last executing test programs: 1m16.436381163s ago: executing program 2 (id=410): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @local}, {{0x4, 0x8000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1m16.07929008s ago: executing program 2 (id=416): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6erspan0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x8, 0x7c, "d10639b6d515e1fbe4363be55ebac0dd9bb8c41bee6a3a81c134fa22b904eb74d7560a78c8bed717cb68ecbd6c936003903715a978060282dede1ffd0e4b8991ceae10c80db3772f2fe46fc7daddb6fbc3e53568f55a7394b2541046b6d850c4c7f98390b0d8db1551b214c1d84d3e21f5194c8c1e126e3ad2eb649b"}}) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) r4 = dup3(r1, r0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045ffffff7f0000000002907800000000e000000211009078e0000002000000020700000000000000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_restrict_self(r7, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000140), 0x4) landlock_restrict_self(r10, 0x0) ptrace(0x10, r9) wait4(r9, 0x0, 0x1, &(0x7f0000000580)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r11, 0x29, 0x4e, 0x0, 0x3a) 1m15.969141755s ago: executing program 2 (id=417): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="60a00200000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) 1m15.809831112s ago: executing program 2 (id=419): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) 1m15.740442143s ago: executing program 2 (id=422): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='tcp 2', 0x5) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {0x0}], 0x3, 0x7, 0x20000000) faccessat2(r3, &(0x7f0000000000)='./proc/fs/nfsd\x00', 0x0, 0x200) 1m15.679298267s ago: executing program 2 (id=425): pipe2(&(0x7f0000000280), 0x4000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="ddbaa62510e8585d3adc2df473fa4d3cf145497d4cf401add319fc4e9d9ee1076a7a52f75e87986cba0b9bbebe4cadc65b49ae595d6a0f99934feb20154948a9fe38c5e0b338b365008cf2a0b782f86a"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000780)}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000080)=@md5={0x1, "256fee7be7cd23f7dae2c6985dc1d3ed"}, 0x11, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000480), &(0x7f0000000280)=@udp=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000007c0)='W', &(0x7f00000000c0)=@udp=r3, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000140), 0x0}, 0x20) r4 = accept4(r1, 0x0, 0x0, 0x800) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000280)) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m0.634677198s ago: executing program 32 (id=425): pipe2(&(0x7f0000000280), 0x4000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="ddbaa62510e8585d3adc2df473fa4d3cf145497d4cf401add319fc4e9d9ee1076a7a52f75e87986cba0b9bbebe4cadc65b49ae595d6a0f99934feb20154948a9fe38c5e0b338b365008cf2a0b782f86a"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000780)}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000080)=@md5={0x1, "256fee7be7cd23f7dae2c6985dc1d3ed"}, 0x11, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000480), &(0x7f0000000280)=@udp=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000007c0)='W', &(0x7f00000000c0)=@udp=r3, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000140), 0x0}, 0x20) r4 = accept4(r1, 0x0, 0x0, 0x800) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000280)) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.7361708s ago: executing program 0 (id=1437): bind$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x21b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.858697295s ago: executing program 1 (id=1445): mkdir(&(0x7f0000000200)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8011, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r3 = creat(&(0x7f0000000080)='./file1\x00', 0xec) openat(r3, &(0x7f0000000000)='./file1\x00', 0x70000, 0x0) 2.120059874s ago: executing program 0 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 1.969232531s ago: executing program 1 (id=1449): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.909357382s ago: executing program 0 (id=1452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 8) 1.519520227s ago: executing program 0 (id=1456): bind$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffed", 0x21b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.495931171s ago: executing program 1 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 8) 1.349973947s ago: executing program 0 (id=1458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) 1.199933482s ago: executing program 1 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x58}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0xa91, 0x4) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000d3007600010000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7c6963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008055}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write(r7, &(0x7f0000000040)="10c2", 0x2) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) 1.139534634s ago: executing program 1 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, &(0x7f0000000400)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/version\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/256, 0x100) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 969.647569ms ago: executing program 1 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x13, 0xf7) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001400)={0xf4, 0xa, &(0x7f0000001000)}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$802154_dgram(r4, &(0x7f0000000100)={0x24, @none={0x0, 0x1}}, 0x14) r5 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x101140) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000000)="a468", 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x2, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'syzkaller0\x00', 0x400}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c00)={"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"}) 600.159296ms ago: executing program 4 (id=1463): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000080)="0400", 0x2, 0x700, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 599.653615ms ago: executing program 4 (id=1464): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004620009c907801000061fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000002ab9cdb042d2643fcbb2c5c57df67d074af6e8dafe0900"/190], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, 0x0, 0x9, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x40}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8006}, 0x40) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r7, 0xc0386106, &(0x7f00000010c0)={0xffff, 0x7, 0x406, 0x7, 0x2001fc, 0x8, "000000000000000000f4fbd68000", 0x59, 0x3, 0x1, 0xf9, 0x3, 0x7f, 0xfe}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r8, @ANYRES16=r2, @ANYRESOCT=r7], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x599}, 0x94) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f00000000c0)=0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x5, 0x1, 0xfffffffffffffc74, &(0x7f0000000000)='\a', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 418.127789ms ago: executing program 3 (id=1465): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 416.988715ms ago: executing program 3 (id=1466): bind$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x21b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 416.277442ms ago: executing program 0 (id=1467): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x149802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r4}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0xb3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)) 416.013272ms ago: executing program 4 (id=1468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r4, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x28}}, 0x4000004) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x100) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 239.421738ms ago: executing program 4 (id=1469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 239.004368ms ago: executing program 4 (id=1470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, &(0x7f0000000400)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/version\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 179.888735ms ago: executing program 3 (id=1471): r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)={r1}) write(r2, &(0x7f0000000000)="ea", 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x3000, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300001006c513b5aaa2e647196c303e514b2b07cd23d6a445286268a072da2bb6ae5aed21960740c890e0e0016389de859597063212b694e4b7dcfcdff921c0bd9e89b28d561923c8697846852eecc67491d63677d15691626120540b7676ba8c41d67e9df9b952653c2e8dd3f450d8609b4d3c0b3d2abcce9f731fffa572c82570eaa8d9eacb7d333e8dd2221cd1ca8098d38207fd6dbf08f6eca4215b86412e320a40218022bc9289c7354f8937b571c6804d0311eaa8998e79b92aea93557c648f470ae1a696e605753b7d986bc", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2505000000080034000d00000008002b00090000000a000900aaaaaaaaaaaa0000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000001c0)={{0x0, @empty, 0x100, 0x80000, 'lc\x00', 0x8, 0x2, 0x1ffffff}, {@private=0xa010106, 0x0, 0x0, 0x4, 0x6, 0xab19}}, 0x44) ioctl$MEMGETREGIONINFO(0xffffffffffffffff, 0xc0104d08, &(0x7f0000000300)={0x80, 0x4, 0x1, 0x2}) write(r2, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xfffffffc}, 0x8) close(r2) 179.531348ms ago: executing program 3 (id=1472): stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x2802, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@timeout={'timeout', 0x3d, 0x1}}, {@common=@cache_readahead}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, 'gred\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_eq={'uid', 0x3d, r0}}, {@fowner_lt={'fowner<', r2}}]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x94, &(0x7f00000000c0)=""/148}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 73.071967ms ago: executing program 4 (id=1473): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='stusb160x 0x48\x00', 0xf) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x9) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x80010, r5, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) munlock(&(0x7f00002ef000/0x4000)=nil, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) 72.547643ms ago: executing program 3 (id=1474): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 3 (id=1475): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) (fail_nth: 8) kernel console output (not intermixed with test programs): =SOFTLOCKUP [ 125.394304][ T9120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.394315][ T9120] Call Trace: [ 125.394333][ T9120] [ 125.394339][ T9120] dump_stack_lvl+0x100/0x190 [ 125.394369][ T9120] should_fail_ex.cold+0x5/0xa [ 125.394398][ T9120] should_failslab+0xc2/0x120 [ 125.394423][ T9120] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 125.394447][ T9120] ? __alloc_skb+0x140/0x710 [ 125.394489][ T9120] __alloc_skb+0x140/0x710 [ 125.394510][ T9120] ? __alloc_skb+0x5b7/0x710 [ 125.394529][ T9120] ? __pfx___alloc_skb+0x10/0x10 [ 125.394551][ T9120] ? rcu_is_watching+0x12/0xc0 [ 125.394583][ T9120] team_nl_send_options_get+0x120/0xf90 [ 125.394615][ T9120] ? __nla_validate_parse+0x1e7/0x28b0 [ 125.394633][ T9120] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 125.394671][ T9120] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 125.394688][ T9120] ? __team_carrier_check+0x14f/0x190 [ 125.394716][ T9120] ? team_user_linkup_en_option_set+0x1ad/0x320 [ 125.394735][ T9120] ? __pfx_team_user_linkup_en_option_set+0x10/0x10 [ 125.394755][ T9120] ? __nla_parse+0x40/0x60 [ 125.394775][ T9120] team_nl_options_set_doit+0xa6f/0xe60 [ 125.394805][ T9120] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 125.394827][ T9120] ? trace_kmalloc+0xeb/0x110 [ 125.394861][ T9120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 125.394883][ T9120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 125.394909][ T9120] ? genl_family_rcv_msg_doit+0x214/0x300 [ 125.394928][ T9120] genl_family_rcv_msg_doit+0x214/0x300 [ 125.394950][ T9120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 125.394976][ T9120] ? bpf_lsm_capable+0x9/0x10 [ 125.394994][ T9120] ? security_capable+0x80/0x260 [ 125.395023][ T9120] genl_rcv_msg+0x560/0x800 [ 125.395045][ T9120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.395066][ T9120] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 125.395096][ T9120] netlink_rcv_skb+0x159/0x420 [ 125.395115][ T9120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.395136][ T9120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.395164][ T9120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.395196][ T9120] genl_rcv+0x28/0x40 [ 125.395214][ T9120] netlink_unicast+0x585/0x850 [ 125.395236][ T9120] ? __pfx_netlink_unicast+0x10/0x10 [ 125.395261][ T9120] netlink_sendmsg+0x8b0/0xda0 [ 125.395284][ T9120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.395305][ T9120] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.395336][ T9120] ____sys_sendmsg+0xa4d/0xbe0 [ 125.395361][ T9120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.395381][ T9120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.395425][ T9120] ___sys_sendmsg+0x190/0x1e0 [ 125.395453][ T9120] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.395492][ T9120] ? __lock_acquire+0x49f/0x1a40 [ 125.395515][ T9120] ? get_pid_task+0x106/0x250 [ 125.395573][ T9120] __sys_sendmsg+0x160/0x210 [ 125.395596][ T9120] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.395634][ T9120] do_syscall_64+0x115/0x870 [ 125.395654][ T9120] ? clear_bhb_loop+0x40/0x90 [ 125.395677][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.395695][ T9120] RIP: 0033:0x7f094a39df99 [ 125.395711][ T9120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.395728][ T9120] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.395757][ T9120] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 125.395769][ T9120] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000004 [ 125.395779][ T9120] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 125.395790][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.395800][ T9120] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 125.395826][ T9120] [ 125.571797][ T9132] FAULT_INJECTION: forcing a failure. [ 125.571797][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 125.575877][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.1.