last executing test programs: 1.518501825s ago: executing program 1 (id=696): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getgid() r3 = accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xffffffffffffff79) lchown(&(0x7f00000001c0)='./file1\x00', r4, r2) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xee01) 1.458389708s ago: executing program 1 (id=702): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x86, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.381551478s ago: executing program 1 (id=704): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRES8=r1], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000400)=0xe) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000004c0)="99746fd6240020005da6a2786bc091866e068d151c32264c688e0ebee1cba7f88de369e56600000000005f68af62c344", 0x30}], 0x2) (async) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000680)) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) recvfrom$unix(r5, &(0x7f0000000140)=""/203, 0xcb, 0x2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd0005000000080009000200000008000c00a50a000008000b000000000006000100077200000000000000"], 0x34}}, 0x20) (async) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000540)) 1.231172585s ago: executing program 2 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x5000000) (fail_nth: 19) 1.162907245s ago: executing program 2 (id=713): sigaltstack(0x0, &(0x7f0000000040)={0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000002900)='syzkaller\x00'}, 0x48) (async) userfaultfd(0x800) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) (async) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff030f6044238cb89e14f088a81b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.081911233s ago: executing program 2 (id=714): shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xa, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) unshare(0x2c020400) 1.081514947s ago: executing program 0 (id=716): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0x7, 0x3, 0x100000004, 0x803}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/36) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002640)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000002940)='./nfsd\x00', &(0x7f0000002980)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000029c0)='./nfsd/exports\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.010465178s ago: executing program 2 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e26, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, 0x5}, 0x1c) write(r2, &(0x7f0000000180)="01000000", 0x4) setreuid(r1, 0x0) setreuid(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write(r3, &(0x7f0000000440)='3', 0x4e) sync() 1.009968068s ago: executing program 0 (id=719): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x855c7a45, 0x5, 0x9, 0xc73, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000002c0)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1b9347ca83b612bdc8824854aed75cf3beec472ee16e4a6a0d000000b1b669e37338bfe363fa325502d15e4dcba52b82d6b99f9f47ca2eff87d98231ab9184397fff7ce7401b2c99ab69cd9d53afd869752f27783ba8ae25e1a8427a4769d95abd271fb9bcd7038741ab7988122e4df94f7a6fcf591a0b4fea59e6d0083e35852ea13bfaf0ac43b804fa55c5f844cec548ed159b5358c953c3ef9051f48c1754ca319fac6cab807eae0b883408782b1838000000a550a26ca4960aa57097030846565a06465112cafab64322467f2c44b7957b19acdc46dd8214ff8935e44116c37be23e4bca14b2af1b2ad067a285736ccb5d08e0fa", @ANYRESHEX=r3, @ANYBLOB="8e8dc36c2e4c7425fba63134962913f9f24a3424b5fa28bb4b406a49cb76407acddc896c7e983f45de8d392a456443c79986920392ca12de3d2a7ce0523f8e63a0479f45330c4ffb420c128a34a9ffb1b2f874e1e3d9521fd8e7ff29df17418a073182173bc0e82c34cb2135c7e132bea1f5e45e052fce01e2f3c8a64691ba8c4a8a8a6f4d694244a3ed059f6c0e05be14baca294cbab73f5b261d63cbc31983c8478b50ae96eaf9d14244c80710fcb1690936a2dbd5105d27b8d2e13bddb27669c552ebba99f40f91dbb404e5f07a2e8e4cf7ff17854ffaec5b20fa8c65a29a0d994477244ac34a", @ANYBLOB="b8c5c65b7582827a70f38f7df5874ffee3f5b91a3b7faefb877ff7a9ca67bf6cdc2aa940c8a7acc9ba66fc0c35725013a068fb6c0d58cd2a08eafd0c68dca170869a1e96277bbe72b483d8443ddc2461d9f13a1a023692288b1e2a0d4da5512eed884116ea88a83e6f64316fec7345a1fac10a8a9e08085ca9ea4ed8950c4199891f2071dec01225c3a424c6501b6d"], 0x3c}}, 0x10) bind$packet(r2, &(0x7f00000005c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000600)="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", 0x124, 0x880, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000740)={0x0, 'batadv0\x00', {0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000", @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080e0000ce9d000000000000000079b9b4db0db600cbdb64a5835da95da6749d24e7d7779592c4d625f6778bf4e986a6ae752c14af06b58f4655283fd96518e8e5a04865263d385befd90e55d0c60ac6072791abe7691be5faf46a60e75084386b0b8a5b785a67bfa7c0a878a36df8180344a8346c21479e0b8719453a5e7da83981247b2d0a48b82f7d5c1f344d11dbcc9b2504049b7f02d6789b6d4dd56d6fac3ac5d868b00a51c37fe200000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000940)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xffffffffffffff01, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x8040480) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="4781f70cbb6dc08ecacc2197abbcfbfc3ca856fe141796292b403fe8653b4e4ed2eb5aff0f000000000000f873e660619f53cd801d76e75a9c1fa8494029daa66204c648909b737ff79dc55a618300a60843edb8379534e10387e6a53d04500c69ce7e933661b28ffb05a34abae0442830b72d5686b21a3669fa807ff7c6ce8cf2d2fac09fd9fccdaa1a1a14c1643a58701cba9ed42c4103d32cd6b39d6a9a2f72004751a6a1829662b61c3d759dcd004d50822fb2dc08c017b7618f98b3195f5ad0a258b8c50ee1a41a23960304bea71b350c3675a26030cefb559ecbec384c227f63", @ANYRESHEX=r6, @ANYRES8=0x0, @ANYRES8], 0x48) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a00), 0x521300, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xca, r7, 0x18}, 0x38) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=@newlink={0x554, 0x10, 0x400, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_VFINFO_LIST={0x4e0, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xd, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x100}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x10}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0xff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd4d, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffa, 0x100}}, @IFLA_VF_VLAN={0x10, 0x2, {0xb, 0x91a, 0x800}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x400, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x4}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8452, 0x8000}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x100, 0x964, 0x3, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffffa, 0x0, 0x4a4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xc4, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0xc437, 0xbd4, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x9ca, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xde4, 0x1}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1ce, 0x100}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xff, 0xffffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7ff, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10, 0x7}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x21d8, 0x5}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x2e1, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x12c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5e, 0xbae, 0x6, 0x88a8}}, {0x14, 0x1, {0x6, 0xf6a, 0x1, 0x8100}}, {0x14, 0x1, {0x3, 0x978, 0x81, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0xca5, 0x1, 0x8100}}, {0x14, 0x1, {0x1, 0x8c6, 0x0, 0x8100}}, {0x14, 0x1, {0x5, 0x3b6, 0x6, 0x8100}}, {0x14, 0x1, {0x401, 0x160, 0xfaf, 0x88a8}}, {0x14, 0x1, {0x6, 0x75c, 0x89, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xff5, 0x1000}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff, 0x10000}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xffffff7f, 0x8000}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x40000, 0x6, 0x88a8}}, {0x14, 0x1, {0x1648, 0xa6d, 0x0, 0x8100}}, {0x14, 0x1, {0x9, 0xc96, 0x4, 0x88a8}}, {0x14, 0x1, {0x1, 0x649, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xaca, 0x0, 0x8100}}, {0x14, 0x1, {0x0, 0xf73, 0x2, 0x88a8}}, {0x14, 0x1, {0xb7, 0x810, 0x5, 0x8100}}, {0x14, 0x1, {0x3, 0x7e9, 0x4, 0x8100}}, {0x14, 0x1, {0x247, 0x317, 0x4, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x100, 0xbbb, 0x7}}]}, {0x154, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x800, 0xa60, 0x4, 0x8100}}, {0x14, 0x1, {0x9, 0x7f5, 0x7, 0x88a8}}, {0x14, 0x1, {0x5e, 0x733, 0x4, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x14, 0xe547}}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffffa, 0x8, 0xff}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x107, 0x4f0, 0x88a8}}, {0x14, 0x1, {0x8, 0x3a0, 0x1, 0x8100}}, {0x14, 0x1, {0x80000000, 0x4e4, 0x81, 0x88a8}}, {0x14, 0x1, {0x100, 0x38, 0xfffffffb, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10000, 0x20a, 0x610d1f31, 0x8100}}, {0x14, 0x1, {0x5, 0x3d4, 0x20, 0x8100}}, {0x14, 0x1, {0x81, 0xa36, 0x7fff, 0xc554}}, {0x14, 0x1, {0xc, 0xede, 0x2, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xda, 0xc5b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x200, 0x269, 0x10001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffbb, 0xaa}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x7c7}}]}]}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'veth1_to_team\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_hsr\x00'}]}, 0x554}, 0x1, 0x0, 0x0, 0x2000d808}, 0x0) socket$kcm(0x10, 0x2, 0x0) 849.146172ms ago: executing program 2 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) syz_usbip_server_init(0x5) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000040)=0x1ff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x12810, 0x6}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x56b96}]}, 0x28}}, 0x0) 848.788997ms ago: executing program 0 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x5000000) (fail_nth: 20) 780.097158ms ago: executing program 0 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') pread64(r1, &(0x7f0000000880)=""/102356, 0x18fd4, 0x37) (async) r2 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000180)=0xc) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0x20}, 0x1) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='proto\x00', &(0x7f0000000100)='tcp\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newnexthop={0x34, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x34}}, 0x0) 720.228576ms ago: executing program 0 (id=726): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SET_PDEATHSIG(0x35, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0xe, 0x58595556, 0x7, 0xa, [{0x7, 0x8001}, {0x8, 0xffffff67}, {0x18c, 0x80000001}, {0x8, 0x53}, {0x1ff}, {0x7fffffff, 0xe}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x7, 0x8, 0x0, 0x2}}) 670.218491ms ago: executing program 0 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@cache_fscache}]}}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000080)=0xa) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x5000000) 669.743268ms ago: executing program 3 (id=728): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xd000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 669.607969ms ago: executing program 3 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x60, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @generic="d41866def89c6b9706380e3bfede177031c0396e2c765e68c02b97677100f2523e3384edfc0bacccffa06cb94e5a9ffb9b5f559633f437f4b782ac", @nested={0x4, 0x8003}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x86, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x4c5, 0x0, 0x106, 0x8, 0x0, r2, 0x0}]) fchdir(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028011000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 491.56588ms ago: executing program 1 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078005001500000000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00', 0x6, r2) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000004c0)=r3) (async, rerun: 64) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) (rerun: 64) 490.20828ms ago: executing program 3 (id=731): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf805, 0x800, 0x0, 0x42}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 381.852264ms ago: executing program 3 (id=732): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000240)=0x200000000) write$vhost_msg(r1, &(0x7f0000000280)={0x1, {&(0x7f0000000340)=""/72, 0xfffffffffffffe0f, 0x0, 0x2, 0x2}}, 0x48) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a, 0x0, 0x4, 0x3}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r4, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) bind$inet6(r3, &(0x7f0000000880)={0xa, 0x5000, 0x0, @local}, 0x1c) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x5000, 0x0, @remote}, 0x1c) write(r3, &(0x7f0000000900)="001122334455", 0x6) 271.870802ms ago: executing program 1 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x5000000) (fail_nth: 21) 270.728178ms ago: executing program 3 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) r1 = syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x1, 0x1f, 0x98, &(0x7f00000001c0)={0x3, 0xfffe, 0x12}}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001340), 0xa00, 0x0) ioctl$DVD_AUTH(r2, 0x5392, &(0x7f0000001380)=@type=0x4) 244.025137ms ago: executing program 2 (id=735): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd3) r4 = accept$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000680)={'tunl0\x00', {0x2, 0x4e21, @remote}}) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) (async, rerun: 32) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) listen(r0, 0x40000004) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 55.863751ms ago: executing program 1 (id=736): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x82, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x1, r3, 0x3d, r0}, 0x32) 0s ago: executing program 3 (id=737): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000028f, 0x10120, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000009fa19e4b81bf77840000"], 0x50) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f0000001a00), 0x0, &(0x7f0000001a40)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a80)='./file0/file1\x00', 0x2441, 0x83) fdatasync(r2) (async) fdatasync(r2) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000240)={"a360208e7c53ddc7827d151d661538df19c43bc173904f6c8b1e9eebdcfd", 0x7f, 0x2, 0xffffffff, [0x3, 0x4, 0x2, 0x0, 0x0, 0x7, 0x5, 0x5, 0x1ff, 0x6, 0x6, 0x4, 0x4, 0x6, 0x62f9, 0x2, 0x3]}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f00000002c0)='qnx6\x00', 0x20000a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) (async) r5 = syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd/3\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd/3\x00') read(r6, &(0x7f00000006c0)=""/51, 0x33) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) (async) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f0000000580)="b800000500000000", &(0x7f00000005c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f0000000580)="b800000500000000", &(0x7f00000005c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x50, r9, 0x121, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x7, 0x1ffb, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x80, 0x6}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000640)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000019c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000019c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="090b00000000000000000500000008000300", @ANYRESOCT=r4], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): nlmsg_type=10 sclass=netlink_route_socket pid=6849 comm=syz.1.236 [ 56.920877][ T6849] ebt_limit: overflow, try lower: 0/0 [ 56.988808][ T6852] macvlan1: entered promiscuous mode [ 56.997650][ T6852] macvtap0: entered promiscuous mode [ 57.000051][ T6852] macvtap0: left promiscuous mode [ 57.000468][ T6852] macvlan1: left promiscuous mode [ 57.142343][ T6854] comedi comedi1: Minor 4 specified more than once! [ 57.216235][ T6861] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 57.253004][ T6861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.337760][ T6861] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 57.363921][ T5855] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 57.473817][ T5829] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 57.579808][ T6868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.581451][ T6854] program syz.1.