last executing test programs: 14m16.578022848s ago: executing program 0 (id=9714): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}}, {{&(0x7f0000000f00)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0xfffe) 14m16.460965719s ago: executing program 0 (id=9716): r0 = socket$kcm(0x2, 0xa, 0x2) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 14m16.31985183s ago: executing program 0 (id=9717): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) 14m16.055338762s ago: executing program 0 (id=9718): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0) socket$kcm(0x10, 0x2, 0x4) listen(0xffffffffffffffff, 0x402) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xffffffffffff8000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x40440d1) r1 = socket(0x2a, 0x2, 0x9) bind$inet(r1, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 14m15.860039694s ago: executing program 0 (id=9721): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) 14m15.531760226s ago: executing program 0 (id=9723): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x140}, 0xc0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x80) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 14m15.531587346s ago: executing program 32 (id=9723): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x140}, 0xc0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x80) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 8.439948764s ago: executing program 1 (id=12123): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2}) 8.209910996s ago: executing program 1 (id=12124): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 6.837772607s ago: executing program 1 (id=12126): unshare(0x22020600) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000080)='dctcp', 0x1000, &(0x7f00000001c0)={@align=0xe21, {0xfc, 0x40, 0x7, 0x7fffffff}}, 0xa948, &(0x7f0000000200), &(0x7f0000000240)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x40100) read(r1, &(0x7f0000000040)=""/21, 0x15) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff03, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 5.911556254s ago: executing program 1 (id=12129): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x1, "bd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.719411466s ago: executing program 1 (id=12130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.463258407s ago: executing program 1 (id=12131): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) 4.032356098s ago: executing program 2 (id=12133): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.78275271s ago: executing program 2 (id=12134): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x10, 0x3, 0x9) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6478}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x41880, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) 1.100225851s ago: executing program 2 (id=12135): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, &(0x7f0000000280)="9c", 0x1) 692.192385ms ago: executing program 2 (id=12136): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 268.803298ms ago: executing program 2 (id=12137): sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 0s ago: executing program 2 (id=12138): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): 95] CPU: 1 UID: 0 PID: 2295 Comm: syz.1.10302 Tainted: G W syzkaller #0 PREEMPT [10022.402883][ T2295] Tainted: [W]=WARN [10022.402902][ T2295] Hardware name: linux,dummy-virt (DT) [10022.402923][ T2295] Call trace: [10022.402946][ T2295] show_stack+0x18/0x24 (C) [10022.403054][ T2295] dump_stack_lvl+0x60/0x80 [10022.403091][ T2295] dump_stack+0x18/0x24 [10022.403125][ T2295] should_fail_ex+0x1e0/0x238 [10022.403163][ T2295] should_failslab+0x54/0x80 [10022.403198][ T2295] kmem_cache_alloc_noprof+0x54/0x458 [10022.403236][ T2295] taskstats_exit+0x19c/0x454 [10022.403274][ T2295] do_exit+0x188/0x94c [10022.403313][ T2295] do_group_exit+0x34/0x90 [10022.403350][ T2295] get_signal+0x79c/0x860 [10022.403383][ T2295] arch_do_signal_or_restart+0x98/0x3dc [10022.403418][ T2295] exit_to_user_mode_loop+0x114/0x19c [10022.403462][ T2295] el0_svc+0x1f0/0x1fc [10022.403503][ T2295] el0t_64_sync_handler+0xa0/0xe4 [10022.403540][ T2295] el0t_64_sync+0x1a4/0x1a8 [10025.518623][ T2329] ip_tables: iptables: counters copy to user failed while replacing table [10026.306701][ T2347] psci: CPU1 killed (polled 0 ms) [10032.107713][ T2382] Soft offlining pfn 0x41f48 at process virtual address 0x20fff000 [10032.158401][ T2382] Memory failure: 0x41f48: unhandlable page. [10034.487694][ T2404] FAULT_INJECTION: forcing a failure. [10034.487694][ T2404] name failslab, interval 1, probability 0, space 0, times 0 [10034.501998][ T2404] CPU: 0 UID: 0 PID: 2404 Comm: syz.1.10348 Tainted: G W syzkaller #0 PREEMPT [10034.502221][ T2404] Tainted: [W]=WARN [10034.502261][ T2404] Hardware name: linux,dummy-virt (DT) [10034.502303][ T2404] Call trace: [10034.502339][ T2404] show_stack+0x18/0x24 (C) [10034.502460][ T2404] dump_stack_lvl+0x60/0x80 [10034.502539][ T2404] dump_stack+0x18/0x24 [10034.502612][ T2404] should_fail_ex+0x1e0/0x238 [10034.502689][ T2404] should_failslab+0x54/0x80 [10034.502758][ T2404] __kmalloc_noprof+0xac/0x520 [10034.502833][ T2404] tomoyo_realpath_from_path+0x44/0x1d4 [10034.502922][ T2404] tomoyo_check_open_permission+0x128/0x190 [10034.503030][ T2404] tomoyo_file_open+0x30/0x3c [10034.503110][ T2404] security_file_open+0x74/0x148 [10034.503182][ T2404] do_dentry_open+0xe0/0x4fc [10034.503247][ T2404] vfs_open+0x2c/0xe8 [10034.503323][ T2404] path_openat+0x5b4/0x960 [10034.503394][ T2404] do_file_open+0xb0/0x168 [10034.503468][ T2404] do_sys_openat2+0x84/0x104 [10034.503542][ T2404] __arm64_sys_openat+0x64/0xc0 [10034.503621][ T2404] invoke_syscall+0x54/0x10c [10034.503697][ T2404] el0_svc_common.constprop.0+0x40/0xe0 [10034.503771][ T2404] do_el0_svc+0x1c/0x34 [10034.503843][ T2404] el0_svc+0x38/0x1fc [10034.503931][ T2404] el0t_64_sync_handler+0xa0/0xe4 [10034.504009][ T2404] el0t_64_sync+0x1a4/0x1a8 [10034.550031][ T2404] ERROR: Out of memory at tomoyo_realpath_from_path. [10034.801794][ T2411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10053.890825][T31929] process 32397 (syz.1.9375) no longer affine to cpu1 [10053.891535][T31929] process 32398 (syz.1.9375) no longer affine to cpu1 [10053.891775][T31929] process 32602 (syz.1.9461) no longer affine to cpu1 [10054.583015][T15080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10054.695690][T15080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10054.816948][T15080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10054.917235][T15080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10056.459306][T31776] smc: removing ib device syz0 [10056.480023][T15080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10056.510511][T15080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10056.517931][T15080] bond0 (unregistering): Released all slaves [10057.895017][T15080] hsr_slave_0: left promiscuous mode [10057.961847][T15080] veth1_macvtap: left promiscuous mode [10057.969626][T15080] veth0_macvtap: left promiscuous mode [10057.970180][T15080] veth1_vlan: left promiscuous mode [10057.970490][T15080] veth0_vlan: left promiscuous mode [10058.868319][ T3222] 8021q: adding VLAN 0 to HW filter on device eth5 [10061.244544][ T3222] 8021q: adding VLAN 0 to HW filter on device eth6 [10061.474875][ T2500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10061.494519][ T2500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10062.870387][ T3222] 8021q: adding VLAN 0 to HW filter on device eth7 [10063.018731][ T2500] hsr_slave_0: entered promiscuous mode [10063.025246][ T2500] hsr_slave_1: entered promiscuous mode [10063.034252][ T2500] debugfs: 'hsr0' already exists in 'hsr' [10063.035059][ T2500] Cannot create hsr debugfs directory [10067.393277][ T2500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [10067.424622][ T2500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10067.445919][ T2500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [10067.477655][ T2500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10067.493562][ T2500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [10067.520844][ T2500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10067.531698][ T2500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [10067.557188][ T2500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10068.686550][ T2500] 8021q: adding VLAN 0 to HW filter on device bond0 [10071.993179][ T2500] veth0_vlan: entered promiscuous mode [10072.031624][ T2500] veth1_vlan: entered promiscuous mode [10072.183581][ T2500] veth0_macvtap: entered promiscuous mode [10072.207913][ T2500] veth1_macvtap: entered promiscuous mode [10072.325994][T14291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10072.326367][T14291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10072.326624][T14291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10072.326782][T14291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10084.816203][ T2757] FAULT_INJECTION: forcing a failure. [10084.816203][ T2757] name fail_futex, interval 1, probability 0, space 0, times 0 [10084.818197][ T2757] CPU: 0 UID: 0 PID: 2757 Comm: syz.2.10435 Tainted: G W syzkaller #0 PREEMPT [10084.818354][ T2757] Tainted: [W]=WARN [10084.818392][ T2757] Hardware name: linux,dummy-virt (DT) [10084.818434][ T2757] Call trace: [10084.818470][ T2757] show_stack+0x18/0x24 (C) [10084.818577][ T2757] dump_stack_lvl+0x60/0x80 [10084.818650][ T2757] dump_stack+0x18/0x24 [10084.818719][ T2757] should_fail_ex+0x1e0/0x238 [10084.818794][ T2757] should_fail+0x14/0x40 [10084.818863][ T2757] get_futex_key+0xdc/0x620 [10084.818946][ T2757] futex_wait_requeue_pi+0xf0/0x440 [10084.819080][ T2757] do_futex+0x11c/0x210 [10084.819145][ T2757] __arm64_sys_futex+0x100/0x1a0 [10084.819214][ T2757] invoke_syscall+0x54/0x10c [10084.819285][ T2757] el0_svc_common.constprop.0+0x40/0xe0 [10084.819355][ T2757] do_el0_svc+0x1c/0x34 [10084.819427][ T2757] el0_svc+0x38/0x1fc [10084.819544][ T2757] el0t_64_sync_handler+0xa0/0xe4 [10084.819627][ T2757] el0t_64_sync+0x1a4/0x1a8 [10088.035627][ T2786] ptrace attach of "/syz-executor exec"[2787] was attempted by "/syz-executor exec"[2786] [10088.056866][ T2785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10089.803425][ T2815] FAULT_INJECTION: forcing a failure. [10089.803425][ T2815] name failslab, interval 1, probability 0, space 0, times 0 [10089.809707][ T2815] CPU: 0 UID: 0 PID: 2815 Comm: syz.2.10460 Tainted: G W syzkaller #0 PREEMPT [10089.809854][ T2815] Tainted: [W]=WARN [10089.809892][ T2815] Hardware name: linux,dummy-virt (DT) [10089.809948][ T2815] Call trace: [10089.809984][ T2815] show_stack+0x18/0x24 (C) [10089.810092][ T2815] dump_stack_lvl+0x60/0x80 [10089.810168][ T2815] dump_stack+0x18/0x24 [10089.810239][ T2815] should_fail_ex+0x1e0/0x238 [10089.810319][ T2815] should_failslab+0x54/0x80 [10089.810393][ T2815] __kvmalloc_node_noprof+0xc8/0x65c [10089.810475][ T2815] tun_attach.isra.0+0x204/0x520 [10089.810549][ T2815] __tun_chr_ioctl+0x498/0x16e0 [10089.810624][ T2815] tun_chr_ioctl+0x14/0x5c [10089.810695][ T2815] __arm64_sys_ioctl+0xa8/0x100 [10089.810769][ T2815] invoke_syscall+0x54/0x10c [10089.810840][ T2815] el0_svc_common.constprop.0+0x40/0xe0 [10089.810910][ T2815] do_el0_svc+0x1c/0x34 [10089.811021][ T2815] el0_svc+0x38/0x1fc [10089.811104][ T2815] el0t_64_sync_handler+0xa0/0xe4 [10089.811179][ T2815] el0t_64_sync+0x1a4/0x1a8 [10089.879961][ T2817] fuse: Bad value for 'fd' [10090.587816][ T2829] fuse: Bad value for 'fd' [10098.506817][ T2924] xt_connbytes: Forcing CT accounting to be enabled [10098.509473][ T2924] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [10098.921597][ T2932] fuse: Bad value for 'group_id' [10098.932836][ T2932] fuse: Bad value for 'group_id' [10099.311521][ T2940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10099.566702][ T2945] fuse: Bad value for 'group_id' [10099.572842][ T2945] fuse: Bad value for 'group_id' [10102.234417][ T2958] fuse: Bad value for 'group_id' [10102.234697][ T2958] fuse: Bad value for 'group_id' [10103.857759][ T2970] FAULT_INJECTION: forcing a failure. [10103.857759][ T2970] name fail_futex, interval 1, probability 0, space 0, times 0 [10103.862667][ T2970] CPU: 0 UID: 0 PID: 2970 Comm: syz.1.10529 Tainted: G W syzkaller #0 PREEMPT [10103.862820][ T2970] Tainted: [W]=WARN [10103.862855][ T2970] Hardware name: linux,dummy-virt (DT) [10103.862892][ T2970] Call trace: [10103.862923][ T2970] show_stack+0x18/0x24 (C) [10103.863066][ T2970] dump_stack_lvl+0x60/0x80 [10103.863136][ T2970] dump_stack+0x18/0x24 [10103.863203][ T2970] should_fail_ex+0x1e0/0x238 [10103.863274][ T2970] should_fail+0x14/0x40 [10103.863339][ T2970] get_futex_key+0xdc/0x620 [10103.863408][ T2970] futex_wait_setup+0x54/0x240 [10103.863478][ T2970] __futex_wait+0xd4/0x180 [10103.863546][ T2970] futex_wait+0x88/0x110 [10103.863614][ T2970] do_futex+0x1a0/0x210 [10103.863683][ T2970] __arm64_sys_futex+0x100/0x1a0 [10103.863751][ T2970] invoke_syscall+0x54/0x10c [10103.863819][ T2970] el0_svc_common.constprop.0+0x40/0xe0 [10103.863887][ T2970] do_el0_svc+0x1c/0x34 [10103.863957][ T2970] el0_svc+0x38/0x1fc [10103.864034][ T2970] el0t_64_sync_handler+0xa0/0xe4 [10103.864105][ T2970] el0t_64_sync+0x1a4/0x1a8 [10109.090676][ T3026] FAULT_INJECTION: forcing a failure. [10109.090676][ T3026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10109.096883][ T3026] CPU: 0 UID: 0 PID: 3026 Comm: syz.1.10555 Tainted: G W syzkaller #0 PREEMPT [10109.097052][ T3026] Tainted: [W]=WARN [10109.097090][ T3026] Hardware name: linux,dummy-virt (DT) [10109.097132][ T3026] Call trace: [10109.097166][ T3026] show_stack+0x18/0x24 (C) [10109.097278][ T3026] dump_stack_lvl+0x60/0x80 [10109.097356][ T3026] dump_stack+0x18/0x24 [10109.097428][ T3026] should_fail_ex+0x1e0/0x238 [10109.097515][ T3026] should_fail+0x14/0x40 [10109.097586][ T3026] should_fail_usercopy+0x1c/0x40 [10109.097662][ T3026] strncpy_from_user+0x24/0x1c0 [10109.097738][ T3026] do_getname+0x5c/0x1a0 [10109.097817][ T3026] getname_flags+0x14/0x20 [10109.097890][ T3026] do_sys_openat2+0x5c/0x104 [10109.097968][ T3026] __arm64_sys_openat+0x64/0xc0 [10109.098043][ T3026] invoke_syscall+0x54/0x10c [10109.098115][ T3026] el0_svc_common.constprop.0+0x40/0xe0 [10109.098187][ T3026] do_el0_svc+0x1c/0x34 [10109.098256][ T3026] el0_svc+0x38/0x1fc [10109.098336][ T3026] el0t_64_sync_handler+0xa0/0xe4 [10109.098412][ T3026] el0t_64_sync+0x1a4/0x1a8 [10115.050149][ T3073] ip6_tables: ip6tables: counters copy to user failed while replacing table [10120.314232][T27252] Process accounting resumed [10122.801802][ T3172] fuse: Bad value for 'fd' [10123.178211][ T3183] FAULT_INJECTION: forcing a failure. [10123.178211][ T3183] name failslab, interval 1, probability 0, space 0, times 0 [10123.180214][ T3183] CPU: 0 UID: 0 PID: 3183 Comm: syz.1.10614 Tainted: G W syzkaller #0 PREEMPT [10123.180353][ T3183] Tainted: [W]=WARN [10123.180388][ T3183] Hardware name: linux,dummy-virt (DT) [10123.180428][ T3183] Call trace: [10123.180463][ T3183] show_stack+0x18/0x24 (C) [10123.180562][ T3183] dump_stack_lvl+0x60/0x80 [10123.180633][ T3183] dump_stack+0x18/0x24 [10123.180699][ T3183] should_fail_ex+0x1e0/0x238 [10123.180775][ T3183] should_failslab+0x54/0x80 [10123.180843][ T3183] kmem_cache_alloc_noprof+0x54/0x458 [10123.180923][ T3183] mas_preallocate+0x40c/0x434 [10123.180998][ T3183] __split_vma+0xf8/0x350 [10123.181077][ T3183] vms_gather_munmap_vmas+0x54/0x330 [10123.181150][ T3183] do_vmi_align_munmap+0xcc/0x180 [10123.181214][ T3183] do_vmi_munmap+0xac/0x160 [10123.181277][ T3183] __vm_munmap+0xac/0x13c [10123.181340][ T3183] __arm64_sys_munmap+0x24/0x38 [10123.181407][ T3183] invoke_syscall+0x54/0x10c [10123.181474][ T3183] el0_svc_common.constprop.0+0x40/0xe0 [10123.181540][ T3183] do_el0_svc+0x1c/0x34 [10123.181606][ T3183] el0_svc+0x38/0x1fc [10123.181680][ T3183] el0t_64_sync_handler+0xa0/0xe4 [10123.181756][ T3183] el0t_64_sync+0x1a4/0x1a8 [10123.427210][ T3187] fuse: Invalid rootmode [10126.019548][ T28] audit: type=1326 audit(2000003477.580:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3240 comm="syz.2.10637" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x0 [10128.660762][ T28] audit: type=1326 audit(2000003480.220:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3251 comm="syz.2.10641" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x0 [10131.557071][ T3270] ip6_tables: ip6tables: counters copy to user failed while replacing table [10131.781476][ T3277] VFS: Mount too revealing [10132.123162][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10653'. [10132.421188][ T3285] fuse: Unknown parameter 'user_id00000000000000000000' [10132.947439][ T3295] fuse: Unknown parameter 'user_id00000000000000000000' PÚÿÿÿ-D devtmpfs./dev/consolesit0 ÿ€Iš$d/‹.