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.575895][ T9132] Tainted: [L]=SOFTLOCKUP [ 125.575899][ T9132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.575905][ T9132] Call Trace: [ 125.575910][ T9132] [ 125.575914][ T9132] dump_stack_lvl+0x100/0x190 [ 125.575934][ T9132] should_fail_ex.cold+0x5/0xa [ 125.575952][ T9132] should_failslab+0xc2/0x120 [ 125.575967][ T9132] __kmalloc_cache_noprof+0x91/0x6c0 [ 125.575987][ T9132] ? flow_init+0x8b/0x1f0 [ 125.576001][ T9132] ? __pfx_flow_classify+0x10/0x10 [ 125.576012][ T9132] flow_init+0x8b/0x1f0 [ 125.576023][ T9132] ? __pfx_flow_init+0x10/0x10 [ 125.576033][ T9132] ? lockdep_init_map_type+0x5c/0x250 [ 125.576049][ T9132] ? __raw_spin_lock_init+0x3a/0x110 [ 125.576067][ T9132] tc_new_tfilter+0x105c/0x24a0 [ 125.576084][ T9132] ? avc_has_perm_noaudit+0xf0/0x3b0 [ 125.576098][ T9132] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 125.576112][ T9132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 125.576137][ T9132] ? find_held_lock+0x2b/0x80 [ 125.576154][ T9132] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.576171][ T9132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 125.576183][ T9132] rtnetlink_rcv_msg+0x95e/0xe90 [ 125.576199][ T9132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.576218][ T9132] ? ref_tracker_free+0x37e/0x6c0 [ 125.576238][ T9132] netlink_rcv_skb+0x159/0x420 [ 125.576250][ T9132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.576266][ T9132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.576282][ T9132] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.576303][ T9132] netlink_unicast+0x585/0x850 [ 125.576316][ T9132] ? __pfx_netlink_unicast+0x10/0x10 [ 125.576327][ T9132] ? __pfx_sock_has_perm+0x10/0x10 [ 125.576346][ T9132] netlink_sendmsg+0x8b0/0xda0 [ 125.576359][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.576372][ T9132] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.576391][ T9132] ____sys_sendmsg+0xa4d/0xbe0 [ 125.576408][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.576421][ T9132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.576449][ T9132] ___sys_sendmsg+0x190/0x1e0 [ 125.576468][ T9132] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.576485][ T9132] ? __lock_acquire+0x49f/0x1a40 [ 125.576499][ T9132] ? get_pid_task+0x106/0x250 [ 125.576533][ T9132] __sys_sendmsg+0x160/0x210 [ 125.576547][ T9132] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.576569][ T9132] do_syscall_64+0x115/0x870 [ 125.576582][ T9132] ? clear_bhb_loop+0x40/0x90 [ 125.576597][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.576609][ T9132] RIP: 0033:0x7f094a39df99 [ 125.576619][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.576631][ T9132] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.576643][ T9132] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 125.576650][ T9132] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000004 [ 125.576657][ T9132] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 125.576663][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.576670][ T9132] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 125.576684][ T9132] [ 125.687033][ T9135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 125.687060][ T9136] netlink: 'syz.3.1074': attribute type 7 has an invalid length. [ 125.689715][ T9135] netlink: 'syz.3.1074': attribute type 7 has an invalid length. [ 125.692020][ T9136] netlink: 'syz.3.1074': attribute type 8 has an invalid length. [ 125.694224][ T9135] netlink: 'syz.3.1074': attribute type 8 has an invalid length. [ 125.823327][ T42] audit: type=1400 audit(1785419323.062:687): avc: denied { write } for pid=9151 comm="syz.4.1077" name="cluster" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.963294][ T9169] FAULT_INJECTION: forcing a failure. [ 125.963294][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 125.969072][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.4.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.969090][ T9169] Tainted: [L]=SOFTLOCKUP [ 125.969094][ T9169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.969101][ T9169] Call Trace: [ 125.969105][ T9169] [ 125.969110][ T9169] dump_stack_lvl+0x100/0x190 [ 125.969130][ T9169] should_fail_ex.cold+0x5/0xa [ 125.969145][ T9169] should_failslab+0xc2/0x120 [ 125.969161][ T9169] __kmalloc_noprof+0xfc/0x820 [ 125.969175][ T9169] ? tomoyo_encode2+0xfb/0x3c0 [ 125.969190][ T9169] tomoyo_encode2+0xfb/0x3c0 [ 125.969203][ T9169] tomoyo_encode+0x29/0x50 [ 125.969212][ T9169] tomoyo_realpath_from_path+0x18c/0x690 [ 125.969227][ T9169] tomoyo_check_open_permission+0x2af/0x3c0 [ 125.969245][ T9169] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 125.969261][ T9169] ? ioctl_fssetxattr+0x231/0x280 [ 125.969275][ T9169] ? do_syscall_64+0x115/0x870 [ 125.969288][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.969303][ T9169] ? hook_file_open+0x24f/0x8f0 [ 125.969327][ T9169] ? path_get+0x61/0x80 [ 125.969342][ T9169] tomoyo_file_open+0x6b/0x90 [ 125.969356][ T9169] security_file_open+0xb5/0x1e0 [ 125.969369][ T9169] do_dentry_open+0x588/0x14d0 [ 125.969384][ T9169] vfs_open+0x82/0x3f0 [ 125.969399][ T9169] dentry_open+0x71/0xd0 [ 125.969417][ T9169] ovl_security_fileattr+0x5b/0x170 [ 125.969438][ T9169] ovl_fileattr_get+0xdc/0x330 [ 125.969455][ T9169] ? __pfx_ovl_fileattr_get+0x10/0x10 [ 125.969477][ T9169] vfs_fileattr_get+0xfc/0x150 [ 125.969491][ T9169] vfs_fileattr_set+0x15a/0xd70 [ 125.969503][ T9169] ? mnt_get_write_access+0x52/0x2f0 [ 125.969521][ T9169] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 125.969536][ T9169] ? mnt_get_write_access+0x1e9/0x2f0 [ 125.969554][ T9169] ioctl_fssetxattr+0x231/0x280 [ 125.969591][ T9169] ? __pfx_ioctl_fssetxattr+0x10/0x10 [ 125.969613][ T9169] do_vfs_ioctl+0xe9e/0x13e0 [ 125.969630][ T9169] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.969647][ T9169] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.969670][ T9169] ? __fget_files+0x215/0x3d0 [ 125.969680][ T9169] ? hook_file_ioctl_common+0x140/0x440 [ 125.969697][ T9169] ? selinux_file_ioctl+0x13b/0x290 [ 125.969714][ T9169] ? selinux_file_ioctl+0xb6/0x290 [ 125.969735][ T9169] __x64_sys_ioctl+0x114/0x210 [ 125.969752][ T9169] do_syscall_64+0x115/0x870 [ 125.969767][ T9169] ? clear_bhb_loop+0x40/0x90 [ 125.969788][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.969806][ T9169] RIP: 0033:0x7fc727d9df99 [ 125.969823][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.969841][ T9169] RSP: 002b:00007fc728cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.969860][ T9169] RAX: ffffffffffffffda RBX: 00007fc728025fa0 RCX: 00007fc727d9df99 [ 125.969870][ T9169] RDX: 0000200000000180 RSI: 00000000401c5820 RDI: 0000000000000004 [ 125.969880][ T9169] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 125.969888][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.969895][ T9169] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 125.969912][ T9169] [ 125.969926][ T9169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.975836][ T9171] netlink: 'syz.3.1083': attribute type 10 has an invalid length. [ 126.100161][ T9171] team0: Port device dummy0 added [ 126.182761][ T9180] kvm: kvm [9178]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 126.391867][ T42] audit: type=1400 audit(1785419323.632:688): avc: denied { ioctl } for pid=9186 comm="syz.1.1089" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.391989][ T9187] syzkaller0: tun_net_xmit 1500 [ 126.471525][ T9196] FAULT_INJECTION: forcing a failure. [ 126.471525][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 126.476457][ T9196] CPU: 2 UID: 0 PID: 9196 Comm: syz.3.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.476484][ T9196] Tainted: [L]=SOFTLOCKUP [ 126.476491][ T9196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.476501][ T9196] Call Trace: [ 126.476507][ T9196] [ 126.476513][ T9196] dump_stack_lvl+0x100/0x190 [ 126.476542][ T9196] should_fail_ex.cold+0x5/0xa [ 126.476567][ T9196] should_failslab+0xc2/0x120 [ 126.476591][ T9196] kmem_cache_alloc_noprof+0x91/0x6a0 [ 126.476613][ T9196] ? __asan_memcpy+0x3c/0x60 [ 126.476629][ T9196] ? __kernfs_new_node+0xd2/0xa10 [ 126.476655][ T9196] __kernfs_new_node+0xd2/0xa10 [ 126.476679][ T9196] ? __pfx___kernfs_new_node+0x10/0x10 [ 126.476704][ T9196] ? find_held_lock+0x2b/0x80 [ 126.476732][ T9196] ? kernfs_root+0xee/0x2a0 [ 126.476746][ T9196] ? kernfs_root+0xee/0x2a0 [ 126.476770][ T9196] kernfs_new_node+0x117/0x150 [ 126.476794][ T9196] __kernfs_create_file+0x53/0x350 [ 126.476850][ T9196] cgroup_addrm_files+0x4ef/0xdb0 [ 126.476885][ T9196] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 126.476908][ T9196] ? find_held_lock+0x2b/0x80 [ 126.476940][ T9196] ? lockdep_hardirqs_on+0x78/0x100 [ 126.476962][ T9196] ? online_fair_sched_group+0x26f/0x910 [ 126.476988][ T9196] ? lockdep_hardirqs_on+0x78/0x100 [ 126.477011][ T9196] css_populate_dir+0x161/0x590 [ 126.477037][ T9196] cgroup_apply_control_enable+0x441/0xdd0 [ 126.477078][ T9196] cgroup_subtree_control_write+0xa67/0xe90 [ 126.477102][ T9196] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 126.477124][ T9196] ? kernfs_root+0xf8/0x2a0 [ 126.477146][ T9196] cgroup_file_write+0x1e6/0x8a0 [ 126.477169][ T9196] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 126.477189][ T9196] ? __pfx_cgroup_file_write+0x10/0x10 [ 126.477220][ T9196] kernfs_fop_write_iter+0x3e0/0x5f0 [ 126.477244][ T9196] ? __pfx_cgroup_file_write+0x10/0x10 [ 126.477270][ T9196] vfs_write+0x6ac/0x1050 [ 126.477297][ T9196] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 126.477323][ T9196] ? __pfx_vfs_write+0x10/0x10 [ 126.477364][ T9196] ksys_write+0x12a/0x250 [ 126.477395][ T9196] ? __pfx_ksys_write+0x10/0x10 [ 126.477429][ T9196] do_syscall_64+0x115/0x870 [ 126.477448][ T9196] ? clear_bhb_loop+0x40/0x90 [ 126.477470][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.477487][ T9196] RIP: 0033:0x7f68aaf9df99 [ 126.477503][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.477519][ T9196] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.477538][ T9196] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 126.477550][ T9196] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 126.477579][ T9196] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 126.477590][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.477601][ T9196] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 126.477626][ T9196] [ 126.478264][ T9196] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 127.828463][ T9210] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 127.907534][ T42] audit: type=1400 audit(1785419325.152:689): avc: denied { write } for pid=9218 comm="syz.1.1099" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 128.110000][ T9229] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 128.307732][ T9245] __nla_validate_parse: 14 callbacks suppressed [ 128.307744][ T9245] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1107'. [ 128.419832][ T9248] FAULT_INJECTION: forcing a failure. [ 128.419832][ T9248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.423990][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.3.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.424009][ T9248] Tainted: [L]=SOFTLOCKUP [ 128.424013][ T9248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.424020][ T9248] Call Trace: [ 128.424024][ T9248] [ 128.424029][ T9248] dump_stack_lvl+0x100/0x190 [ 128.424049][ T9248] should_fail_ex.cold+0x5/0xa [ 128.424061][ T9248] ? prepare_alloc_pages+0x16d/0x5f0 [ 128.424080][ T9248] should_fail_alloc_page+0xeb/0x140 [ 128.424096][ T9248] prepare_alloc_pages+0x1f0/0x5f0 [ 128.424115][ T9248] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 128.424136][ T9248] ? rcu_is_watching+0x12/0xc0 [ 128.424161][ T9248] ? trace_mm_page_alloc+0x164/0x1c0 [ 128.424182][ T9248] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 128.424203][ T9248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.424225][ T9248] ? is_bpf_text_address+0x8a/0x1a0 [ 128.424247][ T9248] ? bpf_ksym_find+0x128/0x1c0 [ 128.424270][ T9248] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.424289][ T9248] ? is_bpf_text_address+0x94/0x1a0 [ 128.424313][ T9248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.424331][ T9248] ? __kernel_text_address+0xd/0x30 [ 128.424368][ T9248] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 128.424386][ T9248] ? __lock_acquire+0x49f/0x1a40 [ 128.424411][ T9248] ? policy_nodemask+0xed/0x4f0 [ 128.424436][ T9248] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 128.424486][ T9248] __kasan_populate_vmalloc+0xf0/0x210 [ 128.424513][ T9248] alloc_vmap_area+0x95d/0x2bb0 [ 128.424543][ T9248] ? kasan_save_track+0x14/0x30 [ 128.424563][ T9248] ? __kasan_kmalloc+0xaa/0xb0 [ 128.424584][ T9248] ? __pfx_alloc_vmap_area+0x10/0x10 [ 128.424607][ T9248] ? __get_vm_area_node+0x101/0x330 [ 128.424633][ T9248] __get_vm_area_node+0x1ca/0x330 [ 128.424661][ T9248] __vmalloc_node_range_noprof+0x228/0x1630 [ 128.424686][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.424703][ T9248] ? rcu_is_watching+0x12/0xc0 [ 128.424727][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.424765][ T9248] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 128.424785][ T9248] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.424806][ T9248] ? trace_kmem_cache_alloc+0xdd/0x100 [ 128.424824][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.424835][ T9248] __vmalloc_node_noprof+0xad/0xf0 [ 128.424852][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.424865][ T9248] copy_process+0x7fb/0x8030 [ 128.424890][ T9248] ? __pfx_copy_process+0x10/0x10 [ 128.424906][ T9248] ? __kasan_kmalloc+0xaa/0xb0 [ 128.424920][ T9248] ? lockdep_init_map_type+0x5c/0x250 [ 128.424939][ T9248] ? lockdep_init_map_type+0x5c/0x250 [ 128.424954][ T9248] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 128.424969][ T9248] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 128.424989][ T9248] vhost_task_create+0x1db/0x370 [ 128.425003][ T9248] ? __pfx_vhost_task_create+0x10/0x10 [ 128.425020][ T9248] ? __pfx_vhost_task_fn+0x10/0x10 [ 128.425034][ T9248] ? __pfx___mutex_lock+0x10/0x10 [ 128.425049][ T9248] ? kasan_quarantine_put+0x104/0x240 [ 128.425065][ T9248] kvm_mmu_post_init_vm+0x1b3/0x360 [ 128.425083][ T9248] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 128.425100][ T9248] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 128.425116][ T9248] kvm_vcpu_ioctl+0x730/0x1700 [ 128.425130][ T9248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.425144][ T9248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.425159][ T9248] ? do_vfs_ioctl+0x226/0x13e0 [ 128.425176][ T9248] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 128.425193][ T9248] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 128.425217][ T9248] ? __fget_files+0x215/0x3d0 [ 128.425229][ T9248] ? hook_file_ioctl_common+0x140/0x440 [ 128.425246][ T9248] ? selinux_file_ioctl+0x13b/0x290 [ 128.425263][ T9248] ? selinux_file_ioctl+0xb6/0x290 [ 128.425281][ T9248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.425294][ T9248] __x64_sys_ioctl+0x18e/0x210 [ 128.425312][ T9248] do_syscall_64+0x115/0x870 [ 128.425325][ T9248] ? clear_bhb_loop+0x40/0x90 [ 128.425339][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.425351][ T9248] RIP: 0033:0x7f68aaf9df99 [ 128.425361][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.425372][ T9248] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.425384][ T9248] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 128.425391][ T9248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.425397][ T9248] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 128.425403][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.425410][ T9248] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 128.425425][ T9248] [ 128.573957][ T9248] warn_alloc: 2 callbacks suppressed [ 128.573968][ T9248] syz.3.1109: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.581628][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.3.