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.788356][ T6878] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 57.801858][ T6879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.801995][ T6879] block device autoloading is deprecated and will be removed. [ 57.981249][ T6898] netlink: 'syz.3.246': attribute type 16 has an invalid length. [ 57.981264][ T6898] netlink: 'syz.3.246': attribute type 17 has an invalid length. [ 58.015951][ T6898] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 58.033324][ T2355] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 58.050734][ T6901] vlan2: entered allmulticast mode [ 58.050748][ T6901] bond0: entered allmulticast mode [ 58.050754][ T6901] bond_slave_0: entered allmulticast mode [ 58.050762][ T6901] bond_slave_1: entered allmulticast mode [ 58.073176][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.073366][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.074595][ T6905] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.105368][ T6909] FAULT_INJECTION: forcing a failure. [ 58.105368][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 58.105389][ T6909] CPU: 2 UID: 0 PID: 6909 Comm: syz.3.246 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 58.105406][ T6909] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 58.105410][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.105416][ T6909] Call Trace: [ 58.105420][ T6909] [ 58.105425][ T6909] dump_stack_lvl+0x100/0x190 [ 58.105444][ T6909] should_fail_ex.cold+0x5/0xa [ 58.105462][ T6909] should_failslab+0xc2/0x120 [ 58.105479][ T6909] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 58.105493][ T6909] ? __d_alloc+0x34/0xad0 [ 58.105507][ T6909] __d_alloc+0x34/0xad0 [ 58.105518][ T6909] d_alloc_pseudo+0x1c/0xc0 [ 58.105532][ T6909] alloc_file_pseudo+0x118/0x290 [ 58.105545][ T6909] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 58.105556][ T6909] ? alloc_fd+0x471/0x7a0 [ 58.105575][ T6909] sock_alloc_file+0x50/0x210 [ 58.105587][ T6909] __sys_socket+0x1c0/0x260 [ 58.105601][ T6909] ? __pfx___sys_socket+0x10/0x10 [ 58.105618][ T6909] __x64_sys_socket+0x72/0xb0 [ 58.105631][ T6909] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.105647][ T6909] do_syscall_64+0x123/0x790 [ 58.105663][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.105675][ T6909] RIP: 0033:0x7f022eda0dc7 [ 58.105685][ T6909] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.105694][ T6909] RSP: 002b:00007f022fc98f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 58.105706][ T6909] RAX: ffffffffffffffda RBX: 00007f022f026090 RCX: 00007f022eda0dc7 [ 58.105712][ T6909] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 58.105718][ T6909] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 58.105725][ T6909] R10: 00002000000005c0 R11: 0000000000000286 R12: 0000000000000000 [ 58.105731][ T6909] R13: 00007f022f026128 R14: 00007f022f026090 R15: 00007fffd2dc2988 [ 58.105745][ T6909] [ 58.159834][ T6913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.175366][ T6901] FAULT_INJECTION: forcing a failure. [ 58.175366][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 58.175388][ T6901] CPU: 2 UID: 0 PID: 6901 Comm: syz.0.247 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 58.175404][ T6901] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 58.175409][ T6901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.175414][ T6901] Call Trace: [ 58.175418][ T6901] [ 58.175423][ T6901] dump_stack_lvl+0x100/0x190 [ 58.175442][ T6901] should_fail_ex.cold+0x5/0xa [ 58.175459][ T6901] should_failslab+0xc2/0x120 [ 58.175475][ T6901] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.175487][ T6901] ? kobject_uevent_env+0x263/0x18b0 [ 58.175503][ T6901] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 58.175534][ T6901] kobject_uevent_env+0x263/0x18b0 [ 58.175569][ T6901] ? gadget_unbind_driver+0x371/0x4f0 [ 58.175585][ T6901] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 58.175599][ T6901] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 58.175616][ T6901] device_remove+0xcb/0x180 [ 58.175629][ T6901] device_release_driver_internal+0x44e/0x620 [ 58.175645][ T6901] driver_detach+0xd8/0x1b0 [ 58.175659][ T6901] bus_remove_driver+0x13b/0x2e0 [ 58.175671][ T6901] driver_unregister+0x76/0xb0 [ 58.175685][ T6901] usb_gadget_unregister_driver+0x49/0x70 [ 58.175701][ T6901] raw_release+0x19b/0x260 [ 58.175714][ T6901] ? __pfx_raw_release+0x10/0x10 [ 58.175728][ T6901] __fput+0x3fb/0xb50 [ 58.175741][ T6901] task_work_run+0x150/0x240 [ 58.175754][ T6901] ? __pfx_task_work_run+0x10/0x10 [ 58.175769][ T6901] exit_to_user_mode_loop+0x1d8/0x700 [ 58.175798][ T6901] ? rcu_is_watching+0x13/0xc0 [ 58.175811][ T6901] do_syscall_64+0x661/0x790 [ 58.175828][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.175839][ T6901] RIP: 0033:0x7f7ad859f1eb [ 58.175849][ T6901] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 58.175859][ T6901] RSP: 002b:00007f7ad943ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.175870][ T6901] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00007f7ad859f1eb [ 58.175877][ T6901] RDX: 00007f7ad943ffd0 RSI: 0000000080085502 RDI: 000000000000000a [ 58.175883][ T6901] RBP: 00007f7ad943ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 58.175889][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 58.175896][ T6901] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f7ad8655a91 [ 58.175910][ T6901] [ 58.503123][ T5785] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.588994][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 58.589007][ T42] audit: type=1400 audit(1793055084.827:538): avc: denied { write } for pid=6940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.634884][ T42] audit: type=1400 audit(1793055084.877:539): avc: denied { write } for pid=6943 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.653918][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 58.654743][ T5785] usb 6-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 58.655624][ T5785] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.655639][ T5785] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.657250][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.657262][ T5785] usb 6-1: Product: syz [ 58.657269][ T5785] usb 6-1: Manufacturer: syz [ 58.657276][ T5785] usb 6-1: SerialNumber: syz [ 58.661132][ T5785] usb 6-1: config 0 descriptor?? [ 58.731697][ T42] audit: type=1400 audit(1793055084.967:540): avc: denied { write } for pid=6947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.809786][ T42] audit: type=1400 audit(1793055085.047:541): avc: denied { write } for pid=6952 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.831585][ T42] audit: type=1400 audit(1793055085.067:542): avc: denied { ioctl } for pid=6949 comm="syz.0.254" path="socket:[15387]" dev="sockfs" ino=15387 ioctlcmd=0x4008b100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.863106][ T5861] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.875327][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 58.890106][ T5785] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9 [ 58.903823][ T5785] imon:send_packet: packet tx failed (-71) [ 58.905929][ T42] audit: type=1400 audit(1793055085.147:543): avc: denied { write } for pid=6957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.923094][ T5785] imon 6-1:0.0: panel buttons/knobs setup failed [ 58.992882][ T42] audit: type=1400 audit(1793055085.227:544): avc: denied { write } for pid=6961 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.003860][ T5785] rc_core: IR keymap rc-imon-pad not found [ 59.003879][ T5785] Registered IR keymap rc-empty [ 59.004538][ T5785] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 59.004548][ T5785] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 59.006228][ T5785] imon:send_packet: packet tx failed (-71) [ 59.023283][ T5785] imon 6-1:0.0: remote input dev register failed [ 59.023630][ T5861] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 59.023636][ T5785] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 59.026654][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.026674][ T5861] usb 8-1: Product: syz [ 59.026685][ T5861] usb 8-1: Manufacturer: syz [ 59.026695][ T5861] usb 8-1: SerialNumber: syz [ 59.047919][ T42] audit: type=1400 audit(1793055085.287:545): avc: denied { create } for pid=6962 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.075081][ T42] audit: type=1400 audit(1793055085.317:546): avc: denied { sys_admin } for pid=6962 comm="syz.0.255" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 59.077686][ T5785] imon 6-1:0.0: unable to initialize intf0, err 0 [ 59.093407][ T5785] usb 6-1: USB disconnect, device number 2 [ 59.146750][ T42] audit: type=1400 audit(1793055085.387:547): avc: denied { setopt } for pid=6916 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.249501][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 59.249518][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 59.310628][ T6974] option changes via remount are deprecated (pid=6970 comm=syz.0.257) [ 59.332638][ T6983] option changes via remount are deprecated (pid=6970 comm=syz.0.257) [ 59.339126][ T5861] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 59.349496][ T5861] usb 8-1: USB disconnect, device number 5 [ 59.530521][ T6996] net_ratelimit: 1 callbacks suppressed [ 59.530533][ T6996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.698970][ T7011] __nla_validate_parse: 1 callbacks suppressed [ 59.698996][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 59.699005][ T7011] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 59.773786][ T5861] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.924237][ T5861] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 59.926454][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.926468][ T5861] usb 8-1: Product: syz [ 59.926475][ T5861] usb 8-1: Manufacturer: syz [ 59.926482][ T5861] usb 8-1: SerialNumber: syz [ 59.958278][ T7028] SELinux: policydb version 0 does not match my version range 15-35 [ 59.958418][ T7028] SELinux: failed to load policy [ 60.151049][ T6931] bond2: entered promiscuous mode [ 60.151473][ T6931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.158224][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 60.158264][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 60.158281][ T5861] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 60.162882][ T5861] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 60.170419][ T5861] usb 8-1: USB disconnect, device number 6 [ 60.254732][ T7040] netlink: 'syz.1.265': attribute type 21 has an invalid length. [ 60.254752][ T7040] netlink: 128 bytes leftover after parsing attributes in process `syz.1.265'. [ 60.254807][ T7040] netlink: 3 bytes leftover after parsing attributes in process `syz.1.265'. [ 60.389268][ T7046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.622525][ T7061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.273'. [ 60.663102][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.701108][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 60.780521][ T7074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.793106][ T5871] usb 6-1: device descriptor read/64, error -71 [ 60.819017][ T7078] tmpfs: Unknown parameter 'mpoì' [ 60.904486][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 61.033165][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.164210][ T5871] usb 6-1: device descriptor read/64, error -71 [ 61.274894][ T5871] usb usb6-port1: attempt power cycle [ 61.401413][ T7060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.401504][ T7060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.408108][ T7060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.414919][ T7060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.414981][ T7060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.420061][ T7060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.421538][ T7060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.421613][ T7060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.422846][ T7060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.496114][ T7111] No memory to map [ 61.496327][ T7111] No memory to map [ 61.513671][ T7114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.568666][ T7120] syzkaller1: entered promiscuous mode [ 61.568684][ T7120] syzkaller1: entered allmulticast mode [ 61.585451][ T7111] No memory to map [ 61.586430][ T7111] No memory to map [ 61.586551][ T7111] No memory to map [ 61.586655][ T7111] No memory to map [ 61.586806][ T7111] No memory to map [ 61.586915][ T7111] No memory to map [ 61.587012][ T7111] No memory to map [ 61.587111][ T7111] No memory to map [ 61.587210][ T7111] No memory to map [ 61.587307][ T7111] No memory to map [ 61.587403][ T7111] No memory to map [ 61.587500][ T7111] No memory to map [ 61.587631][ T7111] No memory to map [ 61.587753][ T7111] No memory to map [ 61.587851][ T7111] No memory to map [ 61.587948][ T7111] No memory to map [ 61.588065][ T7111] No memory to map [ 61.588183][ T7111] No memory to map [ 61.588305][ T7111] No memory to map [ 61.588424][ T7111] No memory to map [ 61.614171][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.625799][ T7111] No memory to map [ 61.625980][ T7111] No memory to map [ 61.626060][ T7111] No memory to map [ 61.626172][ T7111] No memory to map [ 61.626291][ T7111] No memory to map [ 61.626416][ T7111] No memory to map [ 61.626543][ T7111] No memory to map [ 61.626664][ T7111] No memory to map [ 61.626790][ T7111] No memory to map [ 61.626913][ T7111] No memory to map [ 61.627036][ T7111] No memory to map [ 61.627160][ T7111] No memory to map [ 61.627282][ T7111] No memory to map [ 61.627400][ T7111] No memory to map [ 61.656715][ T5871] usb 6-1: device descriptor read/8, error -71 [ 61.665198][ T7111] No memory to map [ 61.665402][ T7111] No memory to map [ 61.778988][ T7135] ip6t_hbh: unknown flags 83 [ 61.784497][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 61.845134][ T7143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.878098][ T7147] netlink: 'syz.0.299': attribute type 3 has an invalid length. [ 61.878111][ T7147] netlink: 'syz.0.299': attribute type 6 has an invalid length. [ 61.878118][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.299'. [ 61.905007][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.921137][ T7151] program syz.3.