last executing test programs: 5.500092886s ago: executing program 2 (id=2019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x100c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.376761135s ago: executing program 2 (id=2020): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x24040800) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2.380238504s ago: executing program 2 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.218901574s ago: executing program 2 (id=2063): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x63000000, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.214726634s ago: executing program 2 (id=2066): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r1, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x57}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) (fail_nth: 59) 2.15792789s ago: executing program 2 (id=2068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close(r1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9053408e46e0d040f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) syz_usb_connect$uac2(0x1, 0xb0, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1969, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0xa, 0x0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x62}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xae0, 0x9, 0x3e, 0x3}, [@source_unit={0x8, 0x24, 0xa, 0x3, 0x3, 0x80, 0x6}, @processing_unit={0xd, 0x24, 0x8, 0x3, 0x3, [0x0, 0x3, 0x1, 0x3]}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x1, [0x6, 0x1, 0x1, 0x3]}, @extension_unit={0xc, 0x24, 0x9, 0x4, 0x8, 0x5, "75c19b2f9f"}, @selector_unit={0x7, 0x24, 0xb, 0x7, 0x2, "e124"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x3, 0x1, {0x8, 0x25, 0x1, 0x82, 0x30, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x8, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x4, 0xffff}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x3, 0xd0, 0x3, 0x40, 0x7}, 0x5f, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f5f00040b100108000004060c000003100b49100ae26459a2219d96c9ee31065fffe1f1227f902781eb06b7d2e82189b786876aff07a17a7b53f5d26f0996ed7cc80cf020313e2b5f799b818a38228029ca0cb2f2e96c5df6c81403100b"], 0x4, [{0x4a, &(0x7f0000000840)=@string={0x4a, 0x3, "4f84df7eb8545c0e58d7298495d43108ce969b99a7c07d298f2c24eb7d535c6063b2de44562161c0c56ac31492b5b5194f7b4be4d2fd646aef17fea9dc9364056118b906c3ca6e4f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180f}}, {0xe4, &(0x7f00000008c0)=@string={0xe4, 0x3, "354320aed01660b775b92b25950403b8300d16d5dfc985401c1c0271d7360bad818f19cf375b6c8df3ea5be79aa9f20f799e89039a95dc4f7743f4c1894048431df23d440cffbe6ad38788804337738e3917e9a4dddf9f69d401118555a7d7b6afabde7d1767281d9c997aa0ed50b382d7dbb3f5191e019ca83436b58201f553da25d1e3a8abd3380ac3dbdf29cab28e9a5435fc15f3580b7b6ddcbb7ca3f805292c0c311ac218f1ae3e7ac1c5f0fffa344ba728feb0a51c9127d72496aad438896d60fe40f6b9c91ec2d3c2bc268e29d55705aef754aad32e2a32a483e90ca18345"}}, {0x5d, &(0x7f00000009c0)=@string={0x5d, 0x3, "7819af81ed6eae41f322433c661555bd67770e012f09162dc6c19bd61a08cd13a94ce838b837f2aec3aa59d41e8675324c6af2a12229e6fd67c4c76f0838852489646a225ec6325e68e147467666882af7ffad635d915f97e6a26f"}}]}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x3, {0x0, 0x1}, 0x1}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r9 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f00000000c0)=0x40, 0x0, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x29a041265819a3f7}, 0x20000000) 1.210263965s ago: executing program 1 (id=2086): syz_emit_ethernet(0xe1, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x0, 0x4, 0x3, 0x2e, 0x0, 0x65, 0x0, 0xba, 0x6, 0x0, @broadcast, @private=0xa010102, {[@end, @lsrr={0x83, 0x0, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @loopback, @multicast1, @multicast2]}, @rr={0x7, 0x0, 0x8f, [@remote, @multicast2, @remote, @multicast2, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}]}, @end, @ssrr={0x89, 0x0, 0x51, [@multicast1, @broadcast, @empty, @multicast2, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_prespec={0x44, 0x0, 0x37, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @timestamp_addr={0x44, 0x0, 0x65, 0x1, 0x6, [{@private=0xa010101, 0x80}, {@private=0xa010101, 0x6}, {@multicast2, 0x7}, {@multicast2, 0x4000}]}]}}, @payload_named={{{{{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xa1e, 0x0, 0x0, 0x0, 0x3, 0x2, 0x58f, 0xe, 0x2, 0x4e23, 0x4e24}, 0x3}, 0x2, 0x101}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) 1.209140846s ago: executing program 1 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="fd002e010a0002009eaaaa"], 0x28}, 0x1, 0x60, 0x0, 0x4000094}, 0x44) 1.208821444s ago: executing program 1 (id=2090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)}) close(r5) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r9, 0x3a}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7df8184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x12f}], 0x5}, 0x8bb3a321efc09a) 1.100534264s ago: executing program 0 (id=2092): madvise(&(0x7f0000ae7000/0x4000)=nil, 0x4000, 0xd) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/ipc\x00') (fail_nth: 14) 1.100295697s ago: executing program 1 (id=2093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x6}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) 849.486679ms ago: executing program 1 (id=2094): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000013140100"], 0xfdb0}}, 0x8000) madvise(&(0x7f0000ae7000/0x4000)=nil, 0x4000, 0xd) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000280)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') 360.294149ms ago: executing program 3 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000040000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 360.122104ms ago: executing program 3 (id=2097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0xe703000000000000}, 0x200040b4) 298.09986ms ago: executing program 3 (id=2098): mkdir(0x0, 0x0) chdir(0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000a00)=ANY=[@ANYRES64=r1]) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r4, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) read$FUSE(r3, &(0x7f0000008340)={0x2020}, 0x206f) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 290.654467ms ago: executing program 3 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010003c004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 239.955945ms ago: executing program 0 (id=2100): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xc}}], 0x18, 0x7800}, 0x8050) 239.839314ms ago: executing program 0 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000400200fffc08000300", @ANYRES32=r1, @ANYBLOB="0c009900d308000079000000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 170.070171ms ago: executing program 3 (id=2102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="44564c98f6331b29519f7aca6019c047f8c298dbe6431f7dc3fc2886cd0a0707d5d2248245e0d08e36bb68f86973d5e58c77064456e7d10aa9b95e62823bcf78fd954e1dd63a17f9b25e8b2e52a4f0a413083617c5e7c1deee08bcce9903cd55f551e2b96f6a4cc31c271d83f76831ed4997edd42c04dde47b366785c813f3235cd6283188fee2f346744ccde15c488f8dd0f1ea94b6be9301efcc8d8e5c1ad1121f806e35", 0xa5}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="0e7e463f99e00afee201e41976de4ee350f98c2d2b94d9893a101ad616c43afecf59a185b3b8879607449bb41b461c51988d3378d84765999ea4640eadca8fd2ba92afb046e4e0e9e38ac6eaf8b3e9f2d8a821dc626b4740f2792d0cc7225a07fd4f9ef1eb8bc3df494f6e99cdef85f2101db3024c19aaabab2edf64ae09393fdd1240d9e3be946bef7e50f419934749e97d032458485bf5ce1465d010db664bdd0107a2834a376fa654d9056522507b71c1ca273598cf7c0552dfb0f78db678b9a90d405d176f986a62d9992ad97124420652dcda5ad6980aa491", 0xdb}, {&(0x7f0000000500)="2d1a682777de5ff96e3d76887a466d308688561503dee71ccf00189e82bb1b324e30d657ddde79e7b3be340b74bda16f390d56214ef45bc4c6114aef67d082966b8232159c427bc2e62b740077e23051cfda62a1a6caadf7dc70b2924fb2f087e139e18adeefe148c2c8548e50b24fe3a11573aaba5e89bed81a2424a9a69df3b8bdac9f56fcf30bb438591326480db52ac62819c4ca0a057c043c8694bc9331b81b208fecdad62da5f5aba043fbdca6d05ef616abd26473ba503349999f65a6ff3b9c", 0xc3}, {&(0x7f0000000600)="e6aae8e39a126bb269070f81742fa1816ce363f7b79e1771e14b666ff835bef2ae02a2d783da2504333c6e8706ef647538c68b447df6d9dfdd81c0422eebc0b03e5c95a5110739e07663fd44141b85020cb19e5fe18a91b05d32184766441dc0ad80209c560def64748a9c9bf3f37efa617150e5ac7da36192ce7416f2d257b67a23", 0x82}, {&(0x7f00000001c0)="a7c590010a944e76798ae8105c1f2eba01d068cdc4088d6d639072573b54f742c4b2d021250d4d09992b565289b4d125a2066760", 0x34}, {&(0x7f00000006c0)="94bae9533f94bcba1c093d1f85ebd609b638cd8291cd95ee4874ea3d0c48b3fa20ca9e7782929b8348d73baf02b08351a95408c4223bc6449910aef0c56b798bf1a5c6f2b7455c9ddbfa3392534f98d8e4bd5a1cee2deadb5cc71e32d5c30e0cd113208c0d2fc3ad472538e461663d778dac380a0c59ae4d05633ed40d6d7c4b9a46c94833cd327ac3cdebf37324cbaac0320f19f9995263ba76d84abcddafdb461cbd084d442144b3bb90f6d3aead", 0xaf}, {&(0x7f00000002c0)="6c52587cfd25ef35bde6f22b0256440034db12d109ba478516ce3a03f2b61d44ae311050bce25dc60152532f25fc75ed57", 0x31}, {&(0x7f0000000780)="9996b634483d99544d5ea27141778f263c6d95c580cd026f56e4a4e678a43d0648e8dd9a60a8d69a7215d1e3ae441805a507a983d9bfb5f06e091e537b484477f809efbf571a8edb23159cc7944c6f5f024e16988a2b37e4e965db8743e90ce4041bd2eac2fed36780ec36ab0450b08f5f80c184a1d1850b0c44773bba4d", 0x7e}], 0x7, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000940)="2dbbee1e66c35d6d5199725f67277ab4f6c3e17dec76252841", 0x19}, {0x0}, {&(0x7f0000000cc0)="3f2e9ee7ba1ba5cdfb6e7314df9acc33a99c78d556ab713488ed0b26f101fab951c1aa88b01014c010f8736e3a9010927dcc0809652363143e8aa2550fe9db5283326669c7d2419534d2e6622929c3ac80984016058fec7e0deb08fa58fc4d908c6c0b4379d9a2234ffea0a11c87c068615d56ab4e224c212885d1e071f4073c2aea7dd837aa851ee237daf839", 0x8d}, {&(0x7f0000000dc0)}, {&(0x7f0000000e80)="60c6af273e57adfedd6e2be36775935c71020f2281ea299332d13174f8ad2928b5d73df8244b0cd4488915dd2480abe7caa04e850c7a3eb0371388ed953eedfd4459a5ba796ddbd08a8fab2dd44e34d3b06520e99aad8eca5b5b3784c0ac10a1249f7cf26fe8f2", 0x67}, {&(0x7f0000000f00)="9d9a4f3d56583b851ed6f25659393c48d66d68962a05a9d4b81ad5e64fddc474abd09c55dc5a44f1fb491961c605b99d6f1470b14339b51b8996040cb286cebb851500023aa6c3e5fd5c5b0e99d7f6a285cad831661dd97732a2eccc810bd556ee6379c451ac26cdd54643d3082250200d6cce7ca93d6efd879c3ebe85ed0e0800012a42ea19e981aa558b65e39bdb4efa9d35c7a648b9a204", 0x99}], 0x6}}], 0x3, 0x24040801) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 169.872431ms ago: executing program 0 (id=2103): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="14000000100035", 0x7}], 0x1}, 0x200e4800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 120.229894ms ago: executing program 0 (id=2104): unshare(0x66000080) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x129042, 0x10b) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x40000002}) (async) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x7, 0x3ff, 0x7]}, &(0x7f00000001c0)=0x44) 50.532824ms ago: executing program 3 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x2000000000000003}]}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa680000) 302.31µs ago: executing program 1 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="6a7ae7970e2d55c86416f69732d0ab64a90b7171abf880e1ce6ad92088b33188b3b71c23a5513682f1c46041eeb6110d43ec0b9772a513add3fc31a04a055954595e0864a7a17e2ac08e11387509224ae5fa8f55d9e93d184bc8722d50317fc30708fd05"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0xffffffffffffff9e) 0s ago: executing program 0 (id=2107): openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'pimreg\x00', 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') pread64(r6, &(0x7f0000002c00)=""/4082, 0xff2, 0x7fffffff) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x800, 0x10001, 0x200000000000, 0xd, 0x0, 0xfc, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r5, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x400c, 0x9000008, 0x533, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x7ff}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r9, @ANYBLOB="003000000000000014001a80100004800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r9, @ANYBLOB="003000000000000014001a80100004800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x38) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x38) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) kernel console output (not intermixed with test programs): 7fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.763393][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.763403][T10673] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 162.763428][T10673] [ 163.036316][ T40] audit: type=1400 audit(1773696156.455:1015): avc: denied { create } for pid=10681 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.057118][ T40] audit: type=1400 audit(1773696156.475:1016): avc: denied { ioctl } for pid=10681 comm="syz.2.1708" path="socket:[42619]" dev="sockfs" ino=42619 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.115283][ T40] audit: type=1400 audit(1773696156.535:1017): avc: denied { create } for pid=10683 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.124803][ T40] audit: type=1400 audit(1773696156.545:1018): avc: denied { write } for pid=10683 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.180399][T10686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2307790675 (73849301600 ns) > initial count (32142752608 ns). Using initial count to start timer. [ 163.193850][T10686] kvm: kvm [10685]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 163.197960][T10686] kvm: kvm [10685]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 163.239729][T10690] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.438699][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 163.441585][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 163.445922][T10694] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 163.686414][T10725] FAULT_INJECTION: forcing a failure. [ 163.686414][T10725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.691270][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.2.1723 Not tainted syzkaller #0 PREEMPT(full) [ 163.691286][T10725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.691293][T10725] Call Trace: [ 163.691297][T10725] [ 163.691302][T10725] dump_stack_lvl+0x100/0x190 [ 163.691323][T10725] should_fail_ex.cold+0x5/0xa [ 163.691337][T10725] ? prepare_alloc_pages+0x16d/0x5f0 [ 163.691351][T10725] should_fail_alloc_page+0xeb/0x140 [ 163.691363][T10725] prepare_alloc_pages+0x1f0/0x5f0 [ 163.691377][T10725] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 163.691394][T10725] ? stack_trace_consume_entry+0x131/0x170 [ 163.691410][T10725] ? stack_depot_save_flags+0x27/0x9d0 [ 163.691425][T10725] ? kasan_save_stack+0x3f/0x50 [ 163.691440][T10725] ? kasan_save_stack+0x30/0x50 [ 163.691456][T10725] ? kasan_save_track+0x14/0x30 [ 163.691471][T10725] ? __kasan_kmalloc+0xaa/0xb0 [ 163.691486][T10725] ? __kvmalloc_node_noprof+0x360/0xa00 [ 163.691503][T10725] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 163.691520][T10725] ? mmu_topup_memory_caches+0xbc/0x170 [ 163.691532][T10725] ? kvm_mmu_load+0xd6/0x23e0 [ 163.691541][T10725] ? vcpu_run+0x39f4/0x5ca0 [ 163.691552][T10725] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 163.691566][T10725] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.691582][T10725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.691603][T10725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.691625][T10725] ? policy_nodemask+0xed/0x4f0 [ 163.691637][T10725] alloc_pages_mpol+0x1fb/0x550 [ 163.691649][T10725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.691660][T10725] ? __kasan_kmalloc+0xaa/0xb0 [ 163.691679][T10725] alloc_pages_noprof+0x131/0x390 [ 163.691691][T10725] get_free_pages_noprof+0x10/0xb0 [ 163.691709][T10725] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 163.691731][T10725] mmu_topup_memory_caches+0xbc/0x170 [ 163.691744][T10725] kvm_mmu_load+0xd6/0x23e0 [ 163.691755][T10725] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 163.691771][T10725] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 163.691788][T10725] ? __pfx_kvm_mmu_load+0x10/0x10 [ 163.691799][T10725] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 