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.581645][ T9248] Tainted: [L]=SOFTLOCKUP [ 128.581649][ T9248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.581656][ T9248] Call Trace: [ 128.581661][ T9248] [ 128.581665][ T9248] dump_stack_lvl+0x100/0x190 [ 128.581685][ T9248] warn_alloc.cold+0x94/0xa8 [ 128.581698][ T9248] ? __pfx_warn_alloc+0x10/0x10 [ 128.581711][ T9248] ? lockdep_hardirqs_on+0x78/0x100 [ 128.581726][ T9248] ? __get_vm_area_node+0x2cd/0x330 [ 128.581745][ T9248] ? __get_vm_area_node+0x208/0x330 [ 128.581763][ T9248] __vmalloc_node_range_noprof+0xccd/0x1630 [ 128.581780][ T9248] ? rcu_is_watching+0x12/0xc0 [ 128.581802][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.581818][ T9248] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 128.581837][ T9248] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.581857][ T9248] ? trace_kmem_cache_alloc+0xdd/0x100 [ 128.581875][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.581887][ T9248] __vmalloc_node_noprof+0xad/0xf0 [ 128.581904][ T9248] ? vhost_task_create+0x1db/0x370 [ 128.581918][ T9248] copy_process+0x7fb/0x8030 [ 128.581946][ T9248] ? __pfx_copy_process+0x10/0x10 [ 128.581962][ T9248] ? __kasan_kmalloc+0xaa/0xb0 [ 128.581976][ T9248] ? lockdep_init_map_type+0x5c/0x250 [ 128.581992][ T9248] ? lockdep_init_map_type+0x5c/0x250 [ 128.582007][ T9248] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 128.582021][ T9248] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 128.582041][ T9248] vhost_task_create+0x1db/0x370 [ 128.582054][ T9248] ? __pfx_vhost_task_create+0x10/0x10 [ 128.582071][ T9248] ? __pfx_vhost_task_fn+0x10/0x10 [ 128.582085][ T9248] ? __pfx___mutex_lock+0x10/0x10 [ 128.582098][ T9248] ? kasan_quarantine_put+0x104/0x240 [ 128.582114][ T9248] kvm_mmu_post_init_vm+0x1b3/0x360 [ 128.582131][ T9248] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 128.582148][ T9248] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 128.582164][ T9248] kvm_vcpu_ioctl+0x730/0x1700 [ 128.582178][ T9248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.582191][ T9248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.582205][ T9248] ? do_vfs_ioctl+0x226/0x13e0 [ 128.582222][ T9248] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 128.582239][ T9248] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 128.582263][ T9248] ? __fget_files+0x215/0x3d0 [ 128.582274][ T9248] ? hook_file_ioctl_common+0x140/0x440 [ 128.582291][ T9248] ? selinux_file_ioctl+0x13b/0x290 [ 128.582308][ T9248] ? selinux_file_ioctl+0xb6/0x290 [ 128.582326][ T9248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.582339][ T9248] __x64_sys_ioctl+0x18e/0x210 [ 128.582357][ T9248] do_syscall_64+0x115/0x870 [ 128.582369][ T9248] ? clear_bhb_loop+0x40/0x90 [ 128.582383][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.582395][ T9248] RIP: 0033:0x7f68aaf9df99 [ 128.582405][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.582417][ T9248] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.582428][ T9248] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 128.582434][ T9248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.582441][ T9248] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 128.582447][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.582454][ T9248] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 128.582468][ T9248] [ 128.582472][ T9248] Mem-Info: [ 128.653752][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 128.655011][ T9248] active_anon:15299 inactive_anon:19 isolated_anon:16 [ 128.655011][ T9248] active_file:1178 inactive_file:38461 isolated_file:29 [ 128.655011][ T9248] unevictable:1768 dirty:206 writeback:0 [ 128.655011][ T9248] slab_reclaimable:8986 slab_unreclaimable:70499 [ 128.655011][ T9248] mapped:25634 shmem:3612 pagetables:3815 [ 128.655011][ T9248] sec_pagetables:293 bounce:0 [ 128.655011][ T9248] kernel_misc_reclaimable:0 [ 128.655011][ T9248] free:467419 free_pcp:6691 free_cma:0 [ 128.712057][ T9248] Node 0 active_anon:61240kB inactive_anon:76kB active_file:4712kB inactive_file:153568kB unevictable:3536kB isolated(anon):64kB isolated(file):60kB mapped:102312kB dirty:804kB writeback:0kB shmem:10912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:6308kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 128.723329][ T9248] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:8992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 128.734191][ T9248] Node 0 DMA free:15256kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:80kB free_cma:0kB [ 128.743726][ T9248] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 128.746148][ T9248] Node 0 DMA32 free:220836kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61196kB inactive_anon:76kB active_file:4712kB inactive_file:153716kB unevictable:3536kB writepending:808kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:15592kB local_pcp:5652kB free_cma:0kB [ 128.756388][ T9248] lowmem_reserve[]: 0 0 0 0 0 [ 128.757858][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 128.757897][ T9248] Node 1 Normal free:1633692kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:336kB unevictable:3536kB writepending:20kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:10952kB local_pcp:3456kB free_cma:0kB [ 128.757932][ T9248] lowmem_reserve[]: 0 0 0 0 0 [ 128.761892][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 128.771730][ T9248] [ 128.777547][ T9248] Node 0 DMA: 8*4kB (U) 7*8kB (U) 8*16kB (U) 8*32kB (U) 7*64kB (U) 8*128kB (U) 6*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 15256kB [ 128.782371][ T9248] Node 0 DMA32: 931*4kB (UME) 901*8kB (UME) 421*16kB (UME) 433*32kB (UME) 232*64kB (UME) 139*128kB (UME) 102*256kB (UME) 79*512kB (UM) 58*1024kB (UM) 5*2048kB (M) 5*4096kB (M) = 220836kB [ 128.788471][ T9248] Node 1 Normal: 84*4kB (U) 198*8kB (U) 180*16kB (U) 187*32kB (UE) 174*64kB (UME) 164*128kB (UM) 160*256kB (UM) 157*512kB (UME) 147*1024kB (UME) 10*2048kB (UME) 317*4096kB (UM) = 1633696kB [ 128.795041][ T9248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.798134][ T9248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.801090][ T9248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.804094][ T9248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.807324][ T9248] 43299 total pagecache pages [ 128.808828][ T9248] 0 pages in swap cache [ 128.809869][ T9256] FAULT_INJECTION: forcing a failure. [ 128.809869][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 128.810178][ T9248] Free swap = 124996kB [ 128.815404][ T9256] CPU: 3 UID: 0 PID: 9256 Comm: syz.4.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.815423][ T9256] Tainted: [L]=SOFTLOCKUP [ 128.815427][ T9256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.815434][ T9256] Call Trace: [ 128.815439][ T9256] [ 128.815443][ T9256] dump_stack_lvl+0x100/0x190 [ 128.815474][ T9256] should_fail_ex.cold+0x5/0xa [ 128.815489][ T9256] should_failslab+0xc2/0x120 [ 128.815505][ T9256] __kmalloc_cache_noprof+0x91/0x6c0 [ 128.815523][ T9256] ? rcu_is_watching+0x12/0xc0 [ 128.815542][ T9256] ? __request_module+0x2b7/0x6a0 [ 128.815560][ T9256] __request_module+0x2b7/0x6a0 [ 128.815576][ T9256] ? __pfx___request_module+0x10/0x10 [ 128.815597][ T9256] ? find_held_lock+0x2b/0x80 [ 128.815614][ T9256] ? rtnl_link_ops_get+0x17b/0x2c0 [ 128.815629][ T9256] ? rtnl_link_ops_get+0x17b/0x2c0 [ 128.815648][ T9256] rtnl_newlink+0x1657/0x2380 [ 128.815667][ T9256] ? __pfx_rtnl_newlink+0x10/0x10 [ 128.815681][ T9256] ? find_held_lock+0x2b/0x80 [ 128.815698][ T9256] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 128.815712][ T9256] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 128.815727][ T9256] ? avc_has_perm_noaudit+0x145/0x3b0 [ 128.815751][ T9256] ? find_held_lock+0x2b/0x80 [ 128.815772][ T9256] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 128.815787][ T9256] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 128.815803][ T9256] ? __pfx_rtnl_newlink+0x10/0x10 [ 128.815818][ T9256] rtnetlink_rcv_msg+0x95e/0xe90 [ 128.815834][ T9256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.815853][ T9256] ? ref_tracker_free+0x37e/0x6c0 [ 128.815873][ T9256] netlink_rcv_skb+0x159/0x420 [ 128.815885][ T9256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.815901][ T9256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.815917][ T9256] ? netlink_deliver_tap+0x1ae/0xcc0 [ 128.815938][ T9256] netlink_unicast+0x585/0x850 [ 128.815951][ T9256] ? __pfx_netlink_unicast+0x10/0x10 [ 128.815966][ T9256] netlink_sendmsg+0x8b0/0xda0 [ 128.815979][ T9256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.815991][ T9256] ? selinux_socket_sendmsg+0x198/0x2f0 [ 128.816011][ T9256] ____sys_sendmsg+0xa4d/0xbe0 [ 128.816028][ T9256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.816040][ T9256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.816064][ T9256] ___sys_sendmsg+0x190/0x1e0 [ 128.816083][ T9256] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.816100][ T9256] ? __lock_acquire+0x49f/0x1a40 [ 128.816113][ T9256] ? get_pid_task+0x106/0x250 [ 128.816146][ T9256] __sys_sendmsg+0x160/0x210 [ 128.816161][ T9256] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.816182][ T9256] do_syscall_64+0x115/0x870 [ 128.816196][ T9256] ? clear_bhb_loop+0x40/0x90 [ 128.816210][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.816221][ T9256] RIP: 0033:0x7fc727d9df99 [ 128.816231][ T9256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.816242][ T9256] RSP: 002b:00007fc728cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.816253][ T9256] RAX: ffffffffffffffda RBX: 00007fc728025fa0 RCX: 00007fc727d9df99 [ 128.816260][ T9256] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 128.816266][ T9256] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 128.816274][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.816281][ T9256] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 128.816294][ T9256] [ 128.913137][ T9263] ======================================================= [ 128.913137][ T9263] WARNING: The mand mount option has been deprecated and [ 128.913137][ T9263] and is ignored by this kernel. Remove the mand [ 128.913137][ T9263] option from the mount to silence this warning. [ 128.913137][ T9263] ======================================================= [ 128.913503][ T9248] Total swap = 124996kB [ 128.955662][ T9248] 1048443 pages RAM [ 128.956834][ T9248] 0 pages HighMem/MovableOnly [ 128.958392][ T9248] 285322 pages reserved [ 128.959642][ T9248] 0 pages cma reserved [ 128.974049][ T42] audit: type=1400 audit(1785419326.212:690): avc: denied { mount } for pid=9262 comm="syz.0.1116" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 129.100528][ T9281] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 129.147292][ T9274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.150556][ T9274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.152745][ T9274] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.159351][ T9274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.161206][ T9274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.203891][ T42] audit: type=1400 audit(1785419326.442:691): avc: denied { accept } for pid=9288 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.213167][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 129.217038][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 129.467452][ T9315] misc userio: Invalid payload size [ 129.527676][ T9321] FAULT_INJECTION: forcing a failure. [ 129.527676][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 129.532585][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.532603][ T9321] Tainted: [L]=SOFTLOCKUP [ 129.532608][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.532614][ T9321] Call Trace: [ 129.532632][ T9321] [ 129.532637][ T9321] dump_stack_lvl+0x100/0x190 [ 129.532677][ T9321] should_fail_ex.cold+0x5/0xa [ 129.532704][ T9321] should_failslab+0xc2/0x120 [ 129.532730][ T9321] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 129.532746][ T9321] ? __get_vm_area_node+0x101/0x330 [ 129.532764][ T9321] __get_vm_area_node+0x101/0x330 [ 129.532781][ T9321] __vmalloc_node_range_noprof+0x228/0x1630 [ 129.532799][ T9321] ? create_io_thread+0xc2/0x110 [ 129.532820][ T9321] ? rcu_is_watching+0x12/0xc0 [ 129.532843][ T9321] ? create_io_thread+0xc2/0x110 [ 129.532861][ T9321] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 129.532885][ T9321] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.532905][ T9321] ? trace_kmem_cache_alloc+0xdd/0x100 [ 129.532922][ T9321] ? create_io_thread+0xc2/0x110 [ 129.532937][ T9321] __vmalloc_node_noprof+0xad/0xf0 [ 129.532954][ T9321] ? create_io_thread+0xc2/0x110 [ 129.532970][ T9321] copy_process+0x7fb/0x8030 [ 129.532986][ T9321] ? kasan_save_stack+0x3f/0x50 [ 129.532998][ T9321] ? kasan_save_stack+0x30/0x50 [ 129.533010][ T9321] ? kasan_save_track+0x14/0x30 [ 129.533023][ T9321] ? __kasan_kmalloc+0xaa/0xb0 [ 129.533035][ T9321] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 129.533052][ T9321] ? create_io_worker+0xc6/0x5b0 [ 129.533087][ T9321] ? io_wq_enqueue+0x4d8/0x970 [ 129.533102][ T9321] ? io_queue_iowq+0x234/0x5b0 [ 129.533116][ T9321] ? io_queue_sqe_fallback+0x16b/0x210 [ 129.533131][ T9321] ? io_submit_sqes+0x165c/0x2480 [ 129.533147][ T9321] ? __do_sys_io_uring_enter+0xa88/0x1b10 [ 129.533165][ T9321] ? do_syscall_64+0x115/0x870 [ 129.533187][ T9321] ? __pfx_copy_process+0x10/0x10 [ 129.533208][ T9321] ? __pfx_io_wq_worker+0x10/0x10 [ 129.533225][ T9321] create_io_thread+0xc2/0x110 [ 129.533240][ T9321] ? __pfx_create_io_thread+0x10/0x10 [ 129.533260][ T9321] ? __pfx_io_wq_worker+0x10/0x10 [ 129.533277][ T9321] ? lockdep_init_map_type+0x5c/0x250 [ 129.533293][ T9321] ? lockdep_init_map_type+0x5c/0x250 [ 129.533308][ T9321] ? __init_swait_queue_head+0xca/0x150 [ 129.533326][ T9321] create_io_worker+0x1cd/0x5b0 [ 129.533343][ T9321] io_wq_enqueue+0x4d8/0x970 [ 129.533360][ T9321] ? __pfx_io_wq_enqueue+0x10/0x10 [ 129.533376][ T9321] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 129.533391][ T9321] ? io_prep_async_work+0x3ab/0x720 [ 129.533409][ T9321] io_queue_iowq+0x234/0x5b0 [ 129.533424][ T9321] io_queue_sqe_fallback+0x16b/0x210 [ 129.533440][ T9321] ? __asan_memset+0x23/0x50 [ 129.533452][ T9321] io_submit_sqes+0x165c/0x2480 [ 129.533475][ T9321] __do_sys_io_uring_enter+0xa88/0x1b10 [ 129.533494][ T9321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.533508][ T9321] ? __fget_files+0x21f/0x3d0 [ 129.533521][ T9321] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 129.533540][ T9321] ? fput+0x79/0x100 [ 129.533578][ T9321] ? ksys_write+0x1ac/0x250 [ 129.533597][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 129.533618][ T9321] do_syscall_64+0x115/0x870 [ 129.533630][ T9321] ? clear_bhb_loop+0x40/0x90 [ 129.533644][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.533655][ T9321] RIP: 0033:0x7f094a39df99 [ 129.533666][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.533676][ T9321] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 129.533701][ T9321] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 129.533708][ T9321] RDX: 0000000000006933 RSI: 00000000000008ae RDI: 0000000000000000 [ 129.533714][ T9321] RBP: 00007f094b319090 R08: 0000000000000000 R09: 000000000000effd [ 129.533721][ T9321] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 129.533727][ T9321] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 129.533741][ T9321] [ 129.657736][ T9326] FAULT_INJECTION: forcing a failure. [ 129.657736][ T9326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.665343][ T9326] CPU: 3 UID: 0 PID: 9326 Comm: syz.4.