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.921319][ T7155] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 61.924118][ T5871] usb 6-1: device descriptor read/8, error -71 [ 61.976544][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 61.976709][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 62.036147][ T5871] usb usb6-port1: unable to enumerate USB device [ 62.633117][ T50] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 62.673128][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.731305][ T7152] FAULT_INJECTION: forcing a failure. [ 62.731305][ T7152] name fail_futex, interval 1, probability 0, space 0, times 1 [ 62.731328][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.3.300 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 62.731345][ T7152] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 62.731349][ T7152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.731367][ T7152] Call Trace: [ 62.731378][ T7152] [ 62.731383][ T7152] dump_stack_lvl+0x100/0x190 [ 62.731410][ T7152] should_fail_ex.cold+0x5/0xa [ 62.731426][ T7152] get_futex_key+0x1c9/0x13e0 [ 62.731457][ T7152] ? __pfx_get_futex_key+0x10/0x10 [ 62.731473][ T7152] ? __mutex_unlock_slowpath+0x35d/0x930 [ 62.731502][ T7152] futex_wake+0xf4/0x5e0 [ 62.731541][ T7152] ? __pfx_futex_wake+0x10/0x10 [ 62.731559][ T7152] ? lock_acquire+0x1d1/0x380 [ 62.731581][ T7152] ? detach_task_ctx_data+0x83/0x490 [ 62.731606][ T7152] do_futex+0x2b2/0x440 [ 62.731618][ T7152] ? __pfx_do_futex+0x10/0x10 [ 62.731628][ T7152] ? __might_fault+0xc5/0x140 [ 62.731659][ T7152] mm_exit_exec_release+0x256/0x2f0 [ 62.731672][ T7152] do_exit+0x6d8/0x2a00 [ 62.731693][ T7152] ? __pfx_do_exit+0x10/0x10 [ 62.731707][ T7152] ? do_raw_spin_lock+0x128/0x260 [ 62.731722][ T7152] ? find_held_lock+0x2b/0x80 [ 62.731732][ T7152] ? get_signal+0x7db/0x21d0 [ 62.731745][ T7152] do_group_exit+0xd5/0x2a0 [ 62.731760][ T7152] get_signal+0x1ebd/0x21d0 [ 62.731788][ T7152] ? __pfx_get_signal+0x10/0x10 [ 62.731803][ T7152] ? do_futex+0x190/0x440 [ 62.731815][ T7152] arch_do_signal_or_restart+0x91/0x7e0 [ 62.731834][ T7152] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.731859][ T7152] exit_to_user_mode_loop+0x139/0x700 [ 62.731883][ T7152] ? rcu_is_watching+0x13/0xc0 [ 62.731896][ T7152] do_syscall_64+0x661/0x790 [ 62.731913][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.731925][ T7152] RIP: 0033:0x7f022ed9f559 [ 62.731936][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.731947][ T7152] RSP: 002b:00007f022fc580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 62.731965][ T7152] RAX: fffffffffffffe00 RBX: 00007f022f026278 RCX: 00007f022ed9f559 [ 62.731972][ T7152] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f022f026278 [ 62.731979][ T7152] RBP: 00007f022f026270 R08: 0000000000000000 R09: 0000000000000000 [ 62.731985][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.731991][ T7152] R13: 00007f022f026308 R14: 00007fffd2dc28a0 R15: 00007fffd2dc2988 [ 62.732006][ T7152] [ 62.843800][ T50] usb 7-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 62.844590][ T50] usb 7-1: config 230 has an invalid descriptor of length 111, skipping remainder of the config [ 62.844602][ T50] usb 7-1: config 230 has 0 interfaces, different from the descriptor's value: 1 [ 62.844619][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.052062][ T50] usb 7-1: string descriptor 0 read error: -71 [ 63.053895][ T50] usb 7-1: USB disconnect, device number 2 [ 63.473157][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.571729][ T7182] xt_nfacct: accounting object `syz0' does not exist [ 63.577789][ T7182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 63.581981][ T7184] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 63.615903][ T7184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.625949][ T7185] bond1: (slave geneve2): making interface the new active one [ 63.626613][ T7185] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.635871][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 63.635881][ T42] audit: type=1400 audit(1793055089.877:590): avc: denied { getopt } for pid=7189 comm="syz.1.310" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.675418][ T42] audit: type=1400 audit(1793055089.917:591): avc: denied { write } for pid=7193 comm="syz.2.313" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.706044][ T7196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.314'. [ 63.781693][ T7198] hsr_slave_1 (unregistering): left promiscuous mode [ 63.920311][ T42] audit: type=1400 audit(1793055090.157:592): avc: denied { write } for pid=7204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.980644][ T7217] FAULT_INJECTION: forcing a failure. [ 63.980644][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 63.980675][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.2.321 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 63.980701][ T7217] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 63.980715][ T7217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.980726][ T7217] Call Trace: [ 63.980732][ T7217] [ 63.980739][ T7217] dump_stack_lvl+0x100/0x190 [ 63.980772][ T7217] should_fail_ex.cold+0x5/0xa [ 63.980801][ T7217] should_failslab+0xc2/0x120 [ 63.980841][ T7217] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.980864][ T7217] ? __pfx_map_id_range_down+0x10/0x10 [ 63.980887][ T7217] ? rcu_is_watching+0x13/0xc0 [ 63.980903][ T7217] ? security_inode_alloc+0x3b/0x2c0 [ 63.980948][ T7217] security_inode_alloc+0x3b/0x2c0 [ 63.980974][ T7217] inode_init_always_gfp+0xc6f/0xfb0 [ 63.981014][ T7217] alloc_inode+0x8e/0x250 [ 63.981037][ T7217] sock_alloc+0x42/0x240 [ 63.981085][ T7217] __sock_create+0xc2/0x860 [ 63.981111][ T7217] __sys_socket+0x14d/0x260 [ 63.981134][ T7217] ? __pfx___sys_socket+0x10/0x10 [ 63.981165][ T7217] __x64_sys_socket+0x72/0xb0 [ 63.981186][ T7217] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.981211][ T7217] do_syscall_64+0x123/0x790 [ 63.981240][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.981260][ T7217] RIP: 0033:0x7f19aa79f559 [ 63.981275][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.981291][ T7217] RSP: 002b:00007f19ab5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.981309][ T7217] RAX: ffffffffffffffda RBX: 00007f19aaa25fa0 RCX: 00007f19aa79f559 [ 63.981321][ T7217] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 63.981331][ T7217] RBP: 00007f19aa836b20 R08: 0000000000000000 R09: 0000000000000000 [ 63.981342][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.981352][ T7217] R13: 00007f19aaa26038 R14: 00007f19aaa25fa0 R15: 00007fffa7676e68 [ 63.981374][ T7217] [ 63.981416][ T7217] socket: no more sockets [ 64.002077][ T42] audit: type=1400 audit(1793055090.237:593): avc: denied { write } for pid=7211 comm="syz.1.319" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.048347][ T42] audit: type=1400 audit(1793055090.287:594): avc: denied { write } for pid=7220 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.055153][ T42] audit: type=1400 audit(1793055090.297:595): avc: denied { bind } for pid=7211 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.056004][ T42] audit: type=1400 audit(1793055090.297:596): avc: denied { mount } for pid=7211 comm="syz.1.319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.069060][ T42] audit: type=1400 audit(1793055090.307:597): avc: denied { read } for pid=7211 comm="syz.1.319" name="trace_pipe_raw" dev="tracefs" ino=3484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.102630][ T42] audit: type=1400 audit(1793055090.337:598): avc: denied { accept } for pid=7224 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.125425][ T7231] FAULT_INJECTION: forcing a failure. [ 64.125425][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 64.125446][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.1.324 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 64.125462][ T7231] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 64.125467][ T7231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.125474][ T7231] Call Trace: [ 64.125479][ T7231] [ 64.125484][ T7231] dump_stack_lvl+0x100/0x190 [ 64.125504][ T7231] should_fail_ex.cold+0x5/0xa [ 64.125523][ T7231] should_failslab+0xc2/0x120 [ 64.125540][ T7231] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.125552][ T7231] ? mpi_alloc+0x46/0x230 [ 64.125583][ T7231] mpi_alloc+0x46/0x230 [ 64.125597][ T7231] ? mpi_free+0xe6/0x150 [ 64.125611][ T7231] mpi_read_raw_data+0xf5/0x430 [ 64.125625][ T7231] ? rsa_free_mpi_key+0x15a/0x3a0 [ 64.125647][ T7231] rsa_set_pub_key+0x116/0x270 [ 64.125659][ T7231] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 64.125676][ T7231] ? __asan_memcpy+0x3c/0x60 [ 64.125690][ T7231] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 64.125715][ T7231] public_key_verify_signature+0x4e5/0x910 [ 64.125736][ T7231] ? __pfx_public_key_verify_signature+0x10/0x10 [ 64.125762][ T7231] ? asymmetric_key_generate_id+0x7e/0x180 [ 64.125782][ T7231] x509_check_for_self_signed+0x325/0x510 [ 64.125804][ T7231] x509_cert_parse+0x60c/0x910 [ 64.125822][ T7231] x509_key_preparse+0x65/0x9c0 [ 64.125836][ T7231] asymmetric_key_preparse+0xce/0x1d0 [ 64.125852][ T7231] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 64.125869][ T7231] __key_create_or_update+0x3f6/0xe10 [ 64.125884][ T7231] ? __pfx___key_create_or_update+0x10/0x10 [ 64.125896][ T7231] ? lookup_user_key+0x477/0x13e0 [ 64.125914][ T7231] ? __pfx_lookup_user_key+0x10/0x10 [ 64.125944][ T7231] key_create_or_update+0x42/0x60 [ 64.125957][ T7231] __do_sys_add_key+0x2e8/0x460 [ 64.125972][ T7231] ? __pfx___do_sys_add_key+0x10/0x10 [ 64.125991][ T7231] do_syscall_64+0x123/0x790 [ 64.126009][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.126020][ T7231] RIP: 0033:0x7f82b119f559 [ 64.126029][ T7231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.126039][ T7231] RSP: 002b:00007f82b214e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.126051][ T7231] RAX: ffffffffffffffda RBX: 00007f82b1425fa0 RCX: 00007f82b119f559 [ 64.126058][ T7231] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 64.126064][ T7231] RBP: 00007f82b1236b20 R08: ffffffffffffffff R09: 0000000000000000 [ 64.126070][ T7231] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 64.126077][ T7231] R13: 00007f82b1426038 R14: 00007f82b1425fa0 R15: 00007ffd92107dd8 [ 64.126091][ T7231] [ 64.193180][ T7236] XFS (sr0): Invalid superblock magic number [ 64.280166][ T42] audit: type=1400 audit(1793055090.517:599): avc: denied { setattr } for pid=7246 comm="syz.0.327" name="/" dev="9p" ino=80740525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.293696][ T7251] X.509: Couldn't decode AuthKeyIdentifier [ 64.724728][ T7290] netlink: 'syz.0.338': attribute type 64 has an invalid length. [ 64.749868][ T7292] ip_tables: iptables: counters copy to user failed while replacing table [ 64.751652][ T7292] tipc: Started in network mode [ 64.751666][ T7292] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.751796][ T7292] tipc: New replicast peer: 172.20.20.187 [ 64.753723][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.754102][ T7292] tipc: Enabled bearer , priority 10 [ 64.883241][ T7304] ipt_ECN: cannot use operation on non-tcp rule [ 64.962567][ T7309] __nla_validate_parse: 5 callbacks suppressed [ 64.962580][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 64.962641][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 65.080659][ T7315] [U]  [ 65.403308][ T10] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 65.553394][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.554160][ T10] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.559691][ T10] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.559720][ T10] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.559738][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.561718][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 65.561735][ T10] usb 8-1: Product: syz [ 65.561746][ T10] usb 8-1: Manufacturer: syz [ 65.561757][ T10] usb 8-1: SerialNumber: syz [ 65.564926][ T10] usb 8-1: config 0 descriptor?? [ 65.583211][ T10] usb 8-1: selecting invalid altsetting 0 [ 65.687700][ T7334] FAULT_INJECTION: forcing a failure. [ 65.687700][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 65.687720][ T7334] CPU: 3 UID: 0 PID: 7334 Comm: syz.1.353 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 65.687741][ T7334] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 65.687745][ T7334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.687752][ T7334] Call Trace: [ 65.687756][ T7334] [ 65.687760][ T7334] dump_stack_lvl+0x100/0x190 [ 65.687781][ T7334] should_fail_ex.cold+0x5/0xa [ 65.687799][ T7334] should_failslab+0xc2/0x120 [ 65.687815][ T7334] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 65.687829][ T7334] ? selinux_socket_create+0xe7/0x590 [ 65.687843][ T7334] ? sock_alloc_inode+0x26/0x2c0 [ 65.687856][ T7334] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.687868][ T7334] sock_alloc_inode+0x26/0x2c0 [ 65.687879][ T7334] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.687890][ T7334] alloc_inode+0x68/0x250 [ 65.687905][ T7334] sock_alloc+0x42/0x240 [ 65.687917][ T7334] __sock_create+0xc2/0x860 [ 65.687932][ T7334] __sys_socket+0x14d/0x260 [ 65.687946][ T7334] ? __pfx___sys_socket+0x10/0x10 [ 65.687964][ T7334] __x64_sys_socket+0x72/0xb0 [ 65.687977][ T7334] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.687993][ T7334] do_syscall_64+0x123/0x790 [ 65.688010][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.688021][ T7334] RIP: 0033:0x7f82b119f559 [ 65.688030][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.688040][ T7334] RSP: 002b:00007f82b214e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.688051][ T7334] RAX: ffffffffffffffda RBX: 00007f82b1425fa0 RCX: 00007f82b119f559 [ 65.688058][ T7334] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 65.688064][ T7334] RBP: 00007f82b1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.688071][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.688077][ T7334] R13: 00007f82b1426038 R14: 00007f82b1425fa0 R15: 00007ffd92107dd8 [ 65.688093][ T7334] [ 65.688099][ T7334] socket: no more sockets [ 65.775372][ T5861] usb 8-1: USB disconnect, device number 7 [ 65.865851][ T10] tipc: Node number set to 2886997162 [ 65.870658][ T7350] gadgetfs: bound to dummy_udc driver [ 65.918080][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 65.955398][ T5792] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 65.989003][ T7356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.049537][ T7358] xt_CT: No such helper "netbios-ns" [ 66.521503][ T7487] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 66.833761][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.839767][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 67.308441][ T7583] input: syz1 as /devices/virtual/input/input12 [ 67.633203][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.036904][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.300224][ T7589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.368'. [ 68.913273][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.021922][ T7358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.078189][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 69.078207][ T42] audit: type=1400 audit(1793055095.317:622): avc: denied { append } for pid=7595 comm="syz.2.370" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.088638][ T7592] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 69.114410][ T7592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.165643][ T7609] IPVS: set_ctl: invalid protocol: 180 255.255.255.255:20004 [ 69.180503][ T42] audit: type=1400 audit(1793055095.417:623): avc: denied { write } for pid=7608 comm="syz.3.371" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.180546][ T42] audit: type=1400 audit(1793055095.417:624): avc: denied { open } for pid=7608 comm="syz.3.371" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.180948][ T42] audit: type=1400 audit(1793055095.417:625): avc: denied { ioctl } for pid=7608 comm="syz.3.371" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.249562][ T7614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.252276][ T7613] nbd: must specify at least one socket [ 69.294843][ T42] audit: type=1400 audit(1793055095.537:626): avc: denied { connect } for pid=7618 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.327870][ T7624] Bluetooth: hci0: unsupported parameter 12815 [ 69.327883][ T7624] Bluetooth: hci0: unsupported parameter 8192 [ 69.327890][ T7624] Bluetooth: hci0: unsupported parameter 12815 [ 69.327896][ T7624] Bluetooth: hci0: unsupported parameter 8192 [ 69.379990][ T7621] input: syz1 as /devices/virtual/input/input13 [ 69.382936][ T42] audit: type=1400 audit(1793055095.617:627): avc: denied { read write } for pid=7629 comm="syz.3.378" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.382968][ T42] audit: type=1400 audit(1793055095.617:628): avc: denied { open } for pid=7629 comm="syz.3.378" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.387945][ T42] audit: type=1400 audit(1793055095.627:629): avc: denied { ioctl } for pid=7629 comm="syz.3.378" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.397321][ T7631] device-mapper: table: 248:0: flakey: Total (up + down) interval is zero (-EINVAL) [ 69.397334][ T7631] device-mapper: ioctl: error adding target to table [ 69.397366][ T7634] device-mapper: table: 248:0: flakey: Total (up + down) interval is zero (-EINVAL) [ 69.397378][ T7634] device-mapper: ioctl: error adding target to table [ 69.419264][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 69.544600][ T7647] ªªªªª»: renamed from dummy0 (while UP) [ 69.551257][ T42] audit: type=1400 audit(1793055095.787:630): avc: denied { write } for pid=7646 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.631114][ T7648] bond2: Unable to set up delay as MII monitoring is disabled [ 69.634647][ T7648] bond2 (unregistering): Released all slaves [ 69.756883][ T7660] netlink: 9 bytes leftover after parsing attributes in process `syz.3.384'. [ 69.768554][ T7660] netlink: 9 bytes leftover after parsing attributes in process `syz.3.384'. [ 69.840083][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.385'. [ 