last executing test programs: 7.041230559s ago: executing program 3 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffc}]}) (fail_nth: 2) 6.853422122s ago: executing program 3 (id=1366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0xfdef, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaa2aa8864abaa00fd27a700f8"], 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000067c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1c00200084000000000000000000000aa10010000000840000000600000009000400"], 0x2c, 0x4004}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {&(0x7f0000004780)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000004c80), 0x0, 0x0, 0x0, 0x4000094}, {&(0x7f0000005340)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000006780), 0x0, 0x0, 0x0, 0x80}], 0x5, 0x4044000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sync() syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) open(0x0, 0x44ac42, 0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x200008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 4.800651204s ago: executing program 2 (id=1375): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1b4, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc8, 0x1, {{'sha1\x00'}, 0x400, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6e99a74a5f55ad725a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ba9fff4a2475f0fa2502ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83ac887a61b5606d125"}}]}, 0x1b4}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 4.579870174s ago: executing program 2 (id=1376): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb", 0x18}], 0x1}}], 0x1, 0x22008805) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) unshare(0x40000000) 4.191329363s ago: executing program 1 (id=1378): prctl$PR_MCE_KILL(0x43, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYBLOB="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", @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x115100, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000080000007b0800000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000122fbfc650b6ac2c0000000000e9cea439d39c8c003963307e698a6a4cd6bf597cbf84522aa0d9fca771fb80b57b79c4a5a8ea98971f316fbe2ae886b9d874c323213bf16f55a9521d3e764381e56e1cff6d76fe90b6f2869656b9d65250b3fad7c4fb91d936f258747032bd17cae5be2c99031925da95a46a5653267d8c2b78d10e9b09cfa8d3fe946cb499"], 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000880), 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x2000000fffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x15], 0x80a0000, 0x80284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.035414238s ago: executing program 1 (id=1380): socket$netlink(0x10, 0x3, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c20000000800450000b040000000001190780000000000000002000000000000007801000000000000007b4b143b7461fd777b1c012bd14efb9f49f4db8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00200000000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r3, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x380f64628357c4d4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000006540)={0x2020}, 0xfffffce2) fspick(r6, &(0x7f0000000000)='./sys_mount\x00', 0x0) io_setup(0x7f, &(0x7f0000001440)=0x0) syz_io_uring_setup(0x41ee, &(0x7f00000006c0)={0x0, 0x7b0b, 0x20, 0x5, 0x71}, &(0x7f00000005c0), &(0x7f0000000380), &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0) 3.695646727s ago: executing program 3 (id=1381): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e3002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40043d0d, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) r3 = io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x800, 0x3, 0x23f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r6) syz_usb_connect$uac2(0x0, 0xa4, &(0x7f0000000100)=ANY=[], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x6, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48a, 0x0, 0x10004}]}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) 3.430665517s ago: executing program 2 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f000081d000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, 0x6, &(0x7f00000000c0), 0x0, 0xfff, 0x0, 0x8, 0x30, 0x1}) 2.990728122s ago: executing program 1 (id=1386): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb", 