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.665361][ T9326] Tainted: [L]=SOFTLOCKUP [ 129.665365][ T9326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.665378][ T9326] Call Trace: [ 129.665382][ T9326] [ 129.665386][ T9326] dump_stack_lvl+0x100/0x190 [ 129.665406][ T9326] should_fail_ex.cold+0x5/0xa [ 129.665420][ T9326] ? prepare_alloc_pages+0x16d/0x5f0 [ 129.665438][ T9326] should_fail_alloc_page+0xeb/0x140 [ 129.665454][ T9326] prepare_alloc_pages+0x1f0/0x5f0 [ 129.665472][ T9326] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 129.665488][ T9326] ? rcu_is_watching+0x12/0xc0 [ 129.665506][ T9326] ? trace_mm_page_alloc+0x164/0x1c0 [ 129.665522][ T9326] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 129.665536][ T9326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 129.665572][ T9326] ? is_bpf_text_address+0x8a/0x1a0 [ 129.665598][ T9326] ? bpf_ksym_find+0x128/0x1c0 [ 129.665616][ T9326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 129.665631][ T9326] ? is_bpf_text_address+0x94/0x1a0 [ 129.665646][ T9326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 129.665659][ T9326] ? __kernel_text_address+0xd/0x30 [ 129.665694][ T9326] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 129.665709][ T9326] ? __lock_acquire+0x49f/0x1a40 [ 129.665726][ T9326] ? policy_nodemask+0xed/0x4f0 [ 129.665742][ T9326] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 129.665763][ T9326] __kasan_populate_vmalloc+0xf0/0x210 [ 129.665779][ T9326] alloc_vmap_area+0x95d/0x2bb0 [ 129.665798][ T9326] ? kasan_save_track+0x14/0x30 [ 129.665811][ T9326] ? __kasan_kmalloc+0xaa/0xb0 [ 129.665825][ T9326] ? __pfx_alloc_vmap_area+0x10/0x10 [ 129.665840][ T9326] ? __get_vm_area_node+0x101/0x330 [ 129.665857][ T9326] __get_vm_area_node+0x1ca/0x330 [ 129.665875][ T9326] __vmalloc_node_range_noprof+0x228/0x1630 [ 129.665892][ T9326] ? vhost_task_create+0x1db/0x370 [ 129.665905][ T9326] ? rcu_is_watching+0x12/0xc0 [ 129.665926][ T9326] ? vhost_task_create+0x1db/0x370 [ 129.665942][ T9326] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 129.665960][ T9326] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.665981][ T9326] ? trace_kmem_cache_alloc+0xdd/0x100 [ 129.665998][ T9326] ? vhost_task_create+0x1db/0x370 [ 129.666010][ T9326] __vmalloc_node_noprof+0xad/0xf0 [ 129.666027][ T9326] ? vhost_task_create+0x1db/0x370 [ 129.666041][ T9326] copy_process+0x7fb/0x8030 [ 129.666065][ T9326] ? __pfx_copy_process+0x10/0x10 [ 129.666081][ T9326] ? __kasan_kmalloc+0xaa/0xb0 [ 129.666095][ T9326] ? lockdep_init_map_type+0x5c/0x250 [ 129.666110][ T9326] ? lockdep_init_map_type+0x5c/0x250 [ 129.666125][ T9326] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 129.666141][ T9326] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 129.666162][ T9326] vhost_task_create+0x1db/0x370 [ 129.666175][ T9326] ? __pfx_vhost_task_create+0x10/0x10 [ 129.666193][ T9326] ? __pfx_vhost_task_fn+0x10/0x10 [ 129.666207][ T9326] ? __pfx___mutex_lock+0x10/0x10 [ 129.666222][ T9326] ? kasan_quarantine_put+0x104/0x240 [ 129.666238][ T9326] kvm_mmu_post_init_vm+0x1b3/0x360 [ 129.666256][ T9326] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 129.666273][ T9326] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 129.666290][ T9326] kvm_vcpu_ioctl+0x730/0x1700 [ 129.666304][ T9326] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.666317][ T9326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.666332][ T9326] ? do_vfs_ioctl+0x226/0x13e0 [ 129.666350][ T9326] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.666367][ T9326] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.666397][ T9326] ? __fget_files+0x215/0x3d0 [ 129.666409][ T9326] ? hook_file_ioctl_common+0x140/0x440 [ 129.666427][ T9326] ? selinux_file_ioctl+0x13b/0x290 [ 129.666444][ T9326] ? selinux_file_ioctl+0xb6/0x290 [ 129.666462][ T9326] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.666476][ T9326] __x64_sys_ioctl+0x18e/0x210 [ 129.666494][ T9326] do_syscall_64+0x115/0x870 [ 129.666507][ T9326] ? clear_bhb_loop+0x40/0x90 [ 129.666521][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.666534][ T9326] RIP: 0033:0x7fc727d9df99 [ 129.666545][ T9326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.666556][ T9326] RSP: 002b:00007fc728cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.666568][ T9326] RAX: ffffffffffffffda RBX: 00007fc728026090 RCX: 00007fc727d9df99 [ 129.666576][ T9326] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 129.666582][ T9326] RBP: 00007fc728cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 129.666589][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.666596][ T9326] R13: 00007fc728026128 R14: 00007fc728026090 R15: 00007ffe8ec42e38 [ 129.666610][ T9326] [ 129.841058][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 129.940171][ T42] audit: type=1400 audit(1785419327.182:692): avc: denied { write } for pid=9339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.986322][ T42] audit: type=1400 audit(1785419327.232:693): avc: denied { write } for pid=9342 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.030730][ T9346] bridge1: entered promiscuous mode [ 130.032843][ T9346] bridge1: entered allmulticast mode [ 130.142599][ T42] audit: type=1400 audit(1785419327.382:694): avc: denied { write } for pid=9353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.199363][ T42] audit: type=1400 audit(1785419327.442:695): avc: denied { write } for pid=9356 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.369476][ T9362] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 130.374082][ T9362] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 130.380301][ T9362] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 130.385781][ T9362] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 130.389801][ T9362] kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 130.393581][ T9362] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 130.397410][ T9362] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 130.401021][ T9362] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 130.404713][ T9362] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 130.408999][ T9362] kvm: requested 154209 ns i8254 timer period limited to 200000 ns [ 130.593215][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1148'. [ 130.596147][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1148'. [ 130.764857][ T9383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.766790][ T9383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.768975][ T9383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.771491][ T9383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.813888][ T9394] snd_dummy snd_dummy.0: control 4:6:7:syz0:15 is already present [ 130.918185][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.925586][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.929106][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.932321][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.935894][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.939189][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.942412][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.945829][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.948944][ T9404] netlink: 'syz.3.1153': attribute type 9 has an invalid length. [ 130.965995][ T42] audit: type=1400 audit(1785419328.202:696): avc: denied { mount } for pid=9406 comm="syz.0.1155" name="/" dev="ramfs" ino=35467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.041969][ T9410] syzkaller0: entered promiscuous mode [ 131.044887][ T9410] syzkaller0: entered allmulticast mode [ 131.049248][ T9410] FAULT_INJECTION: forcing a failure. [ 131.049248][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.053152][ T9410] CPU: 3 UID: 0 PID: 9410 Comm: syz.3.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.053170][ T9410] Tainted: [L]=SOFTLOCKUP [ 131.053174][ T9410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.053181][ T9410] Call Trace: [ 131.053193][ T9410] [ 131.053198][ T9410] dump_stack_lvl+0x100/0x190 [ 131.053257][ T9410] should_fail_ex.cold+0x5/0xa [ 131.053283][ T9410] _copy_from_iter+0x43a/0x1690 [ 131.053326][ T9410] ? __pfx__copy_from_iter+0x10/0x10 [ 131.053342][ T9410] ? _copy_from_iter+0x270/0x1690 [ 131.053361][ T9410] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 131.053398][ T9410] skb_copy_datagram_from_iter+0x11f/0x720 [ 131.053417][ T9410] packet_sendmsg+0x227e/0x5100 [ 131.053448][ T9410] ? avc_has_perm_noaudit+0x2fa/0x3b0 [ 131.053477][ T9410] ? sock_has_perm+0x25a/0x2f0 [ 131.053495][ T9410] ? __pfx_sock_has_perm+0x10/0x10 [ 131.053514][ T9410] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.053531][ T9410] ? selinux_socket_sendmsg+0x198/0x2f0 [ 131.053570][ T9410] ____sys_sendmsg+0xa4d/0xbe0 [ 131.053593][ T9410] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.053607][ T9410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.053630][ T9410] ___sys_sendmsg+0x190/0x1e0 [ 131.053649][ T9410] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.053667][ T9410] ? __lock_acquire+0x49f/0x1a40 [ 131.053692][ T9410] ? get_pid_task+0x106/0x250 [ 131.053725][ T9410] __sys_sendmsg+0x160/0x210 [ 131.053740][ T9410] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.053762][ T9410] do_syscall_64+0x115/0x870 [ 131.053807][ T9410] ? clear_bhb_loop+0x40/0x90 [ 131.053822][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.053835][ T9410] RIP: 0033:0x7f68aaf9df99 [ 131.053845][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.053861][ T9410] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.053880][ T9410] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 131.053887][ T9410] RDX: 0000000024004015 RSI: 00002000000006c0 RDI: 0000000000000008 [ 131.053894][ T9410] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 131.053901][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.053908][ T9410] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 131.053922][ T9410] [ 131.148885][ T9418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.186240][ T9420] FAULT_INJECTION: forcing a failure. [ 131.186240][ T9420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.190495][ T9420] CPU: 3 UID: 0 PID: 9420 Comm: syz.4.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.190514][ T9420] Tainted: [L]=SOFTLOCKUP [ 131.190519][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.190526][ T9420] Call Trace: [ 131.190530][ T9420] [ 131.190534][ T9420] dump_stack_lvl+0x100/0x190 [ 131.190554][ T9420] should_fail_ex.cold+0x5/0xa [ 131.190570][ T9420] _copy_to_user+0x32/0xd0 [ 131.190589][ T9420] vt_ioctl+0xb67/0x3110 [ 131.190629][ T9420] ? __pfx_vt_ioctl+0x10/0x10 [ 131.190646][ T9420] ? find_held_lock+0x2b/0x80 [ 131.190673][ T9420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.190696][ T9420] ? __pfx_vt_ioctl+0x10/0x10 [ 131.190728][ T9420] tty_ioctl+0x26a/0x1640 [ 131.190744][ T9420] ? __pfx_tty_ioctl+0x10/0x10 [ 131.190758][ T9420] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 131.190783][ T9420] ? __fget_files+0x215/0x3d0 [ 131.190801][ T9420] ? hook_file_ioctl_common+0x140/0x440 [ 131.190819][ T9420] ? selinux_file_ioctl+0x13b/0x290 [ 131.190836][ T9420] ? selinux_file_ioctl+0xb6/0x290 [ 131.190854][ T9420] ? __pfx_tty_ioctl+0x10/0x10 [ 131.190874][ T9420] __x64_sys_ioctl+0x18e/0x210 [ 131.190892][ T9420] do_syscall_64+0x115/0x870 [ 131.190906][ T9420] ? clear_bhb_loop+0x40/0x90 [ 131.190920][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.190932][ T9420] RIP: 0033:0x7fc727d9df99 [ 131.190942][ T9420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.190954][ T9420] RSP: 002b:00007fc728cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.190966][ T9420] RAX: ffffffffffffffda RBX: 00007fc728025fa0 RCX: 00007fc727d9df99 [ 131.190973][ T9420] RDX: 00002000000013c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 131.190981][ T9420] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 131.190987][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.190994][ T9420] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 131.191008][ T9420] [ 131.293872][ T42] audit: type=1400 audit(1785419328.532:697): avc: denied { bind } for pid=9425 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.302982][ T42] audit: type=1400 audit(1785419328.542:698): avc: denied { write } for pid=9425 comm="syz.4.1164" name="heartbeat" dev="configfs" ino=31628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.397679][ T42] audit: type=1400 audit(1785419328.642:699): avc: denied { map } for pid=9432 comm="syz.4.1167" path="/dev/nvme-fabrics" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.431815][ T9438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1169'. [ 131.720551][ T9456] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 131.889374][ T9461] gadgetfs: bound to dummy_udc driver [ 132.134584][ T5809] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 132.137502][ C1] gadgetfs: connected [ 132.138882][ T5809] gadgetfs: disconnected [ 132.341895][ T9472] program syz.3.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.473115][ T9483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9483 comm=syz.0.1186 [ 132.571056][ T9489] binder: 9488:9489 ioctl c0306201 200000000480 returned -22 [ 132.604910][ T5521] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 132.718448][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.775110][ T5521] usb 8-1: Using ep0 maxpacket: 32 [ 132.782379][ T5521] usb 8-1: config 0 has no interfaces? [ 132.789460][ T5521] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.794887][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.795428][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.795863][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.797253][ T64] Bluetooth: hci4: command 0x0405 tx timeout [ 132.802720][ T5521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.860190][ T5521] usb 8-1: config 0 descriptor?? [ 133.068992][ T29] usb 8-1: USB disconnect, device number 11 [ 133.693515][ T9538] bridge0: port 3(wlan1) entered blocking state [ 133.697024][ T9538] bridge0: port 3(wlan1) entered disabled state [ 133.701241][ T9538] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 133.710884][ T9538] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 133.760333][ T9540] __nla_validate_parse: 8 callbacks suppressed [ 133.760349][ T9540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1198'. [ 133.765431][ T9540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1198'. [ 133.849687][ T9544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1200'. [ 133.980813][ T9514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.983180][ T9514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.986884][ T9514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.989618][ T9514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.040489][ T9554] validate_nla: 40 callbacks suppressed [ 134.040507][ T9554] netlink: 'syz.3.1204': attribute type 63 has an invalid length. [ 134.046457][ T9554] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1204'. [ 134.050440][ T9554] gretap0: entered allmulticast mode [ 134.053200][ T9554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.092765][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 134.106154][ T9560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1207'. [ 134.109085][ T9560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1207'. [ 134.117556][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 134.117571][ T42] audit: type=1400 audit(1785419331.362:715): avc: denied { write } for pid=9556 comm="syz.4.1206" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.232578][ T9571] xt_hashlimit: max too large, truncated to 1048576 [ 134.235954][ T9571] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.248255][ T9575] dlm: no locking on control device [ 134.285758][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1216'. [ 134.290564][ T42] audit: type=1400 audit(1785419331.532:716): avc: denied { map } for pid=9576 comm="syz.1.1213" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.297719][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1216'. [ 135.074761][ T9574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.080277][ T9574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.083032][ T9574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.085789][ T9574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.122932][ T9591] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 135.159431][ T9591] bond2: entered promiscuous mode [ 135.161829][ T9591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.222289][ T9591] veth5: entered allmulticast mode [ 135.227511][ T9591] bond2: (slave veth5): making interface the new active one [ 135.229700][ T9591] veth5: entered promiscuous mode [ 135.231862][ T9591] bond2: (slave veth5): Enslaving as an active interface with an up link [ 135.264404][ T9606] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.272399][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 135.313025][ T9602] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.314392][ T42] audit: type=1400 audit(1785419332.552:717): avc: denied { write } for pid=9609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.318175][ T9602] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 135.364690][ T5822] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 135.391800][ T42] audit: type=1400 audit(1785419332.632:718): avc: denied { write } for pid=9616 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.502241][ T42] audit: type=1400 audit(1785419332.742:719): avc: denied { write } for pid=9621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.528221][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.531367][ T5822] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.534019][ T5822] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 135.540638][ T5822] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.543466][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.548812][ T9594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.551804][ T42] audit: type=1400 audit(1785419332.792:720): avc: denied { write } for pid=9626 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.552343][ T5822] hub 8-1:1.0: bad descriptor, ignoring hub [ 135.563200][ T5822] hub 8-1:1.0: probe with driver hub failed with error -5 [ 135.567540][ T5822] cdc_wdm 8-1:1.0: skipping garbage [ 135.569176][ T5822] cdc_wdm 8-1:1.0: skipping garbage [ 135.574773][ T5822] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 135.577905][ T5822] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.268965][ T9620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.271750][ T9620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.274466][ T9620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.277473][ T9620] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.525475][ T9652] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 136.602408][ T9594] usb 8-1: reset low-speed USB device number 12 using dummy_hcd [ 136.624741][ T5822] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 136.776755][ T5822] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 136.779255][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.782205][ T5822] usb 6-1: config 0 has no interfaces? [ 136.783892][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 136.786846][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.791153][ T5822] usb 6-1: config 0 descriptor?? [ 136.877241][ T9652] syz.4.1235 (9652): drop_caches: 1 [ 136.877786][ T9654] syz.4.1235 (9654): drop_caches: 1 [ 136.911836][ T9652] syz.4.1235 (9652): drop_caches: 1 [ 136.918970][ T9594] usb 8-1: device firmware changed [ 136.923105][ T9594] cdc_wdm 8-1:1.0: Error autopm - -16 [ 136.923255][ T5521] usb 8-1: USB disconnect, device number 12 [ 137.033574][ T5822] usb 6-1: string descriptor 0 read error: -71 [ 137.037056][ T5822] usb 6-1: USB disconnect, device number 20 [ 137.064952][ T5521] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 137.078291][ T9658] xt_hashlimit: size too large, truncated to 1048576 [ 137.227054][ T5521] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 137.231044][ T5521] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.238883][ T5521] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.243729][ T5521] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 137.248215][ T5521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.253743][ T9636] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.259897][ T5521] hub 8-1:1.0: bad descriptor, ignoring hub [ 137.262291][ T5521] hub 8-1:1.0: probe with driver hub failed with error -5 [ 137.266719][ T5521] cdc_wdm 8-1:1.0: skipping garbage [ 137.268506][ T5521] cdc_wdm 8-1:1.0: skipping garbage [ 137.270362][ T5521] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 137.495727][ T9594] mmap: syz.3.1221 (9594) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.552208][ T42] audit: type=1400 audit(1785419334.792:721): avc: denied { listen } for pid=9592 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.559093][ T42] audit: type=1400 audit(1785419334.792:722): avc: denied { accept } for pid=9592 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.067893][ T9664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.072261][ T9664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.075104][ T9664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.077799][ T9664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.334676][ T5822] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 138.486537][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 138.490544][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 138.494417][ T5822] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 138.498314][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.506417][ T9672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.509469][ T9672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.514736][ T5822] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 138.534390][ T5822] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 138.825536][ T50] usb 6-1: USB disconnect, device number 21 [ 138.833753][ T50] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 138.838477][ T50] cyberjack 6-1:1.0: device disconnected [ 139.068587][ T9689] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 139.143153][ T9698] __nla_validate_parse: 3 callbacks suppressed [ 139.143172][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 139.161789][ T9689] syz.0.1245 (9689): drop_caches: 1 [ 139.163981][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 139.201451][ T9697] syz.0.1245 (9697): drop_caches: 1 [ 139.223968][ T9689] syz.0.1245 (9689): drop_caches: 1 [ 139.229029][ T5822] usb 8-1: USB disconnect, device number 13 [ 139.354634][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.143517][ T9710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.145981][ T64] Bluetooth: hci4: command 0x0405 tx timeout [ 140.146000][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.146569][ T9710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.153672][ T9710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.155917][ T9710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.244326][ T42] audit: type=1400 audit(1785419337.482:723): avc: denied { create } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.260005][ T42] audit: type=1400 audit(1785419337.502:724): avc: denied { bind } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.269757][ T9734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1259'. [ 140.269772][ T42] audit: type=1400 audit(1785419337.512:725): avc: denied { setopt } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.281406][ T42] audit: type=1400 audit(1785419337.512:726): avc: denied { accept } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.291306][ T42] audit: type=1400 audit(1785419337.512:727): avc: denied { write } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.298069][ T42] audit: type=1400 audit(1785419337.512:728): avc: denied { read } for pid=9730 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.361901][ T9742] syzkaller0: entered promiscuous mode [ 140.364139][ T9742] syzkaller0: entered allmulticast mode [ 140.484688][ T9754] FAULT_INJECTION: forcing a failure. [ 140.484688][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.493160][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.4.1267 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.493192][ T9754] Tainted: [L]=SOFTLOCKUP [ 140.493199][ T9754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.493209][ T9754] Call Trace: [ 140.493216][ T9754] [ 140.493223][ T9754] dump_stack_lvl+0x100/0x190 [ 140.493256][ T9754] should_fail_ex.cold+0x5/0xa [ 140.493282][ T9754] _copy_to_user+0x32/0xd0 [ 140.493311][ T9754] simple_read_from_buffer+0xcb/0x170 [ 140.493335][ T9754] proc_fail_nth_read+0x1af/0x230 [ 140.493364][ T9754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.493392][ T9754] ? rw_verify_area+0xce/0x6d0 [ 140.493418][ T9754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.493445][ T9754] vfs_read+0x1e4/0xb40 [ 140.493476][ T9754] ? __pfx_vfs_read+0x10/0x10 [ 140.493528][ T9754] ? __fget_files+0x215/0x3d0 [ 140.493553][ T9754] ? __fget_files+0x21f/0x3d0 [ 140.493576][ T9754] ksys_read+0x12a/0x250 [ 140.493601][ T9754] ? __pfx_ksys_read+0x10/0x10 [ 140.493633][ T9754] do_syscall_64+0x115/0x870 [ 140.493656][ T9754] ? clear_bhb_loop+0x40/0x90 [ 140.493679][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.493697][ T9754] RIP: 0033:0x7fc727d5e7ce [ 140.493714][ T9754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.493731][ T9754] RSP: 002b:00007fc728cdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.493750][ T9754] RAX: ffffffffffffffda RBX: 00007fc728cdd6c0 RCX: 00007fc727d5e7ce [ 140.493762][ T9754] RDX: 000000000000000f RSI: 00007fc728cdd0a0 RDI: 0000000000000004 [ 140.493817][ T9754] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 140.493828][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.493839][ T9754] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 140.493874][ T9754] [ 140.576720][ T9752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.578784][ T9752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.592507][ T9752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.594442][ T9752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.603930][ T42] audit: type=1400 audit(1785419337.842:729): avc: denied { append } for pid=9760 comm="syz.0.1269" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.731109][ T9776] syzkaller0: entered promiscuous mode [ 140.733340][ T9776] syzkaller0: entered allmulticast mode [ 140.906014][ T42] audit: type=1400 audit(1785419338.152:730): avc: denied { cmd } for pid=9781 comm="syz.1.1277" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 141.048158][ T9787] FAULT_INJECTION: forcing a failure. [ 141.048158][ T9787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.057689][ T9787] CPU: 3 UID: 0 PID: 9787 Comm: syz.1.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.057720][ T9787] Tainted: [L]=SOFTLOCKUP [ 141.057726][ T9787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.057737][ T9787] Call Trace: [ 141.057744][ T9787] [ 141.057751][ T9787] dump_stack_lvl+0x100/0x190 [ 141.057781][ T9787] should_fail_ex.cold+0x5/0xa [ 141.057806][ T9787] _copy_from_iter+0x1f4/0x1690 [ 141.057839][ T9787] ? __pfx__copy_from_iter+0x10/0x10 [ 141.057864][ T9787] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 141.057898][ T9787] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 141.057925][ T9787] skb_copy_datagram_from_iter+0x11f/0x720 [ 141.057954][ T9787] packet_sendmsg+0x227e/0x5100 [ 141.057980][ T9787] ? avc_has_perm_noaudit+0x2f0/0x3b0 [ 141.058014][ T9787] ? sock_has_perm+0x25a/0x2f0 [ 141.058040][ T9787] ? __pfx_sock_has_perm+0x10/0x10 [ 141.058072][ T9787] ? __pfx_packet_sendmsg+0x10/0x10 [ 141.058092][ T9787] ? __might_fault+0xc5/0x140 [ 141.058120][ T9787] ? selinux_socket_sendmsg+0x198/0x2f0 [ 141.058153][ T9787] __sys_sendto+0x48b/0x4e0 [ 141.058175][ T9787] ? __pfx_packet_sendmsg+0x10/0x10 [ 141.058198][ T9787] ? __pfx___sys_sendto+0x10/0x10 [ 141.058233][ T9787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.058287][ T9787] ? ksys_write+0x1ac/0x250 [ 141.058317][ T9787] ? __pfx_ksys_write+0x10/0x10 [ 141.058346][ T9787] __x64_sys_sendto+0xe0/0x1c0 [ 141.058367][ T9787] ? do_syscall_64+0x90/0x870 [ 141.058387][ T9787] ? lockdep_hardirqs_on+0x78/0x100 [ 141.058408][ T9787] do_syscall_64+0x115/0x870 [ 141.058428][ T9787] ? clear_bhb_loop+0x40/0x90 [ 141.058453][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.058472][ T9787] RIP: 0033:0x7f094a39df99 [ 141.058489][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.058507][ T9787] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 141.058526][ T9787] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 141.058539][ T9787] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 141.058550][ T9787] RBP: 00007f094b319090 R08: 0000200000000180 R09: 0000000000000014 [ 141.058562][ T9787] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 141.058573][ T9787] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 141.058599][ T9787] [ 141.085668][ T42] audit: type=1400 audit(1785419338.332:731): avc: denied { write } for pid=9785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.129644][ T9796] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 141.213333][ T42] audit: type=1400 audit(1785419338.452:732): avc: denied { write } for pid=9797 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.289958][ T9806] syzkaller0: entered promiscuous mode [ 141.291929][ T9806] syzkaller0: entered allmulticast mode [ 141.359621][ T9811] kAFS: unable to lookup cell 'syz0' [ 141.391881][ T9814] Cannot find add_set index 0 as target [ 142.046607][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 142.052314][ T9839] hsr_slave_0: left promiscuous mode [ 142.057699][ T9839] hsr_slave_1: left promiscuous mode [ 142.104553][ T9842] syzkaller0: entered promiscuous mode [ 142.106923][ T9842] syzkaller0: entered allmulticast mode [ 142.315917][ T1365] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.466093][ T9862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.472016][ T9862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.474027][ T9862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.476607][ T9862] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.488785][ T1365] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.493588][ T1365] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.499147][ T1365] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.505838][ T1365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.532585][ T9840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.542806][ T1365] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.615926][ T9872] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 142.696456][ T9877] syzkaller0: entered promiscuous mode [ 142.704874][ T9877] syzkaller0: entered allmulticast mode [ 142.793975][ T5521] usb 5-1: USB disconnect, device number 11 [ 142.848454][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'. [ 142.891751][ T9883] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 143.043690][ T9894] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1314'. [ 143.047627][ T9894] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1314'. [ 143.190400][ T9904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1317'. [ 143.193922][ T9904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.220557][ T9906] netlink: 'syz.4.1318': attribute type 39 has an invalid length. [ 143.274589][ T50] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 143.280621][ T9907] ALSA: seq fatal error: cannot create timer (-16) [ 143.286307][ T9907] comedi comedi3: comedi_config --init_data is deprecated [ 143.337454][ T9909] syzkaller0: entered promiscuous mode [ 143.339870][ T9909] syzkaller0: entered allmulticast mode [ 143.434769][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 143.437974][ T50] usb 8-1: config 252 has an