id=4187): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/175, 0xaf}], 0x4, &(0x7f00000007c0)=""/211, 0xd3}, 0x101}], 0x1, 0x100, 0x0) 153.322432ms ago: executing program 0 (id=4188): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x82000040003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xe7, 0x34424752, 0x2, @stepwise={0x105, 0x2, 0x3, 0x5, 0xffffffff, 0xd}}) socket$xdp(0x2c, 0x3, 0x0) 80.336373ms ago: executing program 0 (id=4189): syz_open_dev$sndctrl(&(0x7f0000000000), 0xbd98, 0x20080) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 80.223596ms ago: executing program 0 (id=4190): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=4191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x40000) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x5, 0x1, @vifc_lcl_addr=@multicast2, @empty}, 0x2b) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): :7FFFFFFF.0006: probe with driver hid-generic failed with error -22 [ 254.297156][ T5933] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 254.364635][T15223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 254.469748][ T5933] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.474288][ T5933] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.477256][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.483580][ T5933] usb 8-1: config 0 descriptor?? [ 254.533532][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 254.533912][T15228] fuse: Unknown parameter 'group_id00000000000000000000' [ 254.537699][ T40] kauditd_printk_skb: 267 callbacks suppressed [ 254.537707][ T40] audit: type=1400 audit(1761552982.182:7916): avc: denied { prog_run } for pid=15224 comm="syz.0.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.611607][ T40] audit: type=1400 audit(1761552982.257:7917): avc: denied { allowed } for pid=15233 comm="syz.2.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 254.618587][ T40] audit: type=1400 audit(1761552982.257:7918): avc: denied { create } for pid=15233 comm="syz.2.3140" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.620401][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 254.625001][ T40] audit: type=1400 audit(1761552982.266:7919): avc: denied { read } for pid=15237 comm="syz.1.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.625026][ T40] audit: type=1400 audit(1761552982.266:7920): avc: denied { read } for pid=15237 comm="syz.1.3141" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.625046][ T40] audit: type=1400 audit(1761552982.266:7921): avc: denied { open } for pid=15237 comm="syz.1.3141" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.649438][ T40] audit: type=1400 audit(1761552982.285:7922): avc: denied { ioctl } for pid=15237 comm="syz.1.3141" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.658240][ T40] audit: type=1400 audit(1761552982.285:7923): avc: denied { ioctl } for pid=15237 comm="syz.1.3141" path="socket:[66966]" dev="sockfs" ino=66966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.667866][ T40] audit: type=1400 audit(1761552982.285:7924): avc: denied { read } for pid=15237 comm="syz.1.3141" dev="nsfs" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 254.675771][ T40] audit: type=1400 audit(1761552982.285:7925): avc: denied { open } for pid=15237 comm="syz.1.3141" path="net:[4026533061]" dev="nsfs" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 254.983576][T15254] binder: 15247:15254 ioctl c0306201 200000000640 returned -22 [ 255.007763][T15252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 255.141970][ T64] Bluetooth: hci3: command tx timeout [ 255.177515][ T5933] usbhid 8-1:0.0: can't add hid device: -71 [ 255.179845][ T5933] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 255.183649][ T5933] usb 8-1: USB disconnect, device number 14 [ 255.486345][T15265] overlayfs: failed to resolve 'verity=require': -2 [ 255.638179][T15268] fuse: Bad value for 'user_id' [ 255.639798][T15268] fuse: Bad value for 'user_id' [ 255.770934][T15278] nfs4: Unknown parameter '4 llc_rcv [ 255.770934][T15278] 8864 pppoe_rcv [ 255.770934][T15278] 88f5 mrp_rc' [ 255.874311][T15291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 255.879414][T15295] fuse: Bad value for 'user_id' [ 255.884114][T15295] fuse: Bad value for 'user_id' [ 256.089645][T15312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=15312 comm=syz.2.3165 [ 256.102547][T15315] binder: 15310:15315 ioctl c0306201 200000000640 returned -22 [ 256.242381][T15322] netlink: 'syz.0.3168': attribute type 1 has an invalid length. [ 256.244190][T15321] fuse: Bad value for 'user_id' [ 256.246376][T15321] fuse: Bad value for 'user_id' [ 256.257762][T15322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.269720][T15322] bond1: (slave ip6erspan0): making interface the new active one [ 256.273599][T15322] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 256.283574][T15322] netlink: 'syz.0.3168': attribute type 15 has an invalid length. [ 256.486335][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 256.995979][T15345] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 257.158446][T15349] dvmrp0: entered allmulticast mode [ 257.270479][T15356] fuse: Bad value for 'fd' [ 257.424666][T15375] overlayfs: failed to resolve 'verity=require': -2 [ 257.472274][T15381] fuse: Bad value for 'fd' [ 257.580791][T15394] netlink: 'syz.2.3199': attribute type 4 has an invalid length. [ 257.586533][T15394] netlink: 'syz.2.3199': attribute type 4 has an invalid length. [ 257.714710][T15407] fuse: Bad value for 'fd' [ 257.719920][T15406] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 257.723634][T15406] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 257.730444][T15406] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 257.795368][T15411] tmpfs: Unknown parameter 'ÏH!¹ [ 257.795368][T15411] nyâ’R<>ª¢NJ‘­ adT—ä‘' [ 257.903249][T15415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 258.286345][T15429] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3212'. [ 258.402332][T15433] fuse: Bad value for 'fd' [ 258.653003][T15457] fuse: Bad value for 'fd' [ 258.706343][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 258.712922][T15464] binder: 15454:15464 ioctl c0306201 200000000640 returned -22 [ 258.903289][T15483] fuse: Bad value for 'fd' [ 258.998595][T15486] overlayfs: failed to resolve 'verity=require': -2 [ 259.306391][T15498] overlay: ./file0 is not a directory [ 259.392853][T15503] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 259.408367][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.569607][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 259.574564][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 259.639689][T15516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3248'. [ 259.647297][T15519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=15519 comm=syz.3.3248 [ 259.773811][T15534] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 259.798029][T15534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.810877][T15534] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 259.820995][T15534] bond2: entered allmulticast mode [ 259.833258][T15534] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.855442][T15541] overlayfs: failed to resolve 'verity=require': -2 [ 259.877283][T15537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 259.905822][T15545] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3260'. [ 259.909426][ T40] kauditd_printk_skb: 238 callbacks suppressed [ 259.909440][ T40] audit: type=1400 audit(1761552987.204:8164): avc: denied { read } for pid=15544 comm="syz.0.3260" dev="nsfs" ino=4026533980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.910345][T15545] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3260'. [ 259.912729][ T40] audit: type=1400 audit(1761552987.204:8165): avc: denied { open } for pid=15544 comm="syz.0.3260" path="net:[4026533980]" dev="nsfs" ino=4026533980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.921987][T15545] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3260'. [ 259.925785][ T40] audit: type=1400 audit(1761552987.204:8166): avc: denied { name_bind } for pid=15544 comm="syz.0.3260" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 259.937654][T15545] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3260'. [ 259.942297][ T40] audit: type=1400 audit(1761552987.204:8167): avc: denied { node_bind } for pid=15544 comm="syz.0.3260" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 259.994041][ T40] audit: type=1400 audit(1761552987.279:8168): avc: denied { module_request } for pid=15551 comm="syz.2.3262" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 260.010063][ T40] audit: type=1400 audit(1761552987.307:8169): avc: denied { allowed } for pid=15556 comm="syz.1.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.017391][ T40] audit: type=1400 audit(1761552987.307:8170): avc: denied { create } for pid=15556 comm="syz.1.3264" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 260.027054][ T40] audit: type=1400 audit(1761552987.307:8171): avc: denied { map } for pid=15556 comm="syz.1.3264" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 260.036307][ T40] audit: type=1400 audit(1761552987.307:8172): avc: denied { read write } for pid=15556 comm="syz.1.3264" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 260.046655][ T40] audit: type=1400 audit(1761552987.307:8173): avc: denied { read write } for pid=12903 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.164117][T15565] binder: 15563:15565 ioctl c0306201 200000000040 returned -14 [ 260.201702][T15577] netlink: 'syz.3.3271': attribute type 11 has an invalid length. [ 260.204416][T15577] netlink: 'syz.3.3271': attribute type 7 has an invalid length. [ 260.208479][T15579] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 260.230615][T15579] bond3: (slave geneve3): making interface the new active one [ 260.233500][T15579] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 260.236654][T13273] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 260.246428][T13273] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 260.250257][T13273] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 260.254622][T13273] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 260.307609][T15588] overlayfs: failed to resolve 'verity=require': -2 [ 260.446464][T15601] openvswitch: netlink: IP tunnel dst address not specified [ 260.525578][T15609] binder: 15603:15609 ioctl c0306201 200000000640 returned -22 [ 260.593302][T15612] overlayfs: failed to resolve 'verity=require': -2 [ 260.925796][T15635] netlink: 'syz.3.3293': attribute type 1 has an invalid length. [ 261.114848][T15650] overlayfs: failed to resolve 'verity=require': -2 [ 261.188528][T15658] fuse: Bad value for 'rootmode' [ 261.267910][T15666] FAULT_INJECTION: forcing a failure. [ 261.267910][T15666] name failslab, interval 1, probability 0, space 0, times 0 [ 261.273012][T15666] CPU: 2 UID: 0 PID: 15666 Comm: syz.1.3304 Not tainted syzkaller #0 PREEMPT(full) [ 261.273034][T15666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.273043][T15666] Call Trace: [ 261.273049][T15666] [ 261.273053][T15666] dump_stack_lvl+0x16c/0x1f0 [ 261.273081][T15666] should_fail_ex+0x512/0x640 [ 261.273099][T15666] ? fs_reclaim_acquire+0xae/0x150 [ 261.273120][T15666] should_failslab+0xc2/0x120 [ 261.273139][T15666] __kmalloc_noprof+0xdd/0x880 [ 261.273161][T15666] ? tomoyo_encode2+0x100/0x3e0 [ 261.273179][T15666] ? tomoyo_encode2+0x100/0x3e0 [ 261.273195][T15666] tomoyo_encode2+0x100/0x3e0 [ 261.273214][T15666] tomoyo_encode+0x29/0x50 [ 261.273229][T15666] tomoyo_realpath_from_path+0x18f/0x6e0 [ 261.273254][T15666] tomoyo_path_number_perm+0x245/0x580 [ 261.273277][T15666] ? tomoyo_path_number_perm+0x237/0x580 [ 261.273302][T15666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.273334][T15666] ? find_held_lock+0x2b/0x80 [ 261.273370][T15666] ? find_held_lock+0x2b/0x80 [ 261.273388][T15666] ? hook_file_ioctl_common+0x145/0x410 [ 261.273414][T15666] ? __fget_files+0x20e/0x3c0 [ 261.273434][T15666] security_file_ioctl+0x9b/0x240 [ 261.273453][T15666] __x64_sys_ioctl+0xb7/0x210 [ 261.273475][T15666] do_syscall_64+0xcd/0xfa0 [ 261.273499][T15666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.273515][T15666] RIP: 0033:0x7fd6d1f8efc9 [ 261.273528][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.273543][T15666] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.273559][T15666] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 261.273570][T15666] RDX: 0000200000000040 RSI: 0000000000005392 RDI: 0000000000000004 [ 261.273579][T15666] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 261.273588][T15666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.273594][T15666] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 261.273618][T15666] [ 261.273636][T15666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.475202][T15678] random: crng reseeded on system resumption [ 261.487974][T15678] Restarting kernel threads ... [ 261.490117][T15680] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 261.490831][T15678] Done restarting kernel threads. [ 261.502721][T15678] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 261.515964][T15682] overlayfs: failed to resolve 'verity=require': -2 [ 261.714377][T15710] FAULT_INJECTION: forcing a failure. [ 261.714377][T15710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.721879][T15710] CPU: 2 UID: 0 PID: 15710 Comm: syz.0.3319 Not tainted syzkaller #0 PREEMPT(full) [ 261.721905][T15710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.721917][T15710] Call Trace: [ 261.721923][T15710] [ 261.721930][T15710] dump_stack_lvl+0x16c/0x1f0 [ 261.721968][T15710] should_fail_ex+0x512/0x640 [ 261.721993][T15710] _copy_from_user+0x2e/0xd0 [ 261.722016][T15710] mmc_ioctl_dvd_auth+0x12d/0x230 [ 261.722035][T15710] ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10 [ 261.722060][T15710] cdrom_ioctl+0x2cea/0x3190 [ 261.722080][T15710] ? __pfx_cdrom_ioctl+0x10/0x10 [ 261.722105][T15710] ? rpm_resume+0x7f7/0x1320 [ 261.722123][T15710] ? rcu_is_watching+0x12/0xc0 [ 261.722146][T15710] ? rpm_resume+0x7f7/0x1320 [ 261.722161][T15710] ? trace_rpm_return_int+0x196/0x220 [ 261.722179][T15710] ? rpm_resume+0x7fc/0x1320 [ 261.722202][T15710] ? __pfx_rpm_resume+0x10/0x10 [ 261.722218][T15710] ? do_raw_spin_lock+0x12c/0x2b0 [ 261.722239][T15710] ? find_held_lock+0x2b/0x80 [ 261.722333][T15710] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.722367][T15710] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 261.722389][T15710] ? __pm_runtime_resume+0xc3/0x170 [ 261.722410][T15710] sr_block_ioctl+0x1b0/0x250 [ 261.722430][T15710] ? __pfx_sr_block_ioctl+0x10/0x10 [ 261.722449][T15710] blkdev_ioctl+0x277/0x6d0 [ 261.722476][T15710] ? __pfx_blkdev_ioctl+0x10/0x10 [ 261.722498][T15710] ? selinux_file_ioctl+0x180/0x270 [ 261.722518][T15710] ? selinux_file_ioctl+0xb4/0x270 [ 261.722538][T15710] ? __pfx_blkdev_ioctl+0x10/0x10 [ 261.722564][T15710] __x64_sys_ioctl+0x18e/0x210 [ 261.722593][T15710] do_syscall_64+0xcd/0xfa0 [ 261.722622][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.722641][T15710] RIP: 0033:0x7fc26698efc9 [ 261.722657][T15710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.722674][T15710] RSP: 002b:00007fc267877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.722693][T15710] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698efc9 [ 261.722704][T15710] RDX: 0000200000000040 RSI: 0000000000005392 RDI: 0000000000000004 [ 261.722715][T15710] RBP: 00007fc267877090 R08: 0000000000000000 R09: 0000000000000000 [ 261.722725][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.722734][T15710] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007fff685b78d8 [ 261.722760][T15710] [ 261.853419][T15716] __nla_validate_parse: 36 callbacks suppressed [ 261.853436][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3321'. [ 261.888850][T15722] fuse: Unknown parameter 'use00000000000000000000' [ 261.889180][T15721] binder: 15720:15721 ioctl 4018620d 0 returned -22 [ 261.894966][T15721] binder: 15720:15721 ioctl c0306201 200000000040 returned -22 [ 261.897690][T15721] binder: 15720:15721 ioctl c0306201 200000000640 returned -22 [ 261.972538][T15729] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 261.976740][T15729] SELinux: failed to load policy [ 261.980945][T15730] overlayfs: failed to resolve 'verity=require': -2 [ 262.052349][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'. [ 262.398814][T15750] binder: 15749:15750 ioctl 4018620d 0 returned -22 [ 262.403598][T15750] binder: 15749:15750 ioctl c0306201 200000000040 returned -22 [ 262.407578][T15750] binder: 15749:15750 ioctl c0306201 200000000640 returned -22 [ 262.518722][T15754] netlink: 'syz.1.3337': attribute type 12 has an invalid length. [ 262.674066][T15760] fuse: Unknown parameter 'user_i00000000000000000000' [ 262.991576][T15785] FAULT_INJECTION: forcing a failure. [ 262.991576][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.997134][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.1.3350 Not tainted syzkaller #0 PREEMPT(full) [ 262.997155][T15785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.997164][T15785] Call Trace: [ 262.997171][T15785] [ 262.997178][T15785] dump_stack_lvl+0x16c/0x1f0 [ 262.997210][T15785] should_fail_ex+0x512/0x640 [ 262.997234][T15785] _copy_to_user+0x32/0xd0 [ 262.997258][T15785] simple_read_from_buffer+0xcb/0x170 [ 262.997287][T15785] proc_fail_nth_read+0x197/0x240 [ 262.997310][T15785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.997332][T15785] ? rw_verify_area+0xcf/0x6c0 [ 262.997356][T15785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.997376][T15785] vfs_read+0x1e4/0xcf0 [ 262.997396][T15785] ? __pfx___mutex_lock+0x10/0x10 [ 262.997412][T15785] ? __pfx_vfs_read+0x10/0x10 [ 262.997435][T15785] ? __fget_files+0x20e/0x3c0 [ 262.997461][T15785] ksys_read+0x12a/0x250 [ 262.997477][T15785] ? __pfx_ksys_read+0x10/0x10 [ 262.997499][T15785] do_syscall_64+0xcd/0xfa0 [ 262.997526][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.997544][T15785] RIP: 0033:0x7fd6d1f8d9dc [ 262.997558][T15785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 262.997573][T15785] RSP: 002b:00007fd6d2ea9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.997589][T15785] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8d9dc [ 262.997600][T15785] RDX: 000000000000000f RSI: 00007fd6d2ea90a0 RDI: 0000000000000005 [ 262.997611][T15785] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 262.997620][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.997629][T15785] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 262.997653][T15785] [ 263.389225][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3365'. [ 263.392261][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'. [ 263.464085][ T54] hid-generic 0040:0004:7FD30BB5.0007: unknown main item tag 0x2 [ 263.466671][ T54] hid-generic 0040:0004:7FD30BB5.0007: unknown main item tag 0x7 [ 263.469242][ T54] hid-generic 0040:0004:7FD30BB5.0007: unknown main item tag 0x7 [ 263.474109][ T54] hid-generic 0040:0004:7FD30BB5.0007: unexpected long global item [ 263.477093][ T54] hid-generic 0040:0004:7FD30BB5.0007: probe with driver hid-generic failed with error -22 [ 263.517334][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3370'. [ 263.585059][T15841] tipc: Enabling of bearer rejected, media not registered [ 263.719404][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3376'. [ 263.958653][T15864] fuse: Unknown parameter 'user_id00000000000000000000' [ 264.129051][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3387'. [ 264.132094][T15874] xt_time: unknown flags 0xf4 [ 264.248142][T15887] fuse: Unknown parameter 'user_id00000000000000000000' [ 264.407923][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'. [ 264.436690][T15904] xt_hashlimit: size too large, truncated to 1048576 [ 264.739330][T15927] netlink: 'syz.1.3406': attribute type 10 has an invalid length. [ 264.742213][T15927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'. [ 264.746944][T15927] batadv0: entered promiscuous mode [ 264.749032][T15927] batadv0: entered allmulticast mode [ 264.751826][T15927] bridge0: port 3(batadv0) entered blocking state [ 264.754171][T15927] bridge0: port 3(batadv0) entered disabled state [ 264.760366][T15927] bridge0: port 3(batadv0) entered blocking state [ 264.762584][T15927] bridge0: port 3(batadv0) entered forwarding state [ 264.821239][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 264.831048][T15935] xfrm1: entered promiscuous mode [ 264.833430][T15935] xfrm1: entered allmulticast mode [ 264.857022][T15935] nbd: illegal input index 1879048192 [ 264.903236][T15937] binder: 15936:15937 ioctl c0306201 200000000040 returned -22 [ 265.041154][T13271] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.046185][T13271] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.049987][T13271] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.054891][T13271] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.064794][T13271] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 265.069322][T13271] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 265.177227][T15953] fuse: Bad value for 'fd' [ 265.261161][T15959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15959 comm=syz.0.3418 [ 265.266474][T15959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15959 comm=syz.0.3418 [ 265.272869][ T40] kauditd_printk_skb: 348 callbacks suppressed [ 265.272880][ T40] audit: type=1400 audit(1761552992.226:8522): avc: denied { create } for pid=15960 comm="syz.1.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.281677][ T40] audit: type=1400 audit(1761552992.226:8524): avc: denied { setopt } for pid=15960 comm="syz.1.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.288089][ T40] audit: type=1400 audit(1761552992.226:8523): avc: denied { audit_write } for pid=15958 comm="syz.0.3418" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 265.294833][ T40] audit: type=1400 audit(1761552992.226:8525): avc: denied { allowed } for pid=15958 comm="syz.0.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 265.301584][ T40] audit: type=1400 audit(1761552992.236:8526): avc: denied { setopt } for pid=15958 comm="syz.0.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.308867][ T40] audit: type=1400 audit(1761552992.245:8527): avc: denied { write } for pid=15960 comm="syz.1.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.322016][ T40] audit: type=1400 audit(1761552992.273:8528): avc: denied { read write } for pid=12903 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.330939][ T40] audit: type=1400 audit(1761552992.273:8529): avc: denied { open } for pid=12903 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.341070][ T40] audit: type=1400 audit(1761552992.273:8530): avc: denied { ioctl } for pid=12903 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.350293][T15963] netlink: ct family unspecified [ 265.354293][ T40] audit: type=1400 audit(1761552992.292:8531): avc: denied { getopt } for pid=15962 comm="syz.0.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.355961][T15963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.569393][T15988] tmpfs: Bad value for 'mpol' [ 265.647049][T15996] rtc_cmos 00:05: Alarms can be up to one day in the future [ 265.853134][T16016] xt_recent: Unsupported userspace flags (000000b2) [ 265.902325][T16018] gfs2: not a GFS2 filesystem [ 265.909834][T16018] netlink: 'syz.0.3441': attribute type 64 has an invalid length. [ 265.913524][T16018] netlink: 'syz.0.3441': attribute type 4 has an invalid length. [ 266.341781][T16053] binder: 16052:16053 ioctl c0306201 200000000040 returned -22 [ 266.344430][T16053] binder: 16052:16053 ioctl c0306201 200000000640 returned -22 [ 266.619784][T16055] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 266.622330][T16055] netlink: 'syz.2.3453': attribute type 3 has an invalid length. [ 266.805014][T16095] tipc: Started in network mode [ 266.806711][T16095] tipc: Node identity ac14140f, cluster identity 4711 [ 266.810790][T16095] tipc: New replicast peer: 255.255.255.255 [ 266.813104][T16095] tipc: Enabled bearer , priority 10 [ 267.053462][T16120] fuse: Unknown parameter '00000000000000000003' [ 267.215638][T16130] fuse: Bad value for 'user_id' [ 267.217727][T16130] fuse: Bad value for 'user_id' [ 267.401805][T16141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.725960][T16175] netlink: 'syz.2.3495': attribute type 4 has an invalid length. [ 267.761387][T16179] fuse: Unknown parameter 'fd00000000000000000003' [ 267.876712][ T9] tipc: Node number set to 2886997007 [ 267.920218][T16194] binder: 16193:16194 ioctl c0306201 0 returned -14 [ 267.923490][T16194] binder: 16193:16194 ioctl c0306201 200000000640 returned -22 [ 268.260519][T16213] fuse: Unknown parameter 'fd00000000000000000003' [ 268.358041][ T53] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 268.518364][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 268.521308][ T53] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 268.523834][ T53] usb 8-1: config 32 has no interface number 0 [ 268.526458][ T53] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.531092][ T53] usb 8-1: config 32 interface 85 has no altsetting 0 [ 268.535743][ T53] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 268.538930][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.541864][ T53] usb 8-1: Product: syz [ 268.543374][ T53] usb 8-1: Manufacturer: syz [ 268.544910][ T53] usb 8-1: SerialNumber: syz [ 268.557581][T16223] x_tables: duplicate underflow at hook 1 [ 268.751242][T16225] sp0: Synchronizing with TNC [ 268.819999][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 268.853000][T16230] __nla_validate_parse: 23 callbacks suppressed [ 268.853011][T16230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3516'. [ 268.858188][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3516'. [ 268.983571][ T9] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.984849][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.987776][ T9] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 32 [ 268.992552][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.996301][ T9] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.004471][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 269.009361][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.013677][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.017102][ T9] usb 6-1: Product: 넨쾾氻킣Ꮎ죖î—갗ḻ [ 269.019748][ T9] usb 6-1: Manufacturer: 《 [ 269.023245][ T9] usb 6-1: SerialNumber: syz [ 269.028042][T16223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.030913][T16223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.132492][T16240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3520'. [ 269.256520][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 269.264462][ T9] usb 6-1: USB disconnect, device number 15 [ 269.323206][T16246] binder: 16245:16246 ioctl c0306201 200000000640 returned -22 [ 269.760010][T16259] QAT: Stopping all acceleration devices. [ 269.765731][T16259] vivid-000: ================= START STATUS ================= [ 269.768577][T16259] vivid-000: Test Pattern: 75% Colorbar [ 269.771500][T16259] vivid-000: Fill Percentage of Frame: 5 [ 269.773315][T16259] vivid-000: Horizontal Movement: No Movement [ 269.775171][T16259] vivid-000: Vertical Movement: No Movement [ 269.777047][T16259] vivid-000: OSD Text Mode: All [ 269.778716][T16259] vivid-000: Show Border: false [ 269.782409][T16259] vivid-000: Show Square: false [ 269.784482][T16259] vivid-000: Sensor Flipped Horizontally: false [ 269.786687][T16259] vivid-000: Sensor Flipped Vertically: false [ 269.789505][T16259] vivid-000: Insert SAV Code in Image: false [ 269.792540][T16259] vivid-000: Insert EAV Code in Image: false [ 269.794997][T16259] vivid-000: Insert Video Guard Band: false [ 269.797406][T16259] vivid-000: Reduced Framerate: false [ 269.799430][T16259] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 269.802570][T16259] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 269.805596][T16259] vivid-000: Enable Capture Cropping: false [ 269.807732][T16259] vivid-000: Enable Capture Composing: true [ 269.809564][T16259] vivid-000: Enable Capture Scaler: true [ 269.811302][T16259] vivid-000: Timestamp Source: End of Frame [ 269.813521][T16259] vivid-000: Colorspace: SMPTE 170M [ 269.815308][T16259] vivid-000: Transfer Function: Default [ 269.817735][T16259] vivid-000: Y'CbCr Encoding: Default [ 269.820128][T16259] vivid-000: HSV Encoding: Hue 0-179 [ 269.823140][T16259] vivid-000: Quantization: Default [ 269.825218][T16259] vivid-000: Apply Alpha To Red Only: false [ 269.826263][T16260] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 269.827761][T16259] vivid-000: Standard Aspect Ratio: 4x3 [ 269.832907][T16259] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 269.836314][T16259] vivid-000: DV Timings: 640x480p59 inactive [ 269.839447][T16259] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 269.842862][T16259] vivid-000: Maximum EDID Blocks: 2 [ 269.845244][T16259] vivid-000: Limited RGB Range (16-235): true [ 269.847269][T16259] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 269.849528][T16259] vivid-000: Power Present: 0x00000001 [ 269.851229][T16259] tpg source WxH: 720x576 (R'G'B) [ 269.853037][T16259] tpg field: 9 [ 269.854286][T16259] tpg crop: (0,0)/720x576 [ 269.855749][T16259] tpg compose: (0,0)/16x16 [ 269.857499][T16259] tpg colorspace: 1 [ 269.859108][T16259] tpg transfer function: 6/0 [ 269.861092][T16259] tpg quantization: 0/0 [ 269.862902][T16259] tpg RGB range: 0/1 [ 269.864614][T16259] vivid-000: ================== END STATUS ================== [ 269.884804][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'. [ 269.890334][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'. [ 270.360955][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.363872][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.814679][ T40] kauditd_printk_skb: 312 callbacks suppressed [ 270.814691][ T40] audit: type=1400 audit(1761553253.405:8844): avc: denied { unmount } for pid=13065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.844876][ T40] audit: type=1400 audit(1761553253.433:8845): avc: denied { unmount } for pid=14749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 270.876940][ T40] audit: type=1400 audit(1761553253.461:8846): avc: denied { create } for pid=16276 comm="syz.1.