¬»¬ª”üÿ ÛŸ{‡N¼`tunl0€ [10133.789789][ T3310] fuse: Bad value for 'fd' [10140.369553][ T3389] fuse: Unknown parameter '0xffffffffffffffff' [10140.851968][ T3405] fuse: Unknown parameter '0xffffffffffffffff' [10143.905030][ T3420] fuse: Unknown parameter 'fd0x0000000000000004' [10143.981467][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10704'. [10146.678130][ T3439] fuse: Unknown parameter 'fd0x0000000000000004' [10148.785031][ T3451] fuse: Unknown parameter 'fd0xffffffffffffffff' [10152.689147][ T3468] fuse: Bad value for 'fd' [10161.494749][ T3507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10735'. [10163.981197][ T3525] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10742'. [10175.409426][ T28] audit: type=1326 audit(2000003526.970:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.418401][ T28] audit: type=1326 audit(2000003526.980:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.424262][ T28] audit: type=1326 audit(2000003526.980:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.424709][ T28] audit: type=1326 audit(2000003526.990:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.425133][ T28] audit: type=1326 audit(2000003526.990:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.425333][ T28] audit: type=1326 audit(2000003526.990:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.449238][ T28] audit: type=1326 audit(2000003526.980:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.449606][ T28] audit: type=1326 audit(2000003527.010:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10175.449877][ T28] audit: type=1326 audit(2000003527.010:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3610 comm="syz.2.10777" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10178.405349][ T28] audit: type=1326 audit(2000003529.970:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3622 comm="syz.1.10782" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10188.210082][ T3659] tap0: tun_chr_ioctl cmd 2147767521 [10219.703744][ T28] kauditd_printk_skb: 28 callbacks suppressed [10219.704151][ T28] audit: type=1326 audit(2000003571.260:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.704430][ T28] audit: type=1326 audit(2000003571.270:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.716141][ T28] audit: type=1326 audit(2000003571.270:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.716601][ T28] audit: type=1326 audit(2000003571.270:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.716833][ T28] audit: type=1326 audit(2000003571.270:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.717060][ T28] audit: type=1326 audit(2000003571.270:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.717267][ T28] audit: type=1326 audit(2000003571.270:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.748349][ T28] audit: type=1326 audit(2000003571.300:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10219.748875][ T28] audit: type=1326 audit(2000003571.300:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3789 comm="syz.2.10851" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbdf79368 code=0x7ffc0000 [10226.030777][ T28] audit: type=1326 audit(2000003577.590:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3812 comm="syz.2.10861" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf79368 code=0x0 [10245.330035][ T28] audit: type=1326 audit(2000003596.890:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3906 comm="syz.1.10899" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10245.335486][ T28] audit: type=1326 audit(2000003596.900:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3906 comm="syz.1.10899" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10245.343857][ T28] audit: type=1326 audit(2000003596.910:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3906 comm="syz.1.10899" exe="/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10245.348492][ T28] audit: type=1326 audit(2000003596.910:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3906 comm="syz.1.10899" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10245.356794][ T28] audit: type=1326 audit(2000003596.920:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3906 comm="syz.1.10899" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x7ffc0000 [10248.534799][ T28] audit: type=1326 audit(2000003600.090:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3915 comm="syz.1.10902" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6979368 code=0x0 [10253.643906][ T3941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10904'. [10253.644260][ T3941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10904'. [10256.144734][ T3945] syzkaller0: entered promiscuous mode [10256.145879][ T3945] syzkaller0: entered allmulticast mode [10260.034754][ T3242] syz_tun (unregistering): left allmulticast mode [10260.178129][T26149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10260.299394][T26149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10260.379434][T26149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10260.515222][T26149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10262.218743][T26149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10262.249771][T26149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10262.267493][T26149] bond0 (unregistering): Released all slaves [10262.290846][T26149] b (unregistering): Released all slaves [10262.666710][T26149] hsr_slave_0: left promiscuous mode [10262.679034][T26149] hsr_slave_1: left promiscuous mode [10262.739073][T26149] veth1_macvtap: left promiscuous mode [10262.749094][T26149] veth0_macvtap: left promiscuous mode [10262.749816][T26149] veth1_vlan: left promiscuous mode [10262.750242][T26149] veth0_vlan: left promiscuous mode [10266.831334][ T3222] 8021q: adding VLAN 0 to HW filter on device eth5 [10269.741883][ T3995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10269.770615][ T3995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10270.187112][ T3222] 8021q: adding VLAN 0 to HW filter on device eth6 [10271.657523][ T3995] hsr_slave_0: entered promiscuous mode [10271.666538][ T3995] hsr_slave_1: entered promiscuous mode [10271.934242][ T3222] 8021q: adding VLAN 0 to HW filter on device eth7 [10272.834757][ T3995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [10272.884724][ T3995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10272.938165][ T3995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [10272.979161][ T3995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10272.994151][ T3995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [10273.029865][ T3995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10273.046081][ T3995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [10273.073904][ T3995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10274.884459][ T3995] 8021q: adding VLAN 0 to HW filter on device bond0 [10279.719352][ T3995] veth0_vlan: entered promiscuous mode [10279.782336][ T3995] veth1_vlan: entered promiscuous mode [10279.896622][ T3995] veth0_macvtap: entered promiscuous mode [10279.924569][ T3995] veth1_macvtap: entered promiscuous mode [10280.188286][T31776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10280.213584][T26149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10280.215851][T26149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10280.218395][T26149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10281.850907][ T4190] FAULT_INJECTION: forcing a failure. [10281.850907][ T4190] name failslab, interval 1, probability 0, space 0, times 0 [10281.860198][ T4190] CPU: 0 UID: 0 PID: 4190 Comm: syz.2.10950 Tainted: G W syzkaller #0 PREEMPT [10281.860315][ T4190] Tainted: [W]=WARN [10281.860336][ T4190] Hardware name: linux,dummy-virt (DT) [10281.860358][ T4190] Call trace: [10281.860377][ T4190] show_stack+0x18/0x24 (C) [10281.860440][ T4190] dump_stack_lvl+0x60/0x80 [10281.860487][ T4190] dump_stack+0x18/0x24 [10281.860525][ T4190] should_fail_ex+0x1e0/0x238 [10281.860565][ T4190] should_failslab+0x54/0x80 [10281.860602][ T4190] kmem_cache_alloc_lru_noprof+0x58/0x458 [10281.860643][ T4190] __d_alloc+0x3c/0x280 [10281.860684][ T4190] d_alloc_anon+0x14/0x20 [10281.860723][ T4190] path_from_stashed+0x10c/0x1ec [10281.860759][ T4190] ns_get_path+0x3c/0x54 [10281.860798][ T4190] proc_ns_get_link+0x124/0x154 [10281.860835][ T4190] pick_link+0x318/0x404 [10281.860870][ T4190] step_into_slowpath+0x1cc/0x2e0 [10281.860905][ T4190] path_openat+0x338/0x960 [10281.860941][ T4190] do_file_open+0xb0/0x168 [10281.860976][ T4190] do_sys_openat2+0x84/0x104 [10281.861015][ T4190] __arm64_sys_openat+0x64/0xc0 [10281.861053][ T4190] invoke_syscall+0x54/0x10c [10281.861090][ T4190] el0_svc_common.constprop.0+0x40/0xe0 [10281.861131][ T4190] do_el0_svc+0x1c/0x34 [10281.861168][ T4190] el0_svc+0x38/0x1fc [10281.861210][ T4190] el0t_64_sync_handler+0xa0/0xe4 [10281.861249][ T4190] el0t_64_sync+0x1a4/0x1a8 [10282.145855][ T4194] FAULT_INJECTION: forcing a failure. [10282.145855][ T4194] name failslab, interval 1, probability 0, space 0, times 0 [10282.147310][ T4194] CPU: 0 UID: 0 PID: 4194 Comm: syz.2.10951 Tainted: G W syzkaller #0 PREEMPT [10282.147397][ T4194] Tainted: [W]=WARN [10282.147416][ T4194] Hardware name: linux,dummy-virt (DT) [10282.147438][ T4194] Call trace: [10282.147458][ T4194] show_stack+0x18/0x24 (C) [10282.147518][ T4194] dump_stack_lvl+0x60/0x80 [10282.147556][ T4194] dump_stack+0x18/0x24 [10282.147593][ T4194] should_fail_ex+0x1e0/0x238 [10282.147632][ T4194] should_failslab+0x54/0x80 [10282.147669][ T4194] kmem_cache_alloc_noprof+0x54/0x458 [10282.147709][ T4194] anon_vma_clone+0x80/0x224 [10282.147748][ T4194] __split_vma+0x188/0x350 [10282.147788][ T4194] vms_gather_munmap_vmas+0x154/0x330 [10282.147826][ T4194] do_vmi_align_munmap+0xcc/0x180 [10282.147859][ T4194] do_vmi_munmap+0xac/0x160 [10282.147912][ T4194] __vm_munmap+0xac/0x13c [10282.147987][ T4194] __arm64_sys_munmap+0x24/0x38 [10282.148032][ T4194] invoke_syscall+0x54/0x10c [10282.148067][ T4194] el0_svc_common.constprop.0+0x40/0xe0 [10282.148102][ T4194] do_el0_svc+0x1c/0x34 [10282.148134][ T4194] el0_svc+0x38/0x1fc [10282.148174][ T4194] el0t_64_sync_handler+0xa0/0xe4 [10282.148210][ T4194] el0t_64_sync+0x1a4/0x1a8 [10300.783059][ T28] audit: type=1326 audit(2000003652.340:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.789279][ T28] audit: type=1326 audit(2000003652.350:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.800025][ T28] audit: type=1326 audit(2000003652.360:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.803203][ T28] audit: type=1326 audit(2000003652.360:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.807141][ T28] audit: type=1326 audit(2000003652.360:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.817397][ T28] audit: type=1326 audit(2000003652.360:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.824584][ T28] audit: type=1326 audit(2000003652.390:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.830932][ T28] audit: type=1326 audit(2000003652.390:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.836054][ T28] audit: type=1326 audit(2000003652.390:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10300.841583][ T28] audit: type=1326 audit(2000003652.390:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4282 comm="syz.2.10981" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10309.251583][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11002'. [10309.254929][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11002'. [10312.507607][ T4344] FAULT_INJECTION: forcing a failure. [10312.507607][ T4344] name fail_futex, interval 1, probability 0, space 0, times 0 [10312.508795][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.2.11006 Tainted: G W syzkaller #0 PREEMPT [10312.508912][ T4344] Tainted: [W]=WARN [10312.508943][ T4344] Hardware name: linux,dummy-virt (DT) [10312.508966][ T4344] Call trace: [10312.508984][ T4344] show_stack+0x18/0x24 (C) [10312.509043][ T4344] dump_stack_lvl+0x60/0x80 [10312.509080][ T4344] dump_stack+0x18/0x24 [10312.509115][ T4344] should_fail_ex+0x1e0/0x238 [10312.509152][ T4344] should_fail+0x14/0x40 [10312.509212][ T4344] get_futex_key+0xdc/0x620 [10312.509268][ T4344] futex_wake_op+0x7c/0x720 [10312.509304][ T4344] do_futex+0x1c0/0x210 [10312.509337][ T4344] __arm64_sys_futex+0x100/0x1a0 [10312.509371][ T4344] invoke_syscall+0x54/0x10c [10312.509405][ T4344] el0_svc_common.constprop.0+0x40/0xe0 [10312.509447][ T4344] do_el0_svc+0x1c/0x34 [10312.509482][ T4344] el0_svc+0x38/0x1fc [10312.509522][ T4344] el0t_64_sync_handler+0xa0/0xe4 [10312.509559][ T4344] el0t_64_sync+0x1a4/0x1a8 [10314.940380][ T4348] fuse: fd is not a fuse device [10315.243305][ T4355] FAULT_INJECTION: forcing a