invalid interface number: 40 but max is 0 [ 143.440516][ T50] usb 8-1: config 252 has no interface number 0 [ 143.442502][ T50] usb 8-1: too many endpoints for config 252 interface 40 altsetting 114: 102, using maximum allowed: 30 [ 143.446101][ T50] usb 8-1: config 252 interface 40 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 143.451161][ T50] usb 8-1: config 252 interface 40 has no altsetting 0 [ 143.453530][ T50] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 143.456903][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.534646][ T9914] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 143.676053][ T50] usb 8-1: string descriptor 0 read error: -71 [ 143.680709][ T50] pvrusb2: Hardware description: Terratec Grabster AV400 [ 143.683012][ T50] pvrusb2: ********** [ 143.684312][ T50] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 143.688134][ T50] pvrusb2: Important functionality might not be entirely working. [ 143.692575][ T50] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 143.696625][ T50] pvrusb2: ********** [ 143.698393][ T50] usb 8-1: selecting invalid altsetting 0 [ 143.702022][ T2519] pvrusb2: Invalid write control endpoint [ 143.702654][ T50] usb 8-1: USB disconnect, device number 14 [ 143.773322][ T2519] pvrusb2: Invalid write control endpoint [ 143.775799][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 143.780729][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 143.783927][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 143.788491][ T2519] pvrusb2: Device being rendered inoperable [ 143.806858][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 143.810184][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 143.836499][ T2519] pvrusb2: Attached sub-driver cx25840 [ 143.839657][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.843588][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.944962][ T9922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.947406][ T9922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.949645][ T9922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.953434][ T9922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.975106][ T9930] FAULT_INJECTION: forcing a failure. [ 143.975106][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.979847][ T9930] CPU: 3 UID: 0 PID: 9930 Comm: syz.4.1326 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.979872][ T9930] Tainted: [L]=SOFTLOCKUP [ 143.979878][ T9930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.979887][ T9930] Call Trace: [ 143.979910][ T9930] [ 143.979916][ T9930] dump_stack_lvl+0x100/0x190 [ 143.979987][ T9930] should_fail_ex.cold+0x5/0xa [ 143.980019][ T9930] _copy_from_iter+0x1f4/0x1690 [ 143.980070][ T9930] ? __asan_memset+0x23/0x50 [ 143.980100][ T9930] ? __pfx__copy_from_iter+0x10/0x10 [ 143.980121][ T9930] ? __pfx___alloc_skb+0x10/0x10 [ 143.980174][ T9930] netlink_sendmsg+0x808/0xda0 [ 143.980212][ T9930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.980230][ T9930] ? selinux_socket_sendmsg+0x198/0x2f0 [ 143.980257][ T9930] ____sys_sendmsg+0xa4d/0xbe0 [ 143.980285][ T9930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.980302][ T9930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.980333][ T9930] ___sys_sendmsg+0x190/0x1e0 [ 143.980358][ T9930] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.980381][ T9930] ? __lock_acquire+0x49f/0x1a40 [ 143.980405][ T9930] ? get_pid_task+0x106/0x250 [ 143.980450][ T9930] __sys_sendmsg+0x160/0x210 [ 143.980470][ T9930] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.980498][ T9930] do_syscall_64+0x115/0x870 [ 143.980553][ T9930] ? clear_bhb_loop+0x40/0x90 [ 143.980571][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.980586][ T9930] RIP: 0033:0x7fc727d9df99 [ 143.980600][ T9930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.980614][ T9930] RSP: 002b:00007fc728cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.980644][ T9930] RAX: ffffffffffffffda RBX: 00007fc728025fa0 RCX: 00007fc727d9df99 [ 143.980654][ T9930] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 143.980663][ T9930] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 143.980676][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.980685][ T9930] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 143.980704][ T9930] [ 144.149020][ T9942] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 144.175130][ T9947] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.310884][ T9954] create_pit_timer: 10 callbacks suppressed [ 144.310895][ T9954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.327792][ T9962] syzkaller0: entered promiscuous mode [ 144.330170][ T9962] syzkaller0: entered allmulticast mode [ 144.340172][ T9954] kvm: pic: level sensitive irq not supported [ 144.340951][ T9954] kvm: pic: non byte read [ 144.348229][ T9954] kvm: pic: level sensitive irq not supported [ 144.348774][ T9954] kvm: pic: non byte read [ 144.355572][ T9954] kvm: pic: level sensitive irq not supported [ 144.356740][ T9954] kvm: pic: non byte read [ 144.361978][ T9954] kvm: pic: level sensitive irq not supported [ 144.362758][ T9954] kvm: pic: non byte read [ 144.475261][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 144.480683][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 144.549882][ T9977] Cannot find add_set index 0 as target [ 144.639702][ T9986] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 144.976434][T10000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.985163][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.311062][T10010] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1351'. [ 145.586594][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 145.586611][ T42] audit: type=1400 audit(1785419342.832:738): avc: denied { read } for pid=10011 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.596420][ T42] audit: type=1400 audit(1785419342.832:739): avc: denied { write } for pid=10011 comm="syz.3.1352" path="socket:[41465]" dev="sockfs" ino=41465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.613192][T10014] FAULT_INJECTION: forcing a failure. [ 145.613192][T10014] name failslab, interval 1, probability 0, space 0, times 100 [ 145.617535][T10014] CPU: 0 UID: 0 PID: 10014 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.617554][T10014] Tainted: [L]=SOFTLOCKUP [ 145.617559][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.617566][T10014] Call Trace: [ 145.617584][T10014] [ 145.617589][T10014] dump_stack_lvl+0x100/0x190 [ 145.617650][T10014] should_fail_ex.cold+0x5/0xa [ 145.617676][T10014] should_failslab+0xc2/0x120 [ 145.617703][T10014] __kmalloc_cache_noprof+0x91/0x6c0 [ 145.617724][T10014] ? nfnetlink_rcv_batch+0x780/0x2880 [ 145.617771][T10014] nfnetlink_rcv_batch+0x780/0x2880 [ 145.617794][T10014] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 145.617810][T10014] ? find_held_lock+0x2b/0x80 [ 145.617841][T10014] ? avc_has_perm_noaudit+0x145/0x3b0 [ 145.617887][T10014] ? __nla_parse+0x40/0x60 [ 145.617907][T10014] nfnetlink_rcv+0x3bd/0x440 [ 145.617922][T10014] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.617940][T10014] netlink_unicast+0x585/0x850 [ 145.617960][T10014] ? __pfx_netlink_unicast+0x10/0x10 [ 145.617971][T10014] ? __pfx_sock_has_perm+0x10/0x10 [ 145.617990][T10014] netlink_sendmsg+0x8b0/0xda0 [ 145.618003][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.618016][T10014] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.618035][T10014] ____sys_sendmsg+0xa4d/0xbe0 [ 145.618066][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.618079][T10014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.618103][T10014] ___sys_sendmsg+0x190/0x1e0 [ 145.618122][T10014] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.618139][T10014] ? __lock_acquire+0x49f/0x1a40 [ 145.618154][T10014] ? get_pid_task+0x106/0x250 [ 145.618188][T10014] __sys_sendmsg+0x160/0x210 [ 145.618207][T10014] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.618229][T10014] do_syscall_64+0x115/0x870 [ 145.618328][T10014] ? clear_bhb_loop+0x40/0x90 [ 145.618343][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.618355][T10014] RIP: 0033:0x7f68aaf9df99 [ 145.618365][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.618377][T10014] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.618403][T10014] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 145.618410][T10014] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 145.618417][T10014] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 145.618423][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.618430][T10014] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 145.618444][T10014] [ 145.748361][T10016] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 145.796128][T10023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.809438][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 145.812681][T10027] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.985826][ T5740] Bluetooth: hci4: command 0x0405 tx timeout [ 145.988086][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.988113][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.988557][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.028738][T10016] syz.3.1354 (10016): drop_caches: 1 [ 146.077373][T10016] syz.3.1354 (10016): drop_caches: 1 [ 146.261692][ T42] audit: type=1400 audit(1785419343.502:740): avc: denied { name_bind } for pid=10048 comm="syz.3.1365" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.371275][T10059] netlink: 'syz.4.1368': attribute type 13 has an invalid length. [ 146.472739][ T42] audit: type=1400 audit(1785419343.712:741): avc: denied { read write } for pid=10065 comm="syz.3.1371" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.479542][ T42] audit: type=1400 audit(1785419343.712:742): avc: denied { open } for pid=10065 comm="syz.3.1371" path="/364/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.486680][ T42] audit: type=1400 audit(1785419343.732:743): avc: denied { nnp_transition } for pid=10068 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 146.494254][ T42] audit: type=1400 audit(1785419343.732:744): avc: denied { transition } for pid=10068 comm="syz.1.1372" path="/322/file0" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 146.501538][ T42] audit: type=1400 audit(1785419343.732:745): avc: denied { entrypoint } for pid=10068 comm="syz.1.1372" path="/322/file0" dev="tmpfs" ino=1746 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.517740][ T42] audit: type=1400 audit(1785419343.732:746): avc: denied { noatsecure } for pid=10068 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 146.523729][ T42] audit: type=1400 audit(1785419343.752:747): avc: denied { ioctl } for pid=10065 comm="syz.3.1371" path="/364/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.576911][T10073] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 146.612327][T10073] syz.1.1373 (10073): drop_caches: 1 [ 146.642837][T10073] syz.1.1373 (10073): drop_caches: 1 [ 146.754780][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 146.884632][ T10] usb 8-1: device descriptor read/64, error -71 [ 147.124614][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 147.145342][T10104] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 147.183438][T10104] syz.0.1385 (10104): drop_caches: 1 [ 147.211610][T10104] syz.0.1385 (10104): drop_caches: 1 [ 147.254623][ T10] usb 8-1: device descriptor read/64, error -71 [ 147.345259][T10110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16144 sclass=netlink_route_socket pid=10110 comm=syz.1.1388 [ 147.369509][ T10] usb usb8-port1: attempt power cycle [ 147.401428][T10113] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1388'. [ 147.601253][T10122] FAULT_INJECTION: forcing a failure. [ 147.601253][T10122] name failslab, interval 1, probability 0, space 0, times 96 [ 147.605930][T10122] CPU: 3 UID: 0 PID: 10122 Comm: syz.1.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.605949][T10122] Tainted: [L]=SOFTLOCKUP [ 147.605953][T10122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.605959][T10122] Call Trace: [ 147.605964][T10122] [ 147.605969][T10122] dump_stack_lvl+0x100/0x190 [ 147.605990][T10122] should_fail_ex.cold+0x5/0xa [ 147.606003][T10122] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 147.606023][T10122] should_failslab+0xc2/0x120 [ 147.606039][T10122] kmem_cache_alloc_noprof+0x91/0x6a0 [ 147.606054][T10122] ? skb_clone+0x190/0x400 [ 147.606072][T10122] skb_clone+0x190/0x400 [ 147.606086][T10122] netlink_deliver_tap+0xaed/0xcc0 [ 147.606109][T10122] netlink_unicast+0x6a5/0x850 [ 147.606122][T10122] ? __pfx_netlink_unicast+0x10/0x10 [ 147.606138][T10122] netlink_ack+0x655/0xb80 [ 147.606153][T10122] netlink_rcv_skb+0x333/0x420 [ 147.606165][T10122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.606184][T10122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.606201][T10122] ? netlink_deliver_tap+0x1ae/0xcc0 [ 147.606222][T10122] netlink_unicast+0x585/0x850 [ 147.606235][T10122] ? __pfx_netlink_unicast+0x10/0x10 [ 147.606251][T10122] netlink_sendmsg+0x8b0/0xda0 [ 147.606265][T10122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.606278][T10122] ? selinux_socket_sendmsg+0x198/0x2f0 [ 147.606298][T10122] ____sys_sendmsg+0xa4d/0xbe0 [ 147.606316][T10122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.606329][T10122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.606353][T10122] ___sys_sendmsg+0x190/0x1e0 [ 147.606373][T10122] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.606391][T10122] ? __lock_acquire+0x49f/0x1a40 [ 147.606407][T10122] ? get_pid_task+0x106/0x250 [ 147.606441][T10122] __sys_sendmsg+0x160/0x210 [ 147.606456][T10122] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.606478][T10122] do_syscall_64+0x115/0x870 [ 147.606492][T10122] ? clear_bhb_loop+0x40/0x90 [ 147.606506][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.606518][T10122] RIP: 0033:0x7f094a39df99 [ 147.606529][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.606541][T10122] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.606553][T10122] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 147.606560][T10122] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 147.606567][T10122] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 147.606574][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.606580][T10122] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 147.606595][T10122] [ 147.704592][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 147.735521][ T10] usb 8-1: device descriptor read/8, error -71 [ 147.742584][T10124] bond3 (unregistering): Released all slaves [ 147.781344][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 147.784762][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 147.974649][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 147.995296][ T10] usb 8-1: device descriptor read/8, error -71 [ 148.105925][ T10] usb usb8-port1: unable to enumerate USB device [ 148.132947][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 148.138696][T10134] bridge0: port 3(macvlan2) entered blocking state [ 148.140685][T10134] bridge0: port 3(macvlan2) entered disabled state [ 148.142572][T10134] macvlan2: entered allmulticast mode [ 148.146959][T10134] macvlan2: left allmulticast mode [ 148.159457][T10136] FAULT_INJECTION: forcing a failure. [ 148.159457][T10136] name failslab, interval 1, probability 0, space 0, times 95 [ 148.162974][T10136] CPU: 2 UID: 0 PID: 10136 Comm: syz.1.