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.883787][ T40] audit: type=1400 audit(1761553253.461:8847): avc: denied { setopt } for pid=16276 comm="syz.1.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.889839][ T40] audit: type=1400 audit(1761553253.461:8848): avc: denied { create } for pid=16276 comm="syz.1.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.897889][ T40] audit: type=1400 audit(1761553253.461:8849): avc: denied { ioctl } for pid=16276 comm="syz.1.3535" path="socket:[72406]" dev="sockfs" ino=72406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.908737][ T40] audit: type=1400 audit(1761553253.461:8850): avc: denied { bind } for pid=16276 comm="syz.1.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.917507][ T40] audit: type=1400 audit(1761553253.461:8851): avc: denied { module_request } for pid=16276 comm="syz.1.3535" kmod="crypto-rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 270.928167][ T40] audit: type=1400 audit(1761553253.489:8852): avc: denied { read write } for pid=12903 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.938018][ T40] audit: type=1400 audit(1761553253.489:8853): avc: denied { open } for pid=12903 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.252502][T16299] bridge1: entered promiscuous mode [ 271.316195][ T53] appletouch 8-1:32.85: Failed to read mode from device. [ 271.318544][ T53] appletouch 8-1:32.85: probe with driver appletouch failed with error -5 [ 271.325378][ T53] usb 8-1: USB disconnect, device number 15 [ 271.346075][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 271.351180][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 271.355433][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3544'. [ 271.589635][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 271.603360][T16312] bond0: (slave syz_tun): Releasing backup interface [ 272.003424][T16321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3550'. [ 272.239678][T16335] binder: 16327:16335 ioctl c0306201 0 returned -14 [ 272.386674][T16343] fuse: Bad value for 'fd' [ 272.391462][T16343] overlayfs: conflicting lowerdir path [ 273.096404][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 273.140475][T16372] Bluetooth: hci4: Frame reassembly failed (-90) [ 273.144727][T13270] Bluetooth: hci4: Frame reassembly failed (-84) [ 273.216380][T16375] bond0: entered allmulticast mode [ 273.218043][T16375] bond_slave_0: entered allmulticast mode [ 273.219881][T16375] bond_slave_1: entered allmulticast mode [ 273.375826][T16382] ip6tnl1: entered promiscuous mode [ 273.386930][T16382] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 273.623102][T16400] ceph: No source [ 273.687275][ T5933] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 273.696445][ T5933] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.702565][T16407] binder: 16401:16407 ioctl c0306201 0 returned -14 [ 273.746974][T16410] netlink: 'syz.0.3582': attribute type 10 has an invalid length. [ 273.783148][T16408] fido_id[16408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.685774][T16431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16431 comm=syz.1.3590 [ 274.690396][T16431] __nla_validate_parse: 2 callbacks suppressed [ 274.690405][T16431] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3590'. [ 275.001688][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 275.216449][T16460] netlink: 'syz.0.3602': attribute type 3 has an invalid length. [ 275.320265][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.320583][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 275.349649][T16470] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3606'. [ 275.426052][T16477] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 275.555898][ T1474] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 275.664448][T16499] "syz.1.3614" (16499) uses obsolete ecb(arc4) skcipher [ 275.728623][ T1474] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 275.733555][ T1474] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 275.738355][ T1474] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.742408][ T1474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.751691][T16467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.755280][T16467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.764518][ T1474] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.966043][T16507] xt_l2tp: missing protocol rule (udp|l2tpip) [ 275.998828][T16467] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3605'. [ 276.002154][T16467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3605'. [ 276.007219][ T10] usb 5-1: USB disconnect, device number 9 [ 276.190230][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 276.190246][ T40] audit: type=1400 audit(1761553258.435:9065): avc: denied { read } for pid=16513 comm="syz.2.3621" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.224722][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.236399][ T40] audit: type=1400 audit(1761553258.473:9066): avc: denied { create } for pid=16515 comm="syz.2.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.244812][ T40] audit: type=1400 audit(1761553258.473:9067): avc: denied { bind } for pid=16515 comm="syz.2.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.253225][ T40] audit: type=1400 audit(1761553258.473:9068): avc: denied { watch watch_reads } for pid=16515 comm="syz.2.3622" path="pipe:[76214]" dev="pipefs" ino=76214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 276.263512][ T40] audit: type=1326 audit(1761553258.473:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.2.3622" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7658efc9 code=0x0 [ 276.448118][T16467] netlink: 'syz.0.3605': attribute type 10 has an invalid length. [ 276.456338][T16467] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 276.460693][T16467] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 276.518729][ T40] audit: type=1400 audit(1761553258.744:9070): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 276.526830][ T40] audit: type=1400 audit(1761553258.744:9071): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 276.606098][ T40] audit: type=1400 audit(1761553258.818:9072): avc: denied { remount } for pid=16525 comm="syz.3.3625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.624963][T16494] comedi comedi0: reset error (fatal) [ 276.631664][ T40] audit: type=1400 audit(1761553258.847:9073): avc: denied { create } for pid=16527 comm="syz.3.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.639761][ T40] audit: type=1400 audit(1761553258.847:9074): avc: denied { bind } for pid=16527 comm="syz.3.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.751213][ T10] libceph: connect (1)[c::]:6789 error -101 [ 276.753640][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 276.801204][ T10] libceph: connect (1)[c::]:6789 error -101 [ 276.803379][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 276.850234][T16534] ceph: No mds server is up or the cluster is laggy [ 276.850424][T16535] ceph: No mds server is up or the cluster is laggy [ 276.964340][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3630'. [ 276.985064][T16543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=16543 comm=syz.3.3630 [ 277.197359][T16560] openvswitch: netlink: IP tunnel dst address not specified [ 277.213673][T16562] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 277.216958][T16562] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 277.220615][T16562] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 277.223898][T16562] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 277.529391][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 277.602441][T16610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3655'. [ 277.681813][T16617] netlink: 'syz.3.3659': attribute type 4 has an invalid length. [ 277.729779][T16623] Invalid logical block size (-3) [ 277.780303][T16625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3663'. [ 277.784324][T16625] openvswitch: netlink: Flow key attr not present in new flow. [ 277.897788][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.336274][ T5977] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 278.520396][ T5977] usb 7-1: config 1 interface 0 has no altsetting 0 [ 278.524985][ T5977] usb 7-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 278.528450][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.531293][ T5977] usb 7-1: Product: ì³‚ì„¼ë„¢éµ [ 278.533085][ T5977] usb 7-1: Manufacturer: á‘ž [ 278.534734][ T5977] usb 7-1: SerialNumber: â [ 278.590302][T16668] netlink: 'syz.1.3678': attribute type 5 has an invalid length. [ 278.769315][ T5977] usbhid 7-1:1.0: can't add hid device: -71 [ 278.772181][ T5977] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 278.779087][ T5977] usb 7-1: USB disconnect, device number 22 [ 278.835065][T16684] ata1.00: invalid multi_count 1 ignored [ 278.932987][T16690] cgroup: name respecified [ 280.208060][T16744] FAULT_INJECTION: forcing a failure. [ 280.208060][T16744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.211949][T16744] CPU: 3 UID: 0 PID: 16744 Comm: syz.3.3704 Not tainted syzkaller #0 PREEMPT(full) [ 280.211965][T16744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.211970][T16744] Call Trace: [ 280.211975][T16744] [ 280.211979][T16744] dump_stack_lvl+0x16c/0x1f0 [ 280.211998][T16744] should_fail_ex+0x512/0x640 [ 280.212012][T16744] _copy_from_iter+0x29f/0x1720 [ 280.212027][T16744] ? __alloc_skb+0x200/0x380 [ 280.212040][T16744] ? __pfx__copy_from_iter+0x10/0x10 [ 280.212051][T16744] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 280.212069][T16744] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 280.212090][T16744] netlink_sendmsg+0x820/0xdd0 [ 280.212108][T16744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.212127][T16744] ____sys_sendmsg+0xa98/0xc70 [ 280.212145][T16744] ? copy_msghdr_from_user+0x10a/0x160 [ 280.212157][T16744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.212179][T16744] ___sys_sendmsg+0x134/0x1d0 [ 280.212192][T16744] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.212204][T16744] ? __lock_acquire+0x622/0x1c90 [ 280.212235][T16744] __sys_sendmsg+0x16d/0x220 [ 280.212253][T16744] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.212270][T16744] ? fput+0x9b/0xd0 [ 280.212285][T16744] do_syscall_64+0xcd/0xfa0 [ 280.212301][T16744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.212312][T16744] RIP: 0033:0x7ff822f8efc9 [ 280.212321][T16744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.212331][T16744] RSP: 002b:00007ff823e24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.212341][T16744] RAX: ffffffffffffffda RBX: 00007ff8231e5fa0 RCX: 00007ff822f8efc9 [ 280.212348][T16744] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 280.212354][T16744] RBP: 00007ff823e24090 R08: 0000000000000000 R09: 0000000000000000 [ 280.212360][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.212366][T16744] R13: 00007ff8231e6038 R14: 00007ff8231e5fa0 R15: 00007ffd0296bfa8 [ 280.212379][T16744] [ 280.283084][ C3] vkms_vblank_simulate: vblank timer overrun [ 280.345240][T16750] fuse: Unknown parameter 'Ud' [ 280.384507][T16754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3709'. [ 280.535603][T16772] program syz.3.3714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.720559][T16783] FAULT_INJECTION: forcing a failure. [ 280.720559][T16783] name failslab, interval 1, probability 0, space 0, times 0 [ 280.725298][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.0.3717 Not tainted syzkaller #0 PREEMPT(full) [ 280.725316][T16783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.725325][T16783] Call Trace: [ 280.725330][T16783] [ 280.725336][T16783] dump_stack_lvl+0x16c/0x1f0 [ 280.725360][T16783] should_fail_ex+0x512/0x640 [ 280.725376][T16783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 280.725394][T16783] should_failslab+0xc2/0x120 [ 280.725410][T16783] kmem_cache_alloc_noprof+0x75/0x6e0 [ 280.725431][T16783] ? skb_clone+0x190/0x3f0 [ 280.725451][T16783] ? skb_clone+0x190/0x3f0 [ 280.725467][T16783] skb_clone+0x190/0x3f0 [ 280.725484][T16783] netlink_deliver_tap+0xabd/0xd30 [ 280.725507][T16783] netlink_unicast+0x64c/0x870 [ 280.725529][T16783] ? __pfx_netlink_unicast+0x10/0x10 [ 280.725555][T16783] netlink_sendmsg+0x8c8/0xdd0 [ 280.725577][T16783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.725603][T16783] ____sys_sendmsg+0xa98/0xc70 [ 280.725625][T16783] ? copy_msghdr_from_user+0x10a/0x160 [ 280.725642][T16783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.725671][T16783] ___sys_sendmsg+0x134/0x1d0 [ 280.725689][T16783] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.725704][T16783] ? __lock_acquire+0x622/0x1c90 [ 280.725749][T16783] __sys_sendmsg+0x16d/0x220 [ 280.725766][T16783] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.725790][T16783] ? fput+0x9b/0xd0 [ 280.725810][T16783] do_syscall_64+0xcd/0xfa0 [ 280.725832][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.725845][T16783] RIP: 0033:0x7fc26698efc9 [ 280.725856][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.725870][T16783] RSP: 002b:00007fc267877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.725884][T16783] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698efc9 [ 280.725892][T16783] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 280.725900][T16783] RBP: 00007fc267877090 R08: 0000000000000000 R09: 0000000000000000 [ 280.725908][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.725916][T16783] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007fff685b78d8 [ 280.725935][T16783] [ 280.987008][T16791] i2c i2c-1: Invalid block write size 34 [ 281.418287][T16817] i2c i2c-1: Invalid block write size 34 [ 281.508981][T16821] netlink: 'syz.1.3733': attribute type 1 has an invalid length. [ 281.526693][T16821] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.531383][T16821] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 281.558026][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 281.558037][ T40] audit: type=1400 audit(1761553263.456:9386): avc: denied { read } for pid=16826 comm="syz.2.3734" name="media3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.567348][ T40] audit: type=1400 audit(1761553263.456:9387): avc: denied { open } for pid=16826 comm="syz.2.3734" path="/dev/media3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.574456][ T40] audit: type=1400 audit(1761553263.456:9388): avc: denied { ioctl } for pid=16826 comm="syz.2.3734" path="/dev/media3" dev="devtmpfs" ino=964 ioctlcmd=0x7c03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.632749][ T40] audit: type=1400 audit(1761553263.522:9389): avc: denied { module_request } for pid=16833 comm="syz.2.3737" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.661157][ T40] audit: type=1400 audit(1761553263.540:9390): avc: denied { execute } for pid=16837 comm="syz.1.3738" path="/200/cpuacct.usage_percpu" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.663923][T16838] program syz.1.3738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.671460][ T40] audit: type=1400 audit(1761553263.540:9391): avc: denied { sys_module } for pid=16833 comm="syz.2.3737" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 281.678456][ T40] audit: type=1400 audit(1761553263.550:9392): avc: denied { module_request } for pid=16833 comm="syz.2.3737" kmod="wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.686235][ T40] audit: type=1400 audit(1761553263.550:9393): avc: denied { append } for pid=16837 comm="syz.1.3738" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.698678][ T40] audit: type=1400 audit(1761553263.587:9394): avc: denied { create } for pid=16833 comm="syz.2.