163.691817][T10725] ? kvm_check_and_inject_events+0x961/0x10c0 [ 163.691832][T10725] vcpu_run+0x39f4/0x5ca0 [ 163.691850][T10725] ? __pfx_vcpu_run+0x10/0x10 [ 163.691868][T10725] ? rcu_is_watching+0x12/0xc0 [ 163.691884][T10725] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 163.691897][T10725] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 163.691914][T10725] kvm_vcpu_ioctl+0x730/0x1730 [ 163.691932][T10725] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.691948][T10725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.691965][T10725] ? do_vfs_ioctl+0x226/0x13e0 [ 163.691982][T10725] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.691999][T10725] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.692019][T10725] ? __fget_files+0x215/0x3d0 [ 163.692030][T10725] ? hook_file_ioctl_common+0x146/0x410 [ 163.692052][T10725] ? selinux_file_ioctl+0x139/0x290 [ 163.692067][T10725] ? selinux_file_ioctl+0xb4/0x290 [ 163.692083][T10725] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.692100][T10725] __x64_sys_ioctl+0x18e/0x210 [ 163.692118][T10725] do_syscall_64+0x106/0xf80 [ 163.692133][T10725] ? clear_bhb_loop+0x40/0x90 [ 163.692146][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.692157][T10725] RIP: 0033:0x7fde0f99c799 [ 163.692168][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.692178][T10725] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.692190][T10725] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 163.692197][T10725] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 163.692203][T10725] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.692210][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.692216][T10725] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 163.692230][T10725] [ 163.959251][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'. [ 164.300063][T10753] syzkaller0: entered promiscuous mode [ 164.301917][T10753] syzkaller0: entered allmulticast mode [ 164.358243][T10761] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 164.409285][T10762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1734'. [ 164.958345][T10764] FAULT_INJECTION: forcing a failure. [ 164.958345][T10764] name failslab, interval 1, probability 0, space 0, times 0 [ 164.962611][T10764] CPU: 0 UID: 0 PID: 10764 Comm: syz.2.1735 Not tainted syzkaller #0 PREEMPT(full) [ 164.962627][T10764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.962633][T10764] Call Trace: [ 164.962637][T10764] [ 164.962642][T10764] dump_stack_lvl+0x100/0x190 [ 164.962664][T10764] should_fail_ex.cold+0x5/0xa [ 164.962679][T10764] should_failslab+0xc2/0x120 [ 164.962690][T10764] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 164.962707][T10764] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.962728][T10764] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.962749][T10764] mmu_topup_memory_caches+0x25/0x170 [ 164.962763][T10764] kvm_mmu_load+0xd6/0x23e0 [ 164.962775][T10764] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 164.962790][T10764] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 164.962807][T10764] ? __pfx_kvm_mmu_load+0x10/0x10 [ 164.962818][T10764] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 164.962836][T10764] ? kvm_check_and_inject_events+0x961/0x10c0 [ 164.962849][T10764] ? record_steal_time+0x370/0xbe0 [ 164.962867][T10764] vcpu_run+0x39f4/0x5ca0 [ 164.962885][T10764] ? __pfx_vcpu_run+0x10/0x10 [ 164.962903][T10764] ? rcu_is_watching+0x12/0xc0 [ 164.962919][T10764] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 164.962932][T10764] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 164.962949][T10764] kvm_vcpu_ioctl+0x730/0x1730 [ 164.962967][T10764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.962984][T10764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.963001][T10764] ? do_vfs_ioctl+0x226/0x13e0 [ 164.963018][T10764] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.963035][T10764] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 164.963061][T10764] ? __fget_files+0x215/0x3d0 [ 164.963072][T10764] ? hook_file_ioctl_common+0x146/0x410 [ 164.963093][T10764] ? selinux_file_ioctl+0x139/0x290 [ 164.963108][T10764] ? selinux_file_ioctl+0xb4/0x290 [ 164.963124][T10764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.963141][T10764] __x64_sys_ioctl+0x18e/0x210 [ 164.963159][T10764] do_syscall_64+0x106/0xf80 [ 164.963173][T10764] ? clear_bhb_loop+0x40/0x90 [ 164.963187][T10764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.963199][T10764] RIP: 0033:0x7fde0f99c799 [ 164.963209][T10764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.963220][T10764] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.963232][T10764] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 164.963239][T10764] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 164.963246][T10764] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.963252][T10764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.963258][T10764] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 164.963272][T10764] [ 165.419010][T10761] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 165.486947][T10772] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1738'. [ 165.545437][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 165.545449][ T40] audit: type=1400 audit(1773696158.965:1024): avc: denied { listen } for pid=10776 comm="syz.2.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.545754][T10777] syzkaller0: entered promiscuous mode [ 165.547922][T10778] fuse: Unknown parameter 'ÿ1844674407370955161500000000000000000000007' [ 165.556885][T10777] syzkaller0: entered allmulticast mode [ 165.602148][T10780] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.604522][T10780] FAULT_INJECTION: forcing a failure. [ 165.604522][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 165.609097][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.2.1742 Not tainted syzkaller #0 PREEMPT(full) [ 165.609120][T10780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.609131][T10780] Call Trace: [ 165.609137][T10780] [ 165.609144][T10780] dump_stack_lvl+0x100/0x190 [ 165.609186][T10780] should_fail_ex.cold+0x5/0xa [ 165.609210][T10780] ? kobject_get_path+0xcf/0x2c0 [ 165.609240][T10780] should_failslab+0xc2/0x120 [ 165.609257][T10780] __kmalloc_noprof+0xe0/0x850 [ 165.609288][T10780] kobject_get_path+0xcf/0x2c0 [ 165.609317][T10780] kobject_uevent_env+0x287/0x18b0 [ 165.609347][T10780] ? kobject_put+0xb9/0x640 [ 165.609376][T10780] device_add+0x116e/0x1950 [ 165.609404][T10780] ? __pfx_device_add+0x10/0x10 [ 165.609422][T10780] ? kobject_get+0xbb/0x150 [ 165.609445][T10780] ? software_node_get+0x68/0x90 [ 165.609466][T10780] ? fwnode_handle_get+0x97/0xd0 [ 165.609495][T10780] iommu_mock_device_add+0x7c/0xb0 [ 165.609520][T10780] iommufd_test+0x2f6b/0x6610 [ 165.609542][T10780] ? __lock_acquire+0x4a5/0x2630 [ 165.609562][T10780] ? __pfx_iommufd_test+0x10/0x10 [ 165.609581][T10780] ? tomoyo_path_number_perm+0x188/0x580 [ 165.609610][T10780] ? find_held_lock+0x2b/0x80 [ 165.609661][T10780] ? __might_fault+0xc5/0x140 [ 165.609697][T10780] iommufd_fops_ioctl+0x358/0x520 [ 165.609720][T10780] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 165.609744][T10780] ? __fget_files+0x215/0x3d0 [ 165.609762][T10780] ? hook_file_ioctl_common+0x146/0x410 [ 165.609796][T10780] ? selinux_file_ioctl+0x139/0x290 [ 165.609819][T10780] ? selinux_file_ioctl+0xb4/0x290 [ 165.609844][T10780] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 165.609865][T10780] __x64_sys_ioctl+0x18e/0x210 [ 165.609892][T10780] do_syscall_64+0x106/0xf80 [ 165.609914][T10780] ? clear_bhb_loop+0x40/0x90 [ 165.609936][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.609954][T10780] RIP: 0033:0x7fde0f99c799 [ 165.609969][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.609986][T10780] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.610002][T10780] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 165.610012][T10780] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 165.610019][T10780] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 165.610026][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.610033][T10780] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 165.610048][T10780] [ 165.618433][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 165.669809][T10788] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 165.721246][T10792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1745'. [ 165.741260][ T40] audit: type=1400 audit(1773696159.155:1025): avc: denied { setattr } for pid=10790 comm="syz.2.1747" name="freezer.state" dev="9p" ino=71827961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.755285][T10788] bond14: entered promiscuous mode [ 165.758592][T10788] bond14: entered allmulticast mode [ 165.761257][T10788] 8021q: adding VLAN 0 to HW filter on device bond14 [ 165.825678][T10798] FAULT_INJECTION: forcing a failure. [ 165.825678][T10798] name failslab, interval 1, probability 0, space 0, times 0 [ 165.830886][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.1.1750 Not tainted syzkaller #0 PREEMPT(full) [ 165.830908][T10798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.830919][T10798] Call Trace: [ 165.830925][T10798] [ 165.830932][T10798] dump_stack_lvl+0x100/0x190 [ 165.830964][T10798] should_fail_ex.cold+0x5/0xa [ 165.830988][T10798] should_failslab+0xc2/0x120 [ 165.831005][T10798] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 165.831030][T10798] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.831061][T10798] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.831093][T10798] mmu_topup_memory_caches+0x25/0x170 [ 165.831113][T10798] kvm_mmu_load+0xd6/0x23e0 [ 165.831132][T10798] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 165.831155][T10798] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 165.831181][T10798] ? __pfx_kvm_mmu_load+0x10/0x10 [ 165.831199][T10798] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 165.831226][T10798] ? kvm_check_and_inject_events+0x961/0x10c0 [ 165.831245][T10798] ? record_steal_time+0x370/0xbe0 [ 165.831272][T10798] vcpu_run+0x39f4/0x5ca0 [ 165.831301][T10798] ? __pfx_vcpu_run+0x10/0x10 [ 165.831329][T10798] ? rcu_is_watching+0x12/0xc0 [ 165.831352][T10798] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.831373][T10798] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.831400][T10798] kvm_vcpu_ioctl+0x730/0x1730 [ 165.831426][T10798] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.831452][T10798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.831477][T10798] ? do_vfs_ioctl+0x226/0x13e0 [ 165.831502][T10798] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.831527][T10798] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.831559][T10798] ? __fget_files+0x215/0x3d0 [ 165.831576][T10798] ? hook_file_ioctl_common+0x146/0x410 [ 165.831608][T10798] ? selinux_file_ioctl+0x139/0x290 [ 165.831631][T10798] ? selinux_file_ioctl+0xb4/0x290 [ 165.831660][T10798] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.831684][T10798] __x64_sys_ioctl+0x18e/0x210 [ 165.831711][T10798] do_syscall_64+0x106/0xf80 [ 165.831733][T10798] ? clear_bhb_loop+0x40/0x90 [ 165.831754][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.831771][T10798] RIP: 0033:0x7f4b9c19c799 [ 165.831785][T10798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.831801][T10798] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.831818][T10798] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 165.831830][T10798] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 165.831839][T10798] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 165.831849][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.831860][T10798] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 165.831883][T10798] [ 165.936621][T10805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10805 comm=syz.0.1752 [ 165.978571][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 165.982113][T10804] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1752'. [ 165.998454][T10807] binder: 10806:10807 ioctl 6f2a 0 returned -22 [ 166.063461][T10815] netlink: 'syz.1.1756': attribute type 13 has an invalid length. [ 166.067052][T10815] netlink: 'syz.1.1756': attribute type 13 has an invalid length. [ 166.069730][T10815] FAULT_INJECTION: forcing a failure. [ 166.069730][T10815] name failslab, interval 1, probability 0, space 0, times 0 [ 166.074939][T10815] CPU: 1 UID: 0 PID: 10815 Comm: syz.1.1756 Not tainted syzkaller #0 PREEMPT(full) [ 166.074954][T10815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.074961][T10815] Call Trace: [ 166.074965][T10815] [ 166.074969][T10815] dump_stack_lvl+0x100/0x190 [ 166.074992][T10815] should_fail_ex.cold+0x5/0xa [ 166.075007][T10815] should_failslab+0xc2/0x120 [ 166.075019][T10815] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 166.075035][T10815] ? security_inode_alloc+0x3b/0x2c0 [ 166.075049][T10815] ? lockdep_init_map_type+0x5c/0x250 [ 166.075063][T10815] security_inode_alloc+0x3b/0x2c0 [ 166.075080][T10815] inode_init_always_gfp+0xced/0x1040 [ 166.075095][T10815] alloc_inode+0x8e/0x250 [ 166.075111][T10815] new_inode+0x22/0x1c0 [ 166.075128][T10815] __debugfs_create_file+0x105/0x4f0 [ 166.075144][T10815] debugfs_create_file_full+0x41/0x60 [ 166.075161][T10815] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 166.075174][T10815] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 166.075197][T10815] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 166.075214][T10815] ? alloc_netdev_mqs+0xd7/0x14f0 [ 166.075229][T10815] ? lockdep_init_map_type+0x5c/0x250 [ 166.075242][T10815] ? __pfx_vxlan_setup+0x10/0x10 [ 166.075256][T10815] alloc_netdev_mqs+0x314/0x14f0 [ 166.075273][T10815] rtnl_create_link+0xc13/0xf80 [ 166.075289][T10815] rtnl_newlink+0x13b8/0x2380 [ 166.075308][T10815] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.075321][T10815] ? find_held_lock+0x2b/0x80 [ 166.075335][T10815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 166.075347][T10815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 166.075360][T10815] ? avc_has_perm_noaudit+0x145/0x3b0 [ 166.075383][T10815] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 166.075397][T10815] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 166.075412][T10815] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.075427][T10815] rtnetlink_rcv_msg+0x95e/0xe90 [ 166.075442][T10815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.075461][T10815] ? ref_tracker_free+0x37e/0x6c0 [ 166.075474][T10815] netlink_rcv_skb+0x159/0x420 [ 166.075491][T10815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.075506][T10815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.075527][T10815] ? netlink_deliver_tap+0x1ae/0xcc0 [ 166.075545][T10815] netlink_unicast+0x5aa/0x870 [ 166.075562][T10815] ? __pfx_netlink_unicast+0x10/0x10 [ 166.075583][T10815] netlink_sendmsg+0x8b0/0xda0 [ 166.075602][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.075617][T10815] ? PageHuge+0x170/0x180 [ 166.075636][T10815] ____sys_sendmsg+0x9e1/0xb70 [ 166.075657][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.075674][T10815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.075693][T10815] ? rcu_is_watching+0x12/0xc0 [ 166.075707][T10815] ? ___sys_sendmsg+0x19d/0x1e0 [ 166.075724][T10815] ? kfree+0x2ec/0x6b0 [ 166.075739][T10815] ___sys_sendmsg+0x190/0x1e0 [ 166.075758][T10815] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.075789][T10815] ? __pfx___might_resched+0x10/0x10 [ 166.075805][T10815] __sys_sendmmsg+0x205/0x430 [ 166.075821][T10815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.075839][T10815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.075861][T10815] ? fput+0x79/0x100 [ 166.075874][T10815] ? ksys_write+0x1ac/0x250 [ 166.075892][T10815] ? __pfx_ksys_write+0x10/0x10 [ 166.075911][T10815] __x64_sys_sendmmsg+0x9c/0x100 [ 166.075925][T10815] ? lockdep_hardirqs_on+0x78/0x100 [ 166.075940][T10815] do_syscall_64+0x106/0xf80 [ 166.075954][T10815] ? clear_bhb_loop+0x40/0x90 [ 166.075967][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.075979][T10815] RIP: 0033:0x7f4b9c19c799 [ 166.075989][T10815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.076000][T10815] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.076011][T10815] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 166.076018][T10815] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 166.076024][T10815] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 166.076031][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.076037][T10815] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 166.076052][T10815] [ 166.076067][T10815] debugfs: out of free dentries, can not create file 'netdev@ffff88805fefc620' [ 166.264997][ T40] audit: type=1400 audit(1773696159.675:1026): avc: denied { bind } for pid=10820 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.292220][T10824] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 166.313759][T10824] bond15: entered promiscuous mode [ 166.318050][T10824] bond15: entered allmulticast mode [ 166.320584][T10824] 8021q: adding VLAN 0 to HW filter on device bond15 [ 166.374648][ T40] audit: type=1400 audit(1773696159.785:1027): avc: denied { listen } for pid=10834 comm="syz.1.1763" laddr=::ffff:172.20.20.10 lport=52192 faddr=::ffff:172.20.20.