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.162992][T10136] Tainted: [L]=SOFTLOCKUP [ 148.162996][T10136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.163004][T10136] Call Trace: [ 148.163009][T10136] [ 148.163013][T10136] dump_stack_lvl+0x100/0x190 [ 148.163032][T10136] should_fail_ex.cold+0x5/0xa [ 148.163046][T10136] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.163066][T10136] should_failslab+0xc2/0x120 [ 148.163083][T10136] kmem_cache_alloc_noprof+0x91/0x6a0 [ 148.163098][T10136] ? skb_clone+0x190/0x400 [ 148.163115][T10136] skb_clone+0x190/0x400 [ 148.163129][T10136] netlink_deliver_tap+0xaed/0xcc0 [ 148.163151][T10136] netlink_unicast+0x6a5/0x850 [ 148.163165][T10136] ? __pfx_netlink_unicast+0x10/0x10 [ 148.163176][T10136] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 148.163205][T10136] netlink_ack+0x655/0xb80 [ 148.163221][T10136] netlink_rcv_skb+0x333/0x420 [ 148.163232][T10136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.163251][T10136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.163268][T10136] ? netlink_deliver_tap+0x1ae/0xcc0 [ 148.163288][T10136] netlink_unicast+0x585/0x850 [ 148.163302][T10136] ? __pfx_netlink_unicast+0x10/0x10 [ 148.163317][T10136] netlink_sendmsg+0x8b0/0xda0 [ 148.163331][T10136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.163344][T10136] ? selinux_socket_sendmsg+0x198/0x2f0 [ 148.163364][T10136] ____sys_sendmsg+0xa4d/0xbe0 [ 148.163381][T10136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.163394][T10136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.163417][T10136] ___sys_sendmsg+0x190/0x1e0 [ 148.163437][T10136] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.163455][T10136] ? __lock_acquire+0x49f/0x1a40 [ 148.163469][T10136] ? get_pid_task+0x106/0x250 [ 148.163503][T10136] __sys_sendmsg+0x160/0x210 [ 148.163518][T10136] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.163539][T10136] do_syscall_64+0x115/0x870 [ 148.163554][T10136] ? clear_bhb_loop+0x40/0x90 [ 148.163568][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.163580][T10136] RIP: 0033:0x7f094a39df99 [ 148.163590][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.163601][T10136] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.163613][T10136] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 148.163620][T10136] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 148.163627][T10136] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 148.163634][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.163640][T10136] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 148.163655][T10136] [ 148.320458][T10139] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 148.358681][T10139] syz.1.1397 (10139): drop_caches: 1 [ 148.664666][ T10] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 148.819001][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.821545][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.825044][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.828846][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.832998][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.838708][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.841700][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.846138][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.850768][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.856166][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.861792][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.865164][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.868993][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.873381][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.877761][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.885007][ T10] usb 5-1: string descriptor 0 read error: -22 [ 148.887585][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.891196][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.902077][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 149.103723][ T5846] usb 5-1: USB disconnect, device number 12 [ 149.308977][T10142] adutux: No device or device unplugged -19 [ 149.312115][T10167] FAULT_INJECTION: forcing a failure. [ 149.312115][T10167] name failslab, interval 1, probability 0, space 0, times 94 [ 149.316140][T10167] CPU: 0 UID: 0 PID: 10167 Comm: syz.1.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.316158][T10167] Tainted: [L]=SOFTLOCKUP [ 149.316163][T10167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.316170][T10167] Call Trace: [ 149.316175][T10167] [ 149.316179][T10167] dump_stack_lvl+0x100/0x190 [ 149.316199][T10167] should_fail_ex.cold+0x5/0xa [ 149.316217][T10167] should_failslab+0xc2/0x120 [ 149.316233][T10167] __kmalloc_cache_noprof+0x91/0x6c0 [ 149.316254][T10167] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 149.316276][T10167] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 149.316295][T10167] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 149.316315][T10167] selinux_socket_post_create+0x368/0x7e0 [ 149.316333][T10167] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 149.316348][T10167] ? udp_init_sock+0x384/0x450 [ 149.316367][T10167] ? inet_create+0x962/0x1060 [ 149.316383][T10167] security_socket_post_create+0xaf/0x270 [ 149.316413][T10167] __sock_create+0x70b/0x860 [ 149.316435][T10167] udp_sock_create4+0xa6/0x450 [ 149.316447][T10167] ? __pfx_udp_sock_create4+0x10/0x10 [ 149.316461][T10167] ? rcu_is_watching+0x12/0xc0 [ 149.316480][T10167] ? trace_contention_end+0x126/0x160 [ 149.316498][T10167] sctp_udp_sock_start+0x113/0x440 [ 149.316524][T10167] ? __pfx_sctp_udp_sock_start+0x10/0x10 [ 149.316541][T10167] ? __pfx___mutex_lock+0x10/0x10 [ 149.316567][T10167] proc_sctp_do_udp_port+0x38e/0x460 [ 149.316585][T10167] ? __pfx_proc_sctp_do_udp_port+0x10/0x10 [ 149.316601][T10167] ? __kasan_kmalloc+0xaa/0xb0 [ 149.316618][T10167] ? proc_sys_call_handler+0x2c7/0x5a0 [ 149.316636][T10167] proc_sys_call_handler+0x47f/0x5a0 [ 149.316651][T10167] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 149.316670][T10167] vfs_write+0x6ac/0x1050 [ 149.316690][T10167] ? __pfx_proc_sys_write+0x10/0x10 [ 149.316705][T10167] ? __pfx_vfs_write+0x10/0x10 [ 149.316737][T10167] ksys_write+0x12a/0x250 [ 149.316755][T10167] ? __pfx_ksys_write+0x10/0x10 [ 149.316778][T10167] do_syscall_64+0x115/0x870 [ 149.316791][T10167] ? clear_bhb_loop+0x40/0x90 [ 149.316806][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.316818][T10167] RIP: 0033:0x7f094a39df99 [ 149.316830][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.316842][T10167] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.316855][T10167] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 149.316863][T10167] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 149.316870][T10167] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 149.316877][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.316884][T10167] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 149.316899][T10167] [ 149.316979][T10167] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 149.584160][T10177] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 149.683340][T10175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1412'. [ 149.965526][T10206] comedi comedi0: Minor -4 is invalid! [ 149.981769][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.552802][T10227] syzkaller0: entered promiscuous mode [ 150.554449][T10227] syzkaller0: entered allmulticast mode [ 150.839942][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 150.839967][ T42] audit: type=1400 audit(1785419348.082:759): avc: denied { write } for pid=10239 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.970788][T10253] syzkaller0: entered promiscuous mode [ 150.972527][T10253] syzkaller0: entered allmulticast mode [ 151.290531][T10262] No control pipe specified [ 151.340713][T10264] FAULT_INJECTION: forcing a failure. [ 151.340713][T10264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.345210][T10264] CPU: 2 UID: 0 PID: 10264 Comm: syz.3.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.345229][T10264] Tainted: [L]=SOFTLOCKUP [ 151.345234][T10264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.345242][T10264] Call Trace: [ 151.345256][T10264] [ 151.345261][T10264] dump_stack_lvl+0x100/0x190 [ 151.345327][T10264] should_fail_ex.cold+0x5/0xa [ 151.345359][T10264] _copy_from_iter+0x1f4/0x1690 [ 151.345403][T10264] ? __pfx__copy_from_iter+0x10/0x10 [ 151.345419][T10264] ? sock_has_perm+0x25a/0x2f0 [ 151.345436][T10264] ? __pfx_sock_has_perm+0x10/0x10 [ 151.345485][T10264] hci_sock_sendmsg+0x4a1/0x2620 [ 151.345540][T10264] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 151.345553][T10264] ? selinux_socket_sendmsg+0x198/0x2f0 [ 151.345573][T10264] sock_write_iter+0x53a/0x5b0 [ 151.345617][T10264] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 151.345631][T10264] ? __pfx_sock_write_iter+0x10/0x10 [ 151.345652][T10264] ? bpf_lsm_file_permission+0x9/0x10 [ 151.345679][T10264] ? security_file_permission+0x76/0x210 [ 151.345696][T10264] ? rw_verify_area+0xce/0x6d0 [ 151.345729][T10264] vfs_write+0x6ac/0x1050 [ 151.345755][T10264] ? __pfx_sock_write_iter+0x10/0x10 [ 151.345773][T10264] ? __pfx_vfs_write+0x10/0x10 [ 151.345790][T10264] ? find_held_lock+0x2b/0x80 [ 151.345824][T10264] ksys_write+0x1f8/0x250 [ 151.345842][T10264] ? __pfx_ksys_write+0x10/0x10 [ 151.345865][T10264] do_syscall_64+0x115/0x870 [ 151.345891][T10264] ? clear_bhb_loop+0x40/0x90 [ 151.345906][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.345918][T10264] RIP: 0033:0x7f68aaf9df99 [ 151.345929][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.345941][T10264] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.345960][T10264] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 151.345968][T10264] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000016 [ 151.345975][T10264] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 151.345982][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.345989][T10264] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 151.346004][T10264] [ 151.846563][T10270] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 151.924719][T10277] xt_hashlimit: size too large, truncated to 1048576 [ 151.978896][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 152.527138][T10270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.562169][T10280] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 152.698491][T10274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.702041][T10274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.704147][T10274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.708471][T10274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.783795][T10291] FAULT_INJECTION: forcing a failure. [ 152.783795][T10291] name failslab, interval 1, probability 0, space 0, times 93 [ 152.788116][T10288] FAULT_INJECTION: forcing a failure. [ 152.788116][T10288] name failslab, interval 1, probability 0, space 0, times 93 [ 152.790400][T10291] CPU: 1 UID: 0 PID: 10291 Comm: syz.4.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.790427][T10291] Tainted: [L]=SOFTLOCKUP [ 152.790433][T10291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.790442][T10291] Call Trace: [ 152.790448][T10291] [ 152.790455][T10291] dump_stack_lvl+0x100/0x190 [ 152.790483][T10291] should_fail_ex.cold+0x5/0xa [ 152.790505][T10291] should_failslab+0xc2/0x120 [ 152.790529][T10291] kmem_cache_alloc_noprof+0x91/0x6a0 [ 152.790550][T10291] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 152.790578][T10291] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 152.790603][T10291] mmu_topup_memory_caches+0x25/0x170 [ 152.790628][T10291] kvm_mmu_load+0xe2/0x2570 [ 152.790650][T10291] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 152.790667][T10291] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 152.790687][T10291] ? __pfx_kvm_mmu_load+0x10/0x10 [ 152.790708][T10291] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 152.790728][T10291] ? kvm_check_and_inject_events+0x873/0x12a0 [ 152.790751][T10291] ? record_steal_time+0x3a0/0xbb0 [ 152.790891][T10291] vcpu_run+0x3aaa/0x5de0 [ 152.790925][T10291] ? __pfx_vcpu_run+0x10/0x10 [ 152.790956][T10291] ? rcu_is_watching+0x12/0xc0 [ 152.790986][T10291] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 152.791010][T10291] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 152.791041][T10291] kvm_vcpu_ioctl+0x730/0x1700 [ 152.791063][T10291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.791082][T10291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.791117][T10291] ? do_vfs_ioctl+0x226/0x13e0 [ 152.791142][T10291] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.791167][T10291] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 152.791202][T10291] ? __fget_files+0x215/0x3d0 [ 152.791219][T10291] ? hook_file_ioctl_common+0x140/0x440 [ 152.791244][T10291] ? selinux_file_ioctl+0x13b/0x290 [ 152.791277][T10291] ? selinux_file_ioctl+0xb6/0x290 [ 152.791303][T10291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.791324][T10291] __x64_sys_ioctl+0x18e/0x210 [ 152.791349][T10291] do_syscall_64+0x115/0x870 [ 152.791370][T10291] ? clear_bhb_loop+0x40/0x90 [ 152.791391][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.791409][T10291] RIP: 0033:0x7fc727d9df99 [ 152.791424][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.791440][T10291] RSP: 002b:00007fc728cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.791458][T10291] RAX: ffffffffffffffda RBX: 00007fc728025fa0 RCX: 00007fc727d9df99 [ 152.791469][T10291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 152.791480][T10291] RBP: 00007fc728cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 152.791491][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.791501][T10291] R13: 00007fc728026038 R14: 00007fc728025fa0 R15: 00007ffe8ec42e38 [ 152.791525][T10291] [ 152.879260][T10288] CPU: 2 UID: 0 PID: 10288 Comm: syz.0.