0x18}], 0x1}}], 0x1, 0x22008805) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) unshare(0x40000000) 2.744734655s ago: executing program 2 (id=1389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 2.595997831s ago: executing program 2 (id=1390): syz_emit_ethernet(0xa2, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x6c, 0x3c, 0x0, @empty, @mcast2, {[@dstopts={0x0, 0x3, '\x00', [@ra, @hao={0xc9, 0x10, @mcast1}, @pad1]}]}}}}}, 0x0) 2.501452878s ago: executing program 2 (id=1391): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0xfdef, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaa2aa8864abaa00fd27a700f8"], 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000067c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1c00200084000000000000000000000aa10010000000840000000600000009000400"], 0x2c, 0x4004}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {&(0x7f0000004780)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000004c80), 0x0, 0x0, 0x0, 0x4000094}, {&(0x7f0000005340)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000006780), 0x0, 0x0, 0x0, 0x80}], 0x5, 0x4044000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sync() syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) open(0x0, 0x44ac42, 0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x200008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.914944192s ago: executing program 1 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.718032207s ago: executing program 0 (id=1394): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f0000000880)={'pimreg\x00', @ifru_hwaddr}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0xa, r5, 0x0, r4}) r6 = socket$inet(0xa, 0x803, 0x101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000240)={0x4, 0x0, [{0x1, 0x6, 0x7, 0x0, 0x9e60}, {0x5e2796afef1a2f31, 0x7, 0x0, 0x9, 0x1, 0x1, 0x1}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x5, 0x5, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xfffffffc}]}) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r11, &(0x7f0000004200)='t', 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 1.431834214s ago: executing program 0 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000280)={'wlan1\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1}) 1.389552899s ago: executing program 0 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) (fail_nth: 2) 1.087561635s ago: executing program 1 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000280)={'wlan1\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1}) (fail_nth: 2) 1.011972675s ago: executing program 0 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xa0000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f000081d000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, 0x6, &(0x7f00000000c0)=[{0x101, 0x100, 0x5}], 0x1, 0xfff, 0x0, 0x8, 0x30, 0x1}) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x8000000, 0x4}) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x340c3}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33) 811.812764ms ago: executing program 1 (id=1399): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb", 0x18}], 0x1}}], 0x1, 0x22008805) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) unshare(0x40000000) openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="d6bb6342a80750a820d4574d495a8b1a0e9eafd929898784d1c1d285171fc63ad77890a104a5fc70649750e5dd41358f99d15ca83f3be3882426f196330eab09e33c0670b5454c5063a287fb4f988c4e372dbe253eda85a10f6b08b83022bded1238a3c900eb08d554ab165d7345a94db1323a4206db17850ad3eaeefc146ffdd50d604df588a5874398bef7285178e7307a25d398de16d596e7c7b6d71cca9b8b859399d2a09963c186eb611859e86a188d32da20a208ce7ada4fc4952e", @ANYRES32=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x8a, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r7, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'veth1_vlan\x00', 0x400}) 589.610837ms ago: executing program 3 (id=1400): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 522.022567ms ago: executing program 0 (id=1401): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xb00, 0x12) 329.109624ms ago: executing program 3 (id=1402): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0788"], 0x44}, 0x1, 0x0, 0x0, 0x20040615}, 0x48050) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f00000009c0)="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", 