failure. [10315.243305][ T4355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10315.246022][ T4355] CPU: 0 UID: 0 PID: 4355 Comm: syz.2.11011 Tainted: G W syzkaller #0 PREEMPT [10315.246115][ T4355] Tainted: [W]=WARN [10315.246134][ T4355] Hardware name: linux,dummy-virt (DT) [10315.246155][ T4355] Call trace: [10315.246172][ T4355] show_stack+0x18/0x24 (C) [10315.246231][ T4355] dump_stack_lvl+0x60/0x80 [10315.246268][ T4355] dump_stack+0x18/0x24 [10315.246303][ T4355] should_fail_ex+0x1e0/0x238 [10315.246340][ T4355] should_fail+0x14/0x40 [10315.246374][ T4355] should_fail_usercopy+0x1c/0x40 [10315.246410][ T4355] bpf_verifier_vlog+0x1c4/0x3e8 [10315.246448][ T4355] __btf_verifier_log+0x5c/0x90 [10315.246489][ T4355] btf_verifier_log_member+0x19c/0x20c [10315.246523][ T4355] btf_struct_check_meta+0x17c/0x29c [10315.246558][ T4355] btf_new_fd+0x5bc/0x167c [10315.246594][ T4355] __sys_bpf+0xb28/0x1d1c [10315.246631][ T4355] __arm64_sys_bpf+0x2c/0x40 [10315.246666][ T4355] invoke_syscall+0x54/0x10c [10315.246701][ T4355] el0_svc_common.constprop.0+0x40/0xe0 [10315.246736][ T4355] do_el0_svc+0x1c/0x34 [10315.246769][ T4355] el0_svc+0x38/0x1fc [10315.246808][ T4355] el0t_64_sync_handler+0xa0/0xe4 [10315.246845][ T4355] el0t_64_sync+0x1a4/0x1a8 [10315.751577][ T4366] ip_tables: iptables: counters copy to user failed while replacing table [10316.567560][ T4375] FAULT_INJECTION: forcing a failure. [10316.567560][ T4375] name failslab, interval 1, probability 0, space 0, times 0 [10316.583643][ T4375] CPU: 0 UID: 0 PID: 4375 Comm: syz.2.11020 Tainted: G W syzkaller #0 PREEMPT [10316.583826][ T4375] Tainted: [W]=WARN [10316.583865][ T4375] Hardware name: linux,dummy-virt (DT) [10316.583907][ T4375] Call trace: [10316.583946][ T4375] show_stack+0x18/0x24 (C) [10316.584059][ T4375] dump_stack_lvl+0x60/0x80 [10316.584136][ T4375] dump_stack+0x18/0x24 [10316.584205][ T4375] should_fail_ex+0x1e0/0x238 [10316.584281][ T4375] should_failslab+0x54/0x80 [10316.584355][ T4375] __kmalloc_cache_noprof+0x58/0x470 [10316.584450][ T4375] alloc_tty_struct+0x48/0x200 [10316.584528][ T4375] pty_common_install+0x90/0x288 [10316.584607][ T4375] pty_unix98_install+0x14/0x20 [10316.584684][ T4375] tty_init_dev.part.0+0x44/0x260 [10316.584756][ T4375] tty_init_dev+0x44/0x60 [10316.584827][ T4375] ptmx_open+0xec/0x1d0 [10316.584900][ T4375] chrdev_open+0xac/0x220 [10316.584972][ T4375] do_dentry_open+0x128/0x4fc [10316.585042][ T4375] vfs_open+0x2c/0xe8 [10316.585115][ T4375] path_openat+0x5b4/0x960 [10316.585189][ T4375] do_file_open+0xb0/0x168 [10316.585263][ T4375] do_sys_openat2+0x84/0x104 [10316.585341][ T4375] __arm64_sys_openat+0x64/0xc0 [10316.585431][ T4375] invoke_syscall+0x54/0x10c [10316.585509][ T4375] el0_svc_common.constprop.0+0x40/0xe0 [10316.585579][ T4375] do_el0_svc+0x1c/0x34 [10316.585653][ T4375] el0_svc+0x38/0x1fc [10316.585739][ T4375] el0t_64_sync_handler+0xa0/0xe4 [10316.585816][ T4375] el0t_64_sync+0x1a4/0x1a8 [10333.047057][ T4396] syzkaller0: entered promiscuous mode [10333.048372][ T4396] syzkaller0: entered allmulticast mode [10333.453808][ T4398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10333.602617][ T4398] md: could not open device unknown-block(1,0). [10338.508061][ T4446] FAULT_INJECTION: forcing a failure. [10338.508061][ T4446] name fail_futex, interval 1, probability 0, space 0, times 0 [10338.509340][ T4446] CPU: 0 UID: 0 PID: 4446 Comm: syz.2.11049 Tainted: G W syzkaller #0 PREEMPT [10338.509433][ T4446] Tainted: [W]=WARN [10338.509452][ T4446] Hardware name: linux,dummy-virt (DT) [10338.509476][ T4446] Call trace: [10338.509494][ T4446] show_stack+0x18/0x24 (C) [10338.509556][ T4446] dump_stack_lvl+0x60/0x80 [10338.509594][ T4446] dump_stack+0x18/0x24 [10338.509629][ T4446] should_fail_ex+0x1e0/0x238 [10338.509695][ T4446] should_fail+0x14/0x40 [10338.509749][ T4446] get_futex_key+0x4e0/0x620 [10338.509788][ T4446] futex_wake+0x68/0x240 [10338.509824][ T4446] do_futex+0x178/0x210 [10338.509859][ T4446] mm_exit_exec_release+0xc0/0xd4 [10338.509898][ T4446] do_exit+0x1a4/0x94c [10338.509938][ T4446] do_group_exit+0x34/0x90 [10338.509984][ T4446] get_signal+0x79c/0x860 [10338.510020][ T4446] arch_do_signal_or_restart+0x98/0x3dc [10338.510057][ T4446] exit_to_user_mode_loop+0x114/0x19c [10338.510095][ T4446] el0_svc+0x1f0/0x1fc [10338.510137][ T4446] el0t_64_sync_handler+0xa0/0xe4 [10338.510176][ T4446] el0t_64_sync+0x1a4/0x1a8 [10338.953922][ T4459] FAULT_INJECTION: forcing a failure. [10338.953922][ T4459] name fail_futex, interval 1, probability 0, space 0, times 0 [10338.954113][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.2.11055 Tainted: G W syzkaller #0 PREEMPT [10338.954177][ T4459] Tainted: [W]=WARN [10338.954196][ T4459] Hardware name: linux,dummy-virt (DT) [10338.954216][ T4459] Call trace: [10338.954233][ T4459] show_stack+0x18/0x24 (C) [10338.954293][ T4459] dump_stack_lvl+0x60/0x80 [10338.954331][ T4459] dump_stack+0x18/0x24 [10338.954367][ T4459] should_fail_ex+0x1e0/0x238 [10338.954407][ T4459] should_fail+0x14/0x40 [10338.954442][ T4459] get_futex_key+0x164/0x620 [10338.954480][ T4459] futex_wake+0x68/0x240 [10338.954524][ T4459] do_futex+0x178/0x210 [10338.954559][ T4459] mm_exit_exec_release+0xc0/0xd4 [10338.954597][ T4459] do_exit+0x1a4/0x94c [10338.954638][ T4459] do_group_exit+0x34/0x90 [10338.954677][ T4459] get_signal+0x79c/0x860 [10338.954712][ T4459] arch_do_signal_or_restart+0x98/0x3dc [10338.954748][ T4459] exit_to_user_mode_loop+0x114/0x19c [10338.954787][ T4459] el0_svc+0x1f0/0x1fc [10338.954829][ T4459] el0t_64_sync_handler+0xa0/0xe4 [10338.954867][ T4459] el0t_64_sync+0x1a4/0x1a8 [10343.710549][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11069'. [10346.193610][ T4512] ip6_tables: ip6tables: counters copy to user failed while replacing table [10351.256311][ T4578] binder: 4577:4578 tried to acquire reference to desc 0, got 1 instead [10351.264262][ T4578] binder: 4577:4578 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [10351.756078][ T4583] fuse: fd is not a fuse device [10351.821097][T27252] binder: undelivered TRANSACTION_COMPLETE [10352.203207][ T4591] FAULT_INJECTION: forcing a failure. [10352.203207][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [10352.211502][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.2.11104 Tainted: G W syzkaller #0 PREEMPT [10352.211658][ T4591] Tainted: [W]=WARN [10352.211699][ T4591] Hardware name: linux,dummy-virt (DT) [10352.211741][ T4591] Call trace: [10352.211784][ T4591] show_stack+0x18/0x24 (C) [10352.211891][ T4591] dump_stack_lvl+0x60/0x80 [10352.211965][ T4591] dump_stack+0x18/0x24 [10352.212036][ T4591] should_fail_ex+0x1e0/0x238 [10352.212145][ T4591] should_failslab+0x54/0x80 [10352.212222][ T4591] __kmalloc_noprof+0xac/0x520 [10352.212306][ T4591] __memcg_list_lru_alloc+0x1cc/0x250 [10352.212392][ T4591] memcg_list_lru_alloc+0x60/0x74 [10352.212460][ T4591] __memcg_slab_post_alloc_hook+0xbc/0x498 [10352.212540][ T4591] kmem_cache_alloc_lru_noprof+0x40c/0x458 [10352.212616][ T4591] __d_alloc+0x3c/0x280 [10352.212701][ T4591] d_make_root+0x24/0x68 [10352.212783][ T4591] devpts_fill_super+0xa8/0x1a0 [10352.212866][ T4591] get_tree_nodev+0x70/0xb8 [10352.212937][ T4591] devpts_get_tree+0x18/0x24 [10352.213017][ T4591] vfs_get_tree+0x28/0x100 [10352.213091][ T4591] fc_mount+0x18/0xa0 [10352.213174][ T4591] path_mount+0x3e8/0xabc [10352.213246][ T4591] __arm64_sys_mount+0x1b0/0x204 [10352.213321][ T4591] invoke_syscall+0x54/0x10c [10352.213398][ T4591] el0_svc_common.constprop.0+0x40/0xe0 [10352.213472][ T4591] do_el0_svc+0x1c/0x34 [10352.213539][ T4591] el0_svc+0x38/0x1fc [10352.213619][ T4591] el0t_64_sync_handler+0xa0/0xe4 [10352.213694][ T4591] el0t_64_sync+0x1a4/0x1a8 [10352.247889][ T4591] devpts: get root dentry failed [10355.347912][ T4610] FAULT_INJECTION: forcing a failure. [10355.347912][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [10355.355847][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.2.11112 Tainted: G W syzkaller #0 PREEMPT [10355.355953][ T4610] Tainted: [W]=WARN [10355.355975][ T4610] Hardware name: linux,dummy-virt (DT) [10355.355996][ T4610] Call trace: [10355.356013][ T4610] show_stack+0x18/0x24 (C) [10355.356073][ T4610] dump_stack_lvl+0x60/0x80 [10355.356110][ T4610] dump_stack+0x18/0x24 [10355.356144][ T4610] should_fail_ex+0x1e0/0x238 [10355.356181][ T4610] should_failslab+0x54/0x80 [10355.356216][ T4610] __kmalloc_cache_noprof+0x58/0x470 [10355.356255][ T4610] pty_common_install+0x64/0x288 [10355.356295][ T4610] pty_unix98_install+0x14/0x20 [10355.356332][ T4610] tty_init_dev.part.0+0x44/0x260 [10355.356366][ T4610] tty_init_dev+0x44/0x60 [10355.356397][ T4610] ptmx_open+0xec/0x1d0 [10355.356433][ T4610] chrdev_open+0xac/0x220 [10355.356477][ T4610] do_dentry_open+0x128/0x4fc [10355.356514][ T4610] vfs_open+0x2c/0xe8 [10355.356548][ T4610] path_openat+0x5b4/0x960 [10355.356583][ T4610] do_file_open+0xb0/0x168 [10355.356643][ T4610] do_sys_openat2+0x84/0x104 [10355.356704][ T4610] __arm64_sys_openat+0x64/0xc0 [10355.356742][ T4610] invoke_syscall+0x54/0x10c [10355.356777][ T4610] el0_svc_common.constprop.0+0x40/0xe0 [10355.356811][ T4610] do_el0_svc+0x1c/0x34 [10355.356844][ T4610] el0_svc+0x38/0x1fc [10355.356883][ T4610] el0t_64_sync_handler+0xa0/0xe4 [10355.356919][ T4610] el0t_64_sync+0x1a4/0x1a8 [10356.687987][ T4630] FAULT_INJECTION: forcing a failure. [10356.687987][ T4630] name failslab, interval 1, probability 0, space 0, times 0 [10356.689444][ T4630] CPU: 0 UID: 0 PID: 4630 Comm: syz.2.11119 Tainted: G W syzkaller #0 PREEMPT [10356.689543][ T4630] Tainted: [W]=WARN [10356.689563][ T4630] Hardware name: linux,dummy-virt (DT) [10356.689583][ T4630] Call trace: [10356.689601][ T4630] show_stack+0x18/0x24 (C) [10356.689662][ T4630] dump_stack_lvl+0x60/0x80 [10356.689699][ T4630] dump_stack+0x18/0x24 [10356.689734][ T4630] should_fail_ex+0x1e0/0x238 [10356.689772][ T4630] should_failslab+0x54/0x80 [10356.689807][ T4630] kmem_cache_alloc_node_noprof+0x5c/0x448 [10356.689847][ T4630] __alloc_skb+0x74/0x2e0 [10356.689885][ T4630] netlink_alloc_large_skb+0x94/0xd4 [10356.689927][ T4630] netlink_sendmsg+0x10c/0x410 [10356.689965][ T4630] __sock_sendmsg+0x54/0x60 [10356.690008][ T4630] ____sys_sendmsg+0x250/0x2a8 [10356.690043][ T4630] ___sys_sendmsg+0xb0/0x108 [10356.690077][ T4630] __sys_sendmsg+0x9c/0x100 [10356.690111][ T4630] __arm64_sys_sendmsg+0x20/0x38 [10356.690146][ T4630] invoke_syscall+0x54/0x10c [10356.690182][ T4630] el0_svc_common.constprop.0+0x40/0xe0 [10356.690217][ T4630] do_el0_svc+0x1c/0x34 [10356.690268][ T4630] el0_svc+0x38/0x1fc [10356.690344][ T4630] el0t_64_sync_handler+0xa0/0xe4 [10356.690419][ T4630] el0t_64_sync+0x1a4/0x1a8 [10358.027623][ T4639] bonding: bond1 is being created... [10358.171547][ T4639] bond0: (slave bond_slave_0): Releasing backup interface [10358.191012][ T4639] bond0: (slave bond_slave_1): Releasing backup interface [10358.233815][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [10358.317961][ T4644] FAULT_INJECTION: forcing a failure. [10358.317961][ T4644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10358.320123][ T4644] CPU: 0 UID: 0 PID: 4644 Comm: syz.2.11122 Tainted: G W syzkaller #0 PREEMPT [10358.320263][ T4644] Tainted: [W]=WARN [10358.320295][ T4644] Hardware name: linux,dummy-virt (DT) [10358.320332][ T4644] Call trace: [10358.320361][ T4644] show_stack+0x18/0x24 (C) [10358.320459][ T4644] dump_stack_lvl+0x60/0x80 [10358.320536][ T4644] dump_stack+0x18/0x24 [10358.320607][ T4644] should_fail_ex+0x1e0/0x238 [10358.320679][ T4644] should_fail+0x14/0x40 [10358.320744][ T4644] should_fail_usercopy+0x1c/0x40 [10358.320808][ T4644] _inline_copy_from_user+0x24/0xa8 [10358.320920][ T4644] __sys_bpf+0x11c/0x1d1c [10358.321005][ T4644] __arm64_sys_bpf+0x2c/0x40 [10358.321077][ T4644] invoke_syscall+0x54/0x10c [10358.321147][ T4644] el0_svc_common.constprop.0+0x40/0xe0 [10358.321214][ T4644] do_el0_svc+0x1c/0x34 [10358.321280][ T4644] el0_svc+0x38/0x1fc [10358.321362][ T4644] el0t_64_sync_handler+0xa0/0xe4 [10358.321438][ T4644] el0t_64_sync+0x1a4/0x1a8 [10360.390230][ T4655] FAULT_INJECTION: forcing a failure. [10360.390230][ T4655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10360.392738][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: syz.2.11127 Tainted: G W syzkaller #0 PREEMPT [10360.392871][ T4655] Tainted: [W]=WARN [10360.392904][ T4655] Hardware name: linux,dummy-virt (DT) [10360.392941][ T4655] Call trace: [10360.392978][ T4655] show_stack+0x18/0x24 (C) [10360.393089][ T4655] dump_stack_lvl+0x60/0x80 [10360.393156][ T4655] dump_stack+0x18/0x24 [10360.393220][ T4655] should_fail_ex+0x1e0/0x238 [10360.393289][ T4655] should_fail+0x14/0x40 [10360.393357][ T4655] should_fail_usercopy+0x1c/0x40 [10360.393423][ T4655] _inline_copy_from_user+0x24/0xa8 [10360.393492][ T4655] __sys_bpf+0x11c/0x1d1c [10360.393577][ T4655] __arm64_sys_bpf+0x2c/0x40 [10360.393644][ T4655] invoke_syscall+0x54/0x10c [10360.393711][ T4655] el0_svc_common.constprop.0+0x40/0xe0 [10360.393840][ T4655] do_el0_svc+0x1c/0x34 [10360.393901][ T4655] el0_svc+0x38/0x1fc [10360.393992][ T4655] el0t_64_sync_handler+0xa0/0xe4 [10360.394063][ T4655] el0t_64_sync+0x1a4/0x1a8 [10362.337741][ T4668] FAULT_INJECTION: forcing a failure. [10362.337741][ T4668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10362.338934][ T4668] CPU: 0 UID: 0 PID: 4668 Comm: syz.2.11132 Tainted: G W syzkaller #0 PREEMPT [10362.339114][ T4668] Tainted: [W]=WARN [10362.339169][ T4668] Hardware name: linux,dummy-virt (DT) [10362.339195][ T4668] Call trace: [10362.339212][ T4668] show_stack+0x18/0x24 (C) [10362.339271][ T4668] dump_stack_lvl+0x60/0x80 [10362.339309][ T4668] dump_stack+0x18/0x24 [10362.339343][ T4668] should_fail_ex+0x1e0/0x238 [10362.339381][ T4668] should_fail+0x14/0x40 [10362.339414][ T4668] should_fail_usercopy+0x1c/0x40 [10362.339449][ T4668] _inline_copy_from_user+0x24/0xa8 [10362.339496][ T4668] __sys_bpf+0x11c/0x1d1c [10362.339532][ T4668] __arm64_sys_bpf+0x2c/0x40 [10362.339568][ T4668] invoke_syscall+0x54/0x10c [10362.339603][ T4668] el0_svc_common.constprop.0+0x40/0xe0 [10362.339638][ T4668] do_el0_svc+0x1c/0x34 [10362.339671][ T4668] el0_svc+0x38/0x1fc [10362.339711][ T4668] el0t_64_sync_handler+0xa0/0xe4 [10362.339748][ T4668] el0t_64_sync+0x1a4/0x1a8 [10363.431739][ T4670] FAULT_INJECTION: forcing a failure. [10363.431739][ T4670] name fail_futex, interval 1, probability 0, space 0, times 0 [10363.431987][ T4670] CPU: 0 UID: 0 PID: 4670 Comm: syz.2.11133 Tainted: G W syzkaller #0 PREEMPT [10363.432077][ T4670] Tainted: [W]=WARN [10363.432097][ T4670] Hardware name: linux,dummy-virt (DT) [10363.432127][ T4670] Call trace: [10363.432165][ T4670] show_stack+0x18/0x24 (C) [10363.432262][ T4670] dump_stack_lvl+0x60/0x80 [10363.432347][ T4670] dump_stack+0x18/0x24 [10363.432403][ T4670] should_fail_ex+0x1e0/0x238 [10363.432444][ T4670] should_fail+0x14/0x40 [10363.432479][ T4670] should_fail_futex+0x30/0x50 [10363.432518][ T4670] futex_lock_pi_atomic+0xb4/0x5f0 [10363.432555][ T4670] futex_lock_pi+0x10c/0x3d4 [10363.432612][ T4670] do_futex+0xf4/0x210 [10363.432668][ T4670] __arm64_sys_futex+0x100/0x1a0 [10363.432705][ T4670] invoke_syscall+0x54/0x10c [10363.432766][ T4670] el0_svc_common.constprop.0+0x40/0xe0 [10363.432825][ T4670] do_el0_svc+0x1c/0x34 [10363.432864][ T4670] el0_svc+0x38/0x1fc [10363.432906][ T4670] el0t_64_sync_handler+0xa0/0xe4 [10363.432945][ T4670] el0t_64_sync+0x1a4/0x1a8 [10364.742793][ T4681] FAULT_INJECTION: forcing a failure. [10364.742793][ T4681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10364.743148][ T4681] CPU: 0 UID: 0 PID: 4681 Comm: syz.2.11137 Tainted: G W syzkaller #0 PREEMPT [10364.743260][ T4681] Tainted: [W]=WARN [10364.743292][ T4681] Hardware name: linux,dummy-virt (DT) [10364.743328][ T4681] Call trace: [10364.743357][ T4681] show_stack+0x18/0x24 (C) [10364.743464][ T4681] dump_stack_lvl+0x60/0x80 [10364.743529][ T4681] dump_stack+0x18/0x24 [10364.743591][ T4681] should_fail_ex+0x1e0/0x238 [10364.743658][ T4681] should_fail+0x14/0x40 [10364.743719][ T4681] should_fail_usercopy+0x1c/0x40 [10364.743782][ T4681] _inline_copy_from_user+0x24/0xa8 [10364.743851][ T4681] __sys_bpf+0x11c/0x1d1c [10364.743915][ T4681] __arm64_sys_bpf+0x2c/0x40 [10364.743981][ T4681] invoke_syscall+0x54/0x10c [10364.744043][ T4681] el0_svc_common.constprop.0+0x40/0xe0 [10364.744106][ T4681] do_el0_svc+0x1c/0x34 [10364.744166][ T4681] el0_svc+0x38/0x1fc [10364.744236][ T4681] el0t_64_sync_handler+0xa0/0xe4 [10364.744303][ T4681] el0t_64_sync+0x1a4/0x1a8 [10366.341904][ T4704] FAULT_INJECTION: forcing a failure. [10366.341904][ T4704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10366.343176][ T4704] CPU: 0 UID: 0 PID: 4704 Comm: syz.2.11143 Tainted: G W syzkaller #0 PREEMPT [10366.343299][ T4704] Tainted: [W]=WARN [10366.343331][ T4704] Hardware name: linux,dummy-virt (DT) [10366.343368][ T4704] Call trace: [10366.343404][ T4704] show_stack+0x18/0x24 (C) [10366.343503][ T4704] dump_stack_lvl+0x60/0x80 [10366.343570][ T4704] dump_stack+0x18/0x24 [10366.343634][ T4704] should_fail_ex+0x1e0/0x238 [10366.343702][ T4704] should_fail+0x14/0x40 [10366.343766][ T4704] should_fail_usercopy+0x1c/0x40 [10366.343831][ T4704] _inline_copy_from_user+0x24/0xa8 [10366.343900][ T4704] __sys_bpf+0x11c/0x1d1c [10366.343966][ T4704] __arm64_sys_bpf+0x2c/0x40 [10366.344033][ T4704] invoke_syscall+0x54/0x10c [10366.344097][ T4704] el0_svc_common.constprop.0+0x40/0xe0 [10366.344168][ T4704] do_el0_svc+0x1c/0x34 [10366.344230][ T4704] el0_svc+0x38/0x1fc [10366.344302][ T4704] el0t_64_sync_handler+0xa0/0xe4 [10366.344372][ T4704] el0t_64_sync+0x1a4/0x1a8 [10372.504746][ T4733] syz_tun: entered allmulticast mode [10380.821811][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11168'. [10381.589032][ T4787] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [10381.825231][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11176'. [10381.829863][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11176'. [10382.384166][ T4808] ip_tables: iptables: counters copy to user failed while replacing table [10385.336944][ T4822] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [10385.593146][ T4825] binder: 4824:4825 tried to acquire reference to desc 0, got 1 instead [10385.627350][T32753] binder: release 4824:4825 transaction 12 out, still active [10385.628792][T32753] binder: undelivered TRANSACTION_COMPLETE [10385.654139][T32753] binder: send failed reply for transaction 12, target dead [10386.224511][ T4831] FAULT_INJECTION: forcing a failure. [10386.224511][ T4831] name failslab, interval 1, probability 0, space 0, times 0 [10386.227668][ T4831] CPU: 0 UID: 0 PID: 4831 Comm: syz.2.11190 Tainted: G W syzkaller #0 PREEMPT [10386.227814][ T4831] Tainted: [W]=WARN [10386.227849][ T4831] Hardware name: linux,dummy-virt (DT) [10386.227887][ T4831] Call trace: [10386.227917][ T4831] show_stack+0x18/0x24 (C) [10386.228033][ T4831] dump_stack_lvl+0x60/0x80 [10386.228110][ T4831] dump_stack+0x18/0x24 [10386.228181][ T4831] should_fail_ex+0x1e0/0x238 [10386.228256][ T4831] should_failslab+0x54/0x80 [10386.228330][ T4831] __kmalloc_noprof+0xac/0x520 [10386.228408][ T4831] dma_buf_export+0x140/0x280 [10386.228491][ T4831] udmabuf_create+0x350/0x480 [10386.228559][ T4831] udmabuf_ioctl+0xd4/0x180 [10386.228629][ T4831] __arm64_sys_ioctl+0xa8/0x100 [10386.228701][ T4831] invoke_syscall+0x54/0x10c [10386.228771][ T4831] el0_svc_common.constprop.0+0x40/0xe0 [10386.228843][ T4831] do_el0_svc+0x1c/0x34 [10386.228908][ T4831] el0_svc+0x38/0x1fc [10386.228995][ T4831] el0t_64_sync_handler+0xa0/0xe4 [10386.229068][ T4831] el0t_64_sync+0x1a4/0x1a8 [10391.868218][ T4853] block device autoloading is deprecated and will be removed. [10391.988034][ T4853] block device autoloading is deprecated and will be removed. [10392.065476][ T4853] device-mapper: table: 248:0: mirror: Not enough arguments to support feature count (-EINVAL) [10392.073174][ T4853] device-mapper: ioctl: error adding target to table [10392.593352][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11198'. [10393.004815][ T4875] binder: tried to use weak ref as strong ref [10393.005804][ T4875] binder: 4874:4875 Acquire 1 refcount change on invalid ref 0 ret -22 [10396.473614][ T4933] syzkaller0: entered promiscuous mode [10396.474419][ T4933] syzkaller0: entered allmulticast mode [10399.696374][ T4959] binder: 4958:4959 ioctl c0306201 0 returned -14 [10399.698486][ T4959] binder: 4958:4959 got reply transaction with no transaction stack [10399.700813][ T4959] binder: 4958:4959 transaction reply to 0:0 failed 15/29201/-71, code 0 size 0-0 line 3155 [10399.715173][T30360] binder: undelivered TRANSACTION_ERROR: 29201 [10400.522859][ T4971] se_dev->se_dev_ptr already set for storage object [10400.539247][ T4971] UDC core: g1: couldn't find an available UDC or it's busy [10406.008978][ T5002] FAULT_INJECTION: forcing a failure. [10406.008978][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10406.011058][ T5002] CPU: 0 UID: 0 PID: 5002 Comm: syz.2.11257 Tainted: G W syzkaller #0 PREEMPT [10406.011206][ T5002] Tainted: [W]=WARN [10406.011242][ T5002] Hardware name: linux,dummy-virt (DT) [10406.011281][ T5002] Call trace: [10406.011313][ T5002] show_stack+0x18/0x24 (C) [10406.011421][ T5002] dump_stack_lvl+0x60/0x80 [10406.011491][ T5002] dump_stack+0x18/0x24 [10406.011558][ T5002] should_fail_ex+0x1e0/0x238 [10406.011598][ T5002] should_fail+0x14/0x40 [10406.011631][ T5002] should_fail_usercopy+0x1c/0x40 [10406.011666][ T5002] strncpy_from_user+0x24/0x1c0 [10406.011701][ T5002] do_getname+0x5c/0x1a0 [10406.011736][ T5002] __getname_maybe_null+0x54/0xc0 [10406.011771][ T5002] vfs_fstatat+0x30/0xc0 [10406.011806][ T5002] __do_sys_newfstatat+0x5c/0xb0 [10406.011840][ T5002] __arm64_sys_newfstatat+0x1c/0x28 [10406.011876][ T5002] invoke_syscall+0x54/0x10c [10406.011920][ T5002] el0_svc_common.constprop.0+0x40/0xe0 [10406.011955][ T5002] do_el0_svc+0x1c/0x34 [10406.011989][ T5002] el0_svc+0x38/0x1fc [10406.012028][ T5002] el0t_64_sync_handler+0xa0/0xe4 [10406.012108][ T5002] el0t_64_sync+0x1a4/0x1a8 [10407.158622][ T5018] hsr0 speed is unknown, defaulting to 1000 [10407.161050][ T5018] hsr0 speed is unknown, defaulting to 1000 [10407.168877][ T5018] hsr0 speed is unknown, defaulting to 1000 [10407.189596][ T5018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [10407.235714][ T5018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [10407.445202][ T5018] hsr0 speed is unknown, defaulting to 1000 [10407.457538][ T5018] hsr0 speed is unknown, defaulting to 1000 [10410.301261][ T5043] FAULT_INJECTION: forcing a failure. [10410.301261][ T5043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10410.304334][ T5043] CPU: 0 UID: 0 PID: 5043 Comm: syz.2.11274 Tainted: G W syzkaller #0 PREEMPT [10410.304517][ T5043] Tainted: [W]=WARN [10410.304554][ T5043] Hardware name: linux,dummy-virt (DT) [10410.304591][ T5043] Call trace: [10410.304622][ T5043] show_stack+0x18/0x24 (C) [10410.304735][ T5043] dump_stack_lvl+0x60/0x80 [10410.304815][ T5043] dump_stack+0x18/0x24 [10410.304892][ T5043] should_fail_ex+0x1e0/0x238 [10410.304977][ T5043] should_fail+0x14/0x40 [10410.305046][ T5043] should_fail_usercopy+0x1c/0x40 [10410.305118][ T5043] bpf_verifier_vlog+0x1c4/0x3e8 [10410.305200][ T5043] __btf_verifier_log+0x5c/0x90 [10410.305280][ T5043] __btf_verifier_log_type+0x124/0x1e8 [10410.305348][ T5043] btf_func_proto_check_meta+0x38/0x9c [10410.305431][ T5043] btf_new_fd+0x5bc/0x167c [10410.305508][ T5043] __sys_bpf+0xb28/0x1d1c [10410.305587][ T5043] __arm64_sys_bpf+0x2c/0x40 [10410.305664][ T5043] invoke_syscall+0x54/0x10c [10410.305744][ T5043] el0_svc_common.constprop.0+0x40/0xe0 [10410.305818][ T5043] do_el0_svc+0x1c/0x34 [10410.305888][ T5043] el0_svc+0x38/0x1fc [10410.305971][ T5043] el0t_64_sync_handler+0xa0/0xe4 [10410.306050][ T5043] el0t_64_sync+0x1a4/0x1a8 [10413.406737][ T5047] hsr0 speed is unknown, defaulting to 1000 [10426.651809][ T5102] tun0: tun_chr_ioctl cmd 1074025675 [10426.653864][ T5102] tun0: persist disabled [10426.662006][ T5102] tun0: tun_chr_ioctl cmd 3489698833 [10426.673388][ T5102] tun0: tun_chr_ioctl cmd 3228603409 [10434.342623][ T5193] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [10434.344250][ T5193] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [10435.550427][ T5211] fuse: Invalid rootmode [10437.931105][ T5261] No control pipe specified [10438.439734][ T5270] FAULT_INJECTION: forcing a failure. [10438.439734][ T5270] name failslab, interval 1, probability 0, space 0, times 0 [10438.441778][ T5270] CPU: 0 UID: 0 PID: 5270 Comm: syz.2.11369 Tainted: G W syzkaller #0 PREEMPT [10438.441938][ T5270] Tainted: [W]=WARN [10438.441982][ T5270] Hardware name: linux,dummy-virt (DT) [10438.442049][ T5270] Call trace: [10438.442085][ T5270] show_stack+0x18/0x24 (C) [10438.442217][ T5270] dump_stack_lvl+0x60/0x80 [10438.442302][ T5270] dump_stack+0x18/0x24 [10438.442370][ T5270] should_fail_ex+0x1e0/0x238 [10438.442446][ T5270] should_failslab+0x54/0x80 [10438.442520][ T5270] __kmalloc_cache_noprof+0x58/0x470 [10438.442596][ T5270] proc_self_get_link+0x58/0xe0 [10438.442668][ T5270] pick_link+0x318/0x404 [10438.442735][ T5270] step_into_slowpath+0x1cc/0x2e0 [10438.442800][ T5270] link_path_walk+0x434/0x688 [10438.442868][ T5270] path_openat+0x88/0x960 [10438.442938][ T5270] do_file_open+0xb0/0x168 [10438.443040][ T5270] do_sys_openat2+0x84/0x104 [10438.443120][ T5270] __arm64_sys_openat+0x64/0xc0 [10438.443195][ T5270] invoke_syscall+0x54/0x10c [10438.443265][ T5270] el0_svc_common.constprop.0+0x40/0xe0 [10438.443335][ T5270] do_el0_svc+0x1c/0x34 [10438.443401][ T5270] el0_svc+0x38/0x1fc [10438.443485][ T5270] el0t_64_sync_handler+0xa0/0xe4 [10438.443563][ T5270] el0t_64_sync+0x1a4/0x1a8 [10442.343195][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11390'. [10443.667418][ T5341] fuse: fd is not a fuse device [10443.780302][ T5343] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11399'. [10443.889762][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11400'. [10444.133332][ T5352] fuse: fd is not a fuse device [10444.405638][ T5362] fuse: fd is not a fuse device [10444.744647][ T5372] fuse: fd is not a fuse device [10444.946094][ T5378] veth0_vlan: left promiscuous mode [10445.931926][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11423'. [10445.977049][ T5394] erspan0: entered promiscuous mode [10445.980773][ T5394] macvtap1: entered promiscuous mode [10445.981543][ T5394] macvtap1: entered allmulticast mode [10445.981655][ T5394] erspan0: entered allmulticast mode [10446.003310][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11423'. [10446.004568][ T5394] macvtap1: left promiscuous mode [10446.007174][ T5394] macvtap1: left allmulticast mode [10446.008750][ T5394] erspan0: left allmulticast mode [10447.031701][ T5404] device-mapper: ioctl: name not supplied when creating device [10447.945253][ T5415] device-mapper: ioctl: name not supplied when creating device [10450.813551][ T5450] No control pipe specified [10451.254693][ T5456] device-mapper: ioctl: name not supplied when creating device [10451.835660][ T5463] No control pipe specified [10452.316469][ T5469] device-mapper: ioctl: name not supplied when creating device [10452.793741][ T5475] No control pipe specified [10453.280020][ T5480] device-mapper: ioctl: name not supplied when creating device [10454.702027][ T5494] device-mapper: ioctl: name not supplied when creating device [10455.959903][ T5511] autofs: Bad value for 'fd' [10457.686885][ T5500] FAULT_INJECTION: forcing a failure. [10457.686885][ T5500] name failslab, interval 1, probability 0, space 0, times 0 [10457.687325][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.2.11467 Tainted: G W syzkaller #0 PREEMPT [10457.687444][ T5500] Tainted: [W]=WARN [10457.687480][ T5500] Hardware name: linux,dummy-virt (DT) [10457.687519][ T5500] Call trace: [10457.687552][ T5500] show_stack+0x18/0x24 (C) [10457.687656][ T5500] dump_stack_lvl+0x60/0x80 [10457.687727][ T5500] dump_stack+0x18/0x24 [10457.687793][ T5500] should_fail_ex+0x1e0/0x238 [10457.687865][ T5500] should_failslab+0x54/0x80 [10457.687934][ T5500] __kmalloc_cache_noprof+0x58/0x470 [10457.688043][ T5500] smk_fetch+0x58/0xc8 [10457.688121][ T5500] smack_d_instantiate+0x264/0x360 [10457.688191][ T5500] security_d_instantiate+0x14c/0x164 [10457.688260][ T5500] d_splice_alias_ops+0x44/0x3b0 [10457.688327][ T5500] d_splice_alias+0x14/0x20 [10457.688391][ T5500] fuse_readdir_uncached+0x774/0x854 [10457.688467][ T5500] fuse_readdir+0xec/0x5e0 [10457.688539][ T5500] iterate_dir+0xa8/0x250 [10457.688609][ T5500] __arm64_sys_getdents64+0x70/0x150 [10457.688681][ T5500] invoke_syscall+0x54/0x10c [10457.688749][ T5500] el0_svc_common.constprop.0+0x40/0xe0 [10457.688817][ T5500] do_el0_svc+0x1c/0x34 [10457.688882][ T5500] el0_svc+0x38/0x1fc [10457.688965][ T5500] el0t_64_sync_handler+0xa0/0xe4 [10457.689040][ T5500] el0t_64_sync+0x1a4/0x1a8 [10461.601594][ T5569] fuse: fd is not a fuse device [10461.855600][ T5572] fuse: fd is not a fuse device [10463.023509][T32753] Process accounting resumed [10463.132000][ T5588] fuse: fd is not a fuse device [10463.340291][ T5591] autofs: Unknown parameter '0x0000000000000000' [10464.384239][ T5604] autofs: Unknown parameter 'fd0x0000000000000000' [10466.405622][ T5635] fuse: fd is not a fuse device [10476.769614][ T5676] ip6_tables: ip6tables: counters copy to user failed while replacing table [10486.414426][ T5726] No control pipe specified [10493.416200][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11569'. [10493.568193][ T5769] netlink: 