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.383605][ T40] audit: type=1400 audit(1773696159.795:1028): avc: denied { accept } for pid=10834 comm="syz.1.1763" laddr=::ffff:172.20.20.10 lport=52192 faddr=::ffff:172.20.20.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.384545][T10829] netlink: 'syz.0.1761': attribute type 29 has an invalid length. [ 166.411724][T10839] binder: 10838:10839 ioctl 6f2a 0 returned -22 [ 166.414995][T10839] binder: BINDER_SET_CONTEXT_MGR already set [ 166.417526][T10839] binder: 10838:10839 ioctl 4018620d 200000000040 returned -16 [ 166.446235][T10848] FAULT_INJECTION: forcing a failure. [ 166.446235][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 166.450510][T10848] CPU: 3 UID: 0 PID: 10848 Comm: syz.2.1768 Not tainted syzkaller #0 PREEMPT(full) [ 166.450530][T10848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.450539][T10848] Call Trace: [ 166.450544][T10848] [ 166.450551][T10848] dump_stack_lvl+0x100/0x190 [ 166.450581][T10848] should_fail_ex.cold+0x5/0xa [ 166.450597][T10848] should_failslab+0xc2/0x120 [ 166.450609][T10848] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 166.450625][T10848] ? security_file_alloc+0x34/0x2c0 [ 166.450641][T10848] ? trace_kmem_cache_alloc+0xf3/0x120 [ 166.450655][T10848] security_file_alloc+0x34/0x2c0 [ 166.450672][T10848] init_file+0x95/0x480 [ 166.450685][T10848] alloc_empty_file+0x73/0x1c0 [ 166.450700][T10848] dentry_open+0x46/0xd0 [ 166.450713][T10848] ovl_path_open+0x182/0x1d0 [ 166.450727][T10848] ovl_check_d_type_supported+0xa4/0x240 [ 166.450742][T10848] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 166.450757][T10848] ? __pfx_wake_up_var+0x10/0x10 [ 166.450774][T10848] ? __pfx_ovl_check_d_type+0x10/0x10 [ 166.450790][T10848] ? do_raw_spin_unlock+0x145/0x1e0 [ 166.450803][T10848] ? _raw_spin_unlock+0x28/0x50 [ 166.450818][T10848] ovl_fill_super+0xfc4/0x5db0 [ 166.450839][T10848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.450857][T10848] ? lockdep_init_map_type+0x5c/0x250 [ 166.450869][T10848] ? __pfx_ovl_fill_super+0x10/0x10 [ 166.450884][T10848] ? __init_swait_queue_head+0xca/0x150 [ 166.450899][T10848] ? shrinker_register+0x1db/0x240 [ 166.450918][T10848] ? sget_fc+0x801/0xc70 [ 166.450934][T10848] ? __pfx_set_anon_super_fc+0x10/0x10 [ 166.450956][T10848] ? __pfx_ovl_fill_super+0x10/0x10 [ 166.450971][T10848] get_tree_nodev+0xdd/0x190 [ 166.450989][T10848] vfs_get_tree+0x92/0x320 [ 166.451004][T10848] path_mount+0x7d0/0x23d0 [ 166.451021][T10848] ? __pfx_path_mount+0x10/0x10 [ 166.451034][T10848] ? lockdep_hardirqs_on+0x78/0x100 [ 166.451050][T10848] ? putname+0xb1/0x110 [ 166.451061][T10848] ? kmem_cache_free+0x124/0x6a0 [ 166.451080][T10848] ? __x64_sys_mount+0x293/0x310 [ 166.451094][T10848] __x64_sys_mount+0x293/0x310 [ 166.451108][T10848] ? __pfx___x64_sys_mount+0x10/0x10 [ 166.451127][T10848] do_syscall_64+0x106/0xf80 [ 166.451141][T10848] ? clear_bhb_loop+0x40/0x90 [ 166.451154][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.451166][T10848] RIP: 0033:0x7fde0f99c799 [ 166.451176][T10848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.451187][T10848] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.451199][T10848] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 166.451206][T10848] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 166.451212][T10848] RBP: 00007fde1081d090 R08: 0000200000000600 R09: 0000000000000000 [ 166.451219][T10848] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 166.451225][T10848] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 166.451240][T10848] [ 166.610030][ T40] audit: type=1400 audit(1773696160.025:1029): avc: denied { getopt } for pid=10859 comm="syz.2.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.632859][ T40] audit: type=1400 audit(1773696160.045:1030): avc: denied { read write } for pid=10859 comm="syz.2.1773" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.652163][ T40] audit: type=1400 audit(1773696160.045:1031): avc: denied { open } for pid=10859 comm="syz.2.1773" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.674029][T10866] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 166.691459][T10866] bond11: entered promiscuous mode [ 166.694342][T10866] bond11: entered allmulticast mode [ 166.696911][T10866] 8021q: adding VLAN 0 to HW filter on device bond11 [ 166.750733][T10871] binder: 10870:10871 ioctl 6f2a 0 returned -22 [ 166.794534][ T40] audit: type=1400 audit(1773696160.205:1032): avc: denied { mount } for pid=10872 comm="syz.1.1777" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.796938][T10869] FAULT_INJECTION: forcing a failure. [ 166.796938][T10869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.797597][T10873] dummy0: entered allmulticast mode [ 166.801418][ T40] audit: type=1400 audit(1773696160.205:1033): avc: denied { mounton } for pid=10872 comm="syz.1.1777" path="/489/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 166.806503][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.2.1775 Not tainted syzkaller #0 PREEMPT(full) [ 166.806525][T10869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.806535][T10869] Call Trace: [ 166.806541][T10869] [ 166.806549][T10869] dump_stack_lvl+0x100/0x190 [ 166.806579][T10869] should_fail_ex.cold+0x5/0xa [ 166.806599][T10869] ? prepare_alloc_pages+0x16d/0x5f0 [ 166.806620][T10869] should_fail_alloc_page+0xeb/0x140 [ 166.806640][T10869] prepare_alloc_pages+0x1f0/0x5f0 [ 166.806668][T10869] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 166.806692][T10869] ? stack_trace_consume_entry+0x131/0x170 [ 166.806717][T10869] ? stack_depot_save_flags+0x27/0x9d0 [ 166.806735][T10869] ? stack_depot_save_flags+0x27/0x9d0 [ 166.806755][T10869] ? kasan_save_stack+0x3f/0x50 [ 166.806778][T10869] ? kasan_save_stack+0x30/0x50 [ 166.806799][T10869] ? kasan_save_track+0x14/0x30 [ 166.806821][T10869] ? __kasan_kmalloc+0xaa/0xb0 [ 166.806842][T10869] ? __kvmalloc_node_noprof+0x360/0xa00 [ 166.806864][T10869] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 166.806887][T10869] ? mmu_topup_memory_caches+0xbc/0x170 [ 166.806904][T10869] ? kvm_mmu_load+0xd6/0x23e0 [ 166.806919][T10869] ? vcpu_run+0x39f4/0x5ca0 [ 166.806935][T10869] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 166.806954][T10869] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.806976][T10869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.807009][T10869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.807034][T10869] ? policy_nodemask+0xed/0x4f0 [ 166.807052][T10869] alloc_pages_mpol+0x1fb/0x550 [ 166.807070][T10869] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.807087][T10869] ? __kasan_kmalloc+0xaa/0xb0 [ 166.807114][T10869] alloc_pages_noprof+0x131/0x390 [ 166.807133][T10869] get_free_pages_noprof+0x10/0xb0 [ 166.807158][T10869] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 166.807189][T10869] mmu_topup_memory_caches+0xbc/0x170 [ 166.807209][T10869] kvm_mmu_load+0xd6/0x23e0 [ 166.807226][T10869] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 166.807248][T10869] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 166.807271][T10869] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 166.807292][T10869] ? __pfx_kvm_mmu_load+0x10/0x10 [ 166.807309][T10869] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 166.807333][T10869] ? kvm_check_and_inject_events+0x961/0x10c0 [ 166.807352][T10869] ? record_steal_time+0x370/0xbe0 [ 166.807378][T10869] vcpu_run+0x39f4/0x5ca0 [ 166.807405][T10869] ? __pfx_vcpu_run+0x10/0x10 [ 166.807432][T10869] ? rcu_is_watching+0x12/0xc0 [ 166.807455][T10869] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 166.807473][T10869] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 166.807499][T10869] kvm_vcpu_ioctl+0x730/0x1730 [ 166.807524][T10869] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 166.807548][T10869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.807571][T10869] ? do_vfs_ioctl+0x226/0x13e0 [ 166.807596][T10869] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.807618][T10869] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.807648][T10869] ? __fget_files+0x215/0x3d0 [ 166.807684][T10869] ? hook_file_ioctl_common+0x146/0x410 [ 166.807718][T10869] ? selinux_file_ioctl+0x139/0x290 [ 166.807739][T10869] ? selinux_file_ioctl+0xb4/0x290 [ 166.807762][T10869] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 166.807786][T10869] __x64_sys_ioctl+0x18e/0x210 [ 166.807811][T10869] do_syscall_64+0x106/0xf80 [ 166.807831][T10869] ? clear_bhb_loop+0x40/0x90 [ 166.807851][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.807867][T10869] RIP: 0033:0x7fde0f99c799 [ 166.807882][T10869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.807897][T10869] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.807914][T10869] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 166.807925][T10869] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 166.807934][T10869] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.807943][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.807952][T10869] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 166.807975][T10869] [ 166.814151][T10869] kvm: kvm [10868]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 166.831283][T10873] 9p: Could not find request transport: vi‚;‡þä‘'&t¿ïrtio [ 166.833745][T10869] kvm: kvm [10868]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 166.841214][T10872] dummy0: left allmulticast mode [ 167.007935][T10882] binder: BINDER_SET_CONTEXT_MGR already set [ 167.010286][T10882] binder: 10881:10882 ioctl 4018620d 200000000100 returned -16 [ 167.015877][T10882] binder: BINDER_SET_CONTEXT_MGR already set [ 167.018535][T10882] binder: 10881:10882 ioctl 4018620d 200000004a80 returned -16 [ 167.064566][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 167.072631][T10886] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 167.076641][T10886] UDF-fs: Scanning with blocksize 2048 failed [ 167.079349][T10886] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 167.081851][T10886] UDF-fs: Scanning with blocksize 4096 failed [ 167.086981][T10888] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.159609][T10886] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 167.214549][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 167.218343][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.222320][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.226651][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.229924][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.234192][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.237564][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.308831][T10906] fuse: Unknown parameter 'ÿ1844674407370955161500000000000000000000007' [ 167.346602][T10908] --map-set only usable from mangle table [ 167.390933][T10912] FAULT_INJECTION: forcing a failure. [ 167.390933][T10912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.395767][T10912] CPU: 3 UID: 0 PID: 10912 Comm: syz.1.1793 Not tainted syzkaller #0 PREEMPT(full) [ 167.395782][T10912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.395789][T10912] Call Trace: [ 167.395793][T10912] [ 167.395797][T10912] dump_stack_lvl+0x100/0x190 [ 167.395818][T10912] should_fail_ex.cold+0x5/0xa [ 167.395831][T10912] ? prepare_alloc_pages+0x16d/0x5f0 [ 167.395845][T10912] should_fail_alloc_page+0xeb/0x140 [ 167.395857][T10912] prepare_alloc_pages+0x1f0/0x5f0 [ 167.395871][T10912] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 167.395889][T10912] ? page_table_check_set+0x49a/0xa10 [ 167.395906][T10912] ? page_table_check_set+0x49a/0xa10 [ 167.395928][T10912] ? page_table_check_set+0x4a9/0xa10 [ 167.395948][T10912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.395967][T10912] ? rcu_is_watching+0x12/0xc0 [ 167.395985][T10912] ? find_held_lock+0x2b/0x80 [ 167.396000][T10912] ? find_held_lock+0x2b/0x80 [ 167.396013][T10912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.396030][T10912] ? policy_nodemask+0xed/0x4f0 [ 167.396042][T10912] alloc_pages_mpol+0x1fb/0x550 [ 167.396054][T10912] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.396066][T10912] ? find_held_lock+0x2b/0x80 [ 167.396082][T10912] alloc_pages_noprof+0x131/0x390 [ 167.396094][T10912] binder_alloc_new_buf+0x194b/0x3100 [ 167.396117][T10912] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 167.396139][T10912] binder_transaction+0x1f70/0x9ee0 [ 167.396164][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396177][T10912] ? __pfx_binder_transaction+0x10/0x10 [ 167.396196][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396209][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396225][T10912] ? find_held_lock+0x2b/0x80 [ 167.396239][T10912] ? is_bpf_text_address+0x8a/0x1a0 [ 167.396255][T10912] ? is_bpf_text_address+0x8a/0x1a0 [ 167.396273][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396284][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396294][T10912] ? __kernel_text_address+0xd/0x30 [ 167.396307][T10912] ? unwind_get_return_address+0x59/0xa0 [ 167.396326][T10912] ? find_held_lock+0x2b/0x80 [ 167.396340][T10912] ? __might_fault+0xc5/0x140 [ 167.396354][T10912] ? __might_fault+0xc5/0x140 [ 167.396374][T10912] binder_thread_write+0x131f/0x4dd0 [ 167.396392][T10912] ? __x64_sys_ioctl+0xb7/0x210 [ 167.396411][T10912] ? __lock_acquire+0x4a5/0x2630 [ 167.396426][T10912] ? __pfx_binder_thread_write+0x10/0x10 [ 167.396442][T10912] ? find_held_lock+0x2b/0x80 [ 167.396456][T10912] ? binder_debug+0xe0/0x190 [ 167.396469][T10912] ? __pfx_binder_debug+0x10/0x10 [ 167.396483][T10912] ? binder_debug+0xe0/0x190 [ 167.396496][T10912] ? __pfx_binder_debug+0x10/0x10 [ 167.396517][T10912] binder_ioctl+0x2941/0x7610 [ 167.396538][T10912] ? tomoyo_path_number_perm+0x188/0x580 [ 167.396556][T10912] ? __pfx_binder_ioctl+0x10/0x10 [ 167.396573][T10912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.396590][T10912] ? do_vfs_ioctl+0x226/0x13e0 [ 167.396606][T10912] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.396623][T10912] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 167.396643][T10912] ? hook_file_ioctl_common+0x146/0x410 [ 167.396664][T10912] ? selinux_file_ioctl+0x139/0x290 [ 167.396679][T10912] ? selinux_file_ioctl+0xb4/0x290 [ 167.396695][T10912] ? __pfx_binder_ioctl+0x10/0x10 [ 167.396712][T10912] __x64_sys_ioctl+0x18e/0x210 [ 167.396729][T10912] do_syscall_64+0x106/0xf80 [ 167.396743][T10912] ? clear_bhb_loop+0x40/0x90 [ 167.396757][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.396769][T10912] RIP: 0033:0x7f4b9c19c799 [ 167.396779][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.396790][T10912] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.396801][T10912] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 167.396808][T10912] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 167.396815][T10912] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 167.396821][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.396828][T10912] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 167.396841][T10912] [ 167.446937][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 167.543319][ T9] usbtmc 