0xfe) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0xc9) 99.392322ms ago: executing program 3 (id=1403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x19b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x200, 0x3, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) write(r1, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) r3 = dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0xe) pipe(&(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x48) splice(r4, 0x0, r6, 0x0, 0x3000, 0x100000000000000d) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNDCTL_MIDI_INFO(r7, 0xc074510c, &(0x7f0000000140)={"37ce7f07583d8ee176f1ff84573b93f549823ebb845077172f2217d45353", 0x1, 0x0, 0x8, [0x2, 0x7, 0x6, 0x2, 0xf675, 0x8, 0x8, 0x725, 0x2, 0x80000000, 0x1, 0x1d8, 0x4, 0x7, 0x5, 0x8, 0x42a70c84, 0x87]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x1c) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000100)={{0x0, 0xb}, 0x100, './file0\x00'}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 0s ago: executing program 0 (id=1404): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x3e) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) kernel console output (not intermixed with test programs): 8867] ? __pfx_setup_net+0x10/0x10 [ 154.179537][ T8867] copy_net_ns+0x345/0x7a0 [ 154.179555][ T8867] create_new_namespaces+0x3ea/0xac0 [ 154.179577][ T8867] unshare_nsproxy_namespaces+0xf2/0x220 [ 154.179596][ T8867] ksys_unshare+0x4a2/0xa70 [ 154.179609][ T8867] ? __pfx_ksys_unshare+0x10/0x10 [ 154.179626][ T8867] __ia32_sys_unshare+0x30/0x40 [ 154.179638][ T8867] __do_fast_syscall_32+0x13a/0x8b0 [ 154.179656][ T8867] ? lockdep_hardirqs_on+0x7d/0x110 [ 154.179674][ T8867] do_fast_syscall_32+0x32/0x70 [ 154.179685][ T8867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.179699][ T8867] RIP: 0023:0xf7f54fec [ 154.179713][ T8867] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 154.179718][ T8867] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 154.179730][ T8867] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 154.179738][ T8867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.179745][ T8867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.179752][ T8867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.179758][ T8867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.179773][ T8867] [ 154.831417][ T8879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.977'. [ 155.454311][ T8892] FAULT_INJECTION: forcing a failure. [ 155.454311][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 155.454333][ T8892] CPU: 2 UID: 0 PID: 8892 Comm: syz.3.979 Not tainted syzkaller #0 PREEMPT(full) [ 155.454347][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.454355][ T8892] Call Trace: [ 155.454359][ T8892] [ 155.454365][ T8892] dump_stack_lvl+0x100/0x190 [ 155.454386][ T8892] should_fail_ex.cold+0x5/0xa [ 155.454403][ T8892] should_failslab+0xc2/0x120 [ 155.454421][ T8892] __kmalloc_noprof+0xfc/0x840 [ 155.454438][ T8892] ? ops_init+0x77/0x5f0 [ 155.454455][ T8892] ops_init+0x77/0x5f0 [ 155.454470][ T8892] setup_net+0x118/0x3a0 [ 155.454483][ T8892] ? __pfx_setup_net+0x10/0x10 [ 155.454502][ T8892] copy_net_ns+0x345/0x7a0 [ 155.454518][ T8892] create_new_namespaces+0x3ea/0xac0 [ 155.454539][ T8892] unshare_nsproxy_namespaces+0xf2/0x220 [ 155.454558][ T8892] ksys_unshare+0x4a2/0xa70 [ 155.454578][ T8892] ? __pfx_ksys_unshare+0x10/0x10 [ 155.454596][ T8892] __ia32_sys_unshare+0x30/0x40 [ 155.454609][ T8892] __do_fast_syscall_32+0x13a/0x8b0 [ 155.454629][ T8892] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.454648][ T8892] do_fast_syscall_32+0x32/0x70 [ 155.454660][ T8892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.454675][ T8892] RIP: 0023:0xf7f54fec [ 155.454688][ T8892] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 155.454693][ T8892] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 155.454705][ T8892] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 155.454712][ T8892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.454718][ T8892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.454725][ T8892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.454732][ T8892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.454747][ T8892] [ 155.661514][ T8893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.830194][ T8899] tmpfs: Bad value for 'mpol' [ 156.083367][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 156.171636][ T8908] FAULT_INJECTION: forcing a failure. [ 156.171636][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 156.171668][ T8908] CPU: 3 UID: 0 PID: 8908 Comm: syz.1.984 Not tainted syzkaller #0 PREEMPT(full) [ 156.171694][ T8908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.171706][ T8908] Call Trace: [ 156.171713][ T8908] [ 156.171721][ T8908] dump_stack_lvl+0x100/0x190 [ 156.171754][ T8908] should_fail_ex.cold+0x5/0xa [ 156.171782][ T8908] should_failslab+0xc2/0x120 [ 156.171814][ T8908] __kmalloc_noprof+0xfc/0x840 [ 156.171842][ T8908] ? __register_sysctl_table+0xac/0x1650 [ 156.171880][ T8908] __register_sysctl_table+0xac/0x1650 [ 156.171915][ T8908] ? lock_acquire+0x1d1/0x380 [ 156.171947][ T8908] ? __pfx___register_sysctl_table+0x10/0x10 [ 156.171977][ T8908] ? is_module_address+0x5f/0xf0 [ 156.171997][ T8908] ? is_module_address+0x5f/0xf0 [ 156.172024][ T8908] register_net_sysctl_sz+0x325/0x420 [ 156.172047][ T8908] ? __asan_memcpy+0x3c/0x60 [ 156.172074][ T8908] vrf_netns_init+0x152/0x1f0 [ 156.172106][ T8908] ? __pfx_vrf_netns_init+0x10/0x10 [ 156.172134][ T8908] ops_init+0x1e2/0x5f0 [ 156.172166][ T8908] setup_net+0x118/0x3a0 [ 156.172192][ T8908] ? __pfx_setup_net+0x10/0x10 [ 156.172224][ T8908] copy_net_ns+0x345/0x7a0 [ 156.172270][ T8908] create_new_namespaces+0x3ea/0xac0 [ 156.172306][ T8908] unshare_nsproxy_namespaces+0xf2/0x220 [ 156.172338][ T8908] ksys_unshare+0x4a2/0xa70 [ 156.172362][ T8908] ? __pfx_ksys_unshare+0x10/0x10 [ 156.172393][ T8908] __ia32_sys_unshare+0x30/0x40 [ 156.172413][ T8908] __do_fast_syscall_32+0x13a/0x8b0 [ 156.172444][ T8908] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.172475][ T8908] do_fast_syscall_32+0x32/0x70 [ 156.172494][ T8908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.172519][ T8908] RIP: 0023:0xf73fefec [ 156.172540][ T8908] Code: Unable to access opcode bytes at 0xf73fefc2. [ 156.172550][ T8908] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 156.172569][ T8908] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 156.172583][ T8908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.172594][ T8908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.172606][ T8908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.172619][ T8908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.172647][ T8908] [ 157.081832][ T8929] FAULT_INJECTION: forcing a failure. [ 157.081832][ T8929] name failslab, interval 1, probability 0, space 0, times 0 [ 157.081855][ T8929] CPU: 3 UID: 0 PID: 8929 Comm: syz.0.996 Not tainted syzkaller #0 PREEMPT(full) [ 157.081869][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.081876][ T8929] Call Trace: [ 157.081880][ T8929] [ 157.081886][ T8929] dump_stack_lvl+0x100/0x190 [ 157.081906][ T8929] should_fail_ex.cold+0x5/0xa [ 157.081922][ T8929] should_failslab+0xc2/0x120 [ 157.081942][ T8929] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 157.081958][ T8929] ? create_new_namespaces+0x3ea/0xac0 [ 157.081975][ T8929] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 157.081992][ T8929] ? sock_alloc_inode+0x26/0x2c0 [ 157.082008][ T8929] ? __pfx_sock_alloc_inode+0x10/0x10 [ 157.082024][ T8929] sock_alloc_inode+0x26/0x2c0 [ 157.082038][ T8929] ? __pfx_sock_alloc_inode+0x10/0x10 [ 157.082052][ T8929] alloc_inode+0x68/0x250 [ 157.082064][ T8929] sock_alloc+0x44/0x280 [ 157.082077][ T8929] ? security_socket_create+0x7f/0x250 [ 157.082097][ T8929] sock_create_lite+0x82/0x120 [ 157.082114][ T8929] __netlink_kernel_create+0xbd/0x750 [ 157.082132][ T8929] ? __lock_acquire+0x5c0/0x1f40 [ 157.082150][ T8929] ? __pfx___netlink_kernel_create+0x10/0x10 [ 157.082172][ T8929] ? __pfx_diag_net_init+0x10/0x10 [ 157.082184][ T8929] diag_net_init+0xbd/0x140 [ 157.082196][ T8929] ? __pfx_diag_net_init+0x10/0x10 [ 157.082207][ T8929] ? find_held_lock+0x2b/0x80 [ 157.082222][ T8929] ? __pfx_sock_diag_rcv+0x10/0x10 [ 157.082234][ T8929] ? __pfx_sock_diag_bind+0x10/0x10 [ 157.082246][ T8929] ? __raw_spin_lock_init+0x3a/0x110 [ 157.082259][ T8929] ? __pfx_cma_init_net+0x10/0x10 [ 157.082273][ T8929] ops_init+0x1e2/0x5f0 [ 157.082288][ T8929] setup_net+0x118/0x3a0 [ 157.082302][ T8929] ? __pfx_setup_net+0x10/0x10 [ 157.082319][ T8929] copy_net_ns+0x345/0x7a0 [ 157.082335][ T8929] create_new_namespaces+0x3ea/0xac0 [ 157.082356][ T8929] unshare_nsproxy_namespaces+0xf2/0x220 [ 157.082375][ T8929] ksys_unshare+0x4a2/0xa70 [ 157.082387][ T8929] ? __pfx_ksys_unshare+0x10/0x10 [ 157.082405][ T8929] __ia32_sys_unshare+0x30/0x40 [ 157.082417][ T8929] __do_fast_syscall_32+0x13a/0x8b0 [ 157.082454][ T8929] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.082474][ T8929] do_fast_syscall_32+0x32/0x70 [ 157.082486][ T8929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.082502][ T8929] RIP: 0023:0xf7f34fec [ 157.082517][ T8929] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 157.082522][ T8929] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 157.082534][ T8929] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 157.082541][ T8929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.082548][ T8929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.082554][ T8929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.082561][ T8929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.082576][ T8929] [ 157.772319][ T8938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.962963][ T8950] FAULT_INJECTION: forcing a failure. [ 157.962963][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 157.962994][ T8950] CPU: 2 UID: 0 PID: 8950 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) [ 157.963017][ T8950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.963028][ T8950] Call Trace: [ 157.963036][ T8950] [ 157.963044][ T8950] dump_stack_lvl+0x100/0x190 [ 157.963068][ T8950] should_fail_ex.cold+0x5/0xa [ 157.963097][ T8950] should_failslab+0xc2/0x120 [ 157.963127][ T8950] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.963151][ T8950] ? __pfx_map_id_range_down+0x10/0x10 [ 157.963173][ T8950] ? rcu_is_watching+0x13/0xc0 [ 157.963193][ T8950] ? security_inode_alloc+0x3b/0x2c0 [ 157.963217][ T8950] security_inode_alloc+0x3b/0x2c0 [ 157.963236][ T8950] inode_init_always_gfp+0xc6f/0xfb0 [ 157.963260][ T8950] alloc_inode+0x8e/0x250 [ 157.963279][ T8950] sock_alloc+0x44/0x280 [ 157.963300][ T8950] ? security_socket_create+0x7f/0x250 [ 157.963329][ T8950] sock_create_lite+0x82/0x120 [ 157.963354][ T8950] __netlink_kernel_create+0xbd/0x750 [ 157.963377][ T8950] ? __lock_acquire+0x5c0/0x1f40 [ 157.963403][ T8950] ? __pfx___netlink_kernel_create+0x10/0x10 [ 157.963466][ T8950] ? __pfx_diag_net_init+0x10/0x10 [ 157.963486][ T8950] diag_net_init+0xbd/0x140 [ 157.963507][ T8950] ? __pfx_diag_net_init+0x10/0x10 [ 157.963525][ T8950] ? find_held_lock+0x2b/0x80 [ 157.963546][ T8950] ? __pfx_sock_diag_rcv+0x10/0x10 [ 157.963560][ T8950] ? __pfx_sock_diag_bind+0x10/0x10 [ 157.963573][ T8950] ? __raw_spin_lock_init+0x3a/0x110 [ 157.963588][ T8950] ? __pfx_cma_init_net+0x10/0x10 [ 157.963602][ T8950] ops_init+0x1e2/0x5f0 [ 157.963617][ T8950] setup_net+0x118/0x3a0 [ 157.963631][ T8950] ? __pfx_setup_net+0x10/0x10 [ 157.963648][ T8950] copy_net_ns+0x345/0x7a0 [ 157.963665][ T8950] create_new_namespaces+0x3ea/0xac0 [ 157.963696][ T8950] unshare_nsproxy_namespaces+0xf2/0x220 [ 157.963726][ T8950] ksys_unshare+0x4a2/0xa70 [ 157.963747][ T8950] ? __pfx_ksys_unshare+0x10/0x10 [ 157.963771][ T8950] __ia32_sys_unshare+0x30/0x40 [ 157.963789][ T8950] __do_fast_syscall_32+0x13a/0x8b0 [ 157.963817][ T8950] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.963846][ T8950] do_fast_syscall_32+0x32/0x70 [ 157.963859][ T8950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.963881][ T8950] RIP: 0023:0xf7f34fec [ 157.963902][ T8950] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 157.963910][ T8950] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 157.963928][ T8950] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 157.963939][ T8950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.963949][ T8950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.963957][ T8950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.963964][ T8950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.963990][ T8950] [ 158.419835][ T8955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.602229][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 158.673506][ T8965] FAULT_INJECTION: forcing a failure. [ 158.673506][ T8965] name failslab, interval 1, probability 0, space 0, times 0 [ 158.673527][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz.2.998 