'syz.2.11570': attribute type 16 has an invalid length. [10493.569123][ T5769] netlink: 'syz.2.11570': attribute type 17 has an invalid length. [10494.064166][ T5769] netdevsim netdevsim2 netdevsim0: left allmulticast mode [10494.068735][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10494.126248][ T5769] 8021q: adding VLAN 0 to HW filter on device bond1 [10496.592482][ T5808] syzkaller0: entered promiscuous mode [10496.593712][ T5808] syzkaller0: entered allmulticast mode [10499.680041][ T5831] md/raid:md0: not clean -- starting background reconstruction [10499.685001][ T5831] md/raid:md0: invalid chunk size 0 [10499.686334][ T5831] md: pers->run() failed ... [10501.012991][ T5849] FAULT_INJECTION: forcing a failure. [10501.012991][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [10501.013487][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.2.11602 Tainted: G W syzkaller #0 PREEMPT [10501.013601][ T5849] Tainted: [W]=WARN [10501.013636][ T5849] Hardware name: linux,dummy-virt (DT) [10501.013674][ T5849] Call trace: [10501.013705][ T5849] show_stack+0x18/0x24 (C) [10501.013810][ T5849] dump_stack_lvl+0x60/0x80 [10501.013884][ T5849] dump_stack+0x18/0x24 [10501.013965][ T5849] should_fail_ex+0x1e0/0x238 [10501.014044][ T5849] should_failslab+0x54/0x80 [10501.014120][ T5849] __kmalloc_noprof+0xac/0x520 [10501.014200][ T5849] tomoyo_realpath_from_path+0x44/0x1d4 [10501.014282][ T5849] tomoyo_path_number_perm+0xe0/0x21c [10501.014359][ T5849] tomoyo_file_ioctl+0x1c/0x30 [10501.014437][ T5849] security_file_ioctl+0x8c/0x19c [10501.014510][ T5849] __arm64_sys_ioctl+0x44/0x100 [10501.014586][ T5849] invoke_syscall+0x54/0x10c [10501.014659][ T5849] el0_svc_common.constprop.0+0x40/0xe0 [10501.014733][ T5849] do_el0_svc+0x1c/0x34 [10501.014804][ T5849] el0_svc+0x38/0x1fc [10501.014888][ T5849] el0t_64_sync_handler+0xa0/0xe4 [10501.015005][ T5849] el0t_64_sync+0x1a4/0x1a8 [10501.043482][ T5849] ERROR: Out of memory at tomoyo_realpath_from_path. [10501.950417][ T5858] gretap1: entered promiscuous mode [10504.177825][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11607'. [10504.226053][ T5862] TCP: TCP_TX_DELAY enabled [10504.673215][ T5868] ip6_tables: ip6tables: counters copy to user failed while replacing table [10505.993801][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11620'. [10506.717497][ T5589] syz_tun (unregistering): left allmulticast mode [10506.876394][ T4412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10506.956982][ T4412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10507.040207][ T4412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10507.119110][ T4412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10508.689878][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10508.726940][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10508.749309][ T4412] bond0 (unregistering): Released all slaves [10508.789346][ T4412] bond1 (unregistering): Released all slaves [10509.094938][ T4412] hsr_slave_0: left promiscuous mode [10509.101475][ T4412] hsr_slave_1: left promiscuous mode [10509.146508][ T4412] veth1_macvtap: left promiscuous mode [10509.147875][ T4412] veth0_macvtap: left promiscuous mode [10510.504051][T30360] hsr0 speed is unknown, defaulting to 1000 [10510.504287][T30360] infiniband syz2: ib_query_port failed (-19) [10512.937985][ T3222] 8021q: adding VLAN 0 to HW filter on device eth5 [10513.724289][ T5934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11627'. [10514.013755][ T5939] FAULT_INJECTION: forcing a failure. [10514.013755][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [10514.015821][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.2.11628 Tainted: G W syzkaller #0 PREEMPT [10514.015970][ T5939] Tainted: [W]=WARN [10514.016004][ T5939] Hardware name: linux,dummy-virt (DT) [10514.016040][ T5939] Call trace: [10514.016071][ T5939] show_stack+0x18/0x24 (C) [10514.016170][ T5939] dump_stack_lvl+0x60/0x80 [10514.016236][ T5939] dump_stack+0x18/0x24 [10514.016300][ T5939] should_fail_ex+0x1e0/0x238 [10514.016368][ T5939] should_failslab+0x54/0x80 [10514.016434][ T5939] __kmalloc_cache_noprof+0x58/0x470 [10514.016506][ T5939] __arm64_sys_fanotify_init+0x180/0x3c0 [10514.016573][ T5939] invoke_syscall+0x54/0x10c [10514.016637][ T5939] el0_svc_common.constprop.0+0x40/0xe0 [10514.016702][ T5939] do_el0_svc+0x1c/0x34 [10514.016764][ T5939] el0_svc+0x38/0x1fc [10514.016836][ T5939] el0t_64_sync_handler+0xa0/0xe4 [10514.016905][ T5939] el0t_64_sync+0x1a4/0x1a8 [10515.005263][ T5949] fuse: Bad value for 'fd' [10515.045936][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10515.105679][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10515.638574][ T5956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [10516.607697][ T3222] 8021q: adding VLAN 0 to HW filter on device eth6 [10517.777906][ T28] audit: type=1326 audit(2000004125.341:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.789736][ T28] audit: type=1326 audit(2000004125.351:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.796181][ T28] audit: type=1326 audit(2000004125.361:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.800824][ T28] audit: type=1326 audit(2000004125.361:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.805530][ T28] audit: type=1326 audit(2000004125.361:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.819321][ T28] audit: type=1326 audit(2000004125.361:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.840653][ T28] audit: type=1326 audit(2000004125.401:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.843846][ T28] audit: type=1326 audit(2000004125.401:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.847993][ T28] audit: type=1326 audit(2000004125.401:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10517.863703][ T28] audit: type=1326 audit(2000004125.421:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5979 comm="syz.2.11638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff83b79368 code=0x7ffc0000 [10518.047508][ T5894] hsr_slave_0: entered promiscuous mode [10518.086700][ T5894] hsr_slave_1: entered promiscuous mode [10518.091365][ T5894] debugfs: 'hsr0' already exists in 'hsr' [10518.103052][ T5894] Cannot create hsr debugfs directory [10519.611193][ T3222] 8021q: adding VLAN 0 to HW filter on device eth7 [10520.939038][ T5894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [10521.025894][ T5894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10521.039606][ T5894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [10521.095491][ T5894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10521.104820][ T5894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [10521.154589][ T5894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10521.165887][ T5894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [10521.229574][ T5894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10523.225005][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [10523.305730][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11645'. [10523.593943][ T6031] FAULT_INJECTION: forcing a failure. [10523.593943][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [10523.596844][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.2.11646 Tainted: G W syzkaller #0 PREEMPT [10523.597010][ T6031] Tainted: [W]=WARN [10523.597049][ T6031] Hardware name: linux,dummy-virt (DT) [10523.597091][ T6031] Call trace: [10523.597124][ T6031] show_stack+0x18/0x24 (C) [10523.597237][ T6031] dump_stack_lvl+0x60/0x80 [10523.597311][ T6031] dump_stack+0x18/0x24 [10523.597381][ T6031] should_fail_ex+0x1e0/0x238 [10523.597460][ T6031] should_failslab+0x54/0x80 [10523.597532][ T6031] kmem_cache_alloc_noprof+0x54/0x458 [10523.597608][ T6031] vm_area_dup+0x24/0x138 [10523.597687][ T6031] __split_vma+0x90/0x350 [10523.597765][ T6031] vma_modify+0x370/0x5a4 [10523.597826][ T6031] vma_modify_flags+0xac/0x100 [10523.597896][ T6031] mprotect_fixup+0xa0/0x358 [10523.597975][ T6031] do_mprotect_pkey+0x334/0x460 [10523.598042][ T6031] __arm64_sys_mprotect+0x1c/0x2c [10523.598108][ T6031] invoke_syscall+0x54/0x10c [10523.598181][ T6031] el0_svc_common.constprop.0+0x40/0xe0 [10523.598252][ T6031] do_el0_svc+0x1c/0x34 [10523.598318][ T6031] el0_svc+0x38/0x1fc [10523.598398][ T6031] el0t_64_sync_handler+0xa0/0xe4 [10523.598524][ T6031] el0t_64_sync+0x1a4/0x1a8 [10527.560939][ T6072] FAULT_INJECTION: forcing a failure. [10527.560939][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10527.561816][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.2.11654 Tainted: G W syzkaller #0 PREEMPT [10527.562083][ T6072] Tainted: [W]=WARN [10527.562140][ T6072] Hardware name: linux,dummy-virt (DT) [10527.562196][ T6072] Call trace: [10527.562245][ T6072] show_stack+0x18/0x24 (C) [10527.562400][ T6072] dump_stack_lvl+0x60/0x80 [10527.562529][ T6072] dump_stack+0x18/0x24 [10527.562647][ T6072] should_fail_ex+0x1e0/0x238 [10527.562785][ T6072] should_fail+0x14/0x40 [10527.562917][ T6072] should_fail_usercopy+0x1c/0x40 [10527.563065][ T6072] _inline_copy_from_user+0x24/0xa8 [10527.563197][ T6072] copy_from_sockptr_offset.constprop.0+0x2c/0x38 [10527.563302][ T6072] do_sock_getsockopt+0x1b8/0x360 [10527.563387][ T6072] __sys_getsockopt+0x7c/0xec [10527.563461][ T6072] __arm64_sys_getsockopt+0x20/0x34 [10527.563531][ T6072] invoke_syscall+0x54/0x10c [10527.563606][ T6072] el0_svc_common.constprop.0+0x40/0xe0 [10527.563681][ T6072] do_el0_svc+0x1c/0x34 [10527.563769][ T6072] el0_svc+0x38/0x1fc [10527.563856][ T6072] el0t_64_sync_handler+0xa0/0xe4 [10527.563947][ T6072] el0t_64_sync+0x1a4/0x1a8 [10530.517493][ T5894] veth0_vlan: entered promiscuous mode [10530.591304][ T5894] veth1_vlan: entered promiscuous mode [10530.897524][ T5894] veth0_macvtap: entered promiscuous mode [10530.968741][ T5894] veth1_macvtap: entered promiscuous mode [10531.365119][ T4837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10531.369495][ T4837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10531.389405][ T4837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10531.398491][ T4837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10534.759384][ T6143] FAULT_INJECTION: forcing a failure. [10534.759384][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [10534.768287][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.2.11674 Tainted: G W syzkaller #0 PREEMPT [10534.768477][ T6143] Tainted: [W]=WARN [10534.768515][ T6143] Hardware name: linux,dummy-virt (DT) [10534.768559][ T6143] Call trace: [10534.768596][ T6143] show_stack+0x18/0x24 (C) [10534.768708][ T6143] dump_stack_lvl+0x60/0x80 [10534.768783][ T6143] dump_stack+0x18/0x24 [10534.768855][ T6143] should_fail_ex+0x1e0/0x238 [10534.768934][ T6143] should_failslab+0x54/0x80 [10534.769009][ T6143] kmem_cache_alloc_noprof+0x54/0x458 [10534.769090][ T6143] security_inode_alloc+0x30/0x1a0 [10534.769170][ T6143] inode_init_always_gfp+0x174/0x254 [10534.769244][ T6143] alloc_inode+0x40/0xdc [10534.769306][ T6143] new_inode+0x14/0x88 [10534.769372][ T6143] proc_pid_make_inode+0x20/0xac [10534.769453][ T6143] proc_pident_instantiate+0x2c/0xe0 [10534.769521][ T6143] proc_pident_lookup+0x114/0x164 [10534.769590][ T6143] proc_tgid_base_lookup+0x20/0x34 [10534.769660][ T6143] __lookup_slow+0x68/0x128 [10534.769727][ T6143] lookup_slow+0x40/0x68 [10534.769792][ T6143] link_path_walk+0x54c/0x688 [10534.769862][ T6143] path_openat+0x88/0x960 [10534.769935][ T6143] do_file_open+0xb0/0x168 [10534.770006][ T6143] do_sys_openat2+0x84/0x104 [10534.770086][ T6143] __arm64_sys_openat+0x64/0xc0 [10534.770159][ T6143] invoke_syscall+0x54/0x10c [10534.770234][ T6143] el0_svc_common.constprop.0+0x40/0xe0 [10534.770309][ T6143] do_el0_svc+0x1c/0x34 [10534.770382][ T6143] el0_svc+0x38/0x1fc [10534.770469][ T6143] el0t_64_sync_handler+0xa0/0xe4 [10534.770549][ T6143] el0t_64_sync+0x1a4/0x1a8 [10536.503365][ T6152] Injecting memory failure for pfn 0x4ddb0 at process virtual address 0x20000000 [10536.521695][ T6152] Memory failure: 0x4ddb0: Sending SIGBUS to syz.2.11678:6152 due to hardware memory corruption [10536.523826][ T6152] Memory failure: 0x4ddb0: recovery action for dirty LRU page: Recovered [10536.525899][ T6152] Injecting memory failure for pfn 0x41f48 at process virtual address 0x20001000 [10536.526119][ T6152] Memory failure: 0x41f48: unhandlable page. [10536.526248][ T6152] Memory failure: 0x41f48: recovery action for reserved kernel page: Ignored [10536.887144][ T6158] FAULT_INJECTION: forcing a failure. [10536.887144][ T6158] name fail_futex, interval 1, probability 0, space 0, times 0 [10536.889314][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.2.11681 Tainted: G W syzkaller #0 PREEMPT [10536.889402][ T6158] Tainted: [W]=WARN [10536.889421][ T6158] Hardware name: linux,dummy-virt (DT) [10536.889451][ T6158] Call trace: [10536.889468][ T6158] show_stack+0x18/0x24 (C) [10536.889536][ T6158] dump_stack_lvl+0x60/0x80 [10536.889603][ T6158] dump_stack+0x18/0x24 [10536.889639][ T6158] should_fail_ex+0x1e0/0x238 [10536.889678][ T6158] should_fail+0x14/0x40 [10536.889712][ T6158] get_futex_key+0xdc/0x620 [10536.889748][ T6158] futex_wake+0x68/0x240 [10536.889784][ T6158] do_futex+0x178/0x210 [10536.889818][ T6158] __arm64_sys_futex+0x100/0x1a0 [10536.889853][ T6158] invoke_syscall+0x54/0x10c [10536.889888][ T6158] el0_svc_common.constprop.0+0x40/0xe0 [10536.889923][ T6158] do_el0_svc+0x1c/0x34 [10536.889961][ T6158] el0_svc+0x38/0x1fc [10536.890001][ T6158] el0t_64_sync_handler+0xa0/0xe4 [10536.890038][ T6158] el0t_64_sync+0x1a4/0x1a8 [10538.011627][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11682'. [10538.013184][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11682'. [10538.015495][ T6160] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [10538.778465][ T6170] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [10539.046128][ T28] kauditd_printk_skb: 8 callbacks suppressed [10539.046623][ T28] audit: type=1326 audit(2000004146.611:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.047341][ T28] audit: type=1326 audit(2000004146.611:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.047577][ T28] audit: type=1326 audit(2000004146.611:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.070482][ T28] audit: type=1326 audit(2000004146.621:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.078774][ T28] audit: type=1326 audit(2000004146.641:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.085682][ T28] audit: type=1326 audit(2000004146.641:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.097117][ T28] audit: type=1326 audit(2000004146.651:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.107790][ T28] audit: type=1326 audit(2000004146.671:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.111830][ T28] audit: type=1326 