8-1:16.0: can't read capabilities [ 167.650102][ T39] usb 8-1: USB disconnect, device number 19 [ 167.804384][T10935] fuse: Unknown parameter 'ÿ1844674407370955161500000000000000000000007' [ 167.847625][T10943] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 167.866091][T10943] bond12: entered promiscuous mode [ 167.867828][T10943] bond12: entered allmulticast mode [ 167.869708][T10943] 8021q: adding VLAN 0 to HW filter on device bond12 [ 167.874282][T10943] __nla_validate_parse: 6 callbacks suppressed [ 167.874291][T10943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1803'. [ 167.909013][T10948] binder: 10947:10948 ioctl 6f2a 0 returned -22 [ 167.936822][T10950] FAULT_INJECTION: forcing a failure. [ 167.936822][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 167.941576][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.2.1806 Not tainted syzkaller #0 PREEMPT(full) [ 167.941591][T10950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.941599][T10950] Call Trace: [ 167.941604][T10950] [ 167.941610][T10950] dump_stack_lvl+0x100/0x190 [ 167.941662][T10950] should_fail_ex.cold+0x5/0xa [ 167.941684][T10950] ? tomoyo_realpath_from_path+0xb6/0x690 [ 167.941704][T10950] should_failslab+0xc2/0x120 [ 167.941716][T10950] __kmalloc_noprof+0xe0/0x850 [ 167.941735][T10950] tomoyo_realpath_from_path+0xb6/0x690 [ 167.941753][T10950] ? putname+0xb6/0x110 [ 167.941766][T10950] tomoyo_mount_acl+0x334/0x8b0 [ 167.941781][T10950] ? is_bpf_text_address+0x8a/0x1a0 [ 167.941799][T10950] ? bpf_ksym_find+0x128/0x1c0 [ 167.941811][T10950] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 167.941825][T10950] ? kernel_text_address+0x8d/0x100 [ 167.941839][T10950] ? unwind_get_return_address+0x59/0xa0 [ 167.941866][T10950] ? tomoyo_domain+0xb2/0x150 [ 167.941876][T10950] ? tomoyo_profile+0x47/0x60 [ 167.941895][T10950] tomoyo_mount_permission+0x214/0x460 [ 167.941910][T10950] ? tomoyo_mount_permission+0x1f6/0x460 [ 167.941926][T10950] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 167.941949][T10950] security_sb_mount+0xdd/0x270 [ 167.941964][T10950] path_mount+0x158/0x23d0 [ 167.941980][T10950] ? __pfx_path_mount+0x10/0x10 [ 167.941993][T10950] ? lockdep_hardirqs_on+0x78/0x100 [ 167.942009][T10950] ? putname+0xb1/0x110 [ 167.942021][T10950] ? kmem_cache_free+0x124/0x6a0 [ 167.942039][T10950] ? __x64_sys_mount+0x293/0x310 [ 167.942053][T10950] __x64_sys_mount+0x293/0x310 [ 167.942067][T10950] ? __pfx___x64_sys_mount+0x10/0x10 [ 167.942086][T10950] do_syscall_64+0x106/0xf80 [ 167.942099][T10950] ? clear_bhb_loop+0x40/0x90 [ 167.942117][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.942129][T10950] RIP: 0033:0x7fde0f99c799 [ 167.942139][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.942150][T10950] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.942161][T10950] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 167.942168][T10950] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 167.942175][T10950] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.942181][T10950] R10: 0000000000204001 R11: 0000000000000246 R12: 0000000000000002 [ 167.942188][T10950] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 167.942202][T10950] [ 167.942207][T10950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.108380][T10957] syzkaller0: entered promiscuous mode [ 168.110188][T10957] syzkaller0: entered allmulticast mode [ 168.202497][T10963] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 168.205087][T10963] UDF-fs: Scanning with blocksize 2048 failed [ 168.208156][T10963] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 168.211374][T10963] UDF-fs: Scanning with blocksize 4096 failed [ 168.284410][T10963] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 168.288122][T10967] bond0: Device is already in use. [ 168.462973][T10983] binder: 10982:10983 ioctl 6f2a 0 returned -22 [ 168.468691][T10983] binder_alloc: 10982: binder_alloc_buf, no vma [ 168.636388][T10989] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 168.640068][T10989] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 168.643802][T10989] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 168.792520][T11001] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1827'. [ 168.796380][T11001] netlink: 'syz.2.1827': attribute type 3 has an invalid length. [ 168.798930][T11001] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1827'. [ 168.825842][T11003] syzkaller0: entered promiscuous mode [ 168.894697][ T5934] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 168.960577][T11007] xt_hashlimit: size too large, truncated to 1048576 [ 168.981359][T11006] FAULT_INJECTION: forcing a failure. [ 168.981359][T11006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.987417][T11006] CPU: 0 UID: 0 PID: 11006 Comm: syz.0.1830 Not tainted syzkaller #0 PREEMPT(full) [ 168.987438][T11006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.987445][T11006] Call Trace: [ 168.987450][T11006] [ 168.987455][T11006] dump_stack_lvl+0x100/0x190 [ 168.987480][T11006] should_fail_ex.cold+0x5/0xa [ 168.987494][T11006] ? prepare_alloc_pages+0x16d/0x5f0 [ 168.987508][T11006] should_fail_alloc_page+0xeb/0x140 [ 168.987607][T11006] prepare_alloc_pages+0x1f0/0x5f0 [ 168.987623][T11006] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 168.987641][T11006] ? stack_trace_consume_entry+0x131/0x170 [ 168.987672][T11006] ? stack_depot_save_flags+0x27/0x9d0 [ 168.987685][T11006] ? stack_depot_save_flags+0x27/0x9d0 [ 168.987699][T11006] ? kasan_save_stack+0x3f/0x50 [ 168.987716][T11006] ? kasan_save_stack+0x30/0x50 [ 168.987732][T11006] ? kasan_save_track+0x14/0x30 [ 168.987749][T11006] ? __kasan_kmalloc+0xaa/0xb0 [ 168.987765][T11006] ? __kvmalloc_node_noprof+0x360/0xa00 [ 168.987782][T11006] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 168.987801][T11006] ? mmu_topup_memory_caches+0xbc/0x170 [ 168.987813][T11006] ? kvm_mmu_load+0xd6/0x23e0 [ 168.987824][T11006] ? vcpu_run+0x39f4/0x5ca0 [ 168.987836][T11006] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 168.987850][T11006] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.987867][T11006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.987889][T11006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.987907][T11006] ? policy_nodemask+0xed/0x4f0 [ 168.987920][T11006] alloc_pages_mpol+0x1fb/0x550 [ 168.987933][T11006] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.987944][T11006] ? __kasan_kmalloc+0xaa/0xb0 [ 168.987964][T11006] alloc_pages_noprof+0x131/0x390 [ 168.987977][T11006] get_free_pages_noprof+0x10/0xb0 [ 168.987996][T11006] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 168.988019][T11006] mmu_topup_memory_caches+0xbc/0x170 [ 168.988033][T11006] kvm_mmu_load+0xd6/0x23e0 [ 168.988045][T11006] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 168.988061][T11006] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 168.988079][T11006] ? __pfx_kvm_mmu_load+0x10/0x10 [ 168.988091][T11006] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 168.988114][T11006] ? kvm_check_and_inject_events+0x961/0x10c0 [ 168.988130][T11006] vcpu_run+0x39f4/0x5ca0 [ 168.988149][T11006] ? __pfx_vcpu_run+0x10/0x10 [ 168.988168][T11006] ? rcu_is_watching+0x12/0xc0 [ 168.988184][T11006] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 168.988198][T11006] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 168.988216][T11006] kvm_vcpu_ioctl+0x730/0x1730 [ 168.988235][T11006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.988252][T11006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.988269][T11006] ? do_vfs_ioctl+0x226/0x13e0 [ 168.988287][T11006] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.988305][T11006] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 168.988327][T11006] ? __fget_files+0x215/0x3d0 [ 168.988339][T11006] ? hook_file_ioctl_common+0x146/0x410 [ 168.988362][T11006] ? selinux_file_ioctl+0x139/0x290 [ 168.988377][T11006] ? selinux_file_ioctl+0xb4/0x290 [ 168.988394][T11006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.988412][T11006] __x64_sys_ioctl+0x18e/0x210 [ 168.988431][T11006] do_syscall_64+0x106/0xf80 [ 168.988446][T11006] ? clear_bhb_loop+0x40/0x90 [ 168.988461][T11006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.988473][T11006] RIP: 0033:0x7f4d5799c799 [ 168.988483][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.988495][T11006] RSP: 002b:00007f4d5879d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.988506][T11006] RAX: ffffffffffffffda RBX: 00007f4d57c15fa0 RCX: 00007f4d5799c799 [ 168.988516][T11006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 168.988526][T11006] RBP: 00007f4d5879d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.988537][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.988549][T11006] R13: 00007f4d57c16038 R14: 00007f4d57c15fa0 R15: 00007ffdeb397ee8 [ 168.988573][T11006] [ 169.044574][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 169.163983][ T5934] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.168458][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.172688][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.177718][ T5934] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.183306][ T5934] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.187264][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.323569][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 169.328596][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 169.406718][ T5934] usb 6-1: GET_CAPABILITIES returned 0 [ 169.409236][ T5934] usbtmc 6-1:16.0: can't read capabilities [ 169.422413][T11020] SET target dimension over the limit! [ 169.553185][T11022] fuse: Unknown parameter 'ÿ1844674407370955161500000000000000000000007' [ 169.570533][T11024] bond14: entered promiscuous mode [ 169.572710][T11024] bond14: entered allmulticast mode [ 169.578418][T11024] 8021q: adding VLAN 0 to HW filter on device bond14 [ 169.584536][T11024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1837'. [ 169.619201][T11029] syzkaller0: entered promiscuous mode [ 169.631515][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 169.818183][T11041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1844'. [ 169.847922][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.851570][T11038] bridge_slave_1: left allmulticast mode [ 169.853989][T11038] bridge_slave_1: left promiscuous mode [ 169.858583][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.867566][T11038] bridge_slave_1: entered promiscuous mode [ 169.870797][T11038] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 169.893232][T11045] syzkaller0: entered promiscuous mode [ 169.895972][T11045] syzkaller0: entered allmulticast mode [ 169.997714][T11049] bond15: entered promiscuous mode [ 169.999751][T11049] bond15: entered allmulticast mode [ 170.001965][T11049] 8021q: adding VLAN 0 to HW filter on device bond15 [ 170.018063][T11049] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1847'. [ 170.058794][T11055] syzkaller0: entered promiscuous mode [ 170.075961][T11058] FAULT_INJECTION: forcing a failure. [ 170.075961][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 170.080463][T11058] CPU: 0 UID: 0 PID: 11058 Comm: syz.2.1851 Not tainted syzkaller #0 PREEMPT(full) [ 170.080478][T11058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.080485][T11058] Call Trace: [ 170.080489][T11058] [ 170.080497][T11058] dump_stack_lvl+0x100/0x190 [ 170.080519][T11058] should_fail_ex.cold+0x5/0xa [ 170.080533][T11058] should_failslab+0xc2/0x120 [ 170.080545][T11058] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 170.080562][T11058] ? cond_bools_copy+0x45/0xf0 [ 170.080573][T11058] ? trace_kmem_cache_alloc+0xf3/0x120 [ 170.080583][T11058] ? __kasan_slab_alloc+0x89/0x90 [ 170.080603][T11058] kmemdup_noprof+0x29/0x60 [ 170.080620][T11058] cond_bools_copy+0x45/0xf0 [ 170.080631][T11058] hashtab_duplicate+0x24a/0x5c0 [ 170.080646][T11058] ? __pfx_cond_bools_copy+0x10/0x10 [ 170.080659][T11058] ? __pfx_cond_bools_destroy+0x10/0x10 [ 170.080671][T11058] cond_policydb_dup+0x155/0x750 [ 170.080686][T11058] ? __asan_memcpy+0x3c/0x60 [ 170.080705][T11058] security_set_bools+0x13f/0x6c0 [ 170.080725][T11058] ? sel_commit_bools_write+0x25b/0x420 [ 170.080739][T11058] sel_commit_bools_write+0x36d/0x420 [ 170.080752][T11058] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 170.080769][T11058] vfs_write+0x2aa/0x1070 [ 170.080787][T11058] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 170.080801][T11058] ? __pfx_vfs_write+0x10/0x10 [ 170.080818][T11058] ? __fget_files+0x215/0x3d0 [ 170.080833][T11058] ? __fget_files+0x21f/0x3d0 [ 170.080848][T11058] ksys_write+0x12a/0x250 [ 170.080865][T11058] ? __pfx_ksys_write+0x10/0x10 [ 170.080889][T11058] do_syscall_64+0x106/0xf80 [ 170.080903][T11058] ? clear_bhb_loop+0x40/0x90 [ 170.080917][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.080928][T11058] RIP: 0033:0x7fde0f99c799 [ 170.080943][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.080953][T11058] RSP: 002b:00007fde1081d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.080964][T11058] RAX: ffffffffffffffda RBX: 00007fde0fc15fa0 RCX: 00007fde0f99c799 [ 170.080971][T11058] RDX: 000000000000001e RSI: 00002000000018c0 RDI: 0000000000000003 [ 170.080978][T11058] RBP: 00007fde1081d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.080984][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.080990][T11058] R13: 00007fde0fc16038 R14: 00007fde0fc15fa0 R15: 00007ffdea3069b8 [ 170.081004][T11058] [ 170.187737][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 170.419031][T11073] bond13: entered promiscuous mode [ 170.421373][T11073] bond13: entered allmulticast mode [ 170.423687][T11073] 8021q: adding VLAN 0 to HW filter on device bond13 [ 170.459676][T11081] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 170.466103][T11081] Error validating options; rc = [-22] [ 171.667754][ T9] usb 6-1: USB disconnect, device number 14 [ 171.751788][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 171.751799][ T40] audit: type=1400 audit(1773696165.165:1061): avc: denied { read write } for pid=11094 comm="syz.1.1863" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 171.761190][ T40] audit: type=1400 audit(1773696165.175:1062): avc: denied { open } for pid=11094 comm="syz.1.1863" path="/505/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 172.416143][T11099] validate_nla: 3 callbacks suppressed [ 172.416174][T11099] netlink: 'syz.0.1864': attribute type 13 has an invalid length. [ 172.422232][T11099] netlink: 'syz.0.1864': attribute type 13 has an invalid length. [ 173.411746][T11076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.458036][T11111] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 173.494553][T11111] bond16: entered promiscuous mode [ 173.494569][T11111] bond16: entered allmulticast mode [ 173.494753][T11111] 8021q: adding VLAN 0 to HW filter on device bond16 [ 173.504431][T11111] __nla_validate_parse: 4 callbacks suppressed [ 173.504445][T11111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1868'. [ 173.656827][T11127] FAULT_INJECTION: forcing a failure. [ 173.656827][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 173.660942][T11127] CPU: 2 UID: 0 PID: 11127 Comm: syz.3.1874 Not tainted syzkaller #0 PREEMPT(full) [ 173.660957][T11127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.660964][T11127] Call Trace: [ 173.660969][T11127] [ 173.660974][T11127] dump_stack_lvl+0x100/0x190 [ 173.660995][T11127] should_fail_ex.cold+0x5/0xa [ 173.661010][T11127] should_failslab+0xc2/0x120 [ 173.661022][T11127] __kmalloc_cache_noprof+0x7a/0x6f0 [ 173.661036][T11127] ? binder_alloc_new_buf+0x1988/0x3100 [ 173.661059][T11127] binder_alloc_new_buf+0x1988/0x3100 [ 173.661083][T11127] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 173.661104][T11127] binder_transaction+0x1f70/0x9ee0 [ 173.661130][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661143][T11127] ? __pfx_binder_transaction+0x10/0x10 [ 173.661162][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661175][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661191][T11127] ? find_held_lock+0x2b/0x80 [ 173.661206][T11127] ? is_bpf_text_address+0x8a/0x1a0 [ 173.661222][T11127] ? is_bpf_text_address+0x8a/0x1a0 [ 