69.853191][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 69.878292][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 70.138511][ T7670] __nla_validate_parse: 1 callbacks suppressed [ 70.138524][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 70.246915][ T42] audit: type=1400 audit(1793055096.487:631): avc: denied { bind } for pid=7676 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.141319][ T7694] ptrace attach of "/syz-executor exec"[5782] was attempted by "/syz-executor exec"[7694] [ 71.212411][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 71.212433][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 71.241034][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241067][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.602592][ T7704] netlink: 68 bytes leftover after parsing attributes in process `syz.1.397'. [ 71.664996][ T7720] xt_time: unknown flags 0x78 [ 71.893199][ T41] cfg80211: failed to load regulatory.db [ 71.988982][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 72.197311][ T7743] cgroup: fork rejected by pids controller in /syz2 [ 72.617105][ T7783] fuse: Unknown parameter 'r00´ï;;000080000100000' [ 72.765556][ T7786] syzkaller1: entered promiscuous mode [ 72.765570][ T7786] syzkaller1: entered allmulticast mode [ 73.232782][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 73.243011][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=7816 comm=syz.2.419 [ 73.273900][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 73.357389][ T7831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.482866][ T7839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.508636][ T7841] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 73.521371][ T7841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 73.531157][ T7841] bond6: (slave veth0_to_bond): making interface the new active one [ 73.532256][ T7841] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 73.669542][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.427'. [ 73.687379][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 73.844675][ T7874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.007782][ T7899] tmpfs: Unknown parameter 'dont_measure' [ 74.071646][ T7911] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 74.071666][ T7911] device-mapper: raid: Choosing default region size of 4MiB [ 74.114288][ T7911] md: pers->run() failed ... [ 74.114605][ T7911] device-mapper: table: 248:7: raid: Failed to run raid array (-EINVAL) [ 74.114616][ T7911] device-mapper: ioctl: error adding target to table [ 74.145876][ T7920] sctp: [Deprecated]: syz.1.442 (pid 7920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.145876][ T7920] Use struct sctp_sack_info instead [ 74.302318][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 74.573194][ T2328] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 74.654874][ T7934] veth1_macvtap: left promiscuous mode [ 74.654893][ T7934] macsec0: entered promiscuous mode [ 74.654900][ T7934] macsec0: entered allmulticast mode [ 74.660106][ T7934] veth1_macvtap: entered promiscuous mode [ 74.660119][ T7934] veth1_macvtap: entered allmulticast mode [ 74.660301][ T7934] macsec0: left promiscuous mode [ 74.660392][ T7934] macsec0: left allmulticast mode [ 74.660400][ T7934] veth1_macvtap: left allmulticast mode [ 74.685120][ T7936] ip6t_ah: unknown flags 7 [ 74.688682][ T7936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.744128][ T2328] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 74.748180][ T2328] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.748196][ T2328] usb 7-1: Product: syz [ 74.748203][ T2328] usb 7-1: Manufacturer: syz [ 74.748211][ T2328] usb 7-1: SerialNumber: syz [ 74.750894][ T2328] usb 7-1: config 0 descriptor?? [ 74.865696][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 74.865709][ T42] audit: type=1400 audit(1793055101.107:657): avc: denied { open } for pid=7958 comm="syz.0.452" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.870821][ T42] audit: type=1400 audit(1793055101.107:658): avc: denied { ioctl } for pid=7958 comm="syz.0.452" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.979030][ T7927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.981633][ T42] audit: type=1400 audit(1793055101.217:659): avc: denied { append } for pid=7925 comm="syz.2.444" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.040871][ T7965] ipt_REJECT: TCP_RESET invalid for non-tcp [ 75.067062][ T42] audit: type=1400 audit(1793055101.307:660): avc: denied { read } for pid=7964 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.068445][ T7962] ima: policy update failed [ 75.068515][ T42] audit: type=1802 audit(1793055101.307:661): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.454" res=0 errno=-22 [ 75.100439][ T7968] erspan0: entered promiscuous mode [ 75.100454][ T7968] erspan0: entered allmulticast mode [ 75.496539][ T42] audit: type=1400 audit(1793055101.737:662): avc: denied { listen } for pid=7986 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.499381][ T42] audit: type=1400 audit(1793055101.737:663): avc: denied { accept } for pid=7986 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.501620][ T65] usb 7-1: USB disconnect, device number 3 [ 75.746641][ T42] audit: type=1400 audit(1793055101.987:664): avc: denied { write } for pid=7992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.798690][ T42] audit: type=1400 audit(1793055102.037:665): avc: denied { write } for pid=7995 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.823112][ T2355] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.994121][ T2355] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 75.997127][ T2355] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.997153][ T2355] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 75.997166][ T2355] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 75.997186][ T2355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.385956][ T42] audit: type=1400 audit(1793055102.627:666): avc: denied { ioctl } for pid=7986 comm="syz.1.461" path="socket:[18403]" dev="sockfs" ino=18403 ioctlcmd=0x40049366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 76.386001][ T8013] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 76.774358][ T8024] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 76.963227][ T8040] fuse: Bad value for 'group_id' [ 76.963241][ T8040] fuse: Bad value for 'group_id' [ 76.963908][ T8040] __nla_validate_parse: 3 callbacks suppressed [ 76.963923][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 77.014505][ T8036] tipc: Enabled bearer , priority 12 [ 77.081310][ T8044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.097387][ T8047] FAULT_INJECTION: forcing a failure. [ 77.097387][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.097411][ T8047] CPU: 3 UID: 0 PID: 8047 Comm: syz.0.476 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 77.097428][ T8047] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 77.097432][ T8047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.097448][ T8047] Call Trace: [ 77.097460][ T8047] [ 77.097465][ T8047] dump_stack_lvl+0x100/0x190 [ 77.097504][ T8047] should_fail_ex.cold+0x5/0xa [ 77.097529][ T8047] strncpy_from_user+0x3b/0x2d0 [ 77.097558][ T8047] __do_sys_add_key+0xd4/0x460 [ 77.097582][ T8047] ? __pfx___do_sys_add_key+0x10/0x10 [ 77.097602][ T8047] do_syscall_64+0x123/0x790 [ 77.097628][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.097640][ T8047] RIP: 0033:0x7f7ad859f559 [ 77.097651][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.097662][ T8047] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 77.097681][ T8047] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 77.097689][ T8047] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000300 [ 77.097696][ T8047] RBP: 00007f7ad8636b20 R08: 000000000eee8449 R09: 0000000000000000 [ 77.097703][ T8047] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 77.097710][ T8047] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 77.097725][ T8047] [ 77.257042][ T8055] MINIX-fs: unable to read superblock [ 77.260572][ T8061] MINIX-fs: unable to read superblock [ 77.999683][ T8151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 78.102353][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 78.107375][ T8162] sctp: [Deprecated]: syz.0.487 (pid 8162) Use of int in maxseg socket option. [ 78.107375][ T8162] Use struct sctp_assoc_value instead [ 78.133186][ T65] tipc: Node number set to 2130706433 [ 78.199160][ T8171] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 78.204377][ T8171] CIFS: VFS: UNC: path must begin with // or \\ [ 78.204385][ T8171] Malformed UNC in devname [ 78.204385][ T8171] [ 78.204509][ T8171] CIFS: VFS: Malformed UNC in devname [ 78.269118][ T8182] tipc: Resetting bearer [ 78.274469][ T2355] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 78.274485][ T2355] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 78.292175][ T2355] cxacru 6-1:1.0: probe with driver cxacru failed with error -104 [ 78.359464][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.360450][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.432670][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.438847][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.457807][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 78.493288][ T5785] usb 6-1: USB disconnect, device number 7 [ 78.593313][ T5855] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.593856][ T5855] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.594131][ T5855] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.594150][ T5855] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.633984][ T8215] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 78.696681][ T8223] kernel profiling enabled (shift: 62) [ 78.696693][ T8223] profiling shift: 62 too large [ 78.703614][ T8225] netlink: 'syz.3.503': attribute type 2 has an invalid length. [ 78.973743][ T5785] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 79.051345][ T8267] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 79.051362][ T8267] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.052254][ T8267] vhci_hcd vhci_hcd.0: Device attached [ 79.052505][ T8269] usbip_core: unknown command [ 79.052512][ T8269] vhci_hcd: unknown pdu 0 [ 79.052517][ T8269] usbip_core: unknown command [ 79.053358][ T7329] vhci_hcd vhci_hcd.2: stop threads [ 79.053368][ T7329] vhci_hcd vhci_hcd.2: release socket [ 79.053378][ T7329] vhci_hcd vhci_hcd.2: disconnect device [ 79.056401][ T8267] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 79.056414][ T8267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.056450][ T8267] vhci_hcd vhci_hcd.0: Device attached [ 79.057029][ T8271] vhci_hcd: connection closed [ 79.058207][ T7329] vhci_hcd vhci_hcd.2: stop threads [ 79.058609][ T7329] vhci_hcd vhci_hcd.2: release socket [ 79.058621][ T7329] vhci_hcd vhci_hcd.2: disconnect device [ 79.133780][ T5785] usb 6-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 79.134587][ T5785] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.134603][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 79.136108][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.136120][ T5785] usb 6-1: Product: syz [ 79.136127][ T5785] usb 6-1: Manufacturer: syz [ 79.136134][ T5785] usb 6-1: SerialNumber: syz [ 79.137516][ T5785] usb 6-1: config 0 descriptor?? [ 79.138402][ T8218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.203093][ T5785] rc_core: IR keymap rc-streamzap not found [ 79.203106][ T5785] Registered IR keymap rc-empty [ 79.204079][ T5785] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 79.204912][ T5785] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 79.363308][ T2328] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.378593][ T5871] usb 6-1: USB disconnect, device number 8 [ 79.470276][ T8283] FAULT_INJECTION: forcing a failure. [ 79.470276][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.470297][ T8283] CPU: 2 UID: 0 PID: 8283 Comm: syz.0.518 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 79.470314][ T8283] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 79.470318][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.470324][ T8283] Call Trace: [ 79.470329][ T8283] [ 79.470333][ T8283] dump_stack_lvl+0x100/0x190 [ 79.470353][ T8283] should_fail_ex.cold+0x5/0xa [ 79.470370][ T8283] _copy_from_user+0x2e/0xd0 [ 79.470395][ T8283] copy_msghdr_from_user+0x9f/0x4c0 [ 79.470414][ T8283] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 79.470432][ T8283] ? lock_acquire+0x1d1/0x380 [ 79.470454][ T8283] ? get_pid_task+0x2a/0x250 [ 79.470471][ T8283] ___sys_sendmsg+0x106/0x1e0 [ 79.470485][ T8283] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.470499][ T8283] ? get_pid_task+0x106/0x250 [ 79.470519][ T8283] ? find_held_lock+0x2b/0x80 [ 79.470538][ T8283] __sys_sendmsg+0x160/0x210 [ 79.470556][ T8283] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.470585][ T8283] do_syscall_64+0x123/0x790 [ 79.470603][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.470614][ T8283] RIP: 0033:0x7f7ad859f559 [ 79.470623][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.470634][ T8283] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.470645][ T8283] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 79.470652][ T8283] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 79.470659][ T8283] RBP: 00007f7ad9441090 R08: 0000000000000000 R09: 0000000000000000 [ 79.470665][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.470687][ T8283] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 79.470703][ T8283] [ 79.514922][ T2328] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 79.517824][ T2328] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.517843][ T2328] usb 8-1: Product: syz [ 79.517854][ T2328] usb 8-1: Manufacturer: syz [ 79.517865][ T2328] usb 8-1: SerialNumber: syz [ 79.582154][ T8287] program syz.0.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.587533][ T8291] program syz.2.