audit(2000004146.671:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10539.118033][ T28] audit: type=1326 audit(2000004146.671:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.1.11688" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [10542.247418][ T6190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10542.363788][ T6190] md: could not open device unknown-block(1,0). [10542.704494][ T6190] md/raid1:md0: active with 1 out of 2 mirrors [10542.768966][ T6195] md_update_sb: can't update sb for read-only array md0 [10543.771185][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11700'. [10547.555435][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11713'. [10553.502569][ T6287] FAULT_INJECTION: forcing a failure. [10553.502569][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10553.502890][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.1.11736 Tainted: G W syzkaller #0 PREEMPT [10553.503050][ T6287] Tainted: [W]=WARN [10553.503088][ T6287] Hardware name: linux,dummy-virt (DT) [10553.503128][ T6287] Call trace: [10553.503160][ T6287] show_stack+0x18/0x24 (C) [10553.503262][ T6287] dump_stack_lvl+0x60/0x80 [10553.503335][ T6287] dump_stack+0x18/0x24 [10553.503400][ T6287] should_fail_ex+0x1e0/0x238 [10553.503477][ T6287] should_fail+0x14/0x40 [10553.503542][ T6287] should_fail_usercopy+0x1c/0x40 [10553.503607][ T6287] preserve_sve_context+0x148/0x2b0 [10553.503675][ T6287] setup_rt_frame+0x828/0x1120 [10553.503746][ T6287] arch_do_signal_or_restart+0x220/0x3dc [10553.503819][ T6287] exit_to_user_mode_loop+0x114/0x19c [10553.503896][ T6287] el0_da+0xe8/0xf0 [10553.503986][ T6287] el0t_64_sync_handler+0xd0/0xe4 [10553.504062][ T6287] el0t_64_sync+0x1a4/0x1a8 [10554.200168][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11740'. [10556.749890][ T6314] FAULT_INJECTION: forcing a failure. [10556.749890][ T6314] name fail_futex, interval 1, probability 0, space 0, times 0 [10556.773490][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.1.11749 Tainted: G W syzkaller #0 PREEMPT [10556.773671][ T6314] Tainted: [W]=WARN [10556.773708][ T6314] Hardware name: linux,dummy-virt (DT) [10556.773749][ T6314] Call trace: [10556.773782][ T6314] show_stack+0x18/0x24 (C) [10556.773892][ T6314] dump_stack_lvl+0x60/0x80 [10556.773967][ T6314] dump_stack+0x18/0x24 [10556.774036][ T6314] should_fail_ex+0x1e0/0x238 [10556.774111][ T6314] should_fail+0x14/0x40 [10556.774179][ T6314] get_futex_key+0xdc/0x620 [10556.774250][ T6314] futex_wait_setup+0x54/0x240 [10556.774324][ T6314] __futex_wait+0xd4/0x180 [10556.774404][ T6314] futex_wait+0x88/0x110 [10556.774475][ T6314] do_futex+0x1a0/0x210 [10556.774545][ T6314] __arm64_sys_futex+0x100/0x1a0 [10556.774613][ T6314] invoke_syscall+0x54/0x10c [10556.774677][ T6314] el0_svc_common.constprop.0+0x40/0xe0 [10556.774742][ T6314] do_el0_svc+0x1c/0x34 [10556.774806][ T6314] el0_svc+0x38/0x1fc [10556.774879][ T6314] el0t_64_sync_handler+0xa0/0xe4 [10556.774950][ T6314] el0t_64_sync+0x1a4/0x1a8 [10560.050807][ T6336] FAULT_INJECTION: forcing a failure. [10560.050807][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [10560.052619][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.1.11758 Tainted: G W syzkaller #0 PREEMPT [10560.052704][ T6336] Tainted: [W]=WARN [10560.052722][ T6336] Hardware name: linux,dummy-virt (DT) [10560.052743][ T6336] Call trace: [10560.052774][ T6336] show_stack+0x18/0x24 (C) [10560.052884][ T6336] dump_stack_lvl+0x60/0x80 [10560.052928][ T6336] dump_stack+0x18/0x24 [10560.052962][ T6336] should_fail_ex+0x1e0/0x238 [10560.053009][ T6336] should_failslab+0x54/0x80 [10560.053079][ T6336] __kmalloc_noprof+0xac/0x520 [10560.053151][ T6336] __list_lru_init+0x4c/0x148 [10560.053202][ T6336] sget_fc+0x294/0x790 [10560.053236][ T6336] get_tree_nodev+0x2c/0xb8 [10560.053270][ T6336] mqueue_get_tree+0x44/0x50 [10560.053309][ T6336] vfs_get_tree+0x28/0x100 [10560.053341][ T6336] fc_mount_longterm+0x18/0xa0 [10560.053394][ T6336] mq_init_ns+0xb8/0x210 [10560.053450][ T6336] copy_ipcs+0x170/0x300 [10560.053483][ T6336] create_new_namespaces+0xa8/0x370 [10560.053526][ T6336] unshare_nsproxy_namespaces+0x70/0xbc [10560.053565][ T6336] ksys_unshare+0x1cc/0x3b8 [10560.053601][ T6336] __arm64_sys_unshare+0x14/0x24 [10560.053636][ T6336] invoke_syscall+0x54/0x10c [10560.053671][ T6336] el0_svc_common.constprop.0+0x40/0xe0 [10560.053706][ T6336] do_el0_svc+0x1c/0x34 [10560.053739][ T6336] el0_svc+0x38/0x1fc [10560.053779][ T6336] el0t_64_sync_handler+0xa0/0xe4 [10560.053978][ T6336] el0t_64_sync+0x1a4/0x1a8 [10569.686465][ T6367] FAULT_INJECTION: forcing a failure. [10569.686465][ T6367] name fail_futex, interval 1, probability 0, space 0, times 0 [10569.687855][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.11769 Tainted: G W syzkaller #0 PREEMPT [10569.687945][ T6367] Tainted: [W]=WARN [10569.687963][ T6367] Hardware name: linux,dummy-virt (DT) [10569.687985][ T6367] Call trace: [10569.688001][ T6367] show_stack+0x18/0x24 (C) [10569.688059][ T6367] dump_stack_lvl+0x60/0x80 [10569.688096][ T6367] dump_stack+0x18/0x24 [10569.688130][ T6367] should_fail_ex+0x1e0/0x238 [10569.688168][ T6367] should_fail+0x14/0x40 [10569.688202][ T6367] get_futex_key+0xdc/0x620 [10569.688238][ T6367] futex_wait_setup+0x54/0x240 [10569.688274][ T6367] __futex_wait+0xd4/0x180 [10569.688309][ T6367] futex_wait+0x88/0x110 [10569.688343][ T6367] do_futex+0x1a0/0x210 [10569.688376][ T6367] __arm64_sys_futex+0x100/0x1a0 [10569.688422][ T6367] invoke_syscall+0x54/0x10c [10569.688457][ T6367] el0_svc_common.constprop.0+0x40/0xe0 [10569.688492][ T6367] do_el0_svc+0x1c/0x34 [10569.688525][ T6367] el0_svc+0x38/0x1fc [10569.688565][ T6367] el0t_64_sync_handler+0xa0/0xe4 [10569.688602][ T6367] el0t_64_sync+0x1a4/0x1a8 [10571.356274][ T6378] FAULT_INJECTION: forcing a failure. [10571.356274][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10571.359234][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.1.11774 Tainted: G W syzkaller #0 PREEMPT [10571.359402][ T6378] Tainted: [W]=WARN [10571.359435][ T6378] Hardware name: linux,dummy-virt (DT) [10571.359491][ T6378] Call trace: [10571.359550][ T6378] show_stack+0x18/0x24 (C) [10571.359653][ T6378] dump_stack_lvl+0x60/0x80 [10571.359721][ T6378] dump_stack+0x18/0x24 [10571.359785][ T6378] should_fail_ex+0x1e0/0x238 [10571.359856][ T6378] should_fail+0x14/0x40 [10571.359921][ T6378] should_fail_usercopy+0x1c/0x40 [10571.359989][ T6378] _inline_copy_from_user+0x24/0xa8 [10571.360059][ T6378] __sys_bpf+0x11c/0x1d1c [10571.360125][ T6378] __arm64_sys_bpf+0x2c/0x40 [10571.360193][ T6378] invoke_syscall+0x54/0x10c [10571.360258][ T6378] el0_svc_common.constprop.0+0x40/0xe0 [10571.360323][ T6378] do_el0_svc+0x1c/0x34 [10571.360386][ T6378] el0_svc+0x38/0x1fc [10571.360458][ T6378] el0t_64_sync_handler+0xa0/0xe4 [10571.360538][ T6378] el0t_64_sync+0x1a4/0x1a8 [10572.629543][ T6388] FAULT_INJECTION: forcing a failure. [10572.629543][ T6388] name fail_futex, interval 1, probability 0, space 0, times 0 [10572.629893][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.1.11779 Tainted: G W syzkaller #0 PREEMPT [10572.630021][ T6388] Tainted: [W]=WARN [10572.630058][ T6388] Hardware name: linux,dummy-virt (DT) [10572.630097][ T6388] Call trace: [10572.630129][ T6388] show_stack+0x18/0x24 (C) [10572.630232][ T6388] dump_stack_lvl+0x60/0x80 [10572.630304][ T6388] dump_stack+0x18/0x24 [10572.630372][ T6388] should_fail_ex+0x1e0/0x238 [10572.630445][ T6388] should_fail+0x14/0x40 [10572.630516][ T6388] get_futex_key+0xdc/0x620 [10572.630589][ T6388] futex_wait_setup+0x54/0x240 [10572.630660][ T6388] __futex_wait+0xd4/0x180 [10572.630730][ T6388] futex_wait+0x88/0x110 [10572.630798][ T6388] do_futex+0x1a0/0x210 [10572.630866][ T6388] __arm64_sys_futex+0x100/0x1a0 [10572.630937][ T6388] invoke_syscall+0x54/0x10c [10572.631056][ T6388] el0_svc_common.constprop.0+0x40/0xe0 [10572.631128][ T6388] do_el0_svc+0x1c/0x34 [10572.631194][ T6388] el0_svc+0x38/0x1fc [10572.631273][ T6388] el0t_64_sync_handler+0xa0/0xe4 [10572.631344][ T6388] el0t_64_sync+0x1a4/0x1a8 [10574.103345][ T6417] FAULT_INJECTION: forcing a failure. [10574.103345][ T6417] name fail_futex, interval 1, probability 0, space 0, times 0 [10574.104660][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.2.11793 Tainted: G W syzkaller #0 PREEMPT [10574.104752][ T6417] Tainted: [W]=WARN [10574.104771][ T6417] Hardware name: linux,dummy-virt (DT) [10574.104792][ T6417] Call trace: [10574.104809][ T6417] show_stack+0x18/0x24 (C) [10574.104867][ T6417] dump_stack_lvl+0x60/0x80 [10574.104904][ T6417] dump_stack+0x18/0x24 [10574.104951][ T6417] should_fail_ex+0x1e0/0x238 [10574.104991][ T6417] should_fail+0x14/0x40 [10574.105024][ T6417] get_futex_key+0xdc/0x620 [10574.105060][ T6417] futex_wait_setup+0x54/0x240 [10574.105097][ T6417] __futex_wait+0xd4/0x180 [10574.105132][ T6417] futex_wait+0x88/0x110 [10574.105166][ T6417] do_futex+0x1a0/0x210 [10574.105199][ T6417] __arm64_sys_futex+0x100/0x1a0 [10574.105234][ T6417] invoke_syscall+0x54/0x10c [10574.105268][ T6417] el0_svc_common.constprop.0+0x40/0xe0 [10574.105304][ T6417] do_el0_svc+0x1c/0x34 [10574.105337][ T6417] el0_svc+0x38/0x1fc [10574.105377][ T6417] el0t_64_sync_handler+0xa0/0xe4 [10574.105414][ T6417] el0t_64_sync+0x1a4/0x1a8 [10575.328836][ T6435] FAULT_INJECTION: forcing a failure. [10575.328836][ T6435] name fail_futex, interval 1, probability 0, space 0, times 0 [10575.330871][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.2.11801 Tainted: G W syzkaller #0 PREEMPT [10575.331052][ T6435] Tainted: [W]=WARN [10575.331086][ T6435] Hardware name: linux,dummy-virt (DT) [10575.331122][ T6435] Call trace: [10575.331152][ T6435] show_stack+0x18/0x24 (C) [10575.331258][ T6435] dump_stack_lvl+0x60/0x80 [10575.331326][ T6435] dump_stack+0x18/0x24 [10575.331394][ T6435] should_fail_ex+0x1e0/0x238 [10575.331469][ T6435] should_fail+0x14/0x40 [10575.331536][ T6435] get_futex_key+0xdc/0x620 [10575.331613][ T6435] futex_wait_setup+0x54/0x240 [10575.331680][ T6435] __futex_wait+0xd4/0x180 [10575.331747][ T6435] futex_wait+0x88/0x110 [10575.331812][ T6435] do_futex+0x1a0/0x210 [10575.331885][ T6435] __arm64_sys_futex+0x100/0x1a0 [10575.331960][ T6435] invoke_syscall+0x54/0x10c [10575.332067][ T6435] el0_svc_common.constprop.0+0x40/0xe0 [10575.332137][ T6435] do_el0_svc+0x1c/0x34 [10575.332206][ T6435] el0_svc+0x38/0x1fc [10575.332289][ T6435] el0t_64_sync_handler+0xa0/0xe4 [10575.332357][ T6435] el0t_64_sync+0x1a4/0x1a8 [10579.246266][ T5776] Process accounting resumed [10580.401585][ T6450] FAULT_INJECTION: forcing a failure. [10580.401585][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10580.402519][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.1.11806 Tainted: G W syzkaller #0 PREEMPT [10580.402647][ T6450] Tainted: [W]=WARN [10580.402685][ T6450] Hardware name: linux,dummy-virt (DT) [10580.402725][ T6450] Call trace: [10580.402758][ T6450] show_stack+0x18/0x24 (C) [10580.402869][ T6450] dump_stack_lvl+0x60/0x80 [10580.402989][ T6450] dump_stack+0x18/0x24 [10580.403068][ T6450] should_fail_ex+0x1e0/0x238 [10580.403147][ T6450] should_fail+0x14/0x40 [10580.403218][ T6450] should_fail_usercopy+0x1c/0x40 [10580.403296][ T6450] _inline_copy_from_user+0x24/0xa8 [10580.403376][ T6450] __sys_bpf+0x11c/0x1d1c [10580.403450][ T6450] __arm64_sys_bpf+0x2c/0x40 [10580.403528][ T6450] invoke_syscall+0x54/0x10c [10580.403603][ T6450] el0_svc_common.constprop.0+0x40/0xe0 [10580.403678][ T6450] do_el0_svc+0x1c/0x34 [10580.403749][ T6450] el0_svc+0x38/0x1fc [10580.403831][ T6450] el0t_64_sync_handler+0xa0/0xe4 [10580.403959][ T6450] el0t_64_sync+0x1a4/0x1a8 [10583.626922][T26149] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [10583.629214][T26149] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [10583.631195][T26149] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [10583.634736][T26149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [10589.177330][ T6480] FAULT_INJECTION: forcing a failure. [10589.177330][ T6480] name fail_futex, interval 1, probability 0, space 0, times 0 [10589.177664][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.1.11818 Tainted: G W syzkaller #0 PREEMPT [10589.177782][ T6480] Tainted: [W]=WARN [10589.177820][ T6480] Hardware name: linux,dummy-virt (DT) [10589.177860][ T6480] Call trace: [10589.177893][ T6480] show_stack+0x18/0x24 (C) [10589.177997][ T6480] dump_stack_lvl+0x60/0x80 [10589.178073][ T6480] dump_stack+0x18/0x24 [10589.178146][ T6480] should_fail_ex+0x1e0/0x238 [10589.178267][ T6480] should_fail+0x14/0x40 [10589.178353][ T6480] get_futex_key+0xdc/0x620 [10589.178428][ T6480] futex_wait_setup+0x54/0x240 [10589.178500][ T6480] __futex_wait+0xd4/0x180 [10589.178572][ T6480] futex_wait+0x88/0x110 [10589.178638][ T6480] do_futex+0x1a0/0x210 [10589.178709][ T6480] __arm64_sys_futex+0x100/0x1a0 [10589.178784][ T6480] invoke_syscall+0x54/0x10c [10589.178859][ T6480] el0_svc_common.constprop.0+0x40/0xe0 [10589.178931][ T6480] do_el0_svc+0x1c/0x34 [10589.179040][ T6480] el0_svc+0x38/0x1fc [10589.179122][ T6480] el0t_64_sync_handler+0xa0/0xe4 [10589.179192][ T6480] el0t_64_sync+0x1a4/0x1a8 [10589.258408][ T6482] FAULT_INJECTION: forcing a failure. [10589.258408][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [10589.258732][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.2.11819 Tainted: G W syzkaller #0 PREEMPT [10589.258845][ T6482] Tainted: [W]=WARN [10589.258881][ T6482] Hardware name: linux,dummy-virt (DT) [10589.258921][ T6482] Call trace: [10589.258955][ T6482] show_stack+0x18/0x24 (C) [10589.259104][ T6482] dump_stack_lvl+0x60/0x80 [10589.259179][ T6482] dump_stack+0x18/0x24 [10589.259248][ T6482] should_fail_ex+0x1e0/0x238 [10589.259332][ T6482] should_failslab+0x54/0x80 [10589.259406][ T6482] kmem_cache_alloc_lru_noprof+0x58/0x458 [10589.259482][ T6482] __d_alloc+0x3c/0x280 [10589.259563][ T6482] d_alloc_pseudo+0x10/0x50 [10589.259633][ T6482] alloc_file_pseudo+0x7c/0x160 [10589.259700][ T6482] __anon_inode_getfd+0x94/0x18c [10589.259773][ T6482] anon_inode_getfd+0x18/0x24 [10589.259845][ T6482] map_create+0x6b4/0xb54 [10589.259921][ T6482] __sys_bpf+0x9b8/0x1d1c [10589.259994][ T6482] __arm64_sys_bpf+0x2c/0x40 [10589.260069][ T6482] invoke_syscall+0x54/0x10c [10589.260359][ T6482] el0_svc_common.constprop.0+0x40/0xe0 [10589.260437][ T6482] do_el0_svc+0x1c/0x34 [10589.260547][ T6482] el0_svc+0x38/0x1fc [10589.260631][ T6482] el0t_64_sync_handler+0xa0/0xe4 [10589.260710][ T6482] el0t_64_sync+0x1a4/0x1a8 [10590.265308][ T6494] FAULT_INJECTION: forcing a failure. [10590.265308][ T6494] name fail_futex, interval 1, probability 0, space 0, times 0 [10590.268572][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.2.11824 Tainted: G W syzkaller #0 PREEMPT [10590.268745][ T6494] Tainted: [W]=WARN [10590.268784][ T6494] Hardware name: linux,dummy-virt (DT) [10590.268829][ T6494] Call trace: [10590.268867][ T6494] show_stack+0x18/0x24 (C) [10590.268994][ T6494] dump_stack_lvl+0x60/0x80 [10590.269068][ T6494] dump_stack+0x18/0x24 [10590.269133][ T6494] should_fail_ex+0x1e0/0x238 [10590.269208][ T6494] should_fail+0x14/0x40 [10590.269275][ T6494] get_futex_key+0xdc/0x620 [10590.269345][ T6494] futex_wait_setup+0x54/0x240 [10590.269420][ T6494] __futex_wait+0xd4/0x180 [10590.269492][ T6494] futex_wait+0x88/0x110 [10590.269563][ T6494] do_futex+0x1a0/0x210 [10590.269635][ T6494] __arm64_sys_futex+0x100/0x1a0 [10590.269715][ T6494] invoke_syscall+0x54/0x10c [10590.269789][ T6494] el0_svc_common.constprop.0+0x40/0xe0 [10590.269862][ T6494] do_el0_svc+0x1c/0x34 [10590.269938][ T6494] el0_svc+0x38/0x1fc [10590.270048][ T6494] el0t_64_sync_handler+0xa0/0xe4 [10590.270126][ T6494] el0t_64_sync+0x1a4/0x1a8 [10590.676129][ T6501] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [10591.027368][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10591.035095][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10595.705284][ T6526] 8021q: VLANs not supported on ipvlan1 [10595.969228][ T6528] null_blk: rnullb0: using native zone append [10596.075299][ T6528] null_blk: disk rnullb0 created [10596.412978][ T6510] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [10597.294498][ T6539] random: crng reseeded on system resumption [10598.053519][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10598.056812][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10598.425929][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10598.443847][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10598.709676][ T6554] binder: 6553:6554 ioctl 4018620d 0 returned -22 [10599.020881][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10599.026721][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10600.065148][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11852'. [10601.561017][ T5776] hid-generic 0005:057E:0330.