173.661240][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661250][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661260][T11127] ? __kernel_text_address+0xd/0x30 [ 173.661273][T11127] ? unwind_get_return_address+0x59/0xa0 [ 173.661291][T11127] ? find_held_lock+0x2b/0x80 [ 173.661305][T11127] ? __might_fault+0xc5/0x140 [ 173.661320][T11127] ? __might_fault+0xc5/0x140 [ 173.661340][T11127] binder_thread_write+0x131f/0x4dd0 [ 173.661358][T11127] ? __x64_sys_ioctl+0xb7/0x210 [ 173.661378][T11127] ? __lock_acquire+0x4a5/0x2630 [ 173.661388][T11127] ? __pfx_binder_thread_write+0x10/0x10 [ 173.661405][T11127] ? find_held_lock+0x2b/0x80 [ 173.661418][T11127] ? binder_debug+0xe0/0x190 [ 173.661432][T11127] ? __pfx_binder_debug+0x10/0x10 [ 173.661446][T11127] ? binder_debug+0xe0/0x190 [ 173.661460][T11127] ? __pfx_binder_debug+0x10/0x10 [ 173.661481][T11127] binder_ioctl+0x2941/0x7610 [ 173.661501][T11127] ? tomoyo_path_number_perm+0x188/0x580 [ 173.661519][T11127] ? __pfx_binder_ioctl+0x10/0x10 [ 173.661537][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.661558][T11127] ? do_vfs_ioctl+0x226/0x13e0 [ 173.661574][T11127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.661618][T11127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 173.661639][T11127] ? hook_file_ioctl_common+0x146/0x410 [ 173.661661][T11127] ? selinux_file_ioctl+0x139/0x290 [ 173.661676][T11127] ? selinux_file_ioctl+0xb4/0x290 [ 173.661691][T11127] ? __pfx_binder_ioctl+0x10/0x10 [ 173.661708][T11127] __x64_sys_ioctl+0x18e/0x210 [ 173.661726][T11127] do_syscall_64+0x106/0xf80 [ 173.661740][T11127] ? clear_bhb_loop+0x40/0x90 [ 173.661753][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.661765][T11127] RIP: 0033:0x7f2c3239c799 [ 173.661775][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.661786][T11127] RSP: 002b:00007f2c33321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.661797][T11127] RAX: ffffffffffffffda RBX: 00007f2c32615fa0 RCX: 00007f2c3239c799 [ 173.661804][T11127] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 173.661810][T11127] RBP: 00007f2c33321090 R08: 0000000000000000 R09: 0000000000000000 [ 173.661816][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.661823][T11127] R13: 00007f2c32616038 R14: 00007f2c32615fa0 R15: 00007ffcc2db70d8 [ 173.661837][T11127] [ 173.777151][ T60] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 173.814675][ T40] audit: type=1400 audit(1773696167.225:1063): avc: denied { read } for pid=11128 comm="syz.0.1875" path="socket:[44726]" dev="sockfs" ino=44726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 173.904587][ T60] usb 6-1: device descriptor read/64, error -71 [ 173.925630][ T40] audit: type=1400 audit(1773696167.345:1064): avc: denied { block_suspend } for pid=11132 comm="syz.0.1878" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.949281][T11135] FAULT_INJECTION: forcing a failure. [ 173.949281][T11135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.956716][T11135] CPU: 2 UID: 0 PID: 11135 Comm: syz.3.1877 Not tainted syzkaller #0 PREEMPT(full) [ 173.956741][T11135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.956753][T11135] Call Trace: [ 173.956759][T11135] [ 173.956766][T11135] dump_stack_lvl+0x100/0x190 [ 173.956801][T11135] should_fail_ex.cold+0x5/0xa [ 173.956821][T11135] ? prepare_alloc_pages+0x16d/0x5f0 [ 173.956843][T11135] should_fail_alloc_page+0xeb/0x140 [ 173.956864][T11135] prepare_alloc_pages+0x1f0/0x5f0 [ 173.956887][T11135] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 173.956913][T11135] ? stack_trace_consume_entry+0x131/0x170 [ 173.956939][T11135] ? stack_depot_save_flags+0x27/0x9d0 [ 173.956957][T11135] ? stack_depot_save_flags+0x27/0x9d0 [ 173.956978][T11135] ? kasan_save_stack+0x3f/0x50 [ 173.957001][T11135] ? kasan_save_stack+0x30/0x50 [ 173.957025][T11135] ? kasan_save_track+0x14/0x30 [ 173.957048][T11135] ? __kasan_kmalloc+0xaa/0xb0 [ 173.957070][T11135] ? __kvmalloc_node_noprof+0x360/0xa00 [ 173.957095][T11135] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 173.957122][T11135] ? mmu_topup_memory_caches+0xbc/0x170 [ 173.957141][T11135] ? kvm_mmu_load+0xd6/0x23e0 [ 173.957157][T11135] ? vcpu_run+0x39f4/0x5ca0 [ 173.957175][T11135] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 173.957196][T11135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.957219][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.957255][T11135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.957282][T11135] ? policy_nodemask+0xed/0x4f0 [ 173.957302][T11135] alloc_pages_mpol+0x1fb/0x550 [ 173.957322][T11135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.957338][T11135] ? __kasan_kmalloc+0xaa/0xb0 [ 173.957365][T11135] alloc_pages_noprof+0x131/0x390 [ 173.957383][T11135] get_free_pages_noprof+0x10/0xb0 [ 173.957409][T11135] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 173.957442][T11135] mmu_topup_memory_caches+0xbc/0x170 [ 173.957462][T11135] kvm_mmu_load+0xd6/0x23e0 [ 173.957479][T11135] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 173.957500][T11135] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 173.957528][T11135] ? __pfx_kvm_mmu_load+0x10/0x10 [ 173.957545][T11135] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 173.957610][T11135] ? kvm_check_and_inject_events+0x961/0x10c0 [ 173.957631][T11135] ? record_steal_time+0x370/0xbe0 [ 173.957659][T11135] vcpu_run+0x39f4/0x5ca0 [ 173.957689][T11135] ? __pfx_vcpu_run+0x10/0x10 [ 173.957733][T11135] ? rcu_is_watching+0x12/0xc0 [ 173.957760][T11135] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 173.957782][T11135] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 173.957810][T11135] kvm_vcpu_ioctl+0x730/0x1730 [ 173.957838][T11135] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.957864][T11135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.957890][T11135] ? do_vfs_ioctl+0x226/0x13e0 [ 173.957916][T11135] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.957942][T11135] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 173.957976][T11135] ? __fget_files+0x215/0x3d0 [ 173.957994][T11135] ? hook_file_ioctl_common+0x146/0x410 [ 173.958029][T11135] ? selinux_file_ioctl+0x139/0x290 [ 173.958052][T11135] ? selinux_file_ioctl+0xb4/0x290 [ 173.958077][T11135] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.958105][T11135] __x64_sys_ioctl+0x18e/0x210 [ 173.958133][T11135] do_syscall_64+0x106/0xf80 [ 173.958159][T11135] ? clear_bhb_loop+0x40/0x90 [ 173.958181][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.958199][T11135] RIP: 0033:0x7f2c3239c799 [ 173.958215][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.958231][T11135] RSP: 002b:00007f2c33321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.958248][T11135] RAX: ffffffffffffffda RBX: 00007f2c32615fa0 RCX: 00007f2c3239c799 [ 173.958258][T11135] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 173.958268][T11135] RBP: 00007f2c33321090 R08: 0000000000000000 R09: 0000000000000000 [ 173.958277][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.958286][T11135] R13: 00007f2c32616038 R14: 00007f2c32615fa0 R15: 00007ffcc2db70d8 [ 173.958310][T11135] [ 173.964545][ T5934] delete_channel: no stack [ 174.089023][ T40] audit: type=1400 audit(1773696167.505:1065): avc: denied { wake_alarm } for pid=11139 comm="syz.0.1880" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.144620][ T60] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 174.274577][ T60] usb 6-1: device descriptor read/64, error -71 [ 174.386030][ T60] usb usb6-port1: attempt power cycle [ 174.724599][ T60] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 174.755316][ T60] usb 6-1: device descriptor read/8, error -71 [ 174.994572][ T60] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 175.015324][ T60] usb 6-1: device descriptor read/8, error -71 [ 175.116159][ T40] audit: type=1400 audit(1773696168.535:1066): avc: denied { execute } for pid=11168 comm="syz.3.1892" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 175.127262][ T60] usb usb6-port1: unable to enumerate USB device [ 175.228083][ T40] audit: type=1400 audit(1773696168.645:1067): avc: denied { ioctl } for pid=11186 comm="syz.0.1893" path="socket:[46766]" dev="sockfs" ino=46766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.236356][ T40] audit: type=1400 audit(1773696168.645:1068): avc: denied { write } for pid=11186 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.435226][T11194] syzkaller0: entered promiscuous mode [ 175.437097][T11194] syzkaller0: entered allmulticast mode [ 175.484582][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 175.572315][ T40] audit: type=1400 audit(1773696168.985:1069): avc: denied { write } for pid=11195 comm="syz.0.1897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.605950][T11199] FAULT_INJECTION: forcing a failure. [ 175.605950][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 175.611833][T11199] CPU: 2 UID: 0 PID: 11199 Comm: syz.0.1898 Not tainted syzkaller #0 PREEMPT(full) [ 175.611856][T11199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.611867][T11199] Call Trace: [ 175.611875][T11199] [ 175.611883][T11199] dump_stack_lvl+0x100/0x190 [ 175.611918][T11199] should_fail_ex.cold+0x5/0xa [ 175.611943][T11199] should_failslab+0xc2/0x120 [ 175.611961][T11199] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 175.611987][T11199] ? hashtab_duplicate+0x225/0x5c0 [ 175.612018][T11199] hashtab_duplicate+0x225/0x5c0 [ 175.612043][T11199] ? __pfx_cond_bools_copy+0x10/0x10 [ 175.612066][T11199] ? __pfx_cond_bools_destroy+0x10/0x10 [ 175.612088][T11199] cond_policydb_dup+0x155/0x750 [ 175.612114][T11199] ? __asan_memcpy+0x3c/0x60 [ 175.612141][T11199] security_set_bools+0x13f/0x6c0 [ 175.612174][T11199] ? sel_commit_bools_write+0x25b/0x420 [ 175.612198][T11199] sel_commit_bools_write+0x36d/0x420 [ 175.612219][T11199] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 175.612248][T11199] vfs_write+0x2aa/0x1070 [ 175.612277][T11199] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 175.612300][T11199] ? __pfx_vfs_write+0x10/0x10 [ 175.612327][T11199] ? __fget_files+0x215/0x3d0 [ 175.612353][T11199] ? __fget_files+0x21f/0x3d0 [ 175.612379][T11199] ksys_write+0x12a/0x250 [ 175.612406][T11199] ? __pfx_ksys_write+0x10/0x10 [ 175.612440][T11199] do_syscall_64+0x106/0xf80 [ 175.612471][T11199] ? clear_bhb_loop+0x40/0x90 [ 175.612494][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.612514][T11199] RIP: 0033:0x7f4d5799c799 [ 175.612530][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.612650][T11199] RSP: 002b:00007f4d5879d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.612669][T11199] RAX: ffffffffffffffda RBX: 00007f4d57c15fa0 RCX: 00007f4d5799c799 [ 175.612680][T11199] RDX: 000000000000001e RSI: 00002000000018c0 RDI: 0000000000000003 [ 175.612692][T11199] RBP: 00007f4d5879d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.612703][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.612713][T11199] R13: 00007f4d57c16038 R14: 00007f4d57c15fa0 R15: 00007ffdeb397ee8 [ 175.612738][T11199] [ 175.635934][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 175.668709][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 175.669669][ T5944] Bluetooth: hci1: command 0x0406 tx timeout [ 175.669704][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.675314][ T9] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 175.716280][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.720124][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.723803][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.727522][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.731714][ T9] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 175.734754][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.739567][ T9] usb 8-1: config 0 descriptor?? [ 175.748753][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 175.757535][T11203] netlink: 'syz.0.1900': attribute type 21 has an invalid length. [ 175.758323][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.760100][T11203] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.768802][ T40] audit: type=1400 audit(1773696169.175:1070): avc: denied { read } for pid=5326 comm="acpid" name="js0" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.781032][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.816534][ T5942] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.824923][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.830003][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.832811][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.836462][ T5326] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.946618][T11184] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.956109][T11184] netlink: 'syz.3.1892': attribute type 5 has an invalid length. [ 176.075944][T11228] FAULT_INJECTION: forcing a failure. [ 176.075944][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 176.080171][T11228] CPU: 3 UID: 0 PID: 11228 Comm: syz.0.1906 Not tainted syzkaller #0 PREEMPT(full) [ 176.080187][T11228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.080194][T11228] Call Trace: [ 176.080199][T11228] [ 176.080204][T11228] dump_stack_lvl+0x100/0x190 [ 176.080225][T11228] should_fail_ex.cold+0x5/0xa [ 176.080240][T11228] ? tomoyo_encode2+0xfb/0x3c0 [ 176.080255][T11228] should_failslab+0xc2/0x120 [ 176.080267][T11228] __kmalloc_noprof+0xe0/0x850 [ 176.080283][T11228] ? d_absolute_path+0x136/0x1b0 [ 176.080302][T11228] tomoyo_encode2+0xfb/0x3c0 [ 176.080319][T11228] tomoyo_encode+0x29/0x50 [ 176.080348][T11228] tomoyo_realpath_from_path+0x18c/0x690 [ 176.080369][T11228] tomoyo_check_open_permission+0x2af/0x3c0 [ 176.080384][T11228] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 176.080398][T11228] ? ovl_path_open+0x182/0x1d0 [ 176.080411][T11228] ? get_tree_nodev+0xdd/0x190 [ 176.080427][T11228] ? vfs_get_tree+0x92/0x320 [ 176.080454][T11228] ? do_raw_spin_lock+0x128/0x260 [ 176.080469][T11228] ? path_get+0x61/0x80 [ 176.080483][T11228] tomoyo_file_open+0x6b/0x90 [ 176.080495][T11228] security_file_open+0xb5/0x1e0 [ 176.080511][T11228] do_dentry_open+0x5aa/0x1660 [ 176.080531][T11228] ? lockdep_init_map_type+0x5c/0x250 [ 176.080545][T11228] vfs_open+0x82/0x3f0 [ 176.080565][T11228] dentry_open+0x71/0xd0 [ 176.080578][T11228] ovl_path_open+0x182/0x1d0 [ 176.080591][T11228] ovl_check_d_type_supported+0xa4/0x240 [ 176.080607][T11228] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 176.080621][T11228] ? __pfx_wake_up_var+0x10/0x10 [ 176.080637][T11228] ? __pfx_ovl_check_d_type+0x10/0x10 [ 176.080654][T11228] ? do_raw_spin_unlock+0x145/0x1e0 [ 176.080667][T11228] ? _raw_spin_unlock+0x28/0x50 [ 176.080681][T11228] ovl_fill_super+0xfc4/0x5db0 [ 176.080702][T11228] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.080720][T11228] ? lockdep_init_map_type+0x5c/0x250 [ 176.080732][T11228] ? __pfx_ovl_fill_super+0x10/0x10 [ 176.080747][T11228] ? __init_swait_queue_head+0xca/0x150 [ 176.080762][T11228] ? shrinker_register+0x1db/0x240 [ 176.080780][T11228] ? sget_fc+0x801/0xc70 [ 176.080797][T11228] ? __pfx_set_anon_super_fc+0x10/0x10 [ 176.080814][T11228] ? __pfx_ovl_fill_super+0x10/0x10 [ 176.080828][T11228] get_tree_nodev+0xdd/0x190 [ 176.080846][T11228] vfs_get_tree+0x92/0x320 [ 176.080862][T11228] path_mount+0x7d0/0x23d0 [ 176.080879][T11228] ? __pfx_path_mount+0x10/0x10 [ 176.080892][T11228] ? lockdep_hardirqs_on+0x78/0x100 [ 176.080908][T11228] ? putname+0xb1/0x110 [ 176.080919][T11228] ? kmem_cache_free+0x124/0x6a0 [ 176.080941][T11228] ? __x64_sys_mount+0x293/0x310 [ 176.080955][T11228] __x64_sys_mount+0x293/0x310 [ 176.080969][T11228] ? __pfx___x64_sys_mount+0x10/0x10 [ 176.080988][T11228] do_syscall_64+0x106/0xf80 [ 176.081001][T11228] ? clear_bhb_loop+0x40/0x90 [ 176.081015][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.081026][T11228] RIP: 0033:0x7f4d5799c799 [ 176.081037][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.081048][T11228] RSP: 002b:00007f4d5879d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.081059][T11228] RAX: ffffffffffffffda RBX: 00007f4d57c15fa0 RCX: 00007f4d5799c799 [ 176.081066][T11228] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 176.081072][T11228] RBP: 00007f4d5879d090 R08: 0000200000000600 R09: 0000000000000000 [ 176.081079][T11228] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 176.081086][T11228] R13: 00007f4d57c16038 R14: 00007f4d57c15fa0 R15: 00007ffdeb397ee8 [ 176.081100][T11228] [ 176.081129][T11228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.199628][T11228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.230281][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 176.253270][T11233] syzkaller0: entered promiscuous mode [ 176.277266][T11235] kernel read not supported for file /policy (pid: 11235 comm: syz.0.1909) [ 176.419926][T11244] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1913'. [ 176.530967][T11254] binder_alloc: 11253: binder_alloc_buf, no vma [ 176.565656][T11258] FAULT_INJECTION: forcing a failure. [ 176.565656][T11258] name failslab, interval 1, probability 0, space 0, times 0 [ 176.577150][T11258] CPU: 3 UID: 0 PID: 11258 Comm: syz.1.1916 Not tainted syzkaller #0 PREEMPT(full) [ 176.577168][T11258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.577176][T11258] Call Trace: [ 176.577180][T11258] [ 176.577186][T11258] dump_stack_lvl+0x100/0x190 [ 176.577208][T11258] should_fail_ex.cold+0x5/0xa [ 176.577225][T11258] should_failslab+0xc2/0x120 [ 176.577243][T11258] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 176.577267][T11258] ? __d_alloc+0x34/0xa80 [ 176.577294][T11258] __d_alloc+0x34/0xa80 [ 176.577315][T11258] d_alloc_parallel+0x111/0x14e0 [ 176.577344][T11258] ? find_held_lock+0x2b/0x80 [ 176.577364][T11258] ? __d_lookup+0x25c/0x4a0 [ 176.577388][T11258] ? __pfx_d_alloc_parallel+0x10/0x10 [ 176.577417][T11258] ? __d_lookup+0x266/0x4a0 [ 176.577447][T11258] lookup_open.isra.0+0x57c/0x11b0 [ 176.577479][T11258] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 176.577518][T11258] ? mnt_get_write_access+0x1e9/0x2f0 [ 176.577544][T11258] path_openat+0xa98/0x31a0 [ 176.577591][T11258] ? __pfx_path_openat+0x10/0x10 [ 176.577616][T11258] do_file_open+0x20e/0x430 [ 176.577635][T11258] ? __pfx_do_file_open+0x10/0x10 [ 176.577660][T11258] ? __pfx_kfree_link+0x10/0x10 [ 176.577690][T11258] ? alloc_fd+0x476/0x790 [ 176.577709][T11258] ? do_getname+0x191/0x390 [ 176.577731][T11258] do_sys_openat2+0x10d/0x1e0 [ 176.577751][T11258] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.577768][T11258] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.577794][T11258] ? __fget_files+0x21f/0x3d0 [ 176.577816][T11258] __x64_sys_openat+0x12d/0x210 [ 176.577838][T11258] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.577858][T11258] ? ksys_write+0x1ac/0x250 [ 176.577891][T11258] do_syscall_64+0x106/0xf80 [ 176.577929][T11258] ? clear_bhb_loop+0x40/0x90 [ 176.577950][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.577967][T11258] RIP: 0033:0x7f4b9c15cfce [ 176.577991][T11258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.578007][T11258] RSP: 002b:00007f4b9cfa9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.578024][T11258] RAX: ffffffffffffffda RBX: 00007f4b9cfaa6c0 RCX: 00007f4b9c15cfce [ 176.578035][T11258] RDX: 0000000000000002 RSI: 00007f4b9cfa9f90 RDI: ffffffffffffff9c [ 176.578045][T11258] RBP: 00007f4b9cfaa090 R08: 0000000000000000 R09: 0000000000000000 [ 176.578056][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.578065][T11258] R13: 00007f4b9c416128 R14: 00007f4b9c416090 R15: 00007ffdad8bc8e8 [ 176.578090][T11258] [ 176.751836][T11263] --map-set only usable from mangle table [ 176.796418][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 176.933546][T11268] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.001616][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 177.005772][T11272] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1923'. [ 177.256983][T11282] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.331245][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 177.331272][ T40] audit: type=1400 audit(1773696170.745:1080): avc: denied { transfer } for pid=11281 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.341256][T11284] binder: 11281:11284 ioctl c0306201 200000000380 returned -14 [ 177.518084][T11290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.716369][ T40] audit: type=1400 audit(1773696171.135:1081): avc: denied { accept } for pid=11300 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.768684][T11302] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 177.781372][T11302] bond14: entered promiscuous mode [ 177.783171][T11302] bond14: entered allmulticast mode [ 177.785382][T11302] 8021q: adding VLAN 0 to HW filter on device bond14 [ 178.135674][ T60] usb 8-1: USB disconnect, device number 20 [ 178.159093][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1938'. [ 178.213103][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 178.214087][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 178.220228][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'. [ 178.237092][T11314] usb 2-1: USB disconnect, device number 2 [ 178.292560][T11320] bond17: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 178.299000][T11320] bond17: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 178.321616][ T40] audit: type=1400 audit(1773696171.735:1082): avc: denied { read append } for pid=11324 comm="syz.1.1945" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.334946][ T40] audit: type=1400 audit(1773696171.735:1083): avc: denied { open } for pid=11324 comm="syz.1.1945" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.342457][ T40] audit: type=1400 audit(1773696171.755:1084): avc: denied { map } for pid=11324 comm="syz.1.1945" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.408014][ T40] audit: type=1400 audit(1773696171.825:1085): avc: denied { getopt } for pid=11338 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.424074][ T40] audit: type=1400 audit(1773696171.825:1086): avc: denied { setattr } for pid=11338 comm="syz.0.1950" name="IEEE-802.15.4-MAC" dev="sockfs" ino=48139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.433528][ T40] audit: type=1400 audit(1773696171.825:1087): avc: denied { setattr } for pid=11338 comm="syz.0.1950" name="misdn" dev="sockfs" ino=48140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 178.442675][ T40] audit: type=1400 audit(1773696171.845:1088): avc: denied { read } for pid=11331 comm="syz.1.1948" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.456133][T11345] binder: BINDER_SET_CONTEXT_MGR already set [ 178.458219][T11345] binder: 11342:11345 ioctl 4018620d 200000000080 returned -16 [ 178.462177][T11345] binder: BINDER_SET_CONTEXT_MGR already set [ 178.464299][T11345] binder: 11342:11345 ioctl 4018620d 200000000040 returned -16 [ 178.499060][T11350] FAULT_INJECTION: forcing a failure. [ 178.499060][T11350] name failslab, interval 1, probability 0, space 0, times 0 [ 178.503245][T11350] CPU: 3 UID: 0 PID: 11350 Comm: syz.0.1955 Not tainted syzkaller #0 PREEMPT(full) [ 178.503261][T11350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.503267][T11350] Call Trace: [ 178.503272][T11350] [ 178.503277][T11350] dump_stack_lvl+0x100/0x190 [ 178.503299][T11350] should_fail_ex.cold+0x5/0xa [ 178.503314][T11350] should_failslab+0xc2/0x120 [ 178.503326][T11350] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 178.503342][T11350] ? security_inode_alloc+0x3b/0x2c0 [ 178.503356][T11350] ? lockdep_init_map_type+0x5c/0x250 [ 178.503370][T11350] security_inode_alloc+0x3b/0x2c0 [ 178.503384][T11350] inode_init_always_gfp+0xced/0x1040 [ 178.503398][T11350] ? __pfx_v9fs_test_new_inode_dotl+0x10/0x10 [ 178.503414][T11350] ? __pfx_v9fs_set_inode_dotl+0x10/0x10 [ 178.503428][T11350] alloc_inode+0x8e/0x250 [ 178.503444][T11350] iget5_locked+0x5f/0xa0 [ 178.503460][T11350] ? __pfx_v9fs_test_new_inode_dotl+0x10/0x10 [ 178.503474][T11350] v9fs_inode_from_fid_dotl+0xda/0x300 [ 178.503490][T11350] v9fs_vfs_lookup+0x374/0x5b0 [ 178.503504][T11350] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 178.503518][T11350] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.503531][T11350] ? _raw_spin_unlock+0x28/0x50 [ 178.503547][T11350] lookup_one_qstr_excl+0x1d1/0x250 [ 178.503566][T11350] ? mnt_get_write_access+0x52/0x2f0 [ 178.503584][T11350] __start_renaming+0x1c9/0x520 [ 178.503602][T11350] filename_renameat2+0x538/0xa60 [ 178.503621][T11350] ? __pfx_filename_renameat2+0x10/0x10 [ 178.503638][T11350] ? __might_fault+0xc5/0x140 [ 178.503661][T11350] ? do_getname+0x191/0x390 [ 178.503676][T11350] __x64_sys_rename+0x81/0xb0 [ 178.503691][T11350] do_syscall_64+0x106/0xf80 [ 178.503705][T11350] ? clear_bhb_loop+0x40/0x90 [ 178.503719][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.503730][T11350] RIP: 0033:0x7f4d5799c799 [ 178.503741][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.503757][T11350] RSP: 002b:00007f4d5879d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 178.503774][T11350] RAX: ffffffffffffffda RBX: 00007f4d57c15fa0 RCX: 00007f4d5799c799 [ 178.503786][T11350] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000100 [ 178.503797][T11350] RBP: 00007f4d5879d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.503807][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.503819][T11350] R13: 00007f4d57c16038 R14: 00007f4d57c15fa0 R15: 00007ffdeb397ee8 [ 178.503840][T11350] [ 178.677384][T11355] syzkaller0: entered promiscuous mode [ 178.679226][T11355] syzkaller0: entered allmulticast mode [ 178.785930][T11359] libceph: secret too big 289 [ 178.789922][T11359] __nla_validate_parse: 8 callbacks suppressed [ 178.789938][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 178.882331][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 178.924030][ T40] audit: type=1400 audit(1773696172.335:1089): avc: denied { connect } for pid=11367 comm="syz.2.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.965831][T11370] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.1964'. [ 179.035830][T11375] syzkaller0: entered promiscuous mode [ 179.038094][T11375] syzkaller0: entered allmulticast mode [ 179.250463][T11390] syzkaller0: entered promiscuous mode [ 179.252308][T11390] syzkaller0: entered allmulticast mode [ 179.266885][T11392] binder: BINDER_SET_CONTEXT_MGR already set [ 179.269615][T11392] binder: 11391:11392 ioctl 4018620d 200000000040 returned -16 [ 179.344667][T11399] loop6: detected capacity change from 0 to 2640 [ 179.348520][ T5935] buffer_io_error: 26 callbacks suppressed [ 179.348534][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.354879][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.358248][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.361377][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.363754][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.366826][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.369339][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.372315][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.377376][ T5935] ldm_validate_partition_table(): Disk read failed. [ 179.379563][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.382022][ T5935] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.384836][ T5935] Dev loop6: unable to read RDB block 0 [ 179.386731][ T5935] loop6: unable to read partition table [ 179.391398][T11399] ldm_validate_partition_table(): Disk read failed. [ 179.394639][T11399] Dev loop6: unable to read RDB block 0 [ 179.397728][T11399] loop6: unable to read partition table [ 179.400470][T11399] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 179.682514][T11416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 180.148094][T11423] binder: BINDER_SET_CONTEXT_MGR already set [ 180.150005][T11423] binder: 11422:11423 ioctl 4018620d 200000000080 returned -16 [ 180.155285][T11423] binder: BINDER_SET_CONTEXT_MGR already set [ 180.157972][T11423] binder: 11422:11423 ioctl 4018620d 200000000040 returned -16 [ 180.228206][T11425] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 180.342503][T11440] FAULT_INJECTION: forcing a failure. [ 180.342503][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 180.347289][T11440] CPU: 2 UID: 0 PID: 11440 Comm: syz.1.1990 Not tainted syzkaller #0 PREEMPT(full) [ 180.347305][T11440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.347312][T11440] Call Trace: [ 180.347317][T11440] [ 180.347321][T11440] dump_stack_lvl+0x100/0x190 [ 180.347344][T11440] should_fail_ex.cold+0x5/0xa [ 180.347358][T11440] should_failslab+0xc2/0x120 [ 180.347370][T11440] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 180.347386][T11440] ? alloc_empty_file_noaccount+0x23/0xd0 [ 180.347404][T11440] alloc_empty_file_noaccount+0x23/0xd0 [ 180.347419][T11440] kernel_tmpfile_open+0x28/0x90 [ 180.347432][T11440] ovl_fill_super+0x112a/0x5db0 [ 180.347453][T11440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.347471][T11440] ? lockdep_init_map_type+0x5c/0x250 [ 180.347483][T11440] ? __pfx_ovl_fill_super+0x10/0x10 [ 180.347503][T11440] ? __init_swait_queue_head+0xca/0x150 [ 180.347519][T11440] ? shrinker_register+0x1db/0x240 [ 180.347537][T11440] ? sget_fc+0x801/0xc70 [ 180.347553][T11440] ? __pfx_set_anon_super_fc+0x10/0x10 [ 180.347570][T11440] ? __pfx_ovl_fill_super+0x10/0x10 [ 180.347584][T11440] get_tree_nodev+0xdd/0x190 [ 180.347613][T11440] vfs_get_tree+0x92/0x320 [ 180.347629][T11440] path_mount+0x7d0/0x23d0 [ 180.347645][T11440] ? __pfx_path_mount+0x10/0x10 [ 180.347658][T11440] ? lockdep_hardirqs_on+0x78/0x100 [ 180.347674][T11440] ? putname+0xb1/0x110 [ 180.347685][T11440] ? kmem_cache_free+0x124/0x6a0 [ 180.347705][T11440] ? __x64_sys_mount+0x293/0x310 [ 180.347718][T11440] __x64_sys_mount+0x293/0x310 [ 180.347733][T11440] ? __pfx___x64_sys_mount+0x10/0x10 [ 180.347751][T11440] do_syscall_64+0x106/0xf80 [ 180.347765][T11440] ? clear_bhb_loop+0x40/0x90 [ 180.347779][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.347790][T11440] RIP: 0033:0x7f4b9c19c799 [ 180.347800][T11440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.347811][T11440] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.347822][T11440] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 180.347829][T11440] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 180.347835][T11440] RBP: 00007f4b9cfcb090 R08: 0000200000000600 R09: 0000000000000000 [ 180.347842][T11440] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 180.347848][T11440] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 180.347863][T11440] [ 180.347868][T11440] overlayfs: upper fs does not support tmpfile. [ 180.435922][T11440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.535226][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 180.571972][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 180.579512][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 180.645465][T11475] mkiss: ax0: crc mode is auto. [ 180.662535][T11480] FAULT_INJECTION: forcing a failure. [ 180.662535][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 180.668345][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.3.2007 Not tainted syzkaller #0 PREEMPT(full) [ 180.668362][T11480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.668369][T11480] Call Trace: [ 180.668374][T11480] [ 180.668379][T11480] dump_stack_lvl+0x100/0x190 [ 180.668402][T11480] should_fail_ex.cold+0x5/0xa [ 180.668416][T11480] should_failslab+0xc2/0x120 [ 180.668428][T11480] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.668442][T11480] ? udf_init_fs_context+0x4b/0x830 [ 180.668461][T11480] udf_init_fs_context+0x4b/0x830 [ 180.668479][T11480] alloc_fs_context+0x60c/0xf40 [ 180.668496][T11480] path_mount+0xdbd/0x23d0 [ 180.668512][T11480] ? __pfx_path_mount+0x10/0x10 [ 180.668525][T11480] ? lockdep_hardirqs_on+0x78/0x100 [ 180.668541][T11480] ? putname+0xb1/0x110 [ 180.668553][T11480] ? kmem_cache_free+0x124/0x6a0 [ 180.668573][T11480] ? __x64_sys_mount+0x293/0x310 [ 180.668586][T11480] __x64_sys_mount+0x293/0x310 [ 180.668601][T11480] ? __pfx___x64_sys_mount+0x10/0x10 [ 180.668619][T11480] do_syscall_64+0x106/0xf80 [ 180.668633][T11480] ? clear_bhb_loop+0x40/0x90 [ 180.668647][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.668659][T11480] RIP: 0033:0x7f2c3239c799 [ 180.668669][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.668680][T11480] RSP: 002b:00007f2c33321028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.668691][T11480] RAX: ffffffffffffffda RBX: 00007f2c32615fa0 RCX: 00007f2c3239c799 [ 180.668698][T11480] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 180.668705][T11480] RBP: 00007f2c33321090 R08: 0000000000000000 R09: 0000000000000000 [ 180.668711][T11480] R10: 0000000000204001 R11: 0000000000000246 R12: 0000000000000002 [ 180.668718][T11480] R13: 00007f2c32616038 R14: 00007f2c32615fa0 R15: 00007ffcc2db70d8 [ 180.668732][T11480] [ 180.746690][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'. [ 180.811016][T11484] syz.2.2009 (11484) used greatest stack depth: 19104 bytes left [ 180.814843][T11489] FAULT_INJECTION: forcing a failure. [ 180.814843][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 180.819671][T11489] CPU: 3 UID: 0 PID: 11489 Comm: syz.0.2010 Not tainted syzkaller #0 PREEMPT(full) [ 180.819687][T11489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.819694][T11489] Call Trace: [ 180.819699][T11489] [ 180.819703][T11489] dump_stack_lvl+0x100/0x190 [ 180.819724][T11489] should_fail_ex.cold+0x5/0xa [ 180.819739][T11489] should_failslab+0xc2/0x120 [ 180.819751][T11489] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 180.819767][T11489] ? proc_alloc_inode+0x25/0x200 [ 180.819780][T11489] ? __pfx_proc_alloc_inode+0x10/0x10 [ 180.819791][T11489] proc_alloc_inode+0x25/0x200 [ 180.819801][T11489] alloc_inode+0x68/0x250 [ 180.819818][T11489] new_inode+0x22/0x1c0 [ 180.819834][T11489] proc_pid_make_inode+0x22/0x160 [ 180.819853][T11489] proc_ns_dir_lookup+0x25b/0x390 [ 180.819873][T11489] lookup_open.isra.0+0x631/0x11b0 [ 180.819893][T11489] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 180.819918][T11489] ? mnt_get_write_access+0x1e9/0x2f0 [ 180.819937][T11489] path_openat+0xa98/0x31a0 [ 180.819953][T11489] ? __pfx_path_openat+0x10/0x10 [ 180.819977][T11489] do_file_open+0x20e/0x430 [ 180.819990][T11489] ? __pfx_do_file_open+0x10/0x10 [ 180.820007][T11489] ? __pfx_kfree_link+0x10/0x10 [ 180.820027][T11489] ? alloc_fd+0x476/0x790 [ 180.820041][T11489] ? do_getname+0x191/0x390 [ 180.820056][T11489] do_sys_openat2+0x10d/0x1e0 [ 180.820071][T11489] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.820090][T11489] __x64_sys_openat+0x12d/0x210 [ 180.820104][T11489] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.820118][T11489] ? xfd_validate_state+0x129/0x190 [ 180.820141][T11489] do_syscall_64+0x106/0xf80 [ 180.820156][T11489] ? clear_bhb_loop+0x40/0x90 [ 180.820169][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.820181][T11489] RIP: 0033:0x7f4d5795cfce [ 180.820191][T11489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.820205][T11489] RSP: 002b:00007f4d5877bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.820221][T11489] RAX: ffffffffffffffda RBX: 00007f4d5877c6c0 RCX: 00007f4d5795cfce [ 180.820231][T11489] RDX: 0000000000000002 RSI: 00007f4d5877bf90 RDI: ffffffffffffff9c [ 180.820240][T11489] RBP: 00007f4d5877c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.820250][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.820260][T11489] R13: 00007f4d57c16128 R14: 00007f4d57c16090 R15: 00007ffdeb397ee8 [ 180.820281][T11489] [ 180.855945][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 180.953451][T11491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.958804][T11491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.962346][T11491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 180.980691][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 181.128735][T11491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.132523][T11491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.136623][T11491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.230692][T11491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.234081][T11491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.237908][T11491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.242318][T11519] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 181.264848][T11519] bond15: entered promiscuous mode [ 181.266683][T11519] bond15: entered allmulticast mode [ 181.268767][T11519] 8021q: adding VLAN 0 to HW filter on device bond15 [ 181.376376][T11491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.379986][T11491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.383569][T11491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.467427][T11529] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.470946][T11529] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 181.474424][T11529] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.483588][T11529] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.486516][T11529] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 181.489274][T11529] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.498000][T11529] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.500663][T11529] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 181.503665][T11529] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.512393][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.515921][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 181.519173][ T59] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.564639][ T6016] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 181.634788][ T6017] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 181.672424][T11540] FAULT_INJECTION: forcing a failure. [ 181.672424][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 181.676651][T11540] CPU: 1 UID: 0 PID: 11540 Comm: syz.1.2027 Not tainted syzkaller #0 PREEMPT(full) [ 181.676666][T11540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.676673][T11540] Call Trace: [ 181.676677][T11540] [ 181.676682][T11540] dump_stack_lvl+0x100/0x190 [ 181.676704][T11540] should_fail_ex.cold+0x5/0xa [ 181.676718][T11540] should_failslab+0xc2/0x120 [ 181.676730][T11540] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 181.676745][T11540] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 181.676766][T11540] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 181.676787][T11540] mmu_topup_memory_caches+0x25/0x170 [ 181.676801][T11540] kvm_mmu_load+0xd6/0x23e0 [ 181.676813][T11540] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 181.676828][T11540] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 181.676844][T11540] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 181.676859][T11540] ? __pfx_kvm_mmu_load+0x10/0x10 [ 181.676870][T11540] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 181.676888][T11540] ? kvm_check_and_inject_events+0x961/0x10c0 [ 181.676901][T11540] ? record_steal_time+0x370/0xbe0 [ 181.676918][T11540] vcpu_run+0x39f4/0x5ca0 [ 181.676937][T11540] ? __pfx_vcpu_run+0x10/0x10 [ 181.676956][T11540] ? rcu_is_watching+0x12/0xc0 [ 181.676972][T11540] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 181.676985][T11540] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 181.677002][T11540] kvm_vcpu_ioctl+0x730/0x1730 [ 181.677020][T11540] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.677036][T11540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.677053][T11540] ? do_vfs_ioctl+0x226/0x13e0 [ 181.677070][T11540] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.677087][T11540] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.677108][T11540] ? __fget_files+0x215/0x3d0 [ 181.677119][T11540] ? hook_file_ioctl_common+0x146/0x410 [ 181.677141][T11540] ? selinux_file_ioctl+0x139/0x290 [ 181.677156][T11540] ? selinux_file_ioctl+0xb4/0x290 [ 181.677172][T11540] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.677189][T11540] __x64_sys_ioctl+0x18e/0x210 [ 181.677207][T11540] do_syscall_64+0x106/0xf80 [ 181.677221][T11540] ? clear_bhb_loop+0x40/0x90 [ 181.677235][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.677246][T11540] RIP: 0033:0x7f4b9c19c799 [ 181.677257][T11540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.677267][T11540] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.677279][T11540] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 181.677286][T11540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.677293][T11540] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 181.677299][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.677305][T11540] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 181.677320][T11540] [ 181.681741][T11540] kvm: kvm [11539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 181.782338][ T6016] usb 7-1: device descriptor read/64, error -71 [ 181.784715][ T6017] usb 8-1: Using ep0 maxpacket: 8 [ 181.785460][T11540] kvm: kvm [11539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 181.794289][ T6017] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.799176][ T6017] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.803305][ T6017] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.810235][ T6017] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.817644][ T6017] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.821572][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.970883][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 182.024587][ T6016] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 182.032094][ T6017] usb 8-1: GET_CAPABILITIES returned 0 [ 182.034894][ T6017] usbtmc 8-1:16.0: can't read capabilities [ 182.154645][ T6016] usb 7-1: device descriptor read/64, error -71 [ 182.233856][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.265032][ T6016] usb usb7-port1: attempt power cycle [ 182.614579][ T6016] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 182.653462][ T6016] usb 7-1: device descriptor read/8, error -71 [ 182.763514][T11573] FAULT_INJECTION: forcing a failure. [ 182.763514][T11573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.767932][T11573] CPU: 3 UID: 0 PID: 11573 Comm: syz.1.2038 Not tainted syzkaller #0 PREEMPT(full) [ 182.767947][T11573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.767954][T11573] Call Trace: [ 182.767959][T11573] [ 182.767963][T11573] dump_stack_lvl+0x100/0x190 [ 182.767985][T11573] should_fail_ex.cold+0x5/0xa [ 182.768002][T11573] _copy_from_iter+0x1f4/0x1690 [ 182.768025][T11573] ? __pfx__copy_from_iter+0x10/0x10 [ 182.768044][T11573] ? sock_has_perm+0x258/0x2f0 [ 182.768066][T11573] ? __pfx_sock_has_perm+0x10/0x10 [ 182.768087][T11573] hci_sock_sendmsg+0x4a1/0x2620 [ 182.768114][T11573] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 182.768135][T11573] sock_write_iter+0x524/0x5a0 [ 182.768152][T11573] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 182.768165][T11573] ? __pfx_sock_write_iter+0x10/0x10 [ 182.768187][T11573] ? bpf_lsm_file_permission+0x9/0x10 [ 182.768204][T11573] ? security_file_permission+0x76/0x210 [ 182.768221][T11573] ? rw_verify_area+0xce/0x6d0 [ 182.768238][T11573] vfs_write+0x6ac/0x1070 [ 182.768255][T11573] ? __pfx_sock_write_iter+0x10/0x10 [ 182.768273][T11573] ? __pfx_vfs_write+0x10/0x10 [ 182.768289][T11573] ? find_held_lock+0x2b/0x80 [ 182.768312][T11573] ksys_write+0x1f8/0x250 [ 182.768329][T11573] ? __pfx_ksys_write+0x10/0x10 [ 182.768350][T11573] do_syscall_64+0x106/0xf80 [ 182.768364][T11573] ? clear_bhb_loop+0x40/0x90 [ 182.768378][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.768390][T11573] RIP: 0033:0x7f4b9c19c799 [ 182.768400][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.768410][T11573] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.768422][T11573] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 182.768429][T11573] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000004 [ 182.768436][T11573] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 182.768442][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.768448][T11573] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 182.768462][T11573] [ 182.885645][T11575] FAULT_INJECTION: forcing a failure. [ 182.885645][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 182.889720][T11575] CPU: 1 UID: 0 PID: 11575 Comm: syz.1.2039 Not tainted syzkaller #0 PREEMPT(full) [ 182.889735][T11575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.889742][T11575] Call Trace: [ 182.889747][T11575] [ 182.889751][T11575] dump_stack_lvl+0x100/0x190 [ 182.889773][T11575] should_fail_ex.cold+0x5/0xa [ 182.889788][T11575] ? tomoyo_realpath_from_path+0xb6/0x690 [ 182.889805][T11575] should_failslab+0xc2/0x120 [ 182.889817][T11575] __kmalloc_noprof+0xe0/0x850 [ 182.889835][T11575] tomoyo_realpath_from_path+0xb6/0x690 [ 182.889855][T11575] tomoyo_path_number_perm+0x23c/0x580 [ 182.889868][T11575] ? tomoyo_path_number_perm+0x22e/0x580 [ 182.889883][T11575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.889910][T11575] ? find_held_lock+0x2b/0x80 [ 182.889924][T11575] ? __fget_files+0x215/0x3d0 [ 182.889936][T11575] ? hook_file_ioctl_common+0x146/0x410 [ 182.889956][T11575] ? __fget_files+0x21f/0x3d0 [ 182.889970][T11575] security_file_ioctl+0xd3/0x230 [ 182.889986][T11575] __x64_sys_ioctl+0xb7/0x210 [ 182.890004][T11575] do_syscall_64+0x106/0xf80 [ 182.890018][T11575] ? clear_bhb_loop+0x40/0x90 [ 182.890032][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.890044][T11575] RIP: 0033:0x7f4b9c19c799 [ 182.890053][T11575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.890064][T11575] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.890076][T11575] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 182.890083][T11575] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 182.890089][T11575] RBP: 00007f4b9cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 182.890096][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.890102][T11575] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 182.890116][T11575] [ 182.890121][T11575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.955666][ T6016] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 182.974954][ T6016] usb 7-1: device descriptor read/8, error -71 [ 183.086800][ T6016] usb usb7-port1: unable to enumerate USB device [ 183.191484][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 183.191496][ T40] audit: type=1400 audit(1773696176.605:1111): avc: denied { write } for pid=11583 comm="syz.1.2042" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.200845][ T40] audit: type=1400 audit(1773696176.605:1112): avc: denied { open } for pid=11583 comm="syz.1.2042" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.407225][T11605] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2046'. [ 183.627749][T11620] syzkaller0: entered promiscuous mode [ 183.629959][T11620] syzkaller0: entered allmulticast mode [ 183.776014][ T6016] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 183.794584][T11622] binder: BINDER_SET_CONTEXT_MGR already set [ 183.797401][T11622] binder: 11621:11622 ioctl 4018620d 200000000040 returned -16 [ 183.877235][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 183.936474][ T6016] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 183.940181][ T6016] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 183.943356][ T6016] usb 6-1: config 1 interface 0 has no altsetting 0 [ 183.947533][ T6016] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.950610][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.953214][ T6016] usb 6-1: Product: syz [ 183.955342][ T6016] usb 6-1: Manufacturer: syz [ 183.956915][ T6016] usb 6-1: SerialNumber: syz [ 183.962000][T11615] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 183.968380][T11615] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 184.245853][ T5933] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 184.245898][ T5933] Bluetooth: hci1: adv larger than maximum supported [ 184.248935][ T5933] Bluetooth: hci1: Malformed LE Event: 0x0d [ 184.252403][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2051'. [ 184.265090][ T6016] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 184.275412][ T6016] usb 6-1: USB disconnect, device number 19 [ 184.342340][ T40] audit: type=1400 audit(1773696177.755:1113): avc: denied { map } for pid=11629 comm="syz.0.2058" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.373828][T11633] syzkaller0: entered promiscuous mode [ 184.375762][T11633] syzkaller0: entered allmulticast mode [ 184.416360][ T40] audit: type=1400 audit(1773696177.835:1114): avc: denied { setattr } for pid=11634 