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.879290][T10288] Tainted: [L]=SOFTLOCKUP [ 152.879297][T10288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.879307][T10288] Call Trace: [ 152.879313][T10288] [ 152.879323][T10288] dump_stack_lvl+0x100/0x190 [ 152.879353][T10288] should_fail_ex.cold+0x5/0xa [ 152.879376][T10288] should_failslab+0xc2/0x120 [ 152.879400][T10288] kmem_cache_alloc_noprof+0x91/0x6a0 [ 152.879423][T10288] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 152.879451][T10288] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 152.879479][T10288] mmu_topup_memory_caches+0x25/0x170 [ 152.879506][T10288] kvm_mmu_load+0xe2/0x2570 [ 152.879529][T10288] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 152.879549][T10288] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 152.879570][T10288] ? __pfx_kvm_mmu_load+0x10/0x10 [ 152.879592][T10288] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 152.879614][T10288] ? kvm_check_and_inject_events+0x873/0x12a0 [ 152.879639][T10288] ? record_steal_time+0x3a0/0xbb0 [ 152.879660][T10288] vcpu_run+0x3aaa/0x5de0 [ 152.879696][T10288] ? __pfx_vcpu_run+0x10/0x10 [ 152.879730][T10288] ? rcu_is_watching+0x12/0xc0 [ 152.879761][T10288] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 152.879803][T10288] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 152.879836][T10288] kvm_vcpu_ioctl+0x730/0x1700 [ 152.879859][T10288] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.879880][T10288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.879902][T10288] ? do_vfs_ioctl+0x226/0x13e0 [ 152.879943][T10288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.879969][T10288] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 152.880007][T10288] ? __fget_files+0x215/0x3d0 [ 152.880024][T10288] ? hook_file_ioctl_common+0x140/0x440 [ 152.880051][T10288] ? selinux_file_ioctl+0x13b/0x290 [ 152.880077][T10288] ? selinux_file_ioctl+0xb6/0x290 [ 152.880105][T10288] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.880131][T10288] __x64_sys_ioctl+0x18e/0x210 [ 152.880157][T10288] do_syscall_64+0x115/0x870 [ 152.880179][T10288] ? clear_bhb_loop+0x40/0x90 [ 152.880202][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.880219][T10288] RIP: 0033:0x7f23f659df99 [ 152.880236][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.880254][T10288] RSP: 002b:00007f23f74a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.880272][T10288] RAX: ffffffffffffffda RBX: 00007f23f6825fa0 RCX: 00007f23f659df99 [ 152.880283][T10288] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 152.880295][T10288] RBP: 00007f23f74a2090 R08: 0000000000000000 R09: 0000000000000000 [ 152.880305][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.880315][T10288] R13: 00007f23f6826038 R14: 00007f23f6825fa0 R15: 00007ffe616cb3f8 [ 152.880339][T10288] [ 152.894314][ T42] audit: type=1400 audit(1785419350.132:760): avc: denied { create } for pid=10294 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 152.998985][ T42] audit: type=1400 audit(1785419350.142:761): avc: denied { sys_admin } for pid=10294 comm="syz.3.1453" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 153.143624][T10304] FAULT_INJECTION: forcing a failure. [ 153.143624][T10304] name failslab, interval 1, probability 0, space 0, times 91 [ 153.148164][T10304] CPU: 2 UID: 0 PID: 10304 Comm: syz.1.1457 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.148191][T10304] Tainted: [L]=SOFTLOCKUP [ 153.148198][T10304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.148209][T10304] Call Trace: [ 153.148216][T10304] [ 153.148224][T10304] dump_stack_lvl+0x100/0x190 [ 153.148260][T10304] should_fail_ex.cold+0x5/0xa [ 153.148284][T10304] should_failslab+0xc2/0x120 [ 153.148308][T10304] __kmalloc_cache_noprof+0x91/0x6c0 [ 153.148335][T10304] ? __tcf_proto_lookup_ops+0xcf/0x100 [ 153.148387][T10304] ? route4_init+0x3f/0xa0 [ 153.148426][T10304] ? __pfx_route4_classify+0x10/0x10 [ 153.148452][T10304] route4_init+0x3f/0xa0 [ 153.148487][T10304] tc_new_tfilter+0x105c/0x24a0 [ 153.148515][T10304] ? avc_has_perm_noaudit+0xf0/0x3b0 [ 153.148536][T10304] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 153.148559][T10304] ? __pfx_tc_new_tfilter+0x10/0x10 [ 153.148599][T10304] ? find_held_lock+0x2b/0x80 [ 153.148630][T10304] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 153.148658][T10304] ? __pfx_tc_new_tfilter+0x10/0x10 [ 153.148678][T10304] rtnetlink_rcv_msg+0x95e/0xe90 [ 153.148703][T10304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.148734][T10304] ? ref_tracker_free+0x37e/0x6c0 [ 153.148766][T10304] netlink_rcv_skb+0x159/0x420 [ 153.148787][T10304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.148814][T10304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.148843][T10304] ? netlink_deliver_tap+0x1ae/0xcc0 [ 153.148876][T10304] netlink_unicast+0x585/0x850 [ 153.148897][T10304] ? __pfx_netlink_unicast+0x10/0x10 [ 153.148923][T10304] netlink_sendmsg+0x8b0/0xda0 [ 153.148946][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.148967][T10304] ? selinux_socket_sendmsg+0x198/0x2f0 [ 153.148999][T10304] ____sys_sendmsg+0xa4d/0xbe0 [ 153.149026][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.149047][T10304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.149087][T10304] ___sys_sendmsg+0x190/0x1e0 [ 153.149117][T10304] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.149143][T10304] ? __lock_acquire+0x49f/0x1a40 [ 153.149166][T10304] ? get_pid_task+0x106/0x250 [ 153.149223][T10304] __sys_sendmsg+0x160/0x210 [ 153.149254][T10304] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.149293][T10304] do_syscall_64+0x115/0x870 [ 153.149315][T10304] ? clear_bhb_loop+0x40/0x90 [ 153.149338][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.149359][T10304] RIP: 0033:0x7f094a39df99 [ 153.149376][T10304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.149394][T10304] RSP: 002b:00007f094b319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.149414][T10304] RAX: ffffffffffffffda RBX: 00007f094a625fa0 RCX: 00007f094a39df99 [ 153.149427][T10304] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000007 [ 153.149465][T10304] RBP: 00007f094b319090 R08: 0000000000000000 R09: 0000000000000000 [ 153.149478][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.149489][T10304] R13: 00007f094a626038 R14: 00007f094a625fa0 R15: 00007ffc81b86768 [ 153.149515][T10304] [ 153.635022][T10322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.639805][T10322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.641772][T10322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.643748][T10322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.954590][ T41] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 154.104792][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 154.110401][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.113508][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.118007][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.122503][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.127699][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.131988][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.136632][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.141867][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 154.146555][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.149647][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.153648][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.158401][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.162950][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.167316][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.171545][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.176721][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 154.177783][ T42] audit: type=1400 audit(1785419351.422:762): avc: denied { lock } for pid=10328 comm="syz.4.1464" path="socket:[44579]" dev="sockfs" ino=44579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 154.180546][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.190703][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.194967][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.199221][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.203584][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.207735][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.212047][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.217168][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 154.222849][ T41] usb 6-1: string descriptor 0 read error: -22 [ 154.225488][ T41] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.228659][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.242184][ T41] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.273053][T10338] syzkaller0: entered promiscuous mode [ 154.275244][T10338] syzkaller0: entered allmulticast mode [ 154.287280][T10337] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 154.469672][ T42] audit: type=1400 audit(1785419351.712:763): avc: denied { accept } for pid=10346 comm="syz.3.1471" lport=55318 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.477466][ T42] audit: type=1400 audit(1785419351.712:764): avc: denied { write } for pid=10346 comm="syz.3.1471" path="socket:[44598]" dev="sockfs" ino=44598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 154.485173][ T42] audit: type=1400 audit(1785419351.712:765): avc: denied { setopt } for pid=10346 comm="syz.3.1471" lport=55318 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 154.497098][T10345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.499619][T10345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.507713][T10345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.510271][T10345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.575713][T10353] i2c i2c-0: new_device: Instantiated device stusb160x at 0x48 [ 154.584036][T10353] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 154.588293][T10353] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 154.627991][T10353] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 154.645139][ T42] audit: type=1400 audit(1785419351.882:766): avc: denied { mount } for pid=10356 comm="syz.3.1475" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.645970][T10357] FAULT_INJECTION: forcing a failure. [ 154.645970][T10357] name failslab, interval 1, probability 0, space 0, times 90 [ 154.652013][ T42] audit: type=1400 audit(1785419351.892:767): avc: denied { append } for pid=10356 comm="syz.3.1475" name="uprobe_events" dev="tracefs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 154.655777][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.3.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.655797][T10357] Tainted: [L]=SOFTLOCKUP [ 154.655805][T10357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.655812][T10357] Call Trace: [ 154.655817][T10357] [ 154.655822][T10357] dump_stack_lvl+0x100/0x190 [ 154.655843][T10357] should_fail_ex.cold+0x5/0xa [ 154.655859][T10357] should_failslab+0xc2/0x120 [ 154.655875][T10357] __kmalloc_noprof+0xfc/0x820 [ 154.655888][T10357] ? kasan_save_track+0x14/0x30 [ 154.655901][T10357] ? alloc_trace_uprobe+0x86/0x370 [ 154.655920][T10357] alloc_trace_uprobe+0x86/0x370 [ 154.655937][T10357] __trace_uprobe_create+0x673/0x22f0 [ 154.655958][T10357] ? __pfx___trace_uprobe_create+0x10/0x10 [ 154.655975][T10357] ? __kmalloc_noprof+0x343/0x820 [ 154.655988][T10357] ? argv_split+0x173/0x420 [ 154.656013][T10357] ? argv_split+0x359/0x420 [ 154.656026][T10357] ? __pfx___trace_uprobe_create+0x10/0x10 [ 154.656042][T10357] trace_probe_create+0xef/0x100 [ 154.656056][T10357] ? __pfx_trace_probe_create+0x10/0x10 [ 154.656074][T10357] dyn_event_create+0x46/0x70 [ 154.656093][T10357] create_or_delete_trace_uprobe+0x5a/0xb0 [ 154.656111][T10357] trace_parse_run_command+0x1ab/0x3b0 [ 154.656125][T10357] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 154.656143][T10357] vfs_write+0x2aa/0x1050 [ 154.656164][T10357] ? __pfx_probes_write+0x10/0x10 [ 154.656181][T10357] ? __pfx_vfs_write+0x10/0x10 [ 154.656199][T10357] ? __fget_files+0x215/0x3d0 [ 154.656214][T10357] ? __fget_files+0x21f/0x3d0 [ 154.656230][T10357] ksys_write+0x12a/0x250 [ 154.656248][T10357] ? __pfx_ksys_write+0x10/0x10 [ 154.656270][T10357] do_syscall_64+0x115/0x870 [ 154.656283][T10357] ? clear_bhb_loop+0x40/0x90 [ 154.656297][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.656310][T10357] RIP: 0033:0x7f68aaf9df99 [ 154.656321][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.656333][T10357] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.656344][T10357] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 154.656352][T10357] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 154.656358][T10357] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 154.656365][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.656372][T10357] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 154.656387][T10357] [ 154.656440][T10357] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 154.663749][ T42] audit: type=1400 audit(1785419351.892:768): avc: denied { map } for pid=10352 comm="syz.4.1473" path="/proc/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=43002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 154.666308][T10357] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 154.666325][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.3.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.666342][T10357] Tainted: [L]=SOFTLOCKUP [ 154.666347][T10357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.666355][T10357] RIP: 0010:path_put+0x22/0x70 [ 154.771394][T10357] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 a3 61 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 154.777148][T10357] RSP: 0018:ffffc90004ed7a68 EFLAGS: 00010203 [ 154.778975][T10357] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 154.781408][T10357] RDX: 0000000000000008 RSI: ffffffff8291fe9d RDI: 0000000000000044 [ 154.783761][T10357] RBP: ffffc90004ed7bf8 R08: 0000000000000001 R09: 0000000000000000 [ 154.786140][T10357] R10: ffffffff9b74bc40 R11: 0000000000000000 R12: ffff88805719e488 [ 154.788518][T10357] R13: ffff88805e5088a0 R14: ffff88803dbc0000 R15: fffffffffffffff4 [ 154.791408][T10357] FS: 00007f68abd816c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 154.794096][T10357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.796070][T10357] CR2: 00007f68abd80ff8 CR3: 0000000042b1a000 CR4: 0000000000352ef0 [ 154.798439][T10357] Call Trace: [ 154.799567][T10357] [ 154.800501][T10357] __trace_uprobe_create+0x96d/0x22f0 [ 154.802140][T10357] ? __pfx___trace_uprobe_create+0x10/0x10 [ 154.803941][T10357] ? __kmalloc_noprof+0x343/0x820 [ 154.805466][T10357] ? argv_split+0x173/0x420 [ 154.806833][T10357] ? argv_split+0x359/0x420 [ 154.808209][T10357] ? __pfx___trace_uprobe_create+0x10/0x10 [ 154.810229][T10357] trace_probe_create+0xef/0x100 [ 154.811721][T10357] ? __pfx_trace_probe_create+0x10/0x10 [ 154.813370][T10357] dyn_event_create+0x46/0x70 [ 154.814846][T10357] create_or_delete_trace_uprobe+0x5a/0xb0 [ 154.816592][T10357] trace_parse_run_command+0x1ab/0x3b0 [ 154.818261][T10357] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 154.820328][T10357] vfs_write+0x2aa/0x1050 [ 154.822423][T10357] ? __pfx_probes_write+0x10/0x10 [ 154.824442][T10357] ? __pfx_vfs_write+0x10/0x10 [ 154.825912][T10357] ? __fget_files+0x215/0x3d0 [ 154.827323][T10357] ? __fget_files+0x21f/0x3d0 [ 154.828745][T10357] ksys_write+0x12a/0x250 [ 154.830089][T10357] ? __pfx_ksys_write+0x10/0x10 [ 154.831559][T10357] do_syscall_64+0x115/0x870 [ 154.832980][T10357] ? clear_bhb_loop+0x40/0x90 [ 154.834441][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.836227][T10357] RIP: 0033:0x7f68aaf9df99 [ 154.837588][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.843363][T10357] RSP: 002b:00007f68abd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.845905][T10357] RAX: ffffffffffffffda RBX: 00007f68ab225fa0 RCX: 00007f68aaf9df99 [ 154.848306][T10357] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 154.850866][T10357] RBP: 00007f68abd81090 R08: 0000000000000000 R09: 0000000000000000 [ 154.853250][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.855688][T10357] R13: 00007f68ab226038 R14: 00007f68ab225fa0 R15: 00007ffc86ddebe8 [ 154.858046][T10357] [ 154.859010][T10357] Modules linked in: [ 154.860893][T10357] ---[ end trace 0000000000000000 ]--- [ 154.865918][T10357] RIP: 0010:path_put+0x22/0x70 [ 154.867920][T10357] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 a3 61 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 154.875527][T10357] RSP: 0018:ffffc90004ed7a68 EFLAGS: 00010203 [ 154.878246][T10357] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 154.881502][T10357] RDX: 0000000000000008 RSI: ffffffff8291fe9d RDI: 0000000000000044 [ 154.884770][T10357] RBP: ffffc90004ed7bf8 R08: 0000000000000001 R09: 0000000000000000 [ 154.887541][T10357] R10: ffffffff9b74bc40 R11: 0000000000000000 R12: ffff88805719e488 [ 154.889994][T10357] R13: ffff88805e5088a0 R14: ffff88803dbc0000 R15: fffffffffffffff4 [ 154.892370][T10357] FS: 00007f68abd816c0(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 154.895207][T10357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.897262][T10357] CR2: 00007fc728025fac CR3: 0000000042b1a000 CR4: 0000000000352ef0 [ 154.899761][T10357] DR0: 0000000000000000 DR1: 0000000000002800 DR2: 0000000000000000 [ 154.902215][T10357] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 154.904998][T10357] Kernel panic - not syncing: Fatal exception [ 154.907549][T10357] Kernel Offset: disabled [ 154.908843][T10357] Rebooting in 86400 seconds..