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.625325][ T8294] 9pnet_virtio: no channels available for device syz [ 79.625503][ T8294] 9pnet_virtio: no channels available for device syz [ 79.625682][ T8294] 9pnet_virtio: no channels available for device syz [ 79.625868][ T8294] 9pnet_virtio: no channels available for device syz [ 79.626046][ T8294] 9pnet_virtio: no channels available for device syz [ 79.626215][ T8294] 9pnet_virtio: no channels available for device syz [ 79.626394][ T8294] 9pnet_virtio: no channels available for device syz [ 79.626597][ T8294] 9pnet_virtio: no channels available for device syz [ 79.626772][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628019][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628245][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628421][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628610][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628796][ T8294] 9pnet_virtio: no channels available for device syz [ 79.628985][ T8294] 9pnet_virtio: no channels available for device syz [ 79.629156][ T8294] 9pnet_virtio: no channels available for device syz [ 79.630748][ T8294] 9pnet_virtio: no channels available for device syz [ 79.630926][ T8294] 9pnet_virtio: no channels available for device syz [ 79.631121][ T8294] 9pnet_virtio: no channels available for device syz [ 79.631285][ T8294] 9pnet_virtio: no channels available for device syz [ 79.631503][ T8294] 9pnet_virtio: no channels available for device syz [ 79.631671][ T8294] 9pnet_virtio: no channels available for device syz [ 79.631866][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632079][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632258][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632422][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632602][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632766][ T8294] 9pnet_virtio: no channels available for device syz [ 79.632944][ T8294] 9pnet_virtio: no channels available for device syz [ 79.635084][ T8294] 9pnet_virtio: no channels available for device syz [ 79.635271][ T8294] 9pnet_virtio: no channels available for device syz [ 79.635535][ T8294] 9pnet_virtio: no channels available for device syz [ 79.753204][ T2328] rtl8150 8-1:1.0: couldn't reset the device [ 79.753344][ T2328] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 79.757872][ T2328] usb 8-1: USB disconnect, device number 8 [ 80.096564][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 80.096578][ T42] audit: type=1400 audit(1793055106.337:700): avc: denied { ioctl } for pid=8273 comm="syz.3.515" path="/125/tracing/uprobe_events" dev="tracefs" ino=2075 ioctlcmd=0xc0189376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.324200][ T42] audit: type=1400 audit(1793055106.567:701): avc: denied { bind } for pid=8313 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.365193][ T8316] FAULT_INJECTION: forcing a failure. [ 80.365193][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 80.365214][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.2.528 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 80.365231][ T8316] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 80.365235][ T8316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.365242][ T8316] Call Trace: [ 80.365245][ T8316] [ 80.365250][ T8316] dump_stack_lvl+0x100/0x190 [ 80.365271][ T8316] should_fail_ex.cold+0x5/0xa [ 80.365288][ T8316] should_failslab+0xc2/0x120 [ 80.365317][ T8316] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 80.365339][ T8316] ? __alloc_skb+0x5b7/0x710 [ 80.365355][ T8316] ? __alloc_skb+0x140/0x710 [ 80.365373][ T8316] __alloc_skb+0x140/0x710 [ 80.365389][ T8316] ? __alloc_skb+0x5b7/0x710 [ 80.365405][ T8316] ? __pfx___alloc_skb+0x10/0x10 [ 80.365425][ T8316] netlink_alloc_large_skb+0x69/0x150 [ 80.365438][ T8316] netlink_sendmsg+0x755/0x10c0 [ 80.365451][ T8316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.365466][ T8316] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.365483][ T8316] ? ____sys_sendmsg+0xa99/0xc30 [ 80.365495][ T8316] ____sys_sendmsg+0xa99/0xc30 [ 80.365507][ T8316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.365534][ T8316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.365552][ T8316] ? lock_acquire+0x1d1/0x380 [ 80.365565][ T8316] ? get_pid_task+0x2a/0x250 [ 80.365582][ T8316] ___sys_sendmsg+0x190/0x1e0 [ 80.365597][ T8316] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.365610][ T8316] ? get_pid_task+0x106/0x250 [ 80.365631][ T8316] ? find_held_lock+0x2b/0x80 [ 80.365651][ T8316] __sys_sendmsg+0x160/0x210 [ 80.365668][ T8316] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.365693][ T8316] do_syscall_64+0x123/0x790 [ 80.365710][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.365722][ T8316] RIP: 0033:0x7f19aa79f559 [ 80.365731][ T8316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.365742][ T8316] RSP: 002b:00007f19ab5f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.365753][ T8316] RAX: ffffffffffffffda RBX: 00007f19aaa25fa0 RCX: 00007f19aa79f559 [ 80.365760][ T8316] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 80.365766][ T8316] RBP: 00007f19ab5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 80.365773][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.365779][ T8316] R13: 00007f19aaa26038 R14: 00007f19aaa25fa0 R15: 00007fffa7676e68 [ 80.365793][ T8316] [ 80.397612][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 80.538145][ T42] audit: type=1400 audit(1793055106.777:702): avc: denied { bind } for pid=8334 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.630485][ T8341] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 80.632908][ T8347] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 80.777482][ T8360] FAULT_INJECTION: forcing a failure. [ 80.777482][ T8360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.777504][ T8360] CPU: 2 UID: 0 PID: 8360 Comm: syz.1.539 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 80.777520][ T8360] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 80.777525][ T8360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.777531][ T8360] Call Trace: [ 80.777535][ T8360] [ 80.777539][ T8360] dump_stack_lvl+0x100/0x190 [ 80.777559][ T8360] should_fail_ex.cold+0x5/0xa [ 80.777576][ T8360] _copy_from_iter+0x1f4/0x1690 [ 80.777592][ T8360] ? __asan_memset+0x23/0x50 [ 80.777605][ T8360] ? __pfx__copy_from_iter+0x10/0x10 [ 80.777617][ T8360] ? __pfx___alloc_skb+0x10/0x10 [ 80.777640][ T8360] netlink_sendmsg+0x8f5/0x10c0 [ 80.777654][ T8360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.777674][ T8360] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.777692][ T8360] ? ____sys_sendmsg+0xa99/0xc30 [ 80.777704][ T8360] ____sys_sendmsg+0xa99/0xc30 [ 80.777726][ T8360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.777738][ T8360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.777755][ T8360] ? lock_acquire+0x1d1/0x380 [ 80.777768][ T8360] ? get_pid_task+0x2a/0x250 [ 80.777786][ T8360] ___sys_sendmsg+0x190/0x1e0 [ 80.777800][ T8360] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.777814][ T8360] ? get_pid_task+0x106/0x250 [ 80.777835][ T8360] ? find_held_lock+0x2b/0x80 [ 80.777855][ T8360] __sys_sendmsg+0x160/0x210 [ 80.777873][ T8360] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.777898][ T8360] do_syscall_64+0x123/0x790 [ 80.777915][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.777926][ T8360] RIP: 0033:0x7f82b119f559 [ 80.777936][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.777946][ T8360] RSP: 002b:00007f82b214e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.777958][ T8360] RAX: ffffffffffffffda RBX: 00007f82b1425fa0 RCX: 00007f82b119f559 [ 80.777965][ T8360] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 80.777972][ T8360] RBP: 00007f82b214e090 R08: 0000000000000000 R09: 0000000000000000 [ 80.777978][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.777984][ T8360] R13: 00007f82b1426038 R14: 00007f82b1425fa0 R15: 00007ffd92107dd8 [ 80.778000][ T8360] [ 80.851403][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 80.851528][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 80.851931][ T42] audit: type=1400 audit(1793055107.087:703): avc: denied { bind } for pid=8365 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.852188][ T42] audit: type=1400 audit(1793055107.087:704): avc: denied { name_bind } for pid=8365 comm="syz.1.541" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 80.852450][ T42] audit: type=1400 audit(1793055107.087:705): avc: denied { node_bind } for pid=8365 comm="syz.1.541" saddr=fe80::42 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 80.891935][ T42] audit: type=1400 audit(1793055107.127:706): avc: denied { listen } for pid=8370 comm="syz.1.543" laddr=127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.918431][ T8371] netlink: 10 bytes leftover after parsing attributes in process `syz.1.543'. [ 81.061586][ T8384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.547'. [ 81.072905][ T8388] FAULT_INJECTION: forcing a failure. [ 81.072905][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 81.072936][ T8388] CPU: 3 UID: 0 PID: 8388 Comm: syz.0.549 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 81.072963][ T8388] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 81.072970][ T8388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.072981][ T8388] Call Trace: [ 81.072986][ T8388] [ 81.072994][ T8388] dump_stack_lvl+0x100/0x190 [ 81.073044][ T8388] should_fail_ex.cold+0x5/0xa [ 81.073067][ T8388] ? __netlink_lookup+0x692/0x950 [ 81.073098][ T8388] should_failslab+0xc2/0x120 [ 81.073134][ T8388] kmem_cache_alloc_noprof+0x92/0x6a0 [ 81.073156][ T8388] ? netlink_deliver_tap+0x103/0xb50 [ 81.073180][ T8388] ? skb_clone+0x187/0x3f0 [ 81.073202][ T8388] skb_clone+0x187/0x3f0 [ 81.073220][ T8388] netlink_deliver_tap+0x82f/0xb50 [ 81.073252][ T8388] netlink_unicast+0x708/0x950 [ 81.073275][ T8388] ? __pfx_netlink_unicast+0x10/0x10 [ 81.073302][ T8388] netlink_sendmsg+0x9ac/0x10c0 [ 81.073326][ T8388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.073353][ T8388] ? selinux_socket_sendmsg+0x198/0x2f0 [ 81.073384][ T8388] ? ____sys_sendmsg+0xa99/0xc30 [ 81.073404][ T8388] ____sys_sendmsg+0xa99/0xc30 [ 81.073423][ T8388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.073444][ T8388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.073474][ T8388] ? lock_acquire+0x1d1/0x380 [ 81.073497][ T8388] ? get_pid_task+0x2a/0x250 [ 81.073526][ T8388] ___sys_sendmsg+0x190/0x1e0 [ 81.073551][ T8388] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.073572][ T8388] ? get_pid_task+0x106/0x250 [ 81.073609][ T8388] ? find_held_lock+0x2b/0x80 [ 81.073644][ T8388] __sys_sendmsg+0x160/0x210 [ 81.073674][ T8388] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.073719][ T8388] do_syscall_64+0x123/0x790 [ 81.073748][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.073767][ T8388] RIP: 0033:0x7f7ad859f559 [ 81.073782][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.073799][ T8388] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.073817][ T8388] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 81.073829][ T8388] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 81.073840][ T8388] RBP: 00007f7ad9441090 R08: 0000000000000000 R09: 0000000000000000 [ 81.073851][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.073861][ T8388] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 81.073889][ T8388] [ 81.168223][ T8392] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 81.182223][ T8395] vlan0: entered promiscuous mode [ 81.184193][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 81.201123][ T8392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 81.336692][ T42] audit: type=1400 audit(1793055107.577:707): avc: denied { map } for pid=8410 comm="syz.2.558" path="socket:[19398]" dev="sockfs" ino=19398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.336859][ T42] audit: type=1400 audit(1793055107.577:708): avc: denied { read } for pid=8410 comm="syz.2.558" path="socket:[19398]" dev="sockfs" ino=19398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.399987][ T8416] FAULT_INJECTION: forcing a failure. [ 81.399987][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 81.400009][ T8416] CPU: 2 UID: 0 PID: 8416 Comm: syz.1.560 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 81.400025][ T8416] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 81.400029][ T8416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.400036][ T8416] Call Trace: [ 81.400040][ T8416] [ 81.400044][ T8416] dump_stack_lvl+0x100/0x190 [ 81.400065][ T8416] should_fail_ex.cold+0x5/0xa [ 81.400082][ T8416] should_failslab+0xc2/0x120 [ 81.400097][ T8416] __kmalloc_noprof+0xfc/0x840 [ 81.400110][ T8416] ? __pfx___mutex_lock+0x10/0x10 [ 81.400127][ T8416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 81.400145][ T8416] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 81.400167][ T8416] genl_start+0x18f/0x970 [ 81.400181][ T8416] __netlink_dump_start+0x60e/0x990 [ 81.400201][ T8416] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 81.400216][ T8416] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 81.400233][ T8416] ? __pfx_genl_get_cmd+0x10/0x10 [ 81.400243][ T8416] ? __pfx_genl_start+0x10/0x10 [ 81.400254][ T8416] ? __pfx_genl_dumpit+0x10/0x10 [ 81.400266][ T8416] ? __pfx_genl_done+0x10/0x10 [ 81.400280][ T8416] ? __radix_tree_lookup+0x217/0x2b0 [ 81.400298][ T8416] genl_rcv_msg+0x471/0x800 [ 81.400312][ T8416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.400325][ T8416] ? __lock_acquire+0x5c0/0x1f40 [ 81.400338][ T8416] ? __pfx_ethnl_default_start+0x10/0x10 [ 81.400355][ T8416] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 81.400371][ T8416] ? __pfx_ethnl_default_done+0x10/0x10 [ 81.400392][ T8416] netlink_rcv_skb+0x159/0x420 [ 81.400403][ T8416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.400416][ T8416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.400433][ T8416] ? netlink_deliver_tap+0x1ae/0xb50 [ 81.400452][ T8416] genl_rcv+0x28/0x40 [ 81.400463][ T8416] netlink_unicast+0x668/0x950 [ 81.400476][ T8416] ? __pfx_netlink_unicast+0x10/0x10 [ 81.400491][ T8416] netlink_sendmsg+0x9ac/0x10c0 [ 81.400505][ T8416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.400519][ T8416] ? selinux_socket_sendmsg+0x198/0x2f0 [ 81.400537][ T8416] ? ____sys_sendmsg+0xa99/0xc30 [ 81.400549][ T8416] ____sys_sendmsg+0xa99/0xc30 [ 81.400561][ T8416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.400573][ T8416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.400590][ T8416] ? lock_acquire+0x1d1/0x380 [ 81.400602][ T8416] ? get_pid_task+0x2a/0x250 [ 81.400619][ T8416] ___sys_sendmsg+0x190/0x1e0 [ 81.400634][ T8416] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.400647][ T8416] ? get_pid_task+0x106/0x250 [ 81.400668][ T8416] ? find_held_lock+0x2b/0x80 [ 81.400702][ T8416] __sys_sendmsg+0x160/0x210 [ 81.400722][ T8416] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.400747][ T8416] do_syscall_64+0x123/0x790 [ 81.400764][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.400776][ T8416] RIP: 0033:0x7f82b119f559 [ 81.400785][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.400795][ T8416] RSP: 002b:00007f82b214e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.400807][ T8416] RAX: ffffffffffffffda RBX: 00007f82b1425fa0 RCX: 00007f82b119f559 [ 81.400814][ T8416] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 81.400821][ T8416] RBP: 00007f82b214e090 R08: 0000000000000000 R09: 0000000000000000 [ 81.400827][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.400833][ T8416] R13: 00007f82b1426038 R14: 00007f82b1425fa0 R15: 00007ffd92107dd8 [ 81.400848][ T8416] [ 81.653158][ T2355] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.783281][ T2355] usb 7-1: device descriptor read/64, error -71 [ 81.869511][ T8429] IPVS: Error joining to the multicast group [ 81.896910][ T8431] netlink: 'syz.3.563': attribute type 4 has an invalid length. [ 81.899125][ T8431] .`: renamed from bond0 [ 82.023691][ T2355] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.031086][ T8439] __nla_validate_parse: 3 callbacks suppressed [ 82.031104][ T8439] netlink: 72 bytes leftover after parsing attributes in process `syz.3.567'. [ 82.164036][ T2355] usb 7-1: device descriptor read/64, error -71 [ 82.283274][ T2355] usb usb7-port1: attempt power cycle [ 82.374641][ T8469] FAULT_INJECTION: forcing a failure. [ 82.374641][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 82.374663][ T8469] CPU: 3 UID: 0 PID: 8469 Comm: syz.0.570 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 82.374680][ T8469] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 82.374684][ T8469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.374690][ T8469] Call Trace: [ 82.374694][ T8469] [ 82.374699][ T8469] dump_stack_lvl+0x100/0x190 [ 82.374719][ T8469] should_fail_ex.cold+0x5/0xa [ 82.374735][ T8469] should_failslab+0xc2/0x120 [ 82.374751][ T8469] __kmalloc_noprof+0xfc/0x840 [ 82.374764][ T8469] ? __pfx___mutex_lock+0x10/0x10 [ 82.374780][ T8469] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 82.374797][ T8469] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 82.374814][ T8469] genl_start+0x18f/0x970 [ 82.374849][ T8469] __netlink_dump_start+0x60e/0x990 [ 82.374871][ T8469] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 82.374886][ T8469] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 82.374903][ T8469] ? __pfx_genl_get_cmd+0x10/0x10 [ 82.374914][ T8469] ? __pfx_genl_start+0x10/0x10 [ 82.374924][ T8469] ? __pfx_genl_dumpit+0x10/0x10 [ 82.374936][ T8469] ? __pfx_genl_done+0x10/0x10 [ 82.374949][ T8469] ? __radix_tree_lookup+0x217/0x2b0 [ 82.374968][ T8469] genl_rcv_msg+0x471/0x800 [ 82.374982][ T8469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.374995][ T8469] ? __lock_acquire+0x5c0/0x1f40 [ 82.375008][ T8469] ? __pfx_ethnl_default_start+0x10/0x10 [ 82.375025][ T8469] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 82.375042][ T8469] ? __pfx_ethnl_default_done+0x10/0x10 [ 82.375063][ T8469] netlink_rcv_skb+0x159/0x420 [ 82.375079][ T8469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.375092][ T8469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.375109][ T8469] ? netlink_deliver_tap+0x1ae/0xb50 [ 82.375128][ T8469] genl_rcv+0x28/0x40 [ 82.375140][ T8469] netlink_unicast+0x668/0x950 [ 82.375153][ T8469] ? __pfx_netlink_unicast+0x10/0x10 [ 82.375168][ T8469] netlink_sendmsg+0x9ac/0x10c0 [ 82.375181][ T8469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.375196][ T8469] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.375214][ T8469] ? ____sys_sendmsg+0xa99/0xc30 [ 82.375226][ T8469] ____sys_sendmsg+0xa99/0xc30 [ 82.375238][ T8469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.375250][ T8469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.375267][ T8469] ? lock_acquire+0x1d1/0x380 [ 82.375280][ T8469] ? get_pid_task+0x2a/0x250 [ 82.375297][ T8469] ___sys_sendmsg+0x190/0x1e0 [ 82.375312][ T8469] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.375325][ T8469] ? get_pid_task+0x106/0x250 [ 82.375347][ T8469] ? find_held_lock+0x2b/0x80 [ 82.375366][ T8469] __sys_sendmsg+0x160/0x210 [ 82.375384][ T8469] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.375409][ T8469] do_syscall_64+0x123/0x790 [ 82.375426][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.375458][ T8469] RIP: 0033:0x7f7ad859f559 [ 82.375468][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.375478][ T8469] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.375490][ T8469] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 82.375497][ T8469] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 82.375504][ T8469] RBP: 00007f7ad9441090 R08: 0000000000000000 R09: 0000000000000000 [ 82.375510][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.375516][ T8469] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 82.375531][ T8469] [ 82.381586][ T8470] fuse: Bad value for 'group_id' [ 82.381599][ T8470] fuse: Bad value for 'group_id' [ 82.548364][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.548463][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.548541][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.548766][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.548842][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.548915][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.549087][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.549166][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.549239][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.549402][ T8488] Dead loop on virtual device lo (net 33), fix it urgently! [ 82.633780][ T2355] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.654797][ T2355] usb 7-1: device descriptor read/8, error -71 [ 82.658525][ T8497] erspan1: entered promiscuous mode [ 82.723806][ T8511] tmpfs: Bad value for 'mpol' [ 82.724720][ T42] audit: type=1400 audit(1793055108.967:709): avc: denied { mount } for pid=8510 comm="syz.0.580" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.727322][ T8513] overlayfs: failed to resolve './file2': -2 [ 82.761192][ T8520] FAULT_INJECTION: forcing a failure. [ 82.761192][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 82.761214][ T8520] CPU: 0 UID: 0 PID: 8520 Comm: syz.0.581 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 82.761233][ T8520] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 82.761239][ T8520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.761246][ T8520] Call Trace: [ 82.761250][ T8520] [ 82.761254][ T8520] dump_stack_lvl+0x100/0x190 [ 82.761278][ T8520] should_fail_ex.cold+0x5/0xa [ 82.761303][ T8520] should_failslab+0xc2/0x120 [ 82.761325][ T8520] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.761341][ T8520] ? genl_start+0x1e8/0x970 [ 82.761362][ T8520] genl_start+0x1e8/0x970 [ 82.761384][ T8520] __netlink_dump_start+0x60e/0x990 [ 82.761413][ T8520] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 82.761433][ T8520] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 82.761458][ T8520] ? __pfx_genl_get_cmd+0x10/0x10 [ 82.761473][ T8520] ? __pfx_genl_start+0x10/0x10 [ 82.761488][ T8520] ? __pfx_genl_dumpit+0x10/0x10 [ 82.761504][ T8520] ? __pfx_genl_done+0x10/0x10 [ 82.761526][ T8520] ? __radix_tree_lookup+0x217/0x2b0 [ 82.761554][ T8520] genl_rcv_msg+0x471/0x800 [ 82.761578][ T8520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.761597][ T8520] ? __lock_acquire+0x5c0/0x1f40 [ 82.761620][ T8520] ? __pfx_ethnl_default_start+0x10/0x10 [ 82.761643][ T8520] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 82.761664][ T8520] ? __pfx_ethnl_default_done+0x10/0x10 [ 82.761692][ T8520] netlink_rcv_skb+0x159/0x420 [ 82.761707][ T8520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.761727][ T8520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.761757][ T8520] ? netlink_deliver_tap+0x1ae/0xb50 [ 82.761784][ T8520] genl_rcv+0x28/0x40 [ 82.761802][ T8520] netlink_unicast+0x668/0x950 [ 82.761825][ T8520] ? __pfx_netlink_unicast+0x10/0x10 [ 82.761848][ T8520] netlink_sendmsg+0x9ac/0x10c0 [ 82.761868][ T8520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.761891][ T8520] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.761920][ T8520] ? ____sys_sendmsg+0xa99/0xc30 [ 82.761938][ T8520] ____sys_sendmsg+0xa99/0xc30 [ 82.761956][ T8520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.761975][ T8520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.762000][ T8520] ? lock_acquire+0x1d1/0x380 [ 82.762027][ T8520] ? get_pid_task+0x2a/0x250 [ 82.762056][ T8520] ___sys_sendmsg+0x190/0x1e0 [ 82.762080][ T8520] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.762102][ T8520] ? get_pid_task+0x106/0x250 [ 82.762138][ T8520] ? find_held_lock+0x2b/0x80 [ 82.762172][ T8520] __sys_sendmsg+0x160/0x210 [ 82.762202][ T8520] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.762245][ T8520] do_syscall_64+0x123/0x790 [ 82.762273][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.762293][ T8520] RIP: 0033:0x7f7ad859f559 [ 82.762308][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.762324][ T8520] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.762342][ T8520] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 82.762354][ T8520] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 82.762365][ T8520] RBP: 00007f7ad9441090 R08: 0000000000000000 R09: 0000000000000000 [ 82.762376][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.762386][ T8520] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 82.762414][ T8520] [ 82.844840][ T8524] FAULT_INJECTION: forcing a failure. [ 82.844840][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 82.844871][ T8524] CPU: 3 UID: 0 PID: 8524 Comm: syz.0.582 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 82.844900][ T8524] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 82.844908][ T8524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.844920][ T8524] Call Trace: [ 82.844927][ T8524] [ 82.844934][ T8524] dump_stack_lvl+0x100/0x190 [ 82.844969][ T8524] should_fail_ex.cold+0x5/0xa [ 82.844998][ T8524] should_failslab+0xc2/0x120 [ 82.845025][ T8524] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.845049][ T8524] ? mas_preallocate+0xc22/0xee0 [ 82.845074][ T8524] mas_preallocate+0xc22/0xee0 [ 82.845095][ T8524] ? __pfx_mas_preallocate+0x10/0x10 [ 82.845121][ T8524] ? __asan_memset+0x23/0x50 [ 82.845141][ T8524] ? init_multi_vma_prep+0x33c/0x650 [ 82.845172][ T8524] commit_merge+0x3cc/0x20a0 [ 82.845203][ T8524] ? free_pgd_range+0x2a0/0x10d0 [ 82.845226][ T8524] ? __pfx_commit_merge+0x10/0x10 [ 82.845254][ T8524] ? up_write+0x2dc/0x5b0 [ 82.845295][ T8524] vma_expand+0xac5/0xeb0 [ 82.845316][ T8524] ? __pfx_vma_expand+0x10/0x10 [ 82.845340][ T8524] ? mas_prev+0xa4/0x100 [ 82.845368][ T8524] vma_merge_new_range+0x445/0xe10 [ 82.845394][ T8524] ? __pfx_vma_merge_new_range+0x10/0x10 [ 82.845416][ T8524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.845467][ T8524] __mmap_region+0xaab/0x34d0 [ 82.845489][ T8524] ? ima_match_policy+0x8b8/0x23e0 [ 82.845525][ T8524] ? ima_match_policy+0x8b8/0x23e0 [ 82.845551][ T8524] ? __pfx___mmap_region+0x10/0x10 [ 82.845589][ T8524] ? __lock_acquire+0x5c0/0x1f40 [ 82.845614][ T8524] ? __lock_acquire+0x5c0/0x1f40 [ 82.845675][ T8524] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 82.845752][ T8524] mmap_region+0x3db/0x6d0 [ 82.845771][ T8524] ? __pfx_mmap_region+0x10/0x10 [ 82.845790][ T8524] ? selinux_mmap_addr+0x2b/0x100 [ 82.845807][ T8524] ? bpf_lsm_mmap_addr+0x9/0x30 [ 82.845845][ T8524] ? security_mmap_addr+0x71/0x1e0 [ 82.845862][ T8524] ? __get_unmapped_area+0x255/0x3e0 [ 82.845886][ T8524] do_mmap+0x12c7/0x1c30 [ 82.845915][ T8524] ? lock_acquire+0x1d1/0x380 [ 82.845938][ T8524] ? __pfx_do_mmap+0x10/0x10 [ 82.845963][ T8524] ? __pfx___might_resched+0x10/0x10 [ 82.846022][ T8524] ? __pfx_down_write_killable+0x10/0x10 [ 82.846061][ T8524] vm_mmap_pgoff+0x28d/0x470 [ 82.846096][ T8524] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.846122][ T8524] ? __pfx_do_futex+0x10/0x10 [ 82.846157][ T8524] ksys_mmap_pgoff+0xe4/0x610 [ 82.846182][ T8524] ? __x64_sys_futex+0x358/0x4d0 [ 82.846203][ T8524] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 82.846228][ T8524] ? xfd_validate_state+0x129/0x190 [ 82.846256][ T8524] __x64_sys_mmap+0x125/0x190 [ 82.846283][ T8524] do_syscall_64+0x123/0x790 [ 82.846313][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.846333][ T8524] RIP: 0033:0x7f7ad859f559 [ 82.846350][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.846367][ T8524] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.846386][ T8524] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 82.846399][ T8524] RDX: 0000000002000007 RSI: 0000000000003000 RDI: 0000200000004000 [ 82.846411][ T8524] RBP: 00007f7ad8636b20 R08: 0000000000000005 R09: 00000000ec882000 [ 82.846424][ T8524] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 82.846435][ T8524] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 82.846463][ T8524] [ 82.963401][ T2355] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.983651][ T2355] usb 7-1: device descriptor read/8, error -71 [ 83.084768][ T2355] usb usb7-port1: unable to enumerate USB device [ 83.118629][ T8538] netlink: 44 bytes leftover after parsing attributes in process `syz.3.584'. [ 83.458156][ T8546] FAULT_INJECTION: forcing a failure. [ 83.458156][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 83.458179][ T8546] CPU: 2 UID: 0 PID: 8546 Comm: syz.1.586 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 83.458196][ T8546] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 83.458201][ T8546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.458208][ T8546] Call Trace: [ 83.458213][ T8546] [ 83.458217][ T8546] dump_stack_lvl+0x100/0x190 [ 83.458237][ T8546] should_fail_ex.cold+0x5/0xa [ 83.458254][ T8546] should_failslab+0xc2/0x120 [ 83.458270][ T8546] __kvmalloc_node_noprof+0x113/0x9b0 [ 83.458285][ T8546] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 83.458296][ T8546] ? bpf_int_jit_compile+0x8cf/0x1a40 [ 83.458313][ T8546] bpf_int_jit_compile+0x8cf/0x1a40 [ 83.458331][ T8546] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 83.458350][ T8546] ? bpf_prog_has_arena_insns+0x39a/0x430 [ 83.458382][ T8546] __bpf_prog_select_runtime+0x8d1/0xbf0 [ 83.458398][ T8546] ? __asan_memcpy+0x3c/0x60 [ 83.458411][ T8546] bpf_prepare_filter+0xd32/0x11e0 [ 83.458427][ T8546] ? __pfx_seccomp_check_filter+0x10/0x10 [ 83.458443][ T8546] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 83.458458][ T8546] ? __asan_memcpy+0x3c/0x60 [ 83.458470][ T8546] ? kmemdup_noprof+0x49/0x60 [ 83.458489][ T8546] bpf_prog_create_from_user+0x1df/0x2e0 [ 83.458503][ T8546] ? __pfx_seccomp_check_filter+0x10/0x10 [ 83.458516][ T8546] do_seccomp+0x82d/0x27d0 [ 83.458532][ T8546] ? __pfx_do_seccomp+0x10/0x10 [ 83.458547][ T8546] ? xfd_validate_state+0x129/0x190 [ 83.458564][ T8546] do_syscall_64+0x123/0x790 [ 83.458581][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.458592][ T8546] RIP: 0033:0x7f82b119f559 [ 83.458601][ T8546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.458612][ T8546] RSP: 002b:00007f82b214e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 83.458623][ T8546] RAX: ffffffffffffffda RBX: 00007f82b1425fa0 RCX: 00007f82b119f559 [ 83.458630][ T8546] RDX: 0000200000000240 RSI: 000000000000000a RDI: 0000000000000001 [ 83.458636][ T8546] RBP: 00007f82b1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 83.458642][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.458648][ T8546] R13: 00007f82b1426038 R14: 00007f82b1425fa0 R15: 00007ffd92107dd8 [ 83.458662][ T8546] [ 83.571132][ T8547] FAULT_INJECTION: forcing a failure. [ 83.571132][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 83.571155][ T8547] CPU: 2 UID: 0 PID: 8547 Comm: syz.1.586 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 83.571173][ T8547] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 83.571177][ T8547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.571184][ T8547] Call Trace: [ 83.571188][ T8547] [ 83.571192][ T8547] dump_stack_lvl+0x100/0x190 [ 83.571213][ T8547] should_fail_ex.cold+0x5/0xa [ 83.571230][ T8547] should_failslab+0xc2/0x120 [ 83.571246][ T8547] __kmalloc_cache_noprof+0x91/0x6d0 [ 83.571258][ T8547] ? lock_acquire+0x1d1/0x380 [ 83.571271][ T8547] ? tty_alloc_file+0x3f/0xa0 [ 83.571300][ T8547] ? __pfx_ptmx_open+0x10/0x10 [ 83.571314][ T8547] tty_alloc_file+0x3f/0xa0 [ 83.571327][ T8547] ptmx_open+0x61/0x360 [ 83.571342][ T8547] ? __pfx_ptmx_open+0x10/0x10 [ 83.571357][ T8547] chrdev_open+0x234/0x6a0 [ 83.571383][ T8547] ? __pfx_chrdev_open+0x10/0x10 [ 83.571401][ T8547] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 83.571450][ T8547] do_dentry_open+0x674/0x1470 [ 83.571468][ T8547] ? __pfx_chrdev_open+0x10/0x10 [ 83.571487][ T8547] vfs_open_consume+0xcc/0x460 [ 83.571501][ T8547] path_openat+0x1547/0x23f0 [ 83.571543][ T8547] ? __pfx_path_openat+0x10/0x10 [ 83.571565][ T8547] do_file_open+0x20e/0x430 [ 83.571583][ T8547] ? __pfx_do_file_open+0x10/0x10 [ 83.571610][ T8547] ? _raw_spin_unlock+0x28/0x50 [ 83.571625][ T8547] ? alloc_fd+0x471/0x7a0 [ 83.571648][ T8547] do_sys_openat2+0x163/0x1d0 [ 83.571658][ T8547] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.571669][ T8547] ? __sys_connect+0xe4/0x170 [ 83.571690][ T8547] __x64_sys_openat+0x12d/0x210 [ 83.571701][ T8547] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.571717][ T8547] do_syscall_64+0x123/0x790 [ 83.571735][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.571746][ T8547] RIP: 0033:0x7f82b119f559 [ 83.571756][ T8547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.571767][ T8547] RSP: 002b:00007f82b212d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.571779][ T8547] RAX: ffffffffffffffda RBX: 00007f82b1426090 RCX: 00007f82b119f559 [ 83.571786][ T8547] RDX: 0000000000022102 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 83.571793][ T8547] RBP: 00007f82b1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 83.571799][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.571805][ T8547] R13: 00007f82b1426128 R14: 00007f82b1426090 R15: 00007ffd92107dd8 [ 83.571820][ T8547] [ 83.574239][ T8547] program syz.1.