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 281.707096][ T40] audit: type=1400 audit(1761553263.587:9395): avc: denied { connect } for pid=16833 comm="syz.2.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.479191][T16871] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 282.488675][T16871] team0: Port device dummy0 added [ 282.493669][T16871] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 282.497909][T16871] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.506598][T16871] team0: Failed to send options change via netlink (err -105) [ 282.509713][T16871] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.514078][T16871] team0: Port device dummy0 removed [ 282.520172][T16871] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.585037][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3751'. [ 283.156119][T16892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3758'. [ 283.629871][T16910] SELinux: security_context_str_to_sid (staffé¤) failed with errno=-22 [ 283.641567][T16910] binder: 16909:16910 ioctl c0306201 200000000040 returned -22 [ 283.771550][T16917] FAULT_INJECTION: forcing a failure. [ 283.771550][T16917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.776801][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.3.3766 Not tainted syzkaller #0 PREEMPT(full) [ 283.776823][T16917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.776834][T16917] Call Trace: [ 283.776855][T16917] [ 283.776862][T16917] dump_stack_lvl+0x16c/0x1f0 [ 283.776906][T16917] should_fail_ex+0x512/0x640 [ 283.776938][T16917] _copy_to_user+0x32/0xd0 [ 283.776961][T16917] simple_read_from_buffer+0xcb/0x170 [ 283.776990][T16917] proc_fail_nth_read+0x197/0x240 [ 283.777010][T16917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.777030][T16917] ? rw_verify_area+0xcf/0x6c0 [ 283.777054][T16917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.777072][T16917] vfs_read+0x1e4/0xcf0 [ 283.777090][T16917] ? __pfx___mutex_lock+0x10/0x10 [ 283.777105][T16917] ? __pfx_vfs_read+0x10/0x10 [ 283.777127][T16917] ? __fget_files+0x20e/0x3c0 [ 283.777150][T16917] ksys_read+0x12a/0x250 [ 283.777165][T16917] ? __pfx_ksys_read+0x10/0x10 [ 283.777186][T16917] do_syscall_64+0xcd/0xfa0 [ 283.777212][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.777229][T16917] RIP: 0033:0x7ff822f8d9dc [ 283.777241][T16917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 283.777256][T16917] RSP: 002b:00007ff823e24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.777271][T16917] RAX: ffffffffffffffda RBX: 00007ff8231e5fa0 RCX: 00007ff822f8d9dc [ 283.777281][T16917] RDX: 000000000000000f RSI: 00007ff823e240a0 RDI: 0000000000000006 [ 283.777291][T16917] RBP: 00007ff823e24090 R08: 0000000000000000 R09: 0000000000000000 [ 283.777300][T16917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.777309][T16917] R13: 00007ff8231e6038 R14: 00007ff8231e5fa0 R15: 00007ffd0296bfa8 [ 283.777333][T16917] [ 284.041905][T16925] binder: 16924:16925 ioctl c0306201 200000000040 returned -14 [ 284.146733][T16939] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 284.150139][T16939] exFAT-fs (nullb0): invalid boot record signature [ 284.152240][T16939] exFAT-fs (nullb0): failed to read boot sector [ 284.154231][T16939] exFAT-fs (nullb0): failed to recognize exfat type [ 284.183870][T16941] bridge0: entered allmulticast mode [ 284.282331][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3782'. [ 284.689259][ T5933] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 284.851868][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.855183][ T5933] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 284.858023][ T5933] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 284.861090][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.865498][ T5933] usb 5-1: config 0 descriptor?? [ 284.869118][ T5933] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 284.871474][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 284.874774][ T5933] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 284.877844][ T5933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 284.880158][ T5933] usb 5-1: media controller created [ 284.882874][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.889996][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 284.891952][ T5933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 284.895805][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input37 [ 284.901423][ T5933] dvb-usb: schedule remote query interval to 150 msecs. [ 284.904411][ T5933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 285.074177][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 285.076618][ T5933] dvb-usb: error while querying for an remote control event. [ 285.082817][T16962] dibusb: i2c wr: len=61 is too big! [ 285.082817][T16962] [ 285.143532][T16981] binder: 16961:16981 ioctl c0306201 200000000640 returned -22 [ 285.245299][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 285.247854][ T5933] dvb-usb: error while querying for an remote control event. [ 285.424592][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 285.427176][ T5933] dvb-usb: error while querying for an remote control event. [ 285.559982][T16986] FAULT_INJECTION: forcing a failure. [ 285.559982][T16986] name failslab, interval 1, probability 0, space 0, times 0 [ 285.564156][T16986] CPU: 1 UID: 0 PID: 16986 Comm: syz.1.3793 Not tainted syzkaller #0 PREEMPT(full) [ 285.564180][T16986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.564190][T16986] Call Trace: [ 285.564197][T16986] [ 285.564203][T16986] dump_stack_lvl+0x16c/0x1f0 [ 285.564234][T16986] should_fail_ex+0x512/0x640 [ 285.564253][T16986] ? __kmalloc_noprof+0xca/0x880 [ 285.564279][T16986] should_failslab+0xc2/0x120 [ 285.564300][T16986] __kmalloc_noprof+0xdd/0x880 [ 285.564324][T16986] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 285.564358][T16986] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 285.564385][T16986] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 285.564413][T16986] ? cred_has_capability.isra.0+0x190/0x310 [ 285.564435][T16986] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 285.564463][T16986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.564497][T16986] ? bpf_lsm_capable+0x9/0x10 [ 285.564517][T16986] ? security_capable+0x7e/0x260 [ 285.564542][T16986] genl_rcv_msg+0x55c/0x800 [ 285.564562][T16986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.564578][T16986] ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10 [ 285.564610][T16986] ? __lock_acquire+0x622/0x1c90 [ 285.564641][T16986] netlink_rcv_skb+0x158/0x420 [ 285.564665][T16986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.564683][T16986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.564716][T16986] ? netlink_deliver_tap+0x1ae/0xd30 [ 285.564743][T16986] genl_rcv+0x28/0x40 [ 285.564766][T16986] netlink_unicast+0x5aa/0x870 [ 285.564794][T16986] ? __pfx_netlink_unicast+0x10/0x10 [ 285.564828][T16986] netlink_sendmsg+0x8c8/0xdd0 [ 285.564850][T16986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.564881][T16986] ____sys_sendmsg+0xa98/0xc70 [ 285.564908][T16986] ? copy_msghdr_from_user+0x10a/0x160 [ 285.564928][T16986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.564967][T16986] ___sys_sendmsg+0x134/0x1d0 [ 285.564985][T16986] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.565005][T16986] ? __lock_acquire+0x622/0x1c90 [ 285.565061][T16986] __sys_sendmsg+0x16d/0x220 [ 285.565079][T16986] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.565123][T16986] do_syscall_64+0xcd/0xfa0 [ 285.565147][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.565164][T16986] RIP: 0033:0x7fd6d1f8efc9 [ 285.565179][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.565190][T16986] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.565205][T16986] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 285.565216][T16986] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 285.565226][T16986] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 285.565235][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.565245][T16986] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 285.565270][T16986] [ 285.611545][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3792'. [ 285.617643][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 285.666518][T16990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16990 comm=syz.2.3792 [ 285.668951][ T5933] dvb-usb: error while querying for an remote control event. [ 285.868178][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 285.870713][ T5933] dvb-usb: error while querying for an remote control event. [ 286.041899][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.044321][ T5933] dvb-usb: error while querying for an remote control event. [ 286.231518][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.233810][ T5933] dvb-usb: error while querying for an remote control event. [ 286.411311][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.413866][ T5933] dvb-usb: error while querying for an remote control event. [ 286.583060][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.585102][ T5933] dvb-usb: error while querying for an remote control event. [ 286.681724][T17001] fuse: Unknown parameter 'Ud' [ 286.764069][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.766565][ T5933] dvb-usb: error while querying for an remote control event. [ 286.779868][T17008] lo: entered allmulticast mode [ 286.782754][T17008] lo: left allmulticast mode [ 286.824288][T17008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.867180][T17020] FAULT_INJECTION: forcing a failure. [ 286.867180][T17020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.872336][T17020] CPU: 0 UID: 0 PID: 17020 Comm: syz.3.3805 Not tainted syzkaller #0 PREEMPT(full) [ 286.872360][T17020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.872370][T17020] Call Trace: [ 286.872376][T17020] [ 286.872383][T17020] dump_stack_lvl+0x16c/0x1f0 [ 286.872414][T17020] should_fail_ex+0x512/0x640 [ 286.872439][T17020] _copy_to_user+0x32/0xd0 [ 286.872459][T17020] simple_read_from_buffer+0xcb/0x170 [ 286.872489][T17020] proc_fail_nth_read+0x197/0x240 [ 286.872509][T17020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.872532][T17020] ? rw_verify_area+0xcf/0x6c0 [ 286.872557][T17020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.872576][T17020] vfs_read+0x1e4/0xcf0 [ 286.872597][T17020] ? __pfx___mutex_lock+0x10/0x10 [ 286.872614][T17020] ? __pfx_vfs_read+0x10/0x10 [ 286.872637][T17020] ? __fget_files+0x20e/0x3c0 [ 286.872659][T17020] ksys_read+0x12a/0x250 [ 286.872675][T17020] ? __pfx_ksys_read+0x10/0x10 [ 286.872698][T17020] do_syscall_64+0xcd/0xfa0 [ 286.872727][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.872744][T17020] RIP: 0033:0x7ff822f8d9dc [ 286.872759][T17020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.872773][T17020] RSP: 002b:00007ff823e24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.872791][T17020] RAX: ffffffffffffffda RBX: 00007ff8231e5fa0 RCX: 00007ff822f8d9dc [ 286.872801][T17020] RDX: 000000000000000f RSI: 00007ff823e240a0 RDI: 0000000000000003 [ 286.872811][T17020] RBP: 00007ff823e24090 R08: 0000000000000000 R09: 0000000000000000 [ 286.872820][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.872829][T17020] R13: 00007ff8231e6038 R14: 00007ff8231e5fa0 R15: 00007ffd0296bfa8 [ 286.872852][T17020] [ 286.936536][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 286.960464][ T5933] dvb-usb: error while querying for an remote control event. [ 286.975352][T17024] bond2: entered allmulticast mode [ 286.977465][T17024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.025023][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 287.025035][ T40] audit: type=1400 audit(1761553268.561:9593): avc: denied { relabelfrom } for pid=17026 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 287.034126][ T40] audit: type=1400 audit(1761553268.561:9594): avc: denied { relabelto } for pid=17026 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 287.041215][ T40] audit: type=1400 audit(1761553268.561:9595): avc: denied { create } for pid=17026 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.049535][ T40] audit: type=1400 audit(1761553268.561:9596): avc: denied { ioctl } for pid=17026 comm="syz.3.3807" path="socket:[77823]" dev="sockfs" ino=77823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.057625][ T40] audit: type=1400 audit(1761553268.561:9597): avc: denied { bind } for pid=17026 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.064046][ T40] audit: type=1400 audit(1761553268.571:9598): avc: denied { write } for pid=17026 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.065242][T17029] netlink: 'syz.2.3808': attribute type 12 has an invalid length. [ 287.070526][ T40] audit: type=1400 audit(1761553268.571:9599): avc: denied { recv } for pid=5857 comm="syz-executor" saddr=127.0.0.1 src=43786 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.073802][T17029] netlink: 'syz.2.3808': attribute type 29 has an invalid length. [ 287.081837][ T40] audit: type=1400 audit(1761553268.599:9600): avc: denied { create } for pid=17028 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.081859][ T40] audit: type=1400 audit(1761553268.599:9601): avc: denied { ioctl } for pid=17028 comm="syz.2.3808" path="socket:[79318]" dev="sockfs" ino=79318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.099376][ T40] audit: type=1400 audit(1761553268.627:9602): avc: denied { recv } for pid=17028 comm="syz.2.3808" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=43786 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.104978][T17029] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3808'. [ 287.121825][T17029] netlink: 'syz.2.3808': attribute type 2 has an invalid length. [ 287.124872][T17029] netlink: 'syz.2.3808': attribute type 3 has an invalid length. [ 287.127673][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 287.128059][T17029] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3808'. [ 287.130758][ T5933] dvb-usb: error while querying for an remote control event. [ 287.133074][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 287.309595][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 287.311471][ T5933] dvb-usb: error while querying for an remote control event. [ 287.481190][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 287.484026][ T5933] dvb-usb: error while querying for an remote control event. [ 287.533580][T17049] team0: Device gtp0 is of different type [ 287.635627][ T54] usb 5-1: USB disconnect, device number 10 [ 287.657268][ T54] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 287.710583][T17064] : entered promiscuous mode [ 287.711872][T17060] omfs: Invalid superblock (0) [ 287.802340][T17078] FAULT_INJECTION: forcing a failure. [ 287.802340][T17078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.807809][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.1.3824 Not tainted syzkaller #0 PREEMPT(full) [ 287.807832][T17078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.807843][T17078] Call Trace: [ 287.807849][T17078] [ 287.807857][T17078] dump_stack_lvl+0x16c/0x1f0 [ 287.807888][T17078] should_fail_ex+0x512/0x640 [ 287.807912][T17078] _copy_to_user+0x32/0xd0 [ 287.807935][T17078] binder_ioctl+0x2694/0x73b0 [ 287.807973][T17078] ? tomoyo_path_number_perm+0x18d/0x580 [ 287.808009][T17078] ? __pfx_binder_ioctl+0x10/0x10 [ 287.808038][T17078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.808064][T17078] ? do_vfs_ioctl+0x128/0x14f0 [ 287.808089][T17078] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.808112][T17078] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 287.808141][T17078] ? hook_file_ioctl_common+0x145/0x410 [ 287.808175][T17078] ? selinux_file_ioctl+0x180/0x270 [ 287.808193][T17078] ? selinux_file_ioctl+0xb4/0x270 [ 287.808214][T17078] ? __pfx_binder_ioctl+0x10/0x10 [ 287.808238][T17078] __x64_sys_ioctl+0x18e/0x210 [ 287.808261][T17078] do_syscall_64+0xcd/0xfa0 [ 287.808288][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.808307][T17078] RIP: 0033:0x7fd6d1f8efc9 [ 287.808321][T17078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.808338][T17078] RSP: 002b:00007fd6d2e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.808356][T17078] RAX: ffffffffffffffda RBX: 00007fd6d21e6090 RCX: 00007fd6d1f8efc9 [ 287.808367][T17078] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 287.808378][T17078] RBP: 00007fd6d2e88090 R08: 0000000000000000 R09: 0000000000000000 [ 287.808388][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.808398][T17078] R13: 00007fd6d21e6128 R14: 00007fd6d21e6090 R15: 00007ffecd2c25e8 [ 287.808423][T17078] [ 287.808432][T17078] binder: 17068:17078 ioctl c0306201 200000000640 returned -14 [ 287.913883][T17082] binder: 17081:17082 ioctl 4008941a 200000000100 returned -22 [ 288.154036][T17085] binder: 17081:17085 ioctl c0306201 200000000640 returned -22 [ 288.186437][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 288.262129][T17094] netlink: 'syz.3.3831': attribute type 3 has an invalid length. [ 288.368291][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 288.371019][ T54] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.374457][ T54] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.377454][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.379700][ T54] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 288.382365][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.386298][ T54] usb 5-1: config 0 descriptor?? [ 289.007162][T17124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3842'. [ 289.040538][T17080] netlink: 'syz.0.3827': attribute type 1 has an invalid length. [ 289.047040][T17080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.050927][T17080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.185182][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 289.189643][ T54] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.197772][ T54] usb 5-1: USB disconnect, device number 11 [ 289.327282][T17139] bridge_slave_0: left allmulticast mode [ 289.329092][T17139] bridge_slave_0: left promiscuous mode [ 289.331546][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.338307][T17139] bridge_slave_1: left allmulticast mode [ 289.340111][T17139] bridge_slave_1: left promiscuous mode [ 289.342095][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.348118][T17139] bond0: (slave bond_slave_0): Releasing backup interface [ 289.356278][T17139] bond0: (slave bond_slave_1): Releasing backup interface [ 289.365482][T17139] team0: Port device team_slave_0 removed [ 289.370825][T17139] team0: Port device team_slave_1 removed [ 289.373380][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.375776][T17139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.379767][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.382552][T17139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.386740][T17139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.406743][T17140] team0: Mode changed to "loadbalance" [ 289.442148][T17139] tipc: Started in network mode [ 289.444239][T17139] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 289.446783][T17139] tipc: Enabled bearer , priority 0 [ 289.590327][T17144] veth0_to_bridge: entered promiscuous mode [ 289.747990][ T5977] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 289.934811][ T5977] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 289.938625][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 289.942526][ T5977] usb 7-1: Product: syz [ 289.943852][ T5977] usb 7-1: Manufacturer: syz [ 289.945164][ T5977] usb 7-1: SerialNumber: syz [ 289.948651][ T5977] usb 7-1: config 0 descriptor?? [ 289.955413][ T5977] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 289.958525][ T5977] dvb-usb: bulk message failed: -22 (2/0) [ 289.966016][ T5977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.970225][ T5977] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 289.973312][ T5977] usb 7-1: media controller created [ 289.987441][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.043336][T17175] mkiss: ax0: crc mode is auto. [ 290.166150][T17142] dvb-usb: bulk message failed: -22 (4/0) [ 290.168947][T17142] cxusb: i2c read failed [ 290.191270][ T5977] cxusb: set interface failed [ 290.192873][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 290.219745][ T5977] DVB: Unable to find symbol mt352_attach() [ 290.221661][ T5977] dvb-usb: bulk message failed: -22 (5/0) [ 290.224734][ T5977] zl10353_read_register: readreg error (reg=127, ret==-121) [ 290.227608][ T5977] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 290.276675][T17191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=17191 comm=syz.2.3863 [ 290.294662][ T5977] rc_core: IR keymap rc-dvico-mce not found [ 290.296693][ T5977] Registered IR keymap rc-empty [ 290.299564][ T5977] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 290.305026][ T5977] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input38 [ 290.311420][ T5977] dvb-usb: schedule remote query interval to 100 msecs. [ 290.314228][ T5977] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 290.322431][ T5977] usb 7-1: USB disconnect, device number 23 [ 290.334249][T17193] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 290.339563][T17193] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 290.344404][T17193] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3865'. [ 290.362460][ T5977] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 290.409215][T17194] binder: 17192:17194 ioctl c0306201 200000000640 returned -22 [ 290.635692][ T10] tipc: Node number set to 11578026 [ 290.795057][T17198] veth1_to_bond: entered allmulticast mode [ 290.806092][T17198] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 290.810671][T17198] veth1_to_bond: left allmulticast mode [ 290.865813][T17202] bond0: (slave dummy0): Releasing backup interface [ 290.873476][T17202] bond0: (slave bond_slave_0): Releasing backup interface [ 290.877565][T17202] bond0: (slave bond_slave_1): Releasing backup interface [ 290.884871][T17202] team0: Port device team_slave_0 removed [ 290.890247][T17202] team0: Port device team_slave_1 removed [ 290.897783][T17202] bond0: (slave batadv_slave_0): Releasing backup interface [ 290.901836][T17202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.904363][T17202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.907589][T17202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.940856][T17202] team0: Mode changed to "loadbalance" [ 290.944006][T17202] vlan0: entered promiscuous mode [ 290.945677][T17202] macsec0: entered promiscuous mode [ 290.952677][T17202] tipc: Started in network mode [ 290.954341][T17202] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 290.957014][T17202] tipc: Enabled bearer , priority 0 [ 291.049759][T17216] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 291.086662][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3878'. [ 291.116790][T17222] binder: 17217:17222 unknown command 0 [ 291.120278][T17222] binder: 17217:17222 ioctl c0306201 200000000640 returned -22 [ 291.121520][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3878'. [ 291.365540][T17232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17232 comm=syz.1.3882 [ 291.373085][T17232] sit0: entered promiscuous mode [ 291.380493][T17232] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 291.383910][T17232] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3882'. [ 291.450924][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 291.591138][T17257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3892'. [ 291.609284][T17252] binder: 17250:17252 ioctl c0306201 200000000040 returned -14 [ 291.736098][T17261] netlink: 'syz.1.3894': attribute type 5 has an invalid length. [ 291.740695][T17261] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x4) [ 292.053887][ T54] tipc: Node number set to 11578026 [ 292.100198][T17286] binder: 17285:17286 ioctl c0306201 200000000040 returned -22 [ 292.153639][T17289] fuse: Bad value for 'user_id' [ 292.155867][T17289] fuse: Bad value for 'user_id' [ 292.400746][ T40] kauditd_printk_skb: 336 callbacks suppressed [ 292.400762][ T40] audit: type=1400 audit(1761553273.591:9939): avc: denied { create } for pid=17307 comm="syz.1.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.412397][ T40] audit: type=1400 audit(1761553273.591:9940): avc: denied { write } for pid=17307 comm="syz.1.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.419966][ T40] audit: type=1400 audit(1761553273.591:9941): avc: denied { nlmsg_write } for pid=17307 comm="syz.1.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.427579][ T40] audit: type=1400 audit(1761553273.601:9942): avc: denied { read write } for pid=14749 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.439024][ T40] audit: type=1400 audit(1761553273.601:9943): avc: denied { open } for pid=14749 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.449931][ T40] audit: type=1400 audit(1761553273.601:9944): avc: denied { ioctl } for pid=14749 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.458314][ T40] audit: type=1400 audit(1761553273.629:9945): avc: denied { execute } for pid=17309 comm="syz.1.3913" name="file1" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.465550][ T40] audit: type=1400 audit(1761553273.629:9946): avc: denied { execute_no_trans } for pid=17309 comm="syz.1.3913" path="/236/file1" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.472843][ T40] audit: type=1400 audit(1761553273.629:9947): avc: denied { prog_load } for pid=17309 comm="syz.1.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.474030][T17310] __nla_validate_parse: 3 callbacks suppressed [ 292.474039][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 292.479603][ T40] audit: type=1400 audit(1761553273.657:9948): avc: denied { prog_run } for pid=17309 comm="syz.1.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.684852][T17323] FAULT_INJECTION: forcing a failure. [ 292.684852][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 292.689652][T17323] CPU: 1 UID: 0 PID: 17323 Comm: syz.1.3917 Not tainted syzkaller #0 PREEMPT(full) [ 292.689667][T17323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.689673][T17323] Call Trace: [ 292.689684][T17323] [ 292.689689][T17323] dump_stack_lvl+0x16c/0x1f0 [ 292.689722][T17323] should_fail_ex+0x512/0x640 [ 292.689739][T17323] ? __lock_acquire+0x622/0x1c90 [ 292.689756][T17323] should_failslab+0xc2/0x120 [ 292.689769][T17323] kmem_cache_alloc_noprof+0x75/0x6e0 [ 292.689785][T17323] ? __kernel_text_address+0xd/0x40 [ 292.689796][T17323] ? dst_alloc+0x99/0x1a0 [ 292.689810][T17323] ? dst_alloc+0x99/0x1a0 [ 292.689820][T17323] ? find_held_lock+0x2b/0x80 [ 292.689831][T17323] dst_alloc+0x99/0x1a0 [ 292.689844][T17323] rt_dst_alloc+0x35/0x3a0 [ 292.689860][T17323] ip_route_input_slow+0x16cb/0x3fa0 [ 292.689876][T17323] ? __pfx_ip_route_input_slow+0x10/0x10 [ 292.689892][T17323] ? __pfx_ipt_do_table+0x10/0x10 [ 292.689908][T17323] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 292.689923][T17323] ip_route_input_noref+0x120/0x2e0 [ 292.689935][T17323] ? __pfx_ip_route_input_noref+0x10/0x10 [ 292.689950][T17323] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 292.689965][T17323] ip_rcv_finish_core+0x46f/0x2290 [ 292.689981][T17323] ip_rcv+0x1c0/0x600 [ 292.689993][T17323] ? __pfx_ip_rcv+0x10/0x10 [ 292.690005][T17323] __netif_receive_skb_one_core+0x197/0x1e0 [ 292.690018][T17323] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 292.690030][T17323] ? lock_acquire+0x179/0x350 [ 292.690044][T17323] ? __might_fault+0xe3/0x190 [ 292.690058][T17323] ? __might_fault+0x13b/0x190 [ 292.690074][T17323] __netif_receive_skb+0x1d/0x160 [ 292.690085][T17323] netif_receive_skb+0x137/0x7b0 [ 292.690097][T17323] ? __pfx_netif_receive_skb+0x10/0x10 [ 292.690109][T17323] ? skb_partial_csum_set+0x202/0x3a0 [ 292.690136][T17323] tun_rx_batched.isra.0+0x3ee/0x740 [ 292.690158][T17323] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 292.690185][T17323] ? tun_get_user+0x1ded/0x3cc0 [ 292.690205][T17323] ? rcu_is_watching+0x12/0xc0 [ 292.690232][T17323] tun_get_user+0x28b2/0x3cc0 [ 292.690264][T17323] ? __pfx_tun_get_user+0x10/0x10 [ 292.690286][T17323] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 292.690313][T17323] ? find_held_lock+0x2b/0x80 [ 