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [10601.563814][ T6584] syz_tun: entered allmulticast mode [10601.579695][ T6582] syz_tun: left allmulticast mode [10601.871679][ T6590] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [10601.879828][ T6590] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [10602.169637][ T6587] fido_id[6587]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [10604.906205][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10604.914929][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10605.216129][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10605.221674][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10606.378214][ T6646] gadgetfs: bound to dummy_udc driver [10606.527726][ T6648] pimreg: entered allmulticast mode [10607.373663][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [10607.409470][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11893'. [10607.739859][ T6659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [10607.747136][ T6659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [10607.790454][ T6659] veth1_vlan: left promiscuous mode [10607.807139][ T6659] veth0_vlan: left promiscuous mode [10607.830745][ T6659] veth0_vlan: entered promiscuous mode [10607.864801][ T6659] veth1_vlan: entered promiscuous mode [10607.904032][ T6659] veth1_macvtap: left promiscuous mode [10607.911639][ T6659] veth0_macvtap: left promiscuous mode [10607.925942][ T6659] veth0_macvtap: entered promiscuous mode [10607.938177][ T6659] veth1_macvtap: entered promiscuous mode [10607.988132][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10608.000761][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10608.011620][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10608.025063][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10608.044520][ T6659] 8021q: adding VLAN 0 to HW filter on device bond1 [10608.487902][ T4844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10608.654536][ T4843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10608.656756][ T4843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10608.668985][ T4843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10611.581693][ T6689] xt_hashlimit: size too large, truncated to 1048576 [10614.209702][ T6716] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11914'. [10614.215758][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11914'. [10614.864361][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10614.874724][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10617.300451][ T6748] loop0: detected capacity change from 0 to 65536 [10618.063921][ T6761] binder: 6760:6761 tried to acquire reference to desc 0, got 1 instead [10618.065805][ T6761] binder: 6760:6761 got transaction with invalid offsets size, 77 [10618.070798][ T6761] binder: 6760:6761 transaction call to 6760:0 failed 20/29201/-22, code 0 size 0-77 line 3455 [10618.084379][ T5776] binder: undelivered TRANSACTION_ERROR: 29201 [10618.205081][ T6763] netlink: 'syz.1.11935': attribute type 1 has an invalid length. [10618.334281][ T6763] 8021q: adding VLAN 0 to HW filter on device bond2 [10618.543627][ T6763] bond2: (slave gretap1): making interface the new active one [10618.558251][ T6763] bond2: (slave gretap1): Enslaving as an active interface with an up link [10621.539270][ T6806] binder: 6805:6806 got transaction to invalid handle, 1 [10621.540725][ T6806] binder: 6805:6806 cannot find target node [10621.546241][ T6806] binder: 6805:6806 transaction call to 0:0 failed 23/29201/-22, code 0 size 0-0 line 3252 [10621.565716][ T6116] binder: undelivered TRANSACTION_ERROR: 29201 [10625.779734][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11961'. [10627.706245][ T6848] FAULT_INJECTION: forcing a failure. [10627.706245][ T6848] name fail_futex, interval 1, probability 0, space 0, times 0 [10627.713938][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.1.11970 Tainted: G W syzkaller #0 PREEMPT [10627.714118][ T6848] Tainted: [W]=WARN [10627.714157][ T6848] Hardware name: linux,dummy-virt (DT) [10627.714198][ T6848] Call trace: [10627.714234][ T6848] show_stack+0x18/0x24 (C) [10627.714344][ T6848] dump_stack_lvl+0x60/0x80 [10627.714417][ T6848] dump_stack+0x18/0x24 [10627.714495][ T6848] should_fail_ex+0x1e0/0x238 [10627.714569][ T6848] should_fail+0x14/0x40 [10627.714637][ T6848] get_futex_key+0xdc/0x620 [10627.714711][ T6848] futex_wait_setup+0x54/0x240 [10627.714786][ T6848] __futex_wait+0xd4/0x180 [10627.714852][ T6848] futex_wait+0x88/0x110 [10627.714920][ T6848] do_futex+0x1a0/0x210 [10627.715040][ T6848] __arm64_sys_futex+0x100/0x1a0 [10627.715122][ T6848] invoke_syscall+0x54/0x10c [10627.715203][ T6848] el0_svc_common.constprop.0+0x40/0xe0 [10627.715282][ T6848] do_el0_svc+0x1c/0x34 [10627.715356][ T6848] el0_svc+0x38/0x1fc [10627.715452][ T6848] el0t_64_sync_handler+0xa0/0xe4 [10627.715530][ T6848] el0t_64_sync+0x1a4/0x1a8 [10628.047475][ T6850] bond3: entered promiscuous mode [10628.063291][ T6850] netlink: 'syz.2.11971': attribute type 10 has an invalid length. [10628.769925][ T6848] FAULT_INJECTION: forcing a failure. [10628.769925][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [10628.778123][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.1.11970 Tainted: G W syzkaller #0 PREEMPT [10628.778301][ T6848] Tainted: [W]=WARN [10628.778342][ T6848] Hardware name: linux,dummy-virt (DT) [10628.778383][ T6848] Call trace: [10628.778417][ T6848] show_stack+0x18/0x24 (C) [10628.778540][ T6848] dump_stack_lvl+0x60/0x80 [10628.778610][ T6848] dump_stack+0x18/0x24 [10628.778675][ T6848] should_fail_ex+0x1e0/0x238 [10628.778749][ T6848] should_failslab+0x54/0x80 [10628.778823][ T6848] __kmalloc_noprof+0xac/0x520 [10628.778900][ T6848] __list_lru_init+0x4c/0x148 [10628.779053][ T6848] sget_fc+0x27c/0x790 [10628.779127][ T6848] get_tree_nodev+0x2c/0xb8 [10628.779196][ T6848] mqueue_get_tree+0x44/0x50 [10628.779284][ T6848] vfs_get_tree+0x28/0x100 [10628.779354][ T6848] fc_mount_longterm+0x18/0xa0 [10628.779434][ T6848] mq_init_ns+0xb8/0x210 [10628.779507][ T6848] copy_ipcs+0x170/0x300 [10628.779571][ T6848] create_new_namespaces+0xa8/0x370 [10628.779649][ T6848] unshare_nsproxy_namespaces+0x70/0xbc [10628.779722][ T6848] ksys_unshare+0x1cc/0x3b8 [10628.779796][ T6848] __arm64_sys_unshare+0x14/0x24 [10628.779871][ T6848] invoke_syscall+0x54/0x10c [10628.779942][ T6848] el0_svc_common.constprop.0+0x40/0xe0 [10628.780036][ T6848] do_el0_svc+0x1c/0x34 [10628.780111][ T6848] el0_svc+0x38/0x1fc [10628.780193][ T6848] el0t_64_sync_handler+0xa0/0xe4 [10628.780268][ T6848] el0t_64_sync+0x1a4/0x1a8 [10631.393497][ T6871] syzkaller0: entered promiscuous mode [10631.395296][ T6871] syzkaller0: entered allmulticast mode [10635.893879][ T6893] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10636.816861][ T6902] ip6_tables: ip6tables: counters copy to user failed while replacing table [10637.225883][ T6905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10637.267482][ T6905] md: couldn't update array info. -22 [10637.268611][ T6195] md_update_sb: can't update sb for read-only array md0 [10638.151417][ T6912] FAULT_INJECTION: forcing a failure. [10638.151417][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [10638.154331][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.1.11995 Tainted: G W syzkaller #0 PREEMPT [10638.154484][ T6912] Tainted: [W]=WARN [10638.154521][ T6912] Hardware name: linux,dummy-virt (DT) [10638.154562][ T6912] Call trace: [10638.154596][ T6912] show_stack+0x18/0x24 (C) [10638.154701][ T6912] dump_stack_lvl+0x60/0x80 [10638.154763][ T6912] dump_stack+0x18/0x24 [10638.154828][ T6912] should_fail_ex+0x1e0/0x238 [10638.154905][ T6912] should_failslab+0x54/0x80 [10638.155013][ T6912] __kmalloc_cache_noprof+0x58/0x470 [10638.155092][ T6912] percpu_ref_init+0x74/0x124 [10638.155162][ T6912] blk_alloc_queue+0x1a0/0x1e8 [10638.155239][ T6912] __blk_alloc_disk+0x58/0xfc [10638.155309][ T6912] dm_create+0x168/0x4e0 [10638.155388][ T6912] dev_create+0x54/0x104 [10638.155464][ T6912] ctl_ioctl+0x290/0x5b8 [10638.155535][ T6912] dm_ctl_ioctl+0x10/0x20 [10638.155635][ T6912] __arm64_sys_ioctl+0xa8/0x100 [10638.155716][ T6912] invoke_syscall+0x54/0x10c [10638.155786][ T6912] el0_svc_common.constprop.0+0x40/0xe0 [10638.155858][ T6912] do_el0_svc+0x1c/0x34 [10638.155931][ T6912] el0_svc+0x38/0x1fc [10638.156026][ T6912] el0t_64_sync_handler+0xa0/0xe4 [10638.156103][ T6912] el0t_64_sync+0x1a4/0x1a8 [10639.165121][ T6918] binder: 6917:6918 got transaction to invalid handle, 1 [10639.166750][ T6918] binder: 6917:6918 cannot find target node [10639.170302][ T6918] binder: 6917:6918 transaction call to 0:0 failed 24/29201/-22, code 0 size 0-0 line 3252 [10639.184880][ T6918] binder: undelivered TRANSACTION_ERROR: 29201 [10640.479415][ T6928] ip_tables: iptables: counters copy to user failed while replacing table [10641.014050][ T6939] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10641.187700][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10641.203183][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10641.611361][ T6947] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [10641.675773][ T6947] md: couldn't update array info. -22 [10641.676749][ T6195] md_update_sb: can't update sb for read-only array md0 [10641.713276][ T6195] md_update_sb: can't update sb for read-only array md0 [10641.733686][ T6195] md_update_sb: can't update sb for read-only array md0 [10643.351039][ T6952] infiniband syz1: set active [10643.356966][ T6952] infiniband syz1: added syz_tun [10643.496060][ T6952] RDS/IB: syz1: added [10643.501150][ T6952] smc: adding ib device syz1 with port count 1 [10643.512613][ T6952] smc: ib device syz1 port 1 has no pnetid [10646.789326][ T6985] FAULT_INJECTION: forcing a failure. [10646.789326][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [10646.789694][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.1.12025 Tainted: G W syzkaller #0 PREEMPT [10646.789805][ T6985] Tainted: [W]=WARN [10646.789837][ T6985] Hardware name: linux,dummy-virt (DT) [10646.789875][ T6985] Call trace: [10646.789905][ T6985] show_stack+0x18/0x24 (C) [10646.790011][ T6985] dump_stack_lvl+0x60/0x80 [10646.790077][ T6985] dump_stack+0x18/0x24 [10646.790141][ T6985] should_fail_ex+0x1e0/0x238 [10646.790208][ T6985] should_failslab+0x54/0x80 [10646.790272][ T6985] kmem_cache_alloc_noprof+0x54/0x458 [10646.790342][ T6985] prepare_creds+0x24/0x33c [10646.790407][ T6985] keyctl_set_reqkey_keyring+0x30/0xd8 [10646.790475][ T6985] __arm64_sys_keyctl+0x11c/0x290 [10646.790541][ T6985] invoke_syscall+0x54/0x10c [10646.790605][ T6985] el0_svc_common.constprop.0+0x40/0xe0 [10646.790669][ T6985] do_el0_svc+0x1c/0x34 [10646.790730][ T6985] el0_svc+0x38/0x1fc [10646.790801][ T6985] el0t_64_sync_handler+0xa0/0xe4 [10646.790869][ T6985] el0t_64_sync+0x1a4/0x1a8 [10649.279568][T21882] gretap1: entered promiscuous mode [10650.276167][ T7016] fuse: Bad value for 'fd' [10651.154569][ T7013] gretap1: left promiscuous mode [10651.193385][ T4844] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [10651.194499][ T4844] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [10651.197755][ T4844] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [10651.200839][ T4844] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [10653.088803][ T7050] FAULT_INJECTION: forcing a failure. [10653.088803][ T7050] name fail_futex, interval 1, probability 0, space 0, times 0 [10653.089133][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.1.12053 Tainted: G W syzkaller #0 PREEMPT [10653.089251][ T7050] Tainted: [W]=WARN [10653.089287][ T7050] Hardware name: linux,dummy-virt (DT) [10653.089326][ T7050] Call trace: [10653.089359][ T7050] show_stack+0x18/0x24 (C) [10653.089465][ T7050] dump_stack_lvl+0x60/0x80 [10653.089536][ T7050] dump_stack+0x18/0x24 [10653.089604][ T7050] should_fail_ex+0x1e0/0x238 [10653.089676][ T7050] should_fail+0x14/0x40 [10653.089742][ T7050] get_futex_key+0xdc/0x620 [10653.089812][ T7050] futex_wait_setup+0x54/0x240 [10653.089882][ T7050] __futex_wait+0xd4/0x180 [10653.089959][ T7050] futex_wait+0x88/0x110 [10653.090027][ T7050] do_futex+0x1a0/0x210 [10653.090092][ T7050] __arm64_sys_futex+0x100/0x1a0 [10653.090161][ T7050] invoke_syscall+0x54/0x10c [10653.090228][ T7050] el0_svc_common.constprop.0+0x40/0xe0 [10653.090316][ T7050] do_el0_svc+0x1c/0x34 [10653.090382][ T7050] el0_svc+0x38/0x1fc [10653.090462][ T7050] el0t_64_sync_handler+0xa0/0xe4 [10653.090534][ T7050] el0t_64_sync+0x1a4/0x1a8 [10672.214316][ T4412] smc: removing ib device syz1 [10672.296036][ T6116] syz1: Port: 1 Link DOWN [10673.932914][ T4843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10674.038853][ T4843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10674.176690][ T4843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10674.344750][ T4843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10674.965032][ T4843] pimreg: left allmulticast mode [10675.536565][ T4843] bond0 (unregistering): Released all slaves [10675.559686][ T4843] bond1 (unregistering): Released all slaves [10675.607240][ T4843] bond2 (unregistering): Released all slaves [10675.640749][ T4843] bond3 (unregistering): Released all slaves [10675.826041][ T4843] hsr_slave_0: left promiscuous mode [10675.834217][ T4843] hsr_slave_1: left promiscuous mode [10675.870102][ T4843] veth1_macvtap: left promiscuous mode [10675.873843][ T4843] veth0_macvtap: left promiscuous mode [10675.874748][ T4843] veth1_vlan: left promiscuous mode [10675.877264][ T4843] veth0_vlan: left promiscuous mode [10679.403847][ T3222] 8021q: adding VLAN 0 to HW filter on device eth5 [10680.251179][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10680.339825][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10681.150211][ T3222] 8021q: adding VLAN 0 to HW filter on device eth6 [10681.957474][ T7110] hsr_slave_0: entered promiscuous mode [10681.975207][ T7110] hsr_slave_1: entered promiscuous mode [10684.611301][ T7110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [10684.692619][ T7110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10684.718770][ T7110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [10684.779971][ T7110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10684.796834][ T7110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [10684.893744][ T7110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10684.913886][ T7110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [10684.993842][ T7110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10687.699586][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [10694.605446][ T7110] veth0_vlan: entered promiscuous mode [10694.675847][ T7110] veth1_vlan: entered promiscuous mode [10694.819762][ T7110] veth0_macvtap: entered promiscuous mode [10694.849758][ T7110] veth1_macvtap: entered promiscuous mode [10695.033121][T15080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10695.036594][T15080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10695.038708][T15080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10695.057950][T15080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10696.055823][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10696.059059][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10696.410702][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10696.419743][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10696.449173][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10696.451838][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10696.709427][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10696.711001][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10697.785954][ T7266] syzkaller0: entered promiscuous mode [10697.796621][ T7266] syzkaller0: entered allmulticast mode [10697.885571][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12085'. [10702.618534][T32753] hid-generic 0005:057E:0330.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [10703.254677][ T7304] FAULT_INJECTION: forcing a failure. [10703.254677][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [10703.263868][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: syz.1.12100 Tainted: G W syzkaller #0 PREEMPT [10703.264049][ T7304] Tainted: [W]=WARN [10703.264089][ T7304] Hardware name: linux,dummy-virt (DT) [10703.264129][ T7304] Call trace: [10703.264164][ T7304] show_stack+0x18/0x24 (C) [10703.264283][ T7304] dump_stack_lvl+0x60/0x80 [10703.264359][ T7304] dump_stack+0x18/0x24 [10703.264424][ T7304] should_fail_ex+0x1e0/0x238 [10703.264514][ T7304] should_failslab+0x54/0x80 [10703.264588][ T7304] kmem_cache_alloc_noprof+0x54/0x458 [10703.264667][ T7304] __kernfs_new_node+0x70/0x254 [10703.264750][ T7304] kernfs_new_node+0x88/0xa4 [10703.264830][ T7304] __kernfs_create_file+0x30/0xfc [10703.264902][ T7304] sysfs_add_file_mode_ns+0x74/0x130 [10703.264973][ T7304] internal_create_group+0x2e0/0x440 [10703.265045][ T7304] internal_create_groups+0x50/0xd8 [10703.265116][ T7304] sysfs_create_groups+0x18/0x24 [10703.265187][ T7304] device_add+0x4e8/0x800 [10703.265256][ T7304] wakeup_source_device_create+0xcc/0x100 [10703.265324][ T7304] wakeup_source_sysfs_add+0x18/0x40 [10703.265391][ T7304] wakeup_source_register+0x88/0x170 [10703.265477][ T7304] ep_create_wakeup_source+0x60/0xe0 [10703.265553][ T7304] do_epoll_ctl_file+0x790/0xb18 [10703.265624][ T7304] do_epoll_ctl+0x8c/0x108 [10703.265698][ T7304] __arm64_sys_epoll_ctl+0x68/0xa8 [10703.265775][ T7304] invoke_syscall+0x54/0x10c [10703.265850][ T7304] el0_svc_common.constprop.0+0x40/0xe0 [10703.265920][ T7304] do_el0_svc+0x1c/0x34 [10703.265987][ T7304] el0_svc+0x38/0x1fc [10703.266067][ T7304] el0t_64_sync_handler+0xa0/0xe4 [10703.266140][ T7304] el0t_64_sync+0x1a4/0x1a8 [10703.468296][ T7301] fido_id[7301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [10725.115707][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12109'. [10732.254141][ T7337] random: crng reseeded on system resumption [10738.036975][ T7364] gadgetfs: bound to dummy_udc driver [10738.437923][ T7367] FAULT_INJECTION: forcing a failure. [10738.437923][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [10738.456929][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.2.12121 Tainted: G W syzkaller #0 PREEMPT [10738.457114][ T7367] Tainted: [W]=WARN [10738.457153][ T7367] Hardware name: linux,dummy-virt (DT) [10738.457195][ T7367] Call trace: [10738.457231][ T7367] show_stack+0x18/0x24 (C) [10738.457349][ T7367] dump_stack_lvl+0x60/0x80 [10738.457424][ T7367] dump_stack+0x18/0x24 [10738.457507][ T7367] should_fail_ex+0x1e0/0x238 [10738.457588][ T7367] should_failslab+0x54/0x80 [10738.457668][ T7367] __kmalloc_cache_noprof+0x58/0x470 [10738.457752][ T7367] tomoyo_find_next_domain+0x70/0x7b0 [10738.457831][ T7367] tomoyo_bprm_check_security+0x7c/0xb4 [10738.457911][ T7367] security_bprm_check+0x58/0x148 [10738.457989][ T7367] bprm_execve+0x228/0x4e0 [10738.458062][ T7367] do_execveat_common.isra.0+0x188/0x1c4 [10738.458139][ T7367] __arm64_sys_execve+0x44/0x68 [10738.458208][ T7367] invoke_syscall+0x54/0x10c [10738.458276][ T7367] el0_svc_common.constprop.0+0x40/0xe0 [10738.458343][ T7367] do_el0_svc+0x1c/0x34 [10738.458409][ T7367] el0_svc+0x38/0x1fc [10738.458496][ T7367] el0t_64_sync_handler+0xa0/0xe4 [10738.458564][ T7367] el0t_64_sync+0x1a4/0x1a8 [10738.841183][ T7362] printk: legacy console [ttyGS0] disabled [10738.898082][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10738.907878][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10740.638426][ T7380] syz_tun: entered allmulticast mode [10740.765267][ T7380] dvmrp8: entered allmulticast mode [10740.776651][ T7379] syz_tun: left allmulticast mode [10741.642678][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10741.643661][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10743.292321][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10743.294575][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10743.557113][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10743.560067][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10746.621162][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10746.623270][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10747.745242][ T7419] nvmet: adding nsid 1 to subsystem testsubsys [10747.845791][ T7419] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [10747.867202][ T7419] Mem abort info: [10747.882731][ T7419] ESR = 0x0000000096000006 [10747.885148][ T7419] EC = 0x25: DABT (current EL), IL = 32 bits [10747.886573][ T7419] SET = 0, FnV = 0 [10747.906038][ T7419] EA = 0, S1PTW = 0 [10747.906407][ T7419] FSC = 0x06: level 2 translation fault [10747.906573][ T7419] Data abort info: [10747.906672][ T7419] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [10747.906778][ T7419] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [10747.906886][ T7419] GCS = 0, Overlay = 0, DirtyBit = 0 [10747.907153][ T7419] user pgtable: 4k pages, 52-bit VAs, pgdp=0000000075a33600 [10747.907295][ T7419] [0000000000000000] pgd=0800000075879403, p4d=0800000075b88403, pud=080000007585b403, pmd=0000000000000000 [10747.908294][ T7419] Internal error: Oops: 0000000096000006 [#1] SMP [10747.912047][ T7419] Modules linked in: [10747.912644][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.2.12138 Tainted: G W syzkaller #0 PREEMPT [10747.913190][ T7419] Tainted: [W]=WARN [10747.913423][ T7419] Hardware name: linux,dummy-virt (DT) [10747.913883][ T7419] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [10747.914333][ T7419] pc : __pi_strlen+0x14/0x150 [10747.914782][ T7419] lr : do_getname_kernel+0x20/0x12c [10747.915119][ T7419] sp : ffff80008365bb60 [10747.915277][ T7419] x29: ffff80008365bb60 x28: fcf00000066ee600 x27: 0000000000000000 [10747.915641][ T7419] x26: 0000000000000000 x25: 0000000000000000 x24: f2f0000031afea00 [10747.915911][ T7419] x23: f3f00000375e5c00 x22: 0000000000000000 x21: 0000000000000000 [10747.916177][ T7419] x20: 00000000fffffff1 x19: 0000000000020002 x18: 0000000000000000 [10747.916437][ T7419] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000bc0 [10747.916702][ T7419] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [10747.917038][ T7419] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000078 [10747.917541][ T7419] x8 : 0101010101010101 x7 : f2f0000031afea08 x6 : faf0000009d35002 [10747.918036][ T7419] x5 : faf0000009d35002 x4 : 0000000000000000 x3 : fcf00000066ee600 [10747.918522][ T7419] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [10747.919148][ T7419] Call trace: [10747.919450][ T7419] __pi_strlen+0x14/0x150 (P) [10747.919719][ T7419] getname_kernel+0x14/0x20 [10747.919901][ T7419] filp_open+0x34/0x104 [10747.920063][ T7419] nvmet_file_ns_enable+0x38/0xfc [10747.920245][ T7419] nvmet_ns_enable+0x12c/0x1e0 [10747.920547][ T7419] nvmet_ns_enable_store+0x64/0xd4 [10747.920858][ T7419] configfs_write_iter+0xc4/0x128 [10747.921176][ T7419] vfs_write+0x244/0x36c [10747.921485][ T7419] ksys_write+0x70/0x108 [10747.921780][ T7419] __arm64_sys_write+0x18/0x24 [10747.922104][ T7419] invoke_syscall+0x54/0x10c [10747.922407][ T7419] el0_svc_common.constprop.0+0x40/0xe0 [10747.922759][ T7419] do_el0_svc+0x1c/0x34 [10747.923095][ T7419] el0_svc+0x38/0x1fc [10747.923390][ T7419] el0t_64_sync_handler+0xa0/0xe4 [10747.923717][ T7419] el0t_64_sync+0x1a4/0x1a8 [10747.924341][ T7419] Code: 92400c04 b200c3e8 f100009f 5400088c (a9400c02) [10747.925366][ T7419] ---[ end trace 0000000000000000 ]--- [10747.926317][ T7419] Kernel panic - not syncing: Oops: Fatal exception [10747.927385][ T7419] Kernel Offset: disabled [10747.927683][ T7419] CPU features: 0x0,00000000,00d1982f,df188f01,2afff73f [10747.928150][ T7419] Memory Limit: none [10747.929059][ T7419] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:57:09 Registers: info registers vcpu 0 CPU#0 PC=ffff8000800122d0 X00=0000000000000000 X01=0000ffffe4a4a0b8 X02=0000000000000000 X03=0000000000000008 X04=00000000000029fb X05=0000000000000000 X06=0000000000000000 X07=0000000000000000 X08=0000000000000087 X09=0015fa152e926d3a X10=00ffffffffffffff X11=000009c6800176d0 X12=0000000000000000 X13=0000000000000000 X14=0000000000000000 X15=a5df95caa6a22625 X16=0000aaaae9bc0250 X17=0000ffffadca9740 X18=0000000000000000 X19=0000aaab05398470 X20=0000ffffe4a4a028 X21=0000000000000001 X22=0000aaaae9bc1518 X23=0000ffffe4a4a0b8 X24=0000aaaae9bc1000 X25=0000000000000004 X26=0000000000000001 X27=0000000000000000 X28=0000000000000004 X29=0000ffffe4a49fa0 X30=0000ffffadca974c SP=ffff800085884000 PSTATE=414023c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:9210000180040108:0006010cc8002e01 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:1000039003010006:8002000c0e0802b0 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000150000:000000003e100000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:04000dc003000800:0db8032080b00800 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:1000048080808080:8080a21000060170 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:697376656474656e:01ffffffffffffff Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000400000003:0000000200000001 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:18aa49943eaa1846:5c2ec483224c068e Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:770872ab66a65d49:242f5ebf08faeb6b Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c3153cd0b8ae8608:2dc82887d20515d5 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:76e17c1855314784:8391913601134c6a Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b0c9b75d5209b13b:41e85fab84195421 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:da7274006d7b772f:acaa16326fffeedf Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2e10cf641d0f3475:d9af251493bf8f35 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d31e38fc0682417f:87ace3aa9659aca2 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6170786561707865:6170786561707865 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3320646e3320646e:3320646e3320646e Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:79622d3279622d32:79622d3279622d32 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b2065746b206574:6b2065746b206574 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:4263088a4263088a:4263088a4263088a Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:36b7394e36b7394e:36b7394e36b7394e Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6630000066300000:6630000066300000 info registers vcpu 1 CPU#1 PC=ffff800080056da4 X00=0000000084000002 X01=0000000000010000 X02=0000000000000000 X03=0000000000000000 X04=0000000000000000 X05=0000000000000000 X06=0000000000000000 X07=0000000000000000 X08=ffff80008304bda8 X09=42be1fc47beb2a7b X10=ca62eafc272763a8 X11=00000000000000c0 X12=0000000000000001 X13=0000000000000000 X14=00000000000000fa X15=ffff800083063bd0 X16=ffff800082be2130 X17=ffffffffffffffff X18=0000000000000000 X19=ffff800081d01f80 X20=0000000000000001 X21=0000000000000000 X22=0000000000000000 X23=0000000000000000 X24=0000000000000000 X25=0000000000000000 X26=0000000000000000 X27=0000000000000000 X28=0000000000000000 X29=ffff80008304bdd0 X30=ffff800081541a80 SP=ffff80008304bd90 PSTATE=614023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:657461636f6c6c61:0000000000000075 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f0f0ffffffff0000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffffffff00 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000fffffff0 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffbeeefac0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffbeeefaf0:0000ffffbeeefaf0