comm="syz.0.2060" name="/" dev="9p" ino=71827851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.420125][ T60] usb 8-1: USB disconnect, device number 21 [ 184.480881][T11642] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.483653][T11643] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 184.490737][T11642] 9pnet_fd: Insufficient options for proto=fd [ 184.493025][T11642] 9pnet_fd: Insufficient options for proto=fd [ 184.534082][T11650] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.551871][T11652] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 184.554221][T11652] UDF-fs: Scanning with blocksize 2048 failed [ 184.558024][T11652] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 184.560397][T11652] UDF-fs: Scanning with blocksize 4096 failed [ 184.598028][T11652] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 184.642938][T11658] syzkaller0: entered promiscuous mode [ 184.695765][ T5933] Bluetooth: hci3: link tx timeout [ 184.697640][ T5933] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.814747][ T60] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 184.820560][T11669] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 184.823634][T11669] UDF-fs: Scanning with blocksize 2048 failed [ 184.835776][T11669] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 184.839062][T11669] UDF-fs: Scanning with blocksize 4096 failed [ 184.848466][ T5945] Bluetooth: hci1: unexpected event for opcode 0x200b [ 184.850819][ T5945] Bluetooth: hci1: unexpected event for opcode 0x200b [ 184.853214][T11669] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 184.985820][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.989326][ T60] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 184.992236][ T60] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 184.996743][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.024282][T11685] FAULT_INJECTION: forcing a failure. [ 185.024282][T11685] name failslab, interval 1, probability 0, space 0, times 0 [ 185.028735][T11685] CPU: 1 UID: 0 PID: 11685 Comm: syz.1.2075 Not tainted syzkaller #0 PREEMPT(full) [ 185.028752][T11685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.028758][T11685] Call Trace: [ 185.028763][T11685] [ 185.028768][T11685] dump_stack_lvl+0x100/0x190 [ 185.028802][T11685] should_fail_ex.cold+0x5/0xa [ 185.028819][T11685] should_failslab+0xc2/0x120 [ 185.028831][T11685] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 185.028846][T11685] ? security_file_alloc+0x34/0x2c0 [ 185.028863][T11685] ? trace_kmem_cache_alloc+0xf3/0x120 [ 185.028876][T11685] security_file_alloc+0x34/0x2c0 [ 185.028893][T11685] init_file+0x95/0x480 [ 185.028907][T11685] alloc_empty_file_noaccount+0x3d/0xd0 [ 185.028922][T11685] kernel_tmpfile_open+0x28/0x90 [ 185.028936][T11685] ovl_fill_super+0x112a/0x5db0 [ 185.028957][T11685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.028975][T11685] ? lockdep_init_map_type+0x5c/0x250 [ 185.028988][T11685] ? __pfx_ovl_fill_super+0x10/0x10 [ 185.029003][T11685] ? __init_swait_queue_head+0xca/0x150 [ 185.029018][T11685] ? shrinker_register+0x1db/0x240 [ 185.029037][T11685] ? sget_fc+0x801/0xc70 [ 185.029057][T11685] ? __pfx_set_anon_super_fc+0x10/0x10 [ 185.029074][T11685] ? __pfx_ovl_fill_super+0x10/0x10 [ 185.029089][T11685] get_tree_nodev+0xdd/0x190 [ 185.029107][T11685] vfs_get_tree+0x92/0x320 [ 185.029125][T11685] path_mount+0x7d0/0x23d0 [ 185.029142][T11685] ? __pfx_path_mount+0x10/0x10 [ 185.029155][T11685] ? lockdep_hardirqs_on+0x78/0x100 [ 185.029171][T11685] ? putname+0xb1/0x110 [ 185.029182][T11685] ? kmem_cache_free+0x124/0x6a0 [ 185.029201][T11685] ? __x64_sys_mount+0x293/0x310 [ 185.029215][T11685] __x64_sys_mount+0x293/0x310 [ 185.029229][T11685] ? __pfx___x64_sys_mount+0x10/0x10 [ 185.029248][T11685] do_syscall_64+0x106/0xf80 [ 185.029262][T11685] ? clear_bhb_loop+0x40/0x90 [ 185.029275][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.029287][T11685] RIP: 0033:0x7f4b9c19c799 [ 185.029297][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.029307][T11685] RSP: 002b:00007f4b9cfcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.029319][T11685] RAX: ffffffffffffffda RBX: 00007f4b9c415fa0 RCX: 00007f4b9c19c799 [ 185.029326][T11685] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 185.029333][T11685] RBP: 00007f4b9cfcb090 R08: 0000200000000600 R09: 0000000000000000 [ 185.029340][T11685] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 185.029348][T11685] R13: 00007f4b9c416038 R14: 00007f4b9c415fa0 R15: 00007ffdad8bc8e8 [ 185.029371][T11685] [ 185.029454][T11685] overlayfs: upper fs does not support tmpfile. [ 185.072561][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 185.076927][T11685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.135257][ T6017] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 185.172893][ T40] audit: type=1400 audit(1773696178.585:1115): avc: denied { write } for pid=11691 comm="syz.1.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.198161][ T40] audit: type=1400 audit(1773696178.615:1116): avc: denied { create } for pid=11693 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.206815][ T40] audit: type=1400 audit(1773696178.625:1117): avc: denied { getopt } for pid=11693 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.215357][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.215591][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.218314][ T40] audit: type=1400 audit(1773696178.635:1118): avc: denied { read } for pid=11655 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.243586][T11697] binder: BINDER_SET_CONTEXT_MGR already set [ 185.243614][T11697] binder: 11696:11697 ioctl 4018620d 200000000100 returned -16 [ 185.246312][T11697] binder: BINDER_SET_CONTEXT_MGR already set [ 185.246324][T11697] binder: 11696:11697 ioctl 4018620d 200000004a80 returned -16 [ 185.273713][T11701] FAULT_INJECTION: forcing a failure. [ 185.273713][T11701] name failslab, interval 1, probability 0, space 0, times 0 [ 185.288044][T11701] CPU: 3 UID: 0 PID: 11701 Comm: syz.0.2082 Not tainted syzkaller #0 PREEMPT(full) [ 185.288068][T11701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.288079][T11701] Call Trace: [ 185.288086][T11701] [ 185.288092][T11701] dump_stack_lvl+0x100/0x190 [ 185.288115][T11701] should_fail_ex.cold+0x5/0xa [ 185.288130][T11701] should_failslab+0xc2/0x120 [ 185.288141][T11701] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 185.288159][T11701] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 185.288173][T11701] ? map_id_range_down+0x2bc/0x3b0 [ 185.288190][T11701] kmemdup_nul+0x49/0xd0 [ 185.288209][T11701] vfs_parse_fs_qstr+0x112/0x1c0 [ 185.288223][T11701] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 185.288237][T11701] ? make_kgid+0x20/0x30 [ 185.288253][T11701] ? alloc_fs_context+0x65a/0xf40 [ 185.288270][T11701] path_mount+0x75a/0x23d0 [ 185.288286][T11701] ? __pfx_path_mount+0x10/0x10 [ 185.288299][T11701] ? lockdep_hardirqs_on+0x78/0x100 [ 185.288316][T11701] ? putname+0xb1/0x110 [ 185.288327][T11701] ? kmem_cache_free+0x124/0x6a0 [ 185.288346][T11701] ? __x64_sys_mount+0x293/0x310 [ 185.288359][T11701] __x64_sys_mount+0x293/0x310 [ 185.288373][T11701] ? __pfx___x64_sys_mount+0x10/0x10 [ 185.288395][T11701] do_syscall_64+0x106/0xf80 [ 185.288414][T11701] ? clear_bhb_loop+0x40/0x90 [ 185.288432][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.288448][T11701] RIP: 0033:0x7f4d5799c799 [ 185.288461][T11701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.288472][T11701] RSP: 002b:00007f4d5879d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.288483][T11701] RAX: ffffffffffffffda RBX: 00007f4d57c15fa0 RCX: 00007f4d5799c799 [ 185.288491][T11701] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 185.288498][T11701] RBP: 00007f4d5879d090 R08: 0000000000000000 R09: 0000000000000000 [ 185.288504][T11701] R10: 0000000000204001 R11: 0000000000000246 R12: 0000000000000002 [ 185.288511][T11701] R13: 00007f4d57c16038 R14: 00007f4d57c15fa0 R15: 00007ffdeb397ee8 [ 185.288530][T11701] [ 185.323126][ T6017] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.323156][ T6017] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.323187][ T6017] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.323207][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.328338][T11667] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.339769][ T6017] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.526446][ T40] audit: type=1400 audit(1773696178.945:1119): avc: denied { connect } for pid=11716 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.532778][ T6017] usb 8-1: USB disconnect, device number 22 [ 185.538172][T11718] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.578146][T11721] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 185.607581][ T40] audit: type=1326 audit(1773696179.025:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.0.2092" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d5799c799 code=0x0 [ 185.658658][T11726] FAULT_INJECTION: forcing a failure. [ 185.658658][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 185.662896][T11726] CPU: 1 UID: 0 PID: 11726 Comm: syz.0.2092 Not tainted syzkaller #0 PREEMPT(full) [ 185.662916][T11726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.662923][T11726] Call Trace: [ 185.662929][T11726] [ 185.662934][T11726] dump_stack_lvl+0x100/0x190 [ 185.662957][T11726] should_fail_ex.cold+0x5/0xa [ 185.662972][T11726] should_failslab+0xc2/0x120 [ 185.662984][T11726] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 185.663000][T11726] ? security_inode_alloc+0x3b/0x2c0 [ 185.663015][T11726] ? lockdep_init_map_type+0x5c/0x250 [ 185.663029][T11726] security_inode_alloc+0x3b/0x2c0 [ 185.663043][T11726] inode_init_always_gfp+0xced/0x1040 [ 185.663058][T11726] alloc_inode+0x8e/0x250 [ 185.663075][T11726] new_inode+0x22/0x1c0 [ 185.663095][T11726] proc_pid_make_inode+0x22/0x160 [ 185.663117][T11726] proc_ns_dir_lookup+0x25b/0x390 [ 185.663138][T11726] lookup_open.isra.0+0x631/0x11b0 [ 185.663158][T11726] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 185.663183][T11726] ? mnt_get_write_access+0x1e9/0x2f0 [ 185.663205][T11726] path_openat+0xa98/0x31a0 [ 185.663225][T11726] ? __pfx_path_openat+0x10/0x10 [ 185.663243][T11726] do_file_open+0x20e/0x430 [ 185.663257][T11726] ? __pfx_do_file_open+0x10/0x10 [ 185.663275][T11726] ? __pfx_kfree_link+0x10/0x10 [ 185.663298][T11726] ? alloc_fd+0x476/0x790 [ 185.663312][T11726] ? do_getname+0x191/0x390 [ 185.663330][T11726] do_sys_openat2+0x10d/0x1e0 [ 185.663347][T11726] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.663361][T11726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.663379][T11726] ? __fget_files+0x21f/0x3d0 [ 185.663393][T11726] __x64_sys_openat+0x12d/0x210 [ 185.663408][T11726] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.663424][T11726] ? ksys_write+0x1ac/0x250 [ 185.663446][T11726] do_syscall_64+0x106/0xf80 [ 185.663460][T11726] ? clear_bhb_loop+0x40/0x90 [ 185.663474][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.663486][T11726] RIP: 0033:0x7f4d5795cfce [ 185.663496][T11726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.663507][T11726] RSP: 002b:00007f4d5877bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.663519][T11726] RAX: ffffffffffffffda RBX: 00007f4d5877c6c0 RCX: 00007f4d5795cfce [ 185.663526][T11726] RDX: 0000000000000002 RSI: 00007f4d5877bf90 RDI: ffffffffffffff9c [ 185.663532][T11726] RBP: 00007f4d5877c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.663539][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.663545][T11726] R13: 00007f4d57c16128 R14: 00007f4d57c16090 R15: 00007ffdeb397ee8 [ 185.663560][T11726] [ 185.846597][T11730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2094'. [ 186.221830][T11655] delete_channel: no stack [ 186.509351][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2101'. [ 186.526642][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 186.553097][T11755] netlink: 'syz.0.2103': attribute type 11 has an invalid length. [ 186.586577][T11758] Failed to initialize the IGMP autojoin socket (err -2) [ 186.784668][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 186.801381][T11740] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 186.805319][T11740] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 186.808078][T11740] CPU: 0 UID: 0 PID: 11740 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 186.811151][T11740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.814558][T11740] RIP: 0010:klist_put+0x4d/0x1d0 [ 186.816248][T11740] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 186.822366][T11740] RSP: 0018:ffffc90003557970 EFLAGS: 00010202 [ 186.824331][T11740] RAX: dffffc0000000000 RBX: ffff8880375d2460 RCX: ffffffff82b8d7ed [ 186.826900][T11740] RDX: 000000000000000b RSI: ffffffff8b85e295 RDI: 0000000000000058 [ 186.829456][T11740] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 186.832022][T11740] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 186.834590][T11740] R13: 0000000000000001 R14: ffff888036d98c20 R15: 0000000000000000 [ 186.837079][T11740] FS: 0000000000000000(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000 [ 186.839913][T11740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.841981][T11740] CR2: 00007f4b9c187900 CR3: 00000000349e7000 CR4: 0000000000352ef0 [ 186.844589][T11740] Call Trace: [ 186.845719][T11740] [ 186.846700][T11740] device_del+0x1b8/0x9b0 [ 186.848139][T11740] ? __pfx_device_del+0x10/0x10 [ 186.849748][T11740] ? netdev_unregister_kobject+0x2da/0x540 [ 186.851617][T11740] unregister_netdevice_many_notify+0x1817/0x2580 [ 186.853707][T11740] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 186.855892][T11740] ? __pfx___mutex_lock+0x10/0x10 [ 186.857555][T11740] unregister_netdevice_queue+0x30b/0x3c0 [ 186.859398][T11740] ? rtnl_net_dev_lock+0x137/0x360 [ 186.861076][T11740] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 186.863131][T11740] ? rtnl_net_dev_lock+0x28/0x360 [ 186.864753][T11740] ? rtnl_net_dev_lock+0x146/0x360 [ 186.866378][T11740] ? rtnl_lock+0x9/0x20 [ 186.867721][T11740] ? rtnl_net_dev_lock+0x1fe/0x360 [ 186.869353][T11740] unregister_netdev+0x1f/0x60 [ 186.870934][T11740] bnep_session+0x2203/0x2dc0 [ 186.872530][T11740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.874439][T11740] ? __pfx_bnep_session+0x10/0x10 [ 186.876052][T11740] ? do_raw_spin_lock+0x128/0x260 [ 186.877700][T11740] ? __pfx_woken_wake_function+0x10/0x10 [ 186.879499][T11740] ? rcu_is_watching+0x12/0xc0 [ 186.881091][T11740] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.883103][T11740] ? lockdep_hardirqs_on+0x78/0x100 [ 186.884800][T11740] ? __kthread_parkme+0x18c/0x230 [ 186.886440][T11740] ? kthread+0x13a/0x450 [ 186.887847][T11740] ? __pfx_bnep_session+0x10/0x10 [ 186.889494][T11740] kthread+0x370/0x450 [ 186.890882][T11740] ? __pfx_kthread+0x10/0x10 [ 186.892467][T11740] ret_from_fork+0x754/0xd80 [ 186.893996][T11740] ? __pfx_ret_from_fork+0x10/0x10 [ 186.895771][T11740] ? __switch_to+0x7b4/0x1120 [ 186.897789][T11740] ? __pfx_kthread+0x10/0x10 [ 186.899540][T11740] ret_from_fork_asm+0x1a/0x30 [ 186.901178][T11740] [ 186.902183][T11740] Modules linked in: [ 186.903836][T11740] ---[ end trace 0000000000000000 ]--- [ 186.906075][T11740] RIP: 0010:klist_put+0x4d/0x1d0 [ 186.908330][T11740] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 186.915317][T11740] RSP: 0018:ffffc90003557970 EFLAGS: 00010202 [ 186.917922][T11740] RAX: dffffc0000000000 RBX: ffff8880375d2460 RCX: ffffffff82b8d7ed [ 186.920821][T11740] RDX: 000000000000000b RSI: ffffffff8b85e295 RDI: 0000000000000058 [ 186.923401][T11740] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 186.926336][T11740] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 186.929137][T11740] R13: 0000000000000001 R14: ffff888036d98c20 R15: 0000000000000000 [ 186.932478][T11740] FS: 0000000000000000(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 186.936344][T11740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.939158][T11740] CR2: 0000000000000000 CR3: 00000000352e6000 CR4: 0000000000352ef0 [ 186.941968][T11740] Kernel panic - not syncing: Fatal exception [ 186.944690][T11740] Kernel Offset: disabled [ 186.946184][T11740] Rebooting in 86400 seconds..