292.690333][T17323] ? tun_get+0x191/0x370 [ 292.690357][T17323] tun_chr_write_iter+0xdc/0x210 [ 292.690380][T17323] vfs_write+0x7d3/0x11d0 [ 292.690395][T17323] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 292.690419][T17323] ? __pfx_vfs_write+0x10/0x10 [ 292.690431][T17323] ? find_held_lock+0x2b/0x80 [ 292.690465][T17323] ksys_write+0x12a/0x250 [ 292.690479][T17323] ? __pfx_ksys_write+0x10/0x10 [ 292.690500][T17323] do_syscall_64+0xcd/0xfa0 [ 292.690525][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.690541][T17323] RIP: 0033:0x7fd6d1f8efc9 [ 292.690554][T17323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.690569][T17323] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.690584][T17323] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 292.690595][T17323] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 292.690604][T17323] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 292.690613][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.690623][T17323] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 292.690645][T17323] [ 292.926677][T17325] validate_nla: 3 callbacks suppressed [ 292.926688][T17325] netlink: 'syz.1.3918': attribute type 21 has an invalid length. [ 292.987500][T17334] tipc: Resetting bearer [ 292.994478][T17336] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3922'. [ 292.996306][T17334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.027783][T17336] 9pnet: Could not find request transport: virtiy‡v‹ÇDõ)>¹x¬o [ 293.145567][T17349] netlink: 'syz.2.3927': attribute type 3 has an invalid length. [ 293.148232][T17349] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3927'. [ 293.323347][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3933'. [ 293.328363][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'. [ 293.333645][T17375] netlink: 'syz.1.3935': attribute type 7 has an invalid length. [ 293.336919][T17375] netlink: 'syz.1.3935': attribute type 8 has an invalid length. [ 293.339368][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 293.345541][T17375] bond0: entered promiscuous mode [ 293.347167][T17375] bond_slave_0: entered promiscuous mode [ 293.349011][T17375] bond_slave_1: entered promiscuous mode [ 293.352802][T17375] bond0: left promiscuous mode [ 293.354418][T17375] bond_slave_0: left promiscuous mode [ 293.356182][T17375] bond_slave_1: left promiscuous mode [ 293.469910][ T54] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 293.645369][ T54] usb 7-1: config 3 has an invalid interface number: 167 but max is 2 [ 293.647968][ T54] usb 7-1: config 3 has an invalid interface number: 119 but max is 2 [ 293.650736][ T54] usb 7-1: config 3 has an invalid interface number: 86 but max is 2 [ 293.653677][ T54] usb 7-1: config 3 has an invalid interface number: 215 but max is 2 [ 293.656514][ T54] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 293.659249][ T54] usb 7-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 293.662122][ T54] usb 7-1: config 3 has no interface number 0 [ 293.664514][ T54] usb 7-1: config 3 has no interface number 1 [ 293.666492][ T54] usb 7-1: config 3 has no interface number 2 [ 293.668446][ T54] usb 7-1: config 3 has no interface number 3 [ 293.670450][ T54] usb 7-1: config 3 interface 167 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 293.674107][ T54] usb 7-1: config 3 interface 167 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 293.677473][ T54] usb 7-1: config 3 interface 167 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 293.681174][ T54] usb 7-1: config 3 interface 167 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 293.684765][ T54] usb 7-1: config 3 interface 167 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 293.688879][ T54] usb 7-1: too many endpoints for config 3 interface 119 altsetting 27: 70, using maximum allowed: 30 [ 293.693507][ T54] usb 7-1: config 3 interface 119 altsetting 27 has a duplicate endpoint with address 0xD, skipping [ 293.700614][ T54] usb 7-1: config 3 interface 119 altsetting 27 endpoint 0x5 is Bulk; changing to Interrupt [ 293.704844][ T54] usb 7-1: config 3 interface 119 altsetting 27 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 293.709892][ T54] usb 7-1: config 3 interface 119 altsetting 27 has 3 endpoint descriptors, different from the interface descriptor's value: 70 [ 293.715391][ T54] usb 7-1: config 3 interface 86 altsetting 1 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 293.719917][ T54] usb 7-1: config 3 interface 86 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 293.724551][ T54] usb 7-1: config 3 interface 86 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 293.730880][ T54] usb 7-1: config 3 interface 86 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 293.735343][ T54] usb 7-1: config 3 interface 86 altsetting 1 endpoint 0xF is Bulk; changing to Interrupt [ 293.739540][ T54] usb 7-1: config 3 interface 86 altsetting 1 endpoint 0x4 has an invalid bInterval 17, changing to 4 [ 293.744135][ T54] usb 7-1: config 3 interface 86 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 0 [ 293.748615][ T54] usb 7-1: config 3 interface 86 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 8 [ 293.753049][ T54] usb 7-1: config 3 interface 86 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 293.757388][ T54] usb 7-1: config 3 interface 215 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 293.760843][ T54] usb 7-1: config 3 interface 215 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 293.764089][ T54] usb 7-1: config 3 interface 215 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 293.767304][ T54] usb 7-1: config 3 interface 215 altsetting 6 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 293.770394][ T54] usb 7-1: config 3 interface 215 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 293.773317][ T54] usb 7-1: config 3 interface 167 has no altsetting 0 [ 293.775258][ T54] usb 7-1: config 3 interface 119 has no altsetting 0 [ 293.777143][ T54] usb 7-1: config 3 interface 86 has no altsetting 0 [ 293.779035][ T54] usb 7-1: config 3 interface 215 has no altsetting 0 [ 294.168313][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 294.171115][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 294.294876][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 294.298594][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 294.768481][T17418] binder_alloc: 17417: pid 17417 spamming oneway? 1 buffers allocated for a total size of 4096 [ 295.341495][T17458] binder: 17457:17458 ioctl c0306201 200000000040 returned -14 [ 295.871764][T17485] binder: 17484:17485 ioctl c0306201 200000000040 returned -14 [ 295.878504][T17488] IPVS: Error connecting to the multicast addr [ 296.045044][T17498] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 296.359157][T17539] netlink: 'syz.3.3988': attribute type 3 has an invalid length. [ 296.398135][T17541] netlink: 'syz.3.3989': attribute type 4 has an invalid length. [ 296.437317][ T54] usb 7-1: Dual-Role OTG device on HNP port [ 296.439504][ T54] usb 7-1: can't set HNP mode: -71 [ 296.977596][T17572] binder: 17571:17572 ioctl c0306201 200000000040 returned -22 [ 297.766473][ T40] kauditd_printk_skb: 374 callbacks suppressed [ 297.766488][ T40] audit: type=1400 audit(1761553278.603:10323): avc: denied { read write } for pid=17626 comm="syz.0.4021" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.779174][ T40] audit: type=1400 audit(1761553278.603:10324): avc: denied { open } for pid=17626 comm="syz.0.4021" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.791424][ T40] audit: type=1400 audit(1761553278.631:10325): avc: denied { read write } for pid=17630 comm="syz.0.4023" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.799375][ T40] audit: type=1400 audit(1761553278.631:10326): avc: denied { open } for pid=17630 comm="syz.0.4023" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.808214][ T40] audit: type=1400 audit(1761553278.631:10327): avc: denied { map } for pid=17630 comm="syz.0.4023" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.817197][ T40] audit: type=1400 audit(1761553278.631:10328): avc: denied { ioctl } for pid=17630 comm="syz.0.4023" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 297.826731][ T40] audit: type=1400 audit(1761553278.631:10329): avc: denied { create } for pid=17630 comm="syz.0.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.832712][T17632] __nla_validate_parse: 7 callbacks suppressed [ 297.832725][T17632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4022'. [ 297.834731][ T40] audit: type=1400 audit(1761553278.631:10330): avc: denied { setopt } for pid=17630 comm="syz.0.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.834755][ T40] audit: type=1400 audit(1761553278.659:10331): avc: denied { read write } for pid=17627 comm="syz.1.4022" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.834807][ T40] audit: type=1400 audit(1761553278.659:10332): avc: denied { open } for pid=17627 comm="syz.1.4022" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.935094][T17638] input: syz1 as /devices/virtual/input/input40 [ 298.017656][T17645] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 298.086264][T17646] binder: 17644:17646 ioctl c0306201 200000000640 returned -22 [ 298.592554][T17659] mkiss: ax0: crc mode is auto. [ 298.759585][T17672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=17672 comm=syz.3.4038 [ 298.793773][T17673] binder: 17668:17673 unknown command 1074553621 [ 298.797962][T17673] binder: 17668:17673 ioctl c0306201 200000000640 returned -22 [ 298.937755][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 298.982869][T17688] binder: 17685:17688 ioctl c0306201 200000000640 returned -22 [ 298.996281][T17690] random: crng reseeded on system resumption [ 299.021954][T17690] Unrecognized hibernate image header format! [ 299.026814][T17690] PM: hibernation: Image mismatch: architecture specific data [ 299.251836][T17693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4044'. [ 299.755121][T17702] binder: 17701:17702 ioctl c0306201 200000000040 returned -22 [ 299.827865][T17711] FAULT_INJECTION: forcing a failure. [ 299.827865][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 299.832388][T17711] CPU: 2 UID: 0 PID: 17711 Comm: syz.1.4050 Not tainted syzkaller #0 PREEMPT(full) [ 299.832402][T17711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.832409][T17711] Call Trace: [ 299.832413][T17711] [ 299.832418][T17711] dump_stack_lvl+0x16c/0x1f0 [ 299.832443][T17711] should_fail_ex+0x512/0x640 [ 299.832462][T17711] ? fs_reclaim_acquire+0xae/0x150 [ 299.832484][T17711] should_failslab+0xc2/0x120 [ 299.832504][T17711] __kmalloc_noprof+0xdd/0x880 [ 299.832530][T17711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 299.832554][T17711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 299.832574][T17711] tomoyo_realpath_from_path+0xc2/0x6e0 [ 299.832598][T17711] ? tomoyo_profile+0x47/0x60 [ 299.832623][T17711] tomoyo_path_number_perm+0x245/0x580 [ 299.832648][T17711] ? tomoyo_path_number_perm+0x237/0x580 [ 299.832676][T17711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.832693][T17711] ? find_held_lock+0x2b/0x80 [ 299.832718][T17711] ? find_held_lock+0x2b/0x80 [ 299.832733][T17711] ? hook_file_ioctl_common+0x145/0x410 [ 299.832750][T17711] ? __fget_files+0x20e/0x3c0 [ 299.832763][T17711] security_file_ioctl+0x9b/0x240 [ 299.832775][T17711] __x64_sys_ioctl+0xb7/0x210 [ 299.832791][T17711] do_syscall_64+0xcd/0xfa0 [ 299.832807][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.832818][T17711] RIP: 0033:0x7fd6d1f8efc9 [ 299.832827][T17711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.832837][T17711] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.832847][T17711] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 299.832854][T17711] RDX: 0000000000000000 RSI: 0000000000005328 RDI: 0000000000000007 [ 299.832860][T17711] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.832866][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.832872][T17711] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 299.832886][T17711] [ 299.832891][T17711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.851221][T17714] binder: BINDER_SET_CONTEXT_MGR already set [ 299.905543][T17714] binder: 17713:17714 ioctl 4018620d 200000000480 returned -16 [ 299.906903][T17718] binder: 17713:17718 ioctl c0306201 200000000040 returned -14 [ 299.997323][T17724] binder: 17723:17724 ioctl c0306201 200000000040 returned -22 [ 300.099519][T17732] FAULT_INJECTION: forcing a failure. [ 300.099519][T17732] name failslab, interval 1, probability 0, space 0, times 0 [ 300.103594][T17732] CPU: 0 UID: 0 PID: 17732 Comm: syz.0.4060 Not tainted syzkaller #0 PREEMPT(full) [ 300.103608][T17732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.103615][T17732] Call Trace: [ 300.103620][T17732] [ 300.103625][T17732] dump_stack_lvl+0x16c/0x1f0 [ 300.103644][T17732] should_fail_ex+0x512/0x640 [ 300.103657][T17732] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 300.103674][T17732] should_failslab+0xc2/0x120 [ 300.103687][T17732] kmem_cache_alloc_node_noprof+0x78/0x770 [ 300.103702][T17732] ? __alloc_skb+0x2b2/0x380 [ 300.103717][T17732] ? __alloc_skb+0x2b2/0x380 [ 300.103728][T17732] ? __pfx_netlink_insert+0x10/0x10 [ 300.103741][T17732] __alloc_skb+0x2b2/0x380 [ 300.103753][T17732] ? __pfx___alloc_skb+0x10/0x10 [ 300.103766][T17732] ? netlink_autobind.isra.0+0x158/0x370 [ 300.103783][T17732] netlink_alloc_large_skb+0x69/0x140 [ 300.103799][T17732] netlink_sendmsg+0x698/0xdd0 [ 300.103816][T17732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.103835][T17732] ____sys_sendmsg+0xa98/0xc70 [ 300.103852][T17732] ? copy_msghdr_from_user+0x10a/0x160 [ 300.103865][T17732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.103887][T17732] ___sys_sendmsg+0x134/0x1d0 [ 300.103901][T17732] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.103913][T17732] ? __lock_acquire+0x622/0x1c90 [ 300.103944][T17732] __sys_sendmsg+0x16d/0x220 [ 300.103958][T17732] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.103984][T17732] do_syscall_64+0xcd/0xfa0 [ 300.104000][T17732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.104011][T17732] RIP: 0033:0x7fc26698efc9 [ 300.104020][T17732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.104031][T17732] RSP: 002b:00007fc267877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.104041][T17732] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698efc9 [ 300.104048][T17732] RDX: 000000002000c894 RSI: 0000200000000500 RDI: 0000000000000003 [ 300.104054][T17732] RBP: 00007fc267877090 R08: 0000000000000000 R09: 0000000000000000 [ 300.104060][T17732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.104066][T17732] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007fff685b78d8 [ 300.104080][T17732] [ 300.351780][T17741] Invalid source name [ 300.353356][T17741] UBIFS error (pid: 17741): cannot open "/dev/sg0", error -22 [ 300.871653][T17750] binder: 17749:17750 ioctl c0306201 200000000040 returned -22 [ 300.947223][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4070'. [ 301.193780][T17776] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4076'. [ 301.194569][T17779] FAULT_INJECTION: forcing a failure. [ 301.194569][T17779] name failslab, interval 1, probability 0, space 0, times 0 [ 301.196913][T17776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.201710][T17779] CPU: 3 UID: 0 PID: 17779 Comm: syz.1.4077 Not tainted syzkaller #0 PREEMPT(full) [ 301.201732][T17779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.201742][T17779] Call Trace: [ 301.201776][T17779] [ 301.201784][T17779] dump_stack_lvl+0x16c/0x1f0 [ 301.201825][T17779] should_fail_ex+0x512/0x640 [ 301.201853][T17779] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 301.201876][T17779] should_failslab+0xc2/0x120 [ 301.201896][T17779] kmem_cache_alloc_noprof+0x75/0x6e0 [ 301.201924][T17779] ? skb_clone+0x190/0x3f0 [ 301.201966][T17779] ? skb_clone+0x190/0x3f0 [ 301.201984][T17779] skb_clone+0x190/0x3f0 [ 301.202005][T17779] netlink_deliver_tap+0xabd/0xd30 [ 301.202032][T17779] netlink_unicast+0x64c/0x870 [ 301.202058][T17779] ? __pfx_netlink_unicast+0x10/0x10 [ 301.202090][T17779] netlink_sendmsg+0x8c8/0xdd0 [ 301.202116][T17779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.202148][T17779] ____sys_sendmsg+0xa98/0xc70 [ 301.202173][T17779] ? copy_msghdr_from_user+0x10a/0x160 [ 301.202193][T17779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.202229][T17779] ___sys_sendmsg+0x134/0x1d0 [ 301.202251][T17779] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.202269][T17779] ? __lock_acquire+0x622/0x1c90 [ 301.202324][T17779] __sys_sendmsg+0x16d/0x220 [ 301.202345][T17779] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.202396][T17779] do_syscall_64+0xcd/0xfa0 [ 301.202422][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.202440][T17779] RIP: 0033:0x7fd6d1f8efc9 [ 301.202454][T17779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.202468][T17779] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.202485][T17779] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 301.202496][T17779] RDX: 000000002000c894 RSI: 0000200000000500 RDI: 0000000000000003 [ 301.202506][T17779] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 301.202515][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.202525][T17779] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 301.202548][T17779] [ 301.337869][T17795] FAULT_INJECTION: forcing a failure. [ 301.337869][T17795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.344391][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.3.4083 Not tainted syzkaller #0 PREEMPT(full) [ 301.344416][T17795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.344428][T17795] Call Trace: [ 301.344435][T17795] [ 301.344442][T17795] dump_stack_lvl+0x16c/0x1f0 [ 301.344472][T17795] should_fail_ex+0x512/0x640 [ 301.344497][T17795] strncpy_from_user+0x3b/0x2e0 [ 301.344519][T17795] path_removexattrat+0xc6/0x5e0 [ 301.344539][T17795] ? __pfx_path_removexattrat+0x10/0x10 [ 301.344577][T17795] ? ksys_write+0x1ac/0x250 [ 301.344595][T17795] ? __pfx_ksys_write+0x10/0x10 [ 301.344617][T17795] __x64_sys_lremovexattr+0x5e/0x80 [ 301.344639][T17795] do_syscall_64+0xcd/0xfa0 [ 301.344666][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.344683][T17795] RIP: 0033:0x7ff822f8efc9 [ 301.344699][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.344716][T17795] RSP: 002b:00007ff823e24038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 301.344731][T17795] RAX: ffffffffffffffda RBX: 00007ff8231e5fa0 RCX: 00007ff822f8efc9 [ 301.344743][T17795] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 301.344754][T17795] RBP: 00007ff823e24090 R08: 0000000000000000 R09: 0000000000000000 [ 301.344765][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.344776][T17795] R13: 00007ff8231e6038 R14: 00007ff8231e5fa0 R15: 00007ffd0296bfa8 [ 301.344801][T17795] [ 301.433277][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4080'. [ 301.730078][T17813] binder: 17812:17813 ioctl c0306201 200000000040 returned -22 [ 301.744609][T17815] binder: 17814:17815 ioctl c0306201 200000000040 returned -22 [ 301.871227][T17834] FAULT_INJECTION: forcing a failure. [ 301.871227][T17834] name failslab, interval 1, probability 0, space 0, times 0 [ 301.875591][T17834] CPU: 3 UID: 0 PID: 17834 Comm: syz.1.4096 Not tainted syzkaller #0 PREEMPT(full) [ 301.875612][T17834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.875622][T17834] Call Trace: [ 301.875640][T17834] [ 301.875647][T17834] dump_stack_lvl+0x16c/0x1f0 [ 301.875689][T17834] should_fail_ex+0x512/0x640 [ 301.875718][T17834] ? __kmalloc_noprof+0xca/0x880 [ 301.875743][T17834] should_failslab+0xc2/0x120 [ 301.875767][T17834] __kmalloc_noprof+0xdd/0x880 [ 301.875803][T17834] ? ethnl_default_set_doit+0x170/0x9d0 [ 301.875829][T17834] ? ethnl_default_set_doit+0x170/0x9d0 [ 301.875849][T17834] ethnl_default_set_doit+0x170/0x9d0 [ 301.875871][T17834] genl_family_rcv_msg_doit+0x209/0x2f0 [ 301.875888][T17834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.875910][T17834] ? bpf_lsm_capable+0x9/0x10 [ 301.875921][T17834] ? security_capable+0x7e/0x260 [ 301.875938][T17834] ? ns_capable+0xd7/0x110 [ 301.875952][T17834] genl_rcv_msg+0x55c/0x800 [ 301.875964][T17834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.875974][T17834] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 301.875993][T17834] netlink_rcv_skb+0x158/0x420 [ 301.876009][T17834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.876020][T17834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.876040][T17834] ? netlink_deliver_tap+0x1ae/0xd30 [ 301.876056][T17834] genl_rcv+0x28/0x40 [ 301.876070][T17834] netlink_unicast+0x5aa/0x870 [ 301.876086][T17834] ? __pfx_netlink_unicast+0x10/0x10 [ 301.876106][T17834] netlink_sendmsg+0x8c8/0xdd0 [ 301.876123][T17834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.876142][T17834] ____sys_sendmsg+0xa98/0xc70 [ 301.876159][T17834] ? copy_msghdr_from_user+0x10a/0x160 [ 301.876173][T17834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.876195][T17834] ___sys_sendmsg+0x134/0x1d0 [ 301.876209][T17834] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.876221][T17834] ? __lock_acquire+0x622/0x1c90 [ 301.876254][T17834] __sys_sendmsg+0x16d/0x220 [ 301.876268][T17834] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.876290][T17834] do_syscall_64+0xcd/0xfa0 [ 301.876306][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.876317][T17834] RIP: 0033:0x7fd6d1f8efc9 [ 301.876327][T17834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.876337][T17834] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.876348][T17834] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 301.876355][T17834] RDX: 000000002000c894 RSI: 0000200000000500 RDI: 0000000000000003 [ 301.876361][T17834] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 301.876367][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.876373][T17834] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 301.876388][T17834] [ 302.033431][T17837] fuse: Unknown parameter '' [ 302.177861][T17846] binder: 17845:17846 ioctl c0306201 200000000040 returned -22 [ 302.234461][T17852] tmpfs: Bad value for 'huge' [ 302.262952][T17854] binder: 17847:17854 ioctl c0306201 200000000640 returned -22 [ 302.307334][T17858] FAULT_INJECTION: forcing a failure. [ 302.307334][T17858] name failslab, interval 1, probability 0, space 0, times 0 [ 302.313078][T17858] CPU: 2 UID: 0 PID: 17858 Comm: syz.3.4107 Not tainted syzkaller #0 PREEMPT(full) [ 302.313103][T17858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.313115][T17858] Call Trace: [ 302.313134][T17858] [ 302.313141][T17858] dump_stack_lvl+0x16c/0x1f0 [ 302.313187][T17858] should_fail_ex+0x512/0x640 [ 302.313218][T17858] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 302.313248][T17858] should_failslab+0xc2/0x120 [ 302.313270][T17858] kmem_cache_alloc_node_noprof+0x78/0x770 [ 302.313296][T17858] ? __alloc_skb+0x2b2/0x380 [ 302.313323][T17858] ? __alloc_skb+0x2b2/0x380 [ 302.313341][T17858] __alloc_skb+0x2b2/0x380 [ 302.313361][T17858] ? __pfx___alloc_skb+0x10/0x10 [ 302.313382][T17858] ? genl_rcv_msg+0x4d0/0x800 [ 302.313398][T17858] ? genl_rcv_msg+0x4bb/0x800 [ 302.313421][T17858] netlink_ack+0x15d/0xb80 [ 302.313454][T17858] netlink_rcv_skb+0x332/0x420 [ 302.313479][T17858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.313498][T17858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.313533][T17858] ? netlink_deliver_tap+0x1ae/0xd30 [ 302.313562][T17858] genl_rcv+0x28/0x40 [ 302.313586][T17858] netlink_unicast+0x5aa/0x870 [ 302.313615][T17858] ? __pfx_netlink_unicast+0x10/0x10 [ 302.313650][T17858] netlink_sendmsg+0x8c8/0xdd0 [ 302.313680][T17858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.313714][T17858] ____sys_sendmsg+0xa98/0xc70 [ 302.313748][T17858] ? copy_msghdr_from_user+0x10a/0x160 [ 302.313766][T17858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.313797][T17858] ___sys_sendmsg+0x134/0x1d0 [ 302.313816][T17858] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.313832][T17858] ? __lock_acquire+0x622/0x1c90 [ 302.313880][T17858] __sys_sendmsg+0x16d/0x220 [ 302.313898][T17858] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.313930][T17858] do_syscall_64+0xcd/0xfa0 [ 302.313952][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.313966][T17858] RIP: 0033:0x7ff822f8efc9 [ 302.313978][T17858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.313992][T17858] RSP: 002b:00007ff823e24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.314006][T17858] RAX: ffffffffffffffda RBX: 00007ff8231e5fa0 RCX: 00007ff822f8efc9 [ 302.314015][T17858] RDX: 000000002000c894 RSI: 0000200000000500 RDI: 0000000000000003 [ 302.314024][T17858] RBP: 00007ff823e24090 R08: 0000000000000000 R09: 0000000000000000 [ 302.314032][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.314040][T17858] R13: 00007ff8231e6038 R14: 00007ff8231e5fa0 R15: 00007ffd0296bfa8 [ 302.314061][T17858] [ 302.402999][ C2] vkms_vblank_simulate: vblank timer overrun [ 302.505273][T17870] binder: 17869:17870 ioctl c0306201 200000000040 returned -22 [ 302.583190][T17879] binder: 17878:17879 ioctl c0306201 200000000040 returned -22 [ 302.643964][T17886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4111'. [ 302.717539][T17901] binder: BINDER_SET_CONTEXT_MGR already set [ 302.720144][T17901] binder: 17900:17901 ioctl 4018620d 200000000480 returned -16 [ 302.724323][T17901] binder: 17900:17901 ioctl c0306201 200000000040 returned -22 [ 302.893235][T17913] nfs: Unknown parameter '0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.893235][T17913] 0 [ 302.963593][ C2] vkms_vblank_simulate: vblank timer overrun [ 303.035052][T17924] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 303.038437][T17924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4130'. [ 303.143025][T17935] binder: 17934:17935 ioctl c0306201 200000000040 returned -14 [ 303.194694][ T40] kauditd_printk_skb: 277 callbacks suppressed [ 303.194710][ T40] audit: type=1400 audit(1761553283.680:10610): avc: denied { bind } for pid=17923 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.247998][T17947] FAULT_INJECTION: forcing a failure. [ 303.247998][T17947] name failslab, interval 1, probability 0, space 0, times 0 [ 303.253606][T17947] CPU: 0 UID: 0 PID: 17947 Comm: syz.2.4139 Not tainted syzkaller #0 PREEMPT(full) [ 303.253622][T17947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.253628][T17947] Call Trace: [ 303.253632][T17947] [ 303.253637][T17947] dump_stack_lvl+0x16c/0x1f0 [ 303.253657][T17947] should_fail_ex+0x512/0x640 [ 303.253670][T17947] ? fs_reclaim_acquire+0xae/0x150 [ 303.253683][T17947] should_failslab+0xc2/0x120 [ 303.253697][T17947] __kmalloc_noprof+0xdd/0x880 [ 303.253713][T17947] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.253728][T17947] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.253740][T17947] tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.253753][T17947] ? tomoyo_profile+0x47/0x60 [ 303.253767][T17947] tomoyo_path_number_perm+0x245/0x580 [ 303.253783][T17947] ? tomoyo_path_number_perm+0x237/0x580 [ 303.253800][T17947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.253817][T17947] ? find_held_lock+0x2b/0x80 [ 303.253842][T17947] ? find_held_lock+0x2b/0x80 [ 303.253855][T17947] ? hook_file_ioctl_common+0x145/0x410 [ 303.253871][T17947] ? __fget_files+0x20e/0x3c0 [ 303.253884][T17947] security_file_ioctl+0x9b/0x240 [ 303.253897][T17947] __x64_sys_ioctl+0xb7/0x210 [ 303.253913][T17947] do_syscall_64+0xcd/0xfa0 [ 303.253930][T17947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.253941][T17947] RIP: 0033:0x7f7f7658efc9 [ 303.253950][T17947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.253965][T17947] RSP: 002b:00007f7f7739d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.253975][T17947] RAX: ffffffffffffffda RBX: 00007f7f767e5fa0 RCX: 00007f7f7658efc9 [ 303.253982][T17947] RDX: 0000200000000040 RSI: 00000000c02c564a RDI: 0000000000000003 [ 303.253988][T17947] RBP: 00007f7f7739d090 R08: 0000000000000000 R09: 0000000000000000 [ 303.253994][T17947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.254001][T17947] R13: 00007f7f767e6038 R14: 00007f7f767e5fa0 R15: 00007ffe918643d8 [ 303.254015][T17947] [ 303.254019][T17947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.284438][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4137'. [ 303.379333][ T40] audit: type=1400 audit(1761553283.848:10611): avc: denied { read } for pid=17954 comm="syz.2.4142" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 303.389161][ T40] audit: type=1400 audit(1761553283.848:10612): avc: denied { open } for pid=17954 comm="syz.2.4142" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 303.400851][ T40] audit: type=1400 audit(1761553283.848:10613): avc: denied { ioctl } for pid=17954 comm="syz.2.4142" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 303.434922][ T40] audit: type=1400 audit(1761553283.905:10614): avc: denied { read write } for pid=13065 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.445031][ T40] audit: type=1400 audit(1761553283.905:10615): avc: denied { open } for pid=13065 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.455285][ T40] audit: type=1400 audit(1761553283.905:10616): avc: denied { ioctl } for pid=13065 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.468865][ T40] audit: type=1400 audit(1761553283.933:10617): avc: denied { allowed } for pid=17960 comm="syz.0.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 303.481630][ T40] audit: type=1400 audit(1761553283.951:10618): avc: denied { create } for pid=17960 comm="syz.0.