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.678813][ T5792] Bluetooth: hci1: unexpected cc 0x041a length: 8 > 7 [ 83.678833][ T5792] Bluetooth: hci1: unexpected event for opcode 0x041a [ 83.681529][ T8549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.211888][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.589'. [ 84.229265][ T8560] FAULT_INJECTION: forcing a failure. [ 84.229265][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 84.229288][ T8560] CPU: 2 UID: 0 PID: 8560 Comm: syz.0.590 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 84.229304][ T8560] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 84.229309][ T8560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.229315][ T8560] Call Trace: [ 84.229318][ T8560] [ 84.229323][ T8560] dump_stack_lvl+0x100/0x190 [ 84.229343][ T8560] should_fail_ex.cold+0x5/0xa [ 84.229360][ T8560] should_failslab+0xc2/0x120 [ 84.229376][ T8560] __kmalloc_noprof+0xfc/0x840 [ 84.229389][ T8560] ? kasan_save_track+0x14/0x30 [ 84.229402][ T8560] ? ethnl_default_start+0x15a/0x3f0 [ 84.229422][ T8560] ethnl_default_start+0x15a/0x3f0 [ 84.229440][ T8560] ? __pfx_ethnl_default_start+0x10/0x10 [ 84.229458][ T8560] genl_start+0x601/0x970 [ 84.229473][ T8560] __netlink_dump_start+0x60e/0x990 [ 84.229492][ T8560] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 84.229507][ T8560] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 84.229524][ T8560] ? __pfx_genl_get_cmd+0x10/0x10 [ 84.229535][ T8560] ? __pfx_genl_start+0x10/0x10 [ 84.229546][ T8560] ? __pfx_genl_dumpit+0x10/0x10 [ 84.229557][ T8560] ? __pfx_genl_done+0x10/0x10 [ 84.229577][ T8560] ? __radix_tree_lookup+0x217/0x2b0 [ 84.229596][ T8560] genl_rcv_msg+0x471/0x800 [ 84.229610][ T8560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.229623][ T8560] ? __lock_acquire+0x5c0/0x1f40 [ 84.229637][ T8560] ? __pfx_ethnl_default_start+0x10/0x10 [ 84.229653][ T8560] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 84.229669][ T8560] ? __pfx_ethnl_default_done+0x10/0x10 [ 84.229690][ T8560] netlink_rcv_skb+0x159/0x420 [ 84.229701][ T8560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.229715][ T8560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.229732][ T8560] ? netlink_deliver_tap+0x1ae/0xb50 [ 84.229752][ T8560] genl_rcv+0x28/0x40 [ 84.229763][ T8560] netlink_unicast+0x668/0x950 [ 84.229776][ T8560] ? __pfx_netlink_unicast+0x10/0x10 [ 84.229791][ T8560] netlink_sendmsg+0x9ac/0x10c0 [ 84.229805][ T8560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.229819][ T8560] ? selinux_socket_sendmsg+0x198/0x2f0 [ 84.229837][ T8560] ? ____sys_sendmsg+0xa99/0xc30 [ 84.229850][ T8560] ____sys_sendmsg+0xa99/0xc30 [ 84.229862][ T8560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.229874][ T8560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.229891][ T8560] ? lock_acquire+0x1d1/0x380 [ 84.229904][ T8560] ? get_pid_task+0x2a/0x250 [ 84.229921][ T8560] ___sys_sendmsg+0x190/0x1e0 [ 84.229935][ T8560] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.229949][ T8560] ? get_pid_task+0x106/0x250 [ 84.229983][ T8560] ? find_held_lock+0x2b/0x80 [ 84.230005][ T8560] __sys_sendmsg+0x160/0x210 [ 84.230023][ T8560] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.230048][ T8560] do_syscall_64+0x123/0x790 [ 84.230065][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.230077][ T8560] RIP: 0033:0x7f7ad859f559 [ 84.230086][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.230096][ T8560] RSP: 002b:00007f7ad9441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.230107][ T8560] RAX: ffffffffffffffda RBX: 00007f7ad8825fa0 RCX: 00007f7ad859f559 [ 84.230114][ T8560] RDX: 0000000005000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 84.230121][ T8560] RBP: 00007f7ad9441090 R08: 0000000000000000 R09: 0000000000000000 [ 84.230127][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.230133][ T8560] R13: 00007f7ad8826038 R14: 00007f7ad8825fa0 R15: 00007ffe3b26b0c8 [ 84.230148][ T8560] [ 84.348841][ T8569] fuse: Bad value for 'fd' [ 84.486050][ T8587] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 84.502017][ T8589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.625081][ T5861] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.772862][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 84.772910][ T8603] bridge_slave_1: left allmulticast mode [ 84.772922][ T8603] bridge_slave_1: left promiscuous mode [ 84.773110][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.789781][ T5861] usb 8-1: Using ep0 maxpacket: 32 [ 84.795154][ T8603] bridge_slave_0: left allmulticast mode [ 84.795169][ T8603] bridge_slave_0: left promiscuous mode [ 84.795286][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.795854][ T5861] usb 8-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 84.798260][ T5861] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.798276][ T5861] usb 8-1: config 0 interface 0 has no altsetting 0 [ 84.798292][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.800572][ T5861] usb 8-1: config 0 descriptor?? [ 84.825638][ T8605] overlay: filesystem on ./bus not supported as upperdir [ 84.826142][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 85.217543][ T5861] usbhid 8-1:0.0: can't add hid device: -71 [ 85.217613][ T5861] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.222846][ T5861] usb 8-1: USB disconnect, device number 9 [ 85.285864][ T8631] netlink: 'syz.0.605': attribute type 63 has an invalid length. [ 85.285879][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 85.303929][ T65] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.344005][ T8631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 85.344034][ T8631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.344122][ T8631] vhci_hcd vhci_hcd.0: Device attached [ 85.344942][ T8635] vhci_hcd: cannot find the pending unlink 6 [ 85.398999][ T8639] netlink: 'syz.0.605': attribute type 63 has an invalid length. [ 85.399020][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 85.409924][ T8635] vhci_hcd: cannot find the pending unlink 6 [ 85.415079][ T8643] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 85.415100][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.415146][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 85.463725][ T65] usb 6-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 85.464519][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.465659][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.465671][ T65] usb 6-1: Product: syz [ 85.465678][ T65] usb 6-1: Manufacturer: syz [ 85.470831][ T65] navman 6-1:1.0: navman converter detected [ 85.475244][ T65] usb 6-1: navman converter now attached to ttyUSB0 [ 85.593137][ T2355] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 85.608617][ T8658] new mount options do not match the existing superblock, will be ignored [ 85.624709][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 85.624722][ T42] audit: type=1400 audit(1793055111.867:728): avc: denied { unmount } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.674753][ T5861] usb 6-1: USB disconnect, device number 9 [ 85.682567][ T5861] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 85.683662][ T5861] navman 6-1:1.0: device disconnected [ 85.689773][ T8662] veth0_to_team: entered allmulticast mode [ 85.696447][ T8662] input: syz0 as /devices/virtual/input/input19 [ 85.698144][ T42] audit: type=1400 audit(1793055111.937:729): avc: denied { setopt } for pid=8661 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.745151][ T42] audit: type=1400 audit(1793055111.987:730): avc: denied { mounton } for pid=8664 comm="syz.2.615" path="/143/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 85.969812][ T42] audit: type=1400 audit(1793055112.207:731): avc: denied { getopt } for pid=8699 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.118594][ T8646] vhci_hcd: connection closed [ 86.120517][ T5855] vhci_hcd vhci_hcd.0: stop threads [ 86.120532][ T5855] vhci_hcd vhci_hcd.0: release socket [ 86.121124][ T8635] vhci_hcd: connection reset by peer [ 86.121507][ T5855] vhci_hcd vhci_hcd.0: disconnect device [ 86.127537][ T5855] vhci_hcd vhci_hcd.0: stop threads [ 86.127551][ T5855] vhci_hcd vhci_hcd.0: release socket [ 86.127616][ T5855] vhci_hcd vhci_hcd.0: disconnect device [ 86.195589][ T8708] overlayfs: failed lookup in lower (newroot/147, name='bus', err=-40): overlapping layers [ 86.196588][ T8706] overlay: filesystem on ./file0 not supported as upperdir [ 86.299238][ T8722] vivid-002: ================= START STATUS ================= [ 86.299251][ T8722] vivid-002: RDS Tx I/O Mode: Controls [ 86.300420][ T8722] vivid-002: RDS Program ID: 32904 [ 86.300434][ T8722] vivid-002: RDS Program Type: 3 [ 86.300445][ T8722] vivid-002: RDS PS Name: [ 86.300455][ T8722] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 86.300467][ T8722] vivid-002: RDS Stereo: true [ 86.300476][ T8722] vivid-002: RDS Artificial Head: false [ 86.300487][ T8722] vivid-002: RDS Compressed: false [ 86.300496][ T8722] vivid-002: RDS Dynamic PTY: false [ 86.300506][ T8722] vivid-002: RDS Traffic Announcement: false [ 86.300517][ T8722] vivid-002: RDS Traffic Program: true [ 86.300527][ T8722] vivid-002: RDS Music: true [ 86.300537][ T8722] vivid-002: ================== END STATUS ================== [ 86.317225][ T8724] syzkaller0: renamed from gre0 [ 86.332320][ T8724] tipc: Disabling bearer [ 86.363560][ T8731] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 86.367309][ T8733] fuse: Bad value for 'rootmode' [ 86.513171][ T42] audit: type=1400 audit(1793055112.747:732): avc: denied { write } for pid=8736 comm="syz.3.629" name="/" dev="9p" ino=80740525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.514361][ T42] audit: type=1400 audit(1793055112.757:733): avc: denied { add_name } for pid=8736 comm="syz.3.629" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.514395][ T42] audit: type=1400 audit(1793055112.757:734): avc: denied { create } for pid=8736 comm="syz.3.629" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.514421][ T42] audit: type=1400 audit(1793055112.757:735): avc: denied { associate } for pid=8736 comm="syz.3.629" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.519462][ T42] audit: type=1400 audit(1793055112.757:736): avc: denied { write } for pid=8736 comm="syz.3.629" name="file0" dev="9p" ino=80740527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.519928][ T42] audit: type=1400 audit(1793055112.757:737): avc: denied { open } for pid=8736 comm="syz.3.629" path="/151/file0/file0" dev="9p" ino=80740527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.616364][ T8744] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 86.812450][ T8754] ublk_ctrl_add_dev: invalid recovery flags 10 [ 86.840903][ T8756] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 87.017417][ T8770] debugfs: Invalid uid '0x00000000ffffffff' [ 87.025153][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.641'. [ 87.043970][ T8771] ip6tnl0: entered allmulticast mode [ 87.229346][ T8784] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 87.245262][ T8784] syzkaller0: entered promiscuous mode [ 87.245282][ T8784] syzkaller0: entered allmulticast mode [ 87.264268][ T8736] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 87.339479][ T8793] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 87.341812][ T8794] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 87.415664][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 87.578239][ T8804] usb usb8: usbfs: process 8804 (syz.1.651) did not claim interface 0 before use [ 87.618390][ T8806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.718864][ T8814] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.654'. [ 88.030549][ T8819] net_ratelimit: 47 callbacks suppressed [ 88.030565][ T8819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.743302][ T2355] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 95.956230][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 95.956251][ T42] audit: type=1400 audit(1793055122.197:765): avc: denied { write } for pid=8829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.016764][ T42] audit: type=1400 audit(1793055122.257:766): avc: denied { write } for pid=8832 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.577680][ T8845] netlink: 120 bytes leftover after parsing attributes in process `syz.0.657'. [ 100.614534][ T42] audit: type=1400 audit(1793055126.857:767): avc: denied { shutdown } for pid=8848 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.654049][ T8855] overlayfs: unescaped trailing colons in lowerdir mount option. [ 100.671552][ T8857] /dev/sr0: Can't open blockdev [ 100.696028][ T8861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.718174][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 100.718195][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'. [ 100.735735][ T8867] ip_tables: iptables: counters copy to user failed while replacing table [ 100.751015][ T8869] tmpfs: Using encoding : utf8-12.1.0 [ 100.758566][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 100.784771][ T42] audit: type=1400 audit(1793055127.027:768): avc: denied { sqpoll } for pid=8874 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.788882][ T42] audit: type=1400 audit(1793055127.027:769): avc: denied { write } for pid=8874 comm="syz.3.672" path="socket:[24582]" dev="sockfs" ino=24582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.815022][ T8883] netlink: 'syz.1.671': attribute type 11 has an invalid length. [ 100.832871][ T8885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.856564][ T8887] xt_LOG: prefix is not null-terminated [ 100.862402][ T8888] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy on filesystem 'sda1' because it doesn't have stable inode numbers [ 100.862760][ T42] audit: type=1400 audit(1793055127.097:770): avc: denied { write } for pid=8879 comm="syz.2.674" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.889794][ T42] audit: type=1400 audit(1793055127.127:771): avc: denied { remove_name } for pid=8889 comm="syz.0.678" name="uac1.usb0" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.890045][ T42] audit: type=1400 audit(1793055127.127:772): avc: denied { rmdir } for pid=8889 comm="syz.0.678" name="uac1.usb0" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.926581][ T8881] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 100.976977][ T8896] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 101.353101][ T2355] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 101.503089][ T2355] usb 8-1: Using ep0 maxpacket: 8 [ 101.505616][ T2355] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 101.506484][ T2355] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.506504][ T2355] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.506515][ T2355] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024 [ 101.506528][ T2355] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 101.506539][ T2355] usb 8-1: config 1 interface 0 has no altsetting 0 [ 101.508141][ T2355] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.508152][ T2355] usb 8-1: Product: syz [ 101.508159][ T2355] usb 8-1: Manufacturer: syz [ 101.508166][ T2355] usb 8-1: SerialNumber: syz [ 101.510459][ T8899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.514702][ T2355] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 101.666219][ T8905] batman_adv: batadv0: Adding interface: dummy0 [ 101.666231][ T8905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.666246][ T8905] batman_adv: batadv0: Interface activated: dummy0 [ 101.675304][ T8907] batadv0: mtu less than device minimum [ 101.675897][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.676393][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.676870][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.677379][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.677864][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.678339][ T8907] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.717614][ T2355] usb 8-1: USB disconnect, device number 10 [ 102.494972][ T8914] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 102.505765][ T8934] bridge_slave_0: left allmulticast mode [ 102.505780][ T8934] bridge_slave_0: left promiscuous mode [ 102.505883][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.512437][ T8934] bridge_slave_1: left allmulticast mode [ 102.512454][ T8934] bridge_slave_1: left promiscuous mode [ 102.512551][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.528980][ T8934] bond0: (slave bond_slave_0): Releasing backup interface [ 102.533560][ T8934] bond_slave_0: left allmulticast mode [ 102.540275][ T8934] bond0: (slave bond_slave_1): Releasing backup interface [ 102.548106][ T8934] bond_slave_1: left allmulticast mode [ 102.551699][ T8934] team0: Port device team_slave_0 removed [ 102.559849][ T8934] team0: Port device team_slave_1 removed [ 102.567146][ T8935] veth0_vlan: left promiscuous mode [ 102.594940][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 102.626372][ T42] audit: type=1400 audit(1793055128.867:773): avc: denied { mount } for pid=8941 comm="syz.3.692" name="/" dev="ramfs" ino=24069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.632129][ T42] audit: type=1400 audit(1793055128.867:774): avc: denied { mounton } for pid=8941 comm="syz.3.692" path="/mnt" dev="ramfs" ino=23048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 102.634849][ T8942] jffs2: notice: (8942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.657493][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 102.757343][ T42] audit: type=1400 audit(1793055128.997:775): avc: denied { bind } for pid=8963 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.763179][ T42] audit: type=1400 audit(1793055128.997:776): avc: denied { write } for pid=8963 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.781663][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 102.781686][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'. [ 102.789368][ T8974] geneve4: entered promiscuous mode [ 102.789380][ T8974] geneve4: entered allmulticast mode [ 102.819477][ T8976] FAULT_INJECTION: forcing a failure. [ 102.819477][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 102.819498][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.3.703 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 102.819514][ T8976] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 102.819519][ T8976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.819525][ T8976] Call Trace: [ 102.819529][ T8976] [ 102.819534][ T8976] dump_stack_lvl+0x100/0x190 [ 102.819555][ T8976] should_fail_ex.cold+0x5/0xa [ 102.819573][ T8976] should_failslab+0xc2/0x120 [ 102.819590][ T8976] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.819603][ T8976] ? __pfx_map_id_range_down+0x10/0x10 [ 102.819619][ T8976] ? security_inode_alloc+0x3b/0x2c0 [ 102.819638][ T8976] security_inode_alloc+0x3b/0x2c0 [ 102.819654][ T8976] inode_init_always_gfp+0xc6f/0xfb0 [ 102.819674][ T8976] alloc_inode+0x8e/0x250 [ 102.819687][ T8976] alloc_anon_inode+0x28/0x3b0 [ 102.819700][ T8976] ioctx_alloc+0x4dc/0x21a0 [ 102.819716][ T8976] ? __might_fault+0xc5/0x140 [ 102.819733][ T8976] ? find_held_lock+0x2b/0x80 [ 102.819744][ T8976] ? __pfx_ioctx_alloc+0x10/0x10 [ 102.819760][ T8976] __x64_sys_io_setup+0xc9/0x220 [ 102.819774][ T8976] do_syscall_64+0x123/0x790 [ 102.819791][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.819803][ T8976] RIP: 0033:0x7f022ed9f559 [ 102.819812][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.819822][ T8976] RSP: 002b:00007f022fcbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 102.819834][ T8976] RAX: ffffffffffffffda RBX: 00007f022f025fa0 RCX: 00007f022ed9f559 [ 102.819840][ T8976] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 102.819847][ T8976] RBP: 00007f022ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.819853][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.819859][ T8976] R13: 00007f022f026038 R14: 00007f022f025fa0 R15: 00007fffd2dc2988 [ 102.819874][ T8976] [ 102.922031][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'. [ 103.042867][ T5792] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 103.065173][ T42] audit: type=1400 audit(1793055129.307:777): avc: denied { name_connect } for pid=8998 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 103.081653][ T42] audit: type=1400 audit(1793055129.317:778): avc: denied { read } for pid=8998 comm="syz.3.712" path="socket:[24825]" dev="sockfs" ino=24825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.179726][ T42] audit: type=1400 audit(1793055129.417:779): avc: denied { search } for pid=9013 comm="syz.0.716" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 103.221240][ T9016] FAULT_INJECTION: forcing a failure. [ 103.221240][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 103.221300][ T9016] CPU: 0 UID: 0 PID: 9016 Comm: syz.2.717 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 103.221318][ T9016] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 103.221322][ T9016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.221329][ T9016] Call Trace: [ 103.221334][ T9016] [ 103.221339][ T9016] dump_stack_lvl+0x100/0x190 [ 103.221360][ T9016] should_fail_ex.cold+0x5/0xa [ 103.221379][ T9016] should_failslab+0xc2/0x120 [ 103.221396][ T9016] __kmalloc_cache_noprof+0x91/0x6d0 [ 103.221408][ T9016] ? bdi_split_work_to_wbs+0x2d2/0xfd0 [ 103.221427][ T9016] bdi_split_work_to_wbs+0x2d2/0xfd0 [ 103.221445][ T9016] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 103.221465][ T9016] ? __pfx_down_write+0x10/0x10 [ 103.221483][ T9016] ? __pfx___might_resched+0x10/0x10 [ 103.221497][ T9016] sync_inodes_sb+0x226/0xc80 [ 103.221513][ T9016] ? down_read+0x136/0x4c0 [ 103.221523][ T9016] ? __pfx_down_read+0x10/0x10 [ 103.221537][ T9016] ? __pfx_sync_inodes_sb+0x10/0x10 [ 103.221556][ T9016] ? super_lock+0x14b/0x3f0 [ 103.221570][ T9016] ? find_held_lock+0x2b/0x80 [ 103.221580][ T9016] ? __iterate_supers+0x247/0x4a0 [ 103.221593][ T9016] ? __iterate_supers+0x247/0x4a0 [ 103.221610][ T9016] sync_inodes_one_sb+0x57/0x70 [ 103.221622][ T9016] __iterate_supers+0x3b7/0x4a0 [ 103.221636][ T9016] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 103.221649][ T9016] ? __pfx___iterate_supers+0x10/0x10 [ 103.221667][ T9016] ksys_sync+0x87/0xf0 [ 103.221678][ T9016] ? __pfx_ksys_sync+0x10/0x10 [ 103.221692][ T9016] ? do_syscall_64+0xae/0x790 [ 103.221708][ T9016] __do_sys_sync+0xe/0x20 [ 103.221719][ T9016] do_syscall_64+0x123/0x790 [ 103.221736][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.221747][ T9016] RIP: 0033:0x7f19aa79f559 [ 103.221756][ T9016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.221766][ T9016] RSP: 002b:00007f19ab5f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 103.221777][ T9016] RAX: ffffffffffffffda RBX: 00007f19aaa25fa0 RCX: 00007f19aa79f559 [ 103.221784][ T9016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.221790][ T9016] RBP: 00007f19aaa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 103.221797][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.221803][ T9016] R13: 00007f19aaa26038 R14: 00007f19aaa25fa0 R15: 00007fffa7676e68 [ 103.221818][ T9016] [ 103.320062][ T9024] SQUASHFS error: Failed to read block 0x0: -5 [ 103.320092][ T9024] unable to read squashfs_super_block [ 103.392340][ T9030] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 103.392357][ T9030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 103.395386][ T9030] vhci_hcd vhci_hcd.0: Device attached [ 103.396356][ T9031] vhci_hcd: connection closed [ 103.399906][ T5855] vhci_hcd vhci_hcd.2: stop threads [ 103.399920][ T5855] vhci_hcd vhci_hcd.2: release socket [ 103.399930][ T5855] vhci_hcd vhci_hcd.2: disconnect device [ 103.569754][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 103.759931][ T42] audit: type=1400 audit(1793055129.997:780): avc: denied { ioctl } for pid=9053 comm="syz.1.730" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x8004e500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.768933][ T9052] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 103.768944][ T9052] netlink: 'syz.3.731': attribute type 2 has an invalid length. [ 103.965002][ T9064] 0x000000000003-0x000000010001 : "" [ 103.965817][ T9064] FAULT_INJECTION: forcing a failure. [ 103.965817][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 103.965837][ T9064] CPU: 3 UID: 0 PID: 9064 Comm: syz.3.734 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 103.965855][ T9064] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 103.965860][ T9064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.965867][ T9064] Call Trace: [ 103.965872][ T9064] [ 103.965877][ T9064] dump_stack_lvl+0x100/0x190 [ 103.965898][ T9064] should_fail_ex.cold+0x5/0xa [ 103.965915][ T9064] should_failslab+0xc2/0x120 [ 103.965932][ T9064] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.965945][ T9064] ? kernfs_root+0xee/0x2a0 [ 103.965974][ T9064] ? __kernfs_new_node+0xd2/0xa10 [ 103.965990][ T9064] __kernfs_new_node+0xd2/0xa10 [ 103.966004][ T9064] ? kernfs_xattr_get+0x5f/0x80 [ 103.966018][ T9064] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.966033][ T9064] ? lock_acquire+0x1d1/0x380 [ 103.966047][ T9064] ? kernfs_root+0x23/0x2a0 [ 103.966060][ T9064] ? find_held_lock+0x2b/0x80 [ 103.966071][ T9064] ? kernfs_root+0xee/0x2a0 [ 103.966083][ T9064] ? kernfs_root+0xee/0x2a0 [ 103.966098][ T9064] kernfs_new_node+0x194/0x200 [ 103.966113][ T9064] ? __pfx_kernfs_new_node+0x10/0x10 [ 103.966131][ T9064] __kernfs_create_file+0x53/0x350 [ 103.966149][ T9064] sysfs_add_file_mode_ns+0x207/0x3c0 [ 103.966163][ T9064] internal_create_group+0x593/0xfb0 [ 103.966179][ T9064] ? __pfx_internal_create_group+0x10/0x10 [ 103.966193][ T9064] ? kernfs_create_link+0x1f1/0x280 [ 103.966211][ T9064] internal_create_groups+0x9d/0x150 [ 103.966226][ T9064] device_add+0x77a/0x1970 [ 103.966241][ T9064] ? lockdep_init_map_type+0x5c/0x250 [ 103.966255][ T9064] ? __pfx_device_add+0x10/0x10 [ 103.966268][ T9064] ? lockdep_init_map_type+0x5c/0x250 [ 103.966283][ T9064] ? __init_waitqueue_head+0xca/0x150 [ 103.966303][ T9064] add_mtd_device+0x92b/0x1820 [ 103.966319][ T9064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.966337][ T9064] ? __pfx_add_mtd_device+0x10/0x10 [ 103.966354][ T9064] mtd_add_partition+0x376/0x6a0 [ 103.966371][ T9064] ? __pfx_mtd_add_partition+0x10/0x10 [ 103.966386][ T9064] ? __might_fault+0xc5/0x140 [ 103.966403][ T9064] ? __might_fault+0xc5/0x140 [ 103.966425][ T9064] mtdchar_blkpg_ioctl+0x207/0x250 [ 103.966442][ T9064] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 103.966490][ T9064] mtdchar_ioctl+0x1670/0x1fd0 [ 103.966512][ T9064] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 103.966531][ T9064] ? lock_acquire+0x1d1/0x380 [ 103.966544][ T9064] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 103.966557][ T9064] ? rcu_is_watching+0x13/0xc0 [ 103.966569][ T9064] ? trace_contention_end+0x126/0x160 [ 103.966586][ T9064] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 103.966597][ T9064] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.966610][ T9064] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 103.966624][ T9064] ? __pfx___mutex_lock+0x10/0x10 [ 103.966640][ T9064] ? __fget_files+0x34/0x3d0 [ 103.966666][ T9064] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 103.966675][ T9064] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 103.966694][ T9064] __x64_sys_ioctl+0x18e/0x210 [ 103.966708][ T9064] do_syscall_64+0x123/0x790 [ 103.966725][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.966737][ T9064] RIP: 0033:0x7f022ed9f559 [ 103.966747][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.966757][ T9064] RSP: 002b:00007f022fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.966768][ T9064] RAX: ffffffffffffffda RBX: 00007f022f025fa0 RCX: 00007f022ed9f559 [ 103.966775][ T9064] RDX: 0000200000000180 RSI: 0000000000001269 RDI: 0000000000000004 [ 103.966782][ T9064] RBP: 00007f022ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.966788][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.966794][ T9064] R13: 00007f022f026038 R14: 00007f022f025fa0 R15: 00007fffd2dc2988 [ 103.966810][ T9064] [ 104.133871][ T42] audit: type=1400 audit(1793055130.377:781): avc: denied { bind } for pid=9066 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.134258][ T42] audit: type=1400 audit(1793055130.377:782): avc: denied { listen } for pid=9066 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.252848][ T9066] [ 104.253696][ T9066] ====================================================== [ 104.255989][ T9066] WARNING: possible circular locking dependency detected [ 104.258158][ T9066] syzkaller #0 Tainted: G L Y [ 104.260166][ T9075] qnx6: unable to read the first superblock [ 104.260213][ T9075] qnx6: unable to read the first superblock [ 104.260217][ T9075] qnx6: unable to read the first superblock [ 104.265695][ T9066] ------------------------------------------------------ [ 104.267860][ T9066] syz.2.735/9066 is trying to acquire lock: [ 104.269694][ T9066] ffff88802e11faf0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x539/0xd20 [ 104.273223][ T9066] [ 104.273223][ T9066] but task is already holding lock: [ 104.275497][ T9066] ffff888030c28ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 104.278283][ T9066] [ 104.278283][ T9066] which lock already depends on the new lock. [ 104.278283][ T9066] [ 104.281461][ T9066] [ 104.281461][ T9066] the existing dependency chain (in reverse order) is: [ 104.284246][ T9066] [ 104.284246][ T9066] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 104.286631][ T9066] lock_acquire+0x1d1/0x380 [ 104.288213][ T9066] lock_sock_nested+0x41/0xf0 [ 104.289837][ T9066] smc_listen_out+0xf2/0x4b0 [ 104.291457][ T9066] smc_listen_work+0x4c2/0x52e0 [ 104.293134][ T9066] process_one_work+0xac7/0x1b10 [ 104.294837][ T9066] worker_thread+0x5ef/0xe50 [ 104.296450][ T9066] kthread+0x373/0x450 [ 104.297908][ T9066] ret_from_fork+0x730/0xd60 [ 104.299515][ T9066] ret_from_fork_asm+0x1a/0x30 [ 104.301169][ T9066] [ 104.301169][ T9066] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 104.304349][ T9066] check_prev_add+0xeb/0xe60 [ 104.305946][ T9066] __lock_acquire+0x1528/0x1f40 [ 104.307622][ T9066] lock_acquire+0x1d1/0x380 [ 104.309203][ T9066] __flush_work+0x54d/0xd20 [ 104.310780][ T9066] cancel_work_sync+0xcc/0xf0 [ 104.312425][ T9066] smc_clcsock_release+0x5f/0xe0 [ 104.314141][ T9066] __smc_release+0x5c2/0x880 [ 104.315751][ T9066] smc_close_non_accepted+0xda/0x200 [ 104.317575][ T9066] smc_close_active+0x4ff/0x11a0 [ 104.319279][ T9066] __smc_release+0x634/0x880 [ 104.320888][ T9066] smc_release+0x1fc/0x620 [ 104.322448][ T9066] __sock_release+0xb3/0x260 [ 104.324075][ T9066] sock_close+0x1c/0x30 [ 104.325553][ T9066] __fput+0x3fb/0xb50 [ 104.326986][ T9066] fput_close_sync+0x118/0x250 [ 104.328647][ T9066] filp_close_sync+0x75/0xa0 [ 104.330252][ T9066] __range_close+0x4a6/0x8b0 [ 104.331870][ T9066] __x64_sys_close_range+0x1f8/0x430 [ 104.333749][ T9066] do_syscall_64+0x123/0x790 [ 104.335358][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.337353][ T9066] [ 104.337353][ T9066] other info that might help us debug this: [ 104.337353][ T9066] [ 104.340470][ T9066] Possible unsafe locking scenario: [ 104.340470][ T9066] [ 104.342762][ T9066] CPU0 CPU1 [ 104.344445][ T9066] ---- ---- [ 104.346113][ T9066] lock(sk_lock-AF_SMC/1); [ 104.347549][ T9066] lock((work_completion)(&new_smc->smc_listen_work)); [ 104.350430][ T9066] lock(sk_lock-AF_SMC/1); [ 104.352835][ T9066] lock((work_completion)(&new_smc->smc_listen_work)); [ 104.355240][ T9066] [ 104.355240][ T9066] *** DEADLOCK *** [ 104.355240][ T9066] [ 104.357735][ T9066] locks held by syz.2.735/9066: 3, last CPU#0: [ 104.359662][ T9066] #0: ffff88802a6b52c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 104.362886][ T9066] #1: ffff888030c28ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 104.365894][ T9066] #2: ffffffff8ffeb520 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xd20 [ 104.368712][ T9066] [ 104.368712][ T9066] stack backtrace: [ 104.370548][ T9066] CPU: 0 UID: 0 PID: 9066 Comm: syz.2.735 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 104.373893][ T9066] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 104.375725][ T9066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.378822][ T9066] Call Trace: [ 104.379887][ T9066] [ 104.380819][ T9066] dump_stack_lvl+0x100/0x190 [ 104.382301][ T9066] print_circular_bug.cold+0x178/0x1be [ 104.384010][ T9066] check_noncircular+0x146/0x160 [ 104.385563][ T9066] check_prev_add+0xeb/0xe60 [ 104.387020][ T9066] __lock_acquire+0x1528/0x1f40 [ 104.388548][ T9066] lock_acquire+0x1d1/0x380 [ 104.389983][ T9066] ? __flush_work+0x539/0xd20 [ 104.391477][ T9066] ? mark_held_locks+0x40/0x70 [ 104.392982][ T9066] ? __flush_work+0x539/0xd20 [ 104.394477][ T9066] __flush_work+0x54d/0xd20 [ 104.395913][ T9066] ? __flush_work+0x539/0xd20 [ 104.397387][ T9066] ? __pfx___flush_work+0x10/0x10 [ 104.398961][ T9066] ? __lock_acquire+0x5c0/0x1f40 [ 104.400521][ T9066] ? __pfx_wq_barrier_func+0x10/0x10 [ 104.402174][ T9066] ? __pfx___might_resched+0x10/0x10 [ 104.403836][ T9066] ? __smc_release+0x5ba/0x880 [ 104.405344][ T9066] cancel_work_sync+0xcc/0xf0 [ 104.406821][ T9066] smc_clcsock_release+0x5f/0xe0 [ 104.408382][ T9066] __smc_release+0x5c2/0x880 [ 104.409835][ T9066] ? __pfx_sock_def_readable+0x10/0x10 [ 104.411548][ T9066] smc_close_non_accepted+0xda/0x200 [ 104.413199][ T9066] smc_close_active+0x4ff/0x11a0 [ 104.414773][ T9066] __smc_release+0x634/0x880 [ 104.416246][ T9066] smc_release+0x1fc/0x620 [ 104.417646][ T9066] __sock_release+0xb3/0x260 [ 104.419099][ T9066] ? __pfx_sock_close+0x10/0x10 [ 104.420626][ T9066] sock_close+0x1c/0x30 [ 104.421930][ T9066] __fput+0x3fb/0xb50 [ 104.423196][ T9066] fput_close_sync+0x118/0x250 [ 104.424700][ T9066] ? __pfx_fput_close_sync+0x10/0x10 [ 104.426348][ T9066] filp_close_sync+0x75/0xa0 [ 104.427800][ T9066] __range_close+0x4a6/0x8b0 [ 104.429249][ T9066] __x64_sys_close_range+0x1f8/0x430 [ 104.430902][ T9066] ? __pfx___x64_sys_close_range+0x10/0x10 [ 104.432715][ T9066] do_syscall_64+0x123/0x790 [ 104.434184][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.436028][ T9066] RIP: 0033:0x7f19aa79f559 [ 104.437432][ T9066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.443391][ T9066] RSP: 002b:00007fffa7676fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.445986][ T9066] RAX: ffffffffffffffda RBX: 00007f19aaa27da0 RCX: 00007f19aa79f559 [ 104.448429][ T9066] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 104.450879][ T9066] RBP: 00007f19aaa27da0 R08: 00007f19aaa26038 R09: 0000000000000000 [ 104.453315][ T9066] R10: 000000000003fd64 R11: 0000000000000246 R12: 0000000000019989 [ 104.455827][ T9066] R13: 00007f19aaa25fac R14: 00000000000196aa R15: 00007fffa76770d0 [ 104.458276][ T9066]