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 303.486417][T17961] binder: 17959:17961 ioctl c0306201 200000000040 returned -14 [ 303.495117][ T40] audit: type=1400 audit(1761553283.961:10619): avc: denied { create } for pid=17960 comm="syz.0.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.519838][T17969] binder: 17968:17969 ioctl 4018620d 0 returned -22 [ 303.558477][T17973] FAULT_INJECTION: forcing a failure. [ 303.558477][T17973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.564022][T17973] CPU: 0 UID: 0 PID: 17973 Comm: syz.1.4150 Not tainted syzkaller #0 PREEMPT(full) [ 303.564045][T17973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.564057][T17973] Call Trace: [ 303.564064][T17973] [ 303.564071][T17973] dump_stack_lvl+0x16c/0x1f0 [ 303.564103][T17973] should_fail_ex+0x512/0x640 [ 303.564128][T17973] strncpy_from_user+0x3b/0x2e0 [ 303.564151][T17973] getname_flags.part.0+0x8f/0x550 [ 303.564181][T17973] getname_flags+0x93/0xf0 [ 303.564198][T17973] path_removexattrat+0x3a2/0x5e0 [ 303.564216][T17973] ? __pfx_path_removexattrat+0x10/0x10 [ 303.564249][T17973] ? ksys_write+0x1ac/0x250 [ 303.564266][T17973] ? __pfx_ksys_write+0x10/0x10 [ 303.564286][T17973] __x64_sys_lremovexattr+0x5e/0x80 [ 303.564308][T17973] do_syscall_64+0xcd/0xfa0 [ 303.564336][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.564355][T17973] RIP: 0033:0x7fd6d1f8efc9 [ 303.564370][T17973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.564385][T17973] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 303.564400][T17973] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 303.564409][T17973] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 303.564418][T17973] RBP: 00007fd6d2ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 303.564426][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.564435][T17973] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 303.564454][T17973] [ 303.605136][T17976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'. [ 303.714207][T17980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4153'. [ 303.770212][T17988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4152'. [ 304.068912][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 304.358843][T17997] binder: 17996:17997 ioctl c0306201 200000000040 returned -14 [ 304.428934][T18002] binder: 18001:18002 ioctl 4018620d 0 returned -22 [ 304.502841][T18008] Can't find a SQUASHFS superblock on nullb0 [ 304.574158][T13269] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 304.776740][T18031] binder: 18030:18031 ioctl 4018620d 0 returned -22 [ 304.831744][T18035] binder: 18034:18035 ioctl c0306201 200000000040 returned -22 [ 304.866796][T18037] syzkaller0: entered promiscuous mode [ 304.868856][T18037] syzkaller0: entered allmulticast mode [ 305.485336][T18057] binder: 18055:18057 ioctl c0306201 200000000040 returned -22 [ 305.485503][T18058] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 305.493139][T18058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4178'. [ 305.590652][T18073] VFS: Mount too revealing [ 305.641601][T18081] netlink: 'syz.2.4186': attribute type 13 has an invalid length. [ 305.707212][T18085] binder: 18084:18085 ioctl c0306201 200000000040 returned -22 [ 305.753138][T18089] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 305.756375][T18089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4190'. [ 305.812763][T18075] ------------[ cut here ]------------ [ 305.815121][T18075] WARNING: CPU: 1 PID: 18075 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 305.821005][T18075] Modules linked in: [ 305.824765][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.1.4185 Not tainted syzkaller #0 PREEMPT(full) [ 305.828564][T18075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.833167][T18075] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 305.836290][T18075] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d d4 63 52 0e 00 75 0b c6 05 cb 63 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 305.844904][T18075] RSP: 0018:ffffc9000d5ff9f8 EFLAGS: 00010246 [ 305.847677][T18075] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 305.851023][T18075] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040cc0 [ 305.854249][T18075] RBP: 0000000000000012 R08: 0000000000000005 R09: 0000000000000009 [ 305.858529][T18075] R10: 0000000000000012 R11: 0000000000000001 R12: 0000000000040cc0 [ 305.861984][T18075] R13: 1ffff92001abff55 R14: ffffffff9ab2c464 R15: 0000000000000012 [ 305.866852][T18075] FS: 00007fd6d2ea96c0(0000) GS:ffff8880d6b0a000(0000) knlGS:0000000000000000 [ 305.870594][T18075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.873942][T18075] CR2: 0000200000000080 CR3: 0000000039591000 CR4: 0000000000352ef0 [ 305.877588][T18075] Call Trace: [ 305.878681][T18075] [ 305.879798][T18075] ? find_held_lock+0x2b/0x80 [ 305.881304][T18075] ? avc_has_extended_perms+0x33a/0x1090 [ 305.883096][T18075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.885532][T18075] ? avc_has_extended_perms+0x47c/0x1090 [ 305.887844][T18075] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 305.889728][T18075] ? kasan_quarantine_put+0x10a/0x240 [ 305.891462][T18075] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.893274][T18075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.895422][T18075] ? policy_nodemask+0xea/0x4e0 [ 305.897247][T18075] alloc_pages_mpol+0x1fb/0x550 [ 305.899088][T18075] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.900843][T18075] ___kmalloc_large_node+0xed/0x160 [ 305.902542][T18075] __kmalloc_large_node_noprof+0x1c/0x70 [ 305.904429][T18075] ? __might_fault+0xe3/0x190 [ 305.906078][T18075] __kmalloc_noprof.cold+0xc/0x62 [ 305.907793][T18075] ? raw_alloc_io_data+0x12c/0x1a0 [ 305.909508][T18075] ? raw_alloc_io_data+0x12c/0x1a0 [ 305.911135][T18075] raw_alloc_io_data+0x12c/0x1a0 [ 305.912714][T18075] raw_ioctl+0x1397/0x2c30 [ 305.914185][T18075] ? __pfx_raw_ioctl+0x10/0x10 [ 305.915683][T18075] ? selinux_file_ioctl+0xb4/0x270 [ 305.917260][T18075] ? __pfx_raw_ioctl+0x10/0x10 [ 305.918818][T18075] __x64_sys_ioctl+0x18e/0x210 [ 305.920504][T18075] do_syscall_64+0xcd/0xfa0 [ 305.921989][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.923877][T18075] RIP: 0033:0x7fd6d1f8efc9 [ 305.925287][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.931312][T18075] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.933921][T18075] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 305.936502][T18075] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000009 [ 305.938968][T18075] RBP: 00007fd6d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.941485][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.943874][T18075] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 305.946327][T18075] [ 305.947324][T18075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.949537][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.1.4185 Not tainted syzkaller #0 PREEMPT(full) [ 305.952778][T18075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.956467][T18075] Call Trace: [ 305.957725][T18075] [ 305.958859][T18075] dump_stack_lvl+0x3d/0x1f0 [ 305.960366][T18075] vpanic+0x640/0x6f0 [ 305.961893][T18075] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 305.963762][T18075] panic+0xca/0xd0 [ 305.964913][T18075] ? __pfx_panic+0x10/0x10 [ 305.966284][T18075] check_panic_on_warn+0xab/0xb0 [ 305.967822][T18075] __warn+0xf6/0x3c0 [ 305.969052][T18075] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 305.970905][T18075] report_bug+0x3c3/0x580 [ 305.972244][T18075] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 305.974497][T18075] handle_bug+0x184/0x210 [ 305.976064][T18075] exc_invalid_op+0x17/0x50 [ 305.977670][T18075] asm_exc_invalid_op+0x1a/0x20 [ 305.979438][T18075] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 305.981885][T18075] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d d4 63 52 0e 00 75 0b c6 05 cb 63 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 305.988714][T18075] RSP: 0018:ffffc9000d5ff9f8 EFLAGS: 00010246 [ 305.990905][T18075] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 305.993792][T18075] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040cc0 [ 305.996590][T18075] RBP: 0000000000000012 R08: 0000000000000005 R09: 0000000000000009 [ 305.999408][T18075] R10: 0000000000000012 R11: 0000000000000001 R12: 0000000000040cc0 [ 306.002165][T18075] R13: 1ffff92001abff55 R14: ffffffff9ab2c464 R15: 0000000000000012 [ 306.004947][T18075] ? find_held_lock+0x2b/0x80 [ 306.006614][T18075] ? avc_has_extended_perms+0x33a/0x1090 [ 306.008618][T18075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.010859][T18075] ? avc_has_extended_perms+0x47c/0x1090 [ 306.012881][T18075] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 306.014949][T18075] ? kasan_quarantine_put+0x10a/0x240 [ 306.016863][T18075] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.018723][T18075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.020794][T18075] ? policy_nodemask+0xea/0x4e0 [ 306.022563][T18075] alloc_pages_mpol+0x1fb/0x550 [ 306.024297][T18075] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.026185][T18075] ___kmalloc_large_node+0xed/0x160 [ 306.028042][T18075] __kmalloc_large_node_noprof+0x1c/0x70 [ 306.029977][T18075] ? __might_fault+0xe3/0x190 [ 306.031655][T18075] __kmalloc_noprof.cold+0xc/0x62 [ 306.033466][T18075] ? raw_alloc_io_data+0x12c/0x1a0 [ 306.035274][T18075] ? raw_alloc_io_data+0x12c/0x1a0 [ 306.037054][T18075] raw_alloc_io_data+0x12c/0x1a0 [ 306.038807][T18075] raw_ioctl+0x1397/0x2c30 [ 306.040351][T18075] ? __pfx_raw_ioctl+0x10/0x10 [ 306.042064][T18075] ? selinux_file_ioctl+0xb4/0x270 [ 306.043868][T18075] ? __pfx_raw_ioctl+0x10/0x10 [ 306.045550][T18075] __x64_sys_ioctl+0x18e/0x210 [ 306.047287][T18075] do_syscall_64+0xcd/0xfa0 [ 306.048909][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.050968][T18075] RIP: 0033:0x7fd6d1f8efc9 [ 306.052566][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.059382][T18075] RSP: 002b:00007fd6d2ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.062398][T18075] RAX: ffffffffffffffda RBX: 00007fd6d21e5fa0 RCX: 00007fd6d1f8efc9 [ 306.065236][T18075] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000009 [ 306.068088][T18075] RBP: 00007fd6d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.070991][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.073812][T18075] R13: 00007fd6d21e6038 R14: 00007fd6d21e5fa0 R15: 00007ffecd2c25e8 [ 306.076434][T18075] [ 306.078079][T18075] Kernel Offset: disabled [ 306.079474][T18075] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:13:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000010 RBX=ffffc9000d63fd10 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8463610a RDI=ffff888055e4e780 RBP=ffff888055e4e780 RSP=ffffc9000d63fbf0 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9081f6d7 R11=0000000000000001 R12=ffffc9000d63fc80 R13=ffff888025778940 R14=00000000fffffff4 R15=ffff888055e4e780 RIP=ffffffff8b5c320d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff823e246c0 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3dfdc4 CR3=0000000045022000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000fefef800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff823e23f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff823012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff823012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff823012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff823012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff82301307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff82301315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295155 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc9000d5ff350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9add6700 R15=ffffffff852950f0 RIP=ffffffff8529517f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd6d2ea96c0 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000080 CR3=0000000039591000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d2ea6f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000312e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8db19af9 RDI=ffffffff8bf06e40 RBP=0000000000000002 RSP=ffffc9000d6ae368 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000000f4ff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b605a4d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff685b6f00 CR3=0000000024b82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e75745f7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f76612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f76612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f76612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f76612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7661307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7661315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f767b74a8 00007f7f767b74a0 00007f7f767b7498 00007f7f767b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7731d100 00007f7f767b7460 00007f7f767b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f767b74b8 00007f7f767b74b0 00007f7f767b74a8 00007f7f767b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888026e4feb8 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8b9f9aa0 RDI=ffff888026e4feb8 RBP=ffffffff9ab3ef80 RSP=ffffc90006e5fa38 R8 =0000000000000004 R9 =0000000000000000 R10=ffff888026e4fe9b R11=0000000000000001 R12=0000000000000000 R13=ffff888026e4fe30 R14=ffffc90006e5fc20 R15=0000000000000000 RIP=ffffffff8198f640 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5aa05d6880 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555589763808 CR3=0000000047c7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4000000 Opmask01=0000000000004211 Opmask02=000000000101000f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3233323a3031632f 617461642f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffd65945620 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa05ec7f0 00007f5aa05ec7e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7910279dbc0f 2f2f791027a11def ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e059699cb12d415 2f2f7915446bcabb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563ef300706d 742e3233323a3031 632f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00184d4554535953 4255530018485441 505645440056001f 56000e004c004b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffd65945620 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563f08b2f574 0000000000004564 0000000000000000 0000000000000002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73613a5c27c18c07 2f002f7375626a17 79732f002f6d6574 7379736275732f71 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f77ffffffffff7f 6f7f3f7f7ff7eeff 7f7f7f7f7ffffdf7 7f7f7f6f7dff7fff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563f083d1230 0000563a08446594 0000000000000020 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004512 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000