Not tainted syzkaller #0 PREEMPT(full) [ 158.673544][ T8965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.673551][ T8965] Call Trace: [ 158.673556][ T8965] [ 158.673561][ T8965] dump_stack_lvl+0x100/0x190 [ 158.673580][ T8965] should_fail_ex.cold+0x5/0xa [ 158.673597][ T8965] should_failslab+0xc2/0x120 [ 158.673616][ T8965] kmem_cache_alloc_noprof+0x92/0x6a0 [ 158.673632][ T8965] ? __lock_acquire+0x5c0/0x1f40 [ 158.673649][ T8965] ? __kernfs_new_node+0xd2/0xa10 [ 158.673671][ T8965] __kernfs_new_node+0xd2/0xa10 [ 158.673691][ T8965] ? __pfx___kernfs_new_node+0x10/0x10 [ 158.673710][ T8965] ? lock_acquire+0x1d1/0x380 [ 158.673726][ T8965] ? kernfs_root+0x23/0x2a0 [ 158.673741][ T8965] ? find_held_lock+0x2b/0x80 [ 158.673755][ T8965] ? kernfs_root+0xee/0x2a0 [ 158.673769][ T8965] ? kernfs_root+0xee/0x2a0 [ 158.673788][ T8965] kernfs_new_node+0x117/0x150 [ 158.673809][ T8965] __kernfs_create_file+0x53/0x350 [ 158.673824][ T8965] sysfs_add_file_mode_ns+0x207/0x3c0 [ 158.673843][ T8965] sysfs_create_file_ns+0x145/0x1e0 [ 158.673858][ T8965] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 158.673873][ T8965] ? class_to_subsys+0x10f/0x150 [ 158.673889][ T8965] ? do_raw_spin_unlock+0x145/0x1e0 [ 158.673904][ T8965] class_create_file_ns+0x3d/0x60 [ 158.673920][ T8965] bond_create_sysfs+0x142/0x200 [ 158.673938][ T8965] bond_net_init+0x178/0x360 [ 158.673954][ T8965] ? __pfx_bond_net_init+0x10/0x10 [ 158.673970][ T8965] ops_init+0x1e2/0x5f0 [ 158.674002][ T8965] setup_net+0x118/0x3a0 [ 158.674019][ T8965] ? __pfx_setup_net+0x10/0x10 [ 158.674049][ T8965] copy_net_ns+0x345/0x7a0 [ 158.674075][ T8965] create_new_namespaces+0x3ea/0xac0 [ 158.674101][ T8965] unshare_nsproxy_namespaces+0xf2/0x220 [ 158.674122][ T8965] ksys_unshare+0x4a2/0xa70 [ 158.674135][ T8965] ? __pfx_ksys_unshare+0x10/0x10 [ 158.674154][ T8965] __ia32_sys_unshare+0x30/0x40 [ 158.674166][ T8965] __do_fast_syscall_32+0x13a/0x8b0 [ 158.674185][ T8965] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.674203][ T8965] do_fast_syscall_32+0x32/0x70 [ 158.674214][ T8965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.674229][ T8965] RIP: 0023:0xf7f92fec [ 158.674243][ T8965] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 158.674248][ T8965] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 158.674260][ T8965] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 158.674267][ T8965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.674274][ T8965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.674281][ T8965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.674287][ T8965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.674303][ T8965] [ 158.913439][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 158.922643][ T8972] macvtap8: entered promiscuous mode [ 158.922720][ T8972] macvtap8: entered allmulticast mode [ 159.276192][ T8995] FAULT_INJECTION: forcing a failure. [ 159.276192][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 159.276214][ T8995] CPU: 3 UID: 0 PID: 8995 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(full) [ 159.276228][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.276236][ T8995] Call Trace: [ 159.276270][ T8995] [ 159.276276][ T8995] dump_stack_lvl+0x100/0x190 [ 159.276331][ T8995] should_fail_ex.cold+0x5/0xa [ 159.276361][ T8995] should_failslab+0xc2/0x120 [ 159.276398][ T8995] __kmalloc_noprof+0xfc/0x840 [ 159.276416][ T8995] ? ops_init+0x77/0x5f0 [ 159.276450][ T8995] ops_init+0x77/0x5f0 [ 159.276466][ T8995] setup_net+0x118/0x3a0 [ 159.276480][ T8995] ? __pfx_setup_net+0x10/0x10 [ 159.276498][ T8995] copy_net_ns+0x345/0x7a0 [ 159.276515][ T8995] create_new_namespaces+0x3ea/0xac0 [ 159.276538][ T8995] unshare_nsproxy_namespaces+0xf2/0x220 [ 159.276558][ T8995] ksys_unshare+0x4a2/0xa70 [ 159.276576][ T8995] ? __pfx_ksys_unshare+0x10/0x10 [ 159.276608][ T8995] __ia32_sys_unshare+0x30/0x40 [ 159.276621][ T8995] __do_fast_syscall_32+0x13a/0x8b0 [ 159.276658][ T8995] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.276676][ T8995] do_fast_syscall_32+0x32/0x70 [ 159.276687][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.276702][ T8995] RIP: 0023:0xf7f34fec [ 159.276716][ T8995] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 159.276739][ T8995] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 159.276751][ T8995] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 159.276758][ T8995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.276765][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.276771][ T8995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.276778][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.276795][ T8995] [ 159.473428][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1007'. [ 159.562496][ T9004] tmpfs: Bad value for 'mpol' [ 159.795321][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 159.924751][ T9013] FAULT_INJECTION: forcing a failure. [ 159.924751][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 159.924784][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.3.1010 Not tainted syzkaller #0 PREEMPT(full) [ 159.924806][ T9013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.924817][ T9013] Call Trace: [ 159.924824][ T9013] [ 159.924832][ T9013] dump_stack_lvl+0x100/0x190 [ 159.924864][ T9013] should_fail_ex.cold+0x5/0xa [ 159.924889][ T9013] should_failslab+0xc2/0x120 [ 159.924920][ T9013] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 159.924946][ T9013] ? create_new_namespaces+0x3ea/0xac0 [ 159.924993][ T9013] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 159.925039][ T9013] ? sock_alloc_inode+0x26/0x2c0 [ 159.925067][ T9013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.925094][ T9013] sock_alloc_inode+0x26/0x2c0 [ 159.925118][ T9013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.925148][ T9013] alloc_inode+0x68/0x250 [ 159.925170][ T9013] sock_alloc+0x44/0x280 [ 159.925192][ T9013] ? security_socket_create+0x7f/0x250 [ 159.925225][ T9013] sock_create_lite+0x82/0x120 [ 159.925254][ T9013] __netlink_kernel_create+0xbd/0x750 [ 159.925284][ T9013] ? __lock_acquire+0x5c0/0x1f40 [ 159.925315][ T9013] ? __pfx___netlink_kernel_create+0x10/0x10 [ 159.925349][ T9013] ? __pfx_diag_net_init+0x10/0x10 [ 159.925370][ T9013] diag_net_init+0xbd/0x140 [ 159.925390][ T9013] ? __pfx_diag_net_init+0x10/0x10 [ 159.925409][ T9013] ? find_held_lock+0x2b/0x80 [ 159.925432][ T9013] ? __pfx_sock_diag_rcv+0x10/0x10 [ 159.925451][ T9013] ? __pfx_sock_diag_bind+0x10/0x10 [ 159.925473][ T9013] ? __raw_spin_lock_init+0x3a/0x110 [ 159.925495][ T9013] ? __pfx_cma_init_net+0x10/0x10 [ 159.925520][ T9013] ops_init+0x1e2/0x5f0 [ 159.925547][ T9013] setup_net+0x118/0x3a0 [ 159.925571][ T9013] ? __pfx_setup_net+0x10/0x10 [ 159.925603][ T9013] copy_net_ns+0x345/0x7a0 [ 159.925631][ T9013] create_new_namespaces+0x3ea/0xac0 [ 159.925665][ T9013] unshare_nsproxy_namespaces+0xf2/0x220 [ 159.925693][ T9013] ksys_unshare+0x4a2/0xa70 [ 159.925711][ T9013] ? __pfx_ksys_unshare+0x10/0x10 [ 159.925740][ T9013] __ia32_sys_unshare+0x30/0x40 [ 159.925760][ T9013] __do_fast_syscall_32+0x13a/0x8b0 [ 159.925790][ T9013] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.925822][ T9013] do_fast_syscall_32+0x32/0x70 [ 159.925840][ T9013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.925864][ T9013] RIP: 0023:0xf7f54fec [ 159.925886][ T9013] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 159.925895][ T9013] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 159.925916][ T9013] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 159.925930][ T9013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.925940][ T9013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.925949][ T9013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.925959][ T9013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.925986][ T9013] [ 160.127848][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 160.136289][ T9018] macvtap9: entered promiscuous mode [ 160.136369][ T9018] macvtap9: entered allmulticast mode [ 160.144038][ T9014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.194753][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1014'. [ 160.521058][ T9033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.674307][ T9050] tmpfs: Bad value for 'mpol' [ 160.901422][ T9064] FAULT_INJECTION: forcing a failure. [ 160.901422][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 160.901455][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.0.1021 Not tainted syzkaller #0 PREEMPT(full) [ 160.901479][ T9064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.901493][ T9064] Call Trace: [ 160.901500][ T9064] [ 160.901508][ T9064] dump_stack_lvl+0x100/0x190 [ 160.901540][ T9064] should_fail_ex.cold+0x5/0xa [ 160.901568][ T9064] should_failslab+0xc2/0x120 [ 160.901596][ T9064] __kmalloc_noprof+0xfc/0x840 [ 160.901620][ T9064] ? ops_init+0x77/0x5f0 [ 160.901646][ T9064] ops_init+0x77/0x5f0 [ 160.901673][ T9064] setup_net+0x118/0x3a0 [ 160.901696][ T9064] ? __pfx_setup_net+0x10/0x10 [ 160.901723][ T9064] copy_net_ns+0x345/0x7a0 [ 160.901749][ T9064] create_new_namespaces+0x3ea/0xac0 [ 160.901783][ T9064] unshare_nsproxy_namespaces+0xf2/0x220 [ 160.901815][ T9064] ksys_unshare+0x4a2/0xa70 [ 160.901836][ T9064] ? __pfx_ksys_unshare+0x10/0x10 [ 160.901866][ T9064] __ia32_sys_unshare+0x30/0x40 [ 160.901906][ T9064] __do_fast_syscall_32+0x13a/0x8b0 [ 160.901937][ T9064] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.901970][ T9064] do_fast_syscall_32+0x32/0x70 [ 160.901987][ T9064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.902011][ T9064] RIP: 0023:0xf7f34fec [ 160.902033][ T9064] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 160.902042][ T9064] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 160.902062][ T9064] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 160.902081][ T9064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.902092][ T9064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.902105][ T9064] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.902116][ T9064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.902142][ T9064] [ 161.313244][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 161.826682][ T9077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.921617][ T9097] 9p: Bad value for 'wfdno' [ 161.981180][ T9101] FAULT_INJECTION: forcing a failure. [ 161.981180][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 161.981202][ T9101] CPU: 3 UID: 0 PID: 9101 Comm: syz.1.1029 Not tainted syzkaller #0 PREEMPT(full) [ 161.981217][ T9101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.981224][ T9101] Call Trace: [ 161.981249][ T9101] [ 161.981254][ T9101] dump_stack_lvl+0x100/0x190 [ 161.981308][ T9101] should_fail_ex.cold+0x5/0xa [ 161.981336][ T9101] should_failslab+0xc2/0x120 [ 161.981373][ T9101] __kmalloc_noprof+0xfc/0x840 [ 161.981390][ T9101] ? ops_init+0x77/0x5f0 [ 161.981424][ T9101] ops_init+0x77/0x5f0 [ 161.981439][ T9101] setup_net+0x118/0x3a0 [ 161.981453][ T9101] ? __pfx_setup_net+0x10/0x10 [ 161.981471][ T9101] copy_net_ns+0x345/0x7a0 [ 161.981489][ T9101] create_new_namespaces+0x3ea/0xac0 [ 161.981510][ T9101] unshare_nsproxy_namespaces+0xf2/0x220 [ 161.981530][ T9101] ksys_unshare+0x4a2/0xa70 [ 161.981544][ T9101] ? __pfx_ksys_unshare+0x10/0x10 [ 161.981567][ T9101] __ia32_sys_unshare+0x30/0x40 [ 161.981579][ T9101] __do_fast_syscall_32+0x13a/0x8b0 [ 161.981616][ T9101] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.981635][ T9101] do_fast_syscall_32+0x32/0x70 [ 161.981646][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.981661][ T9101] RIP: 0023:0xf73fefec [ 161.981675][ T9101] Code: Unable to access opcode bytes at 0xf73fefc2. [ 161.981698][ T9101] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 161.981710][ T9101] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 161.981717][ T9101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.981724][ T9101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.981730][ T9101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 161.981737][ T9101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.981752][ T9101] [ 162.601805][ T9119] FAULT_INJECTION: forcing a failure. [ 162.601805][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 162.601835][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 162.601857][ T9119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.601870][ T9119] Call Trace: [ 162.601877][ T9119] [ 162.601885][ T9119] dump_stack_lvl+0x100/0x190 [ 162.601917][ T9119] should_fail_ex.cold+0x5/0xa [ 162.601940][ T9119] should_failslab+0xc2/0x120 [ 162.601968][ T9119] __kmalloc_noprof+0xfc/0x840 [ 162.602000][ T9119] ? ops_init+0x77/0x5f0 [ 162.602028][ T9119] ops_init+0x77/0x5f0 [ 162.602054][ T9119] setup_net+0x118/0x3a0 [ 162.602076][ T9119] ? __pfx_setup_net+0x10/0x10 [ 162.602106][ T9119] copy_net_ns+0x345/0x7a0 [ 162.602145][ T9119] create_new_namespaces+0x3ea/0xac0 [ 162.602169][ T9119] unshare_nsproxy_namespaces+0xf2/0x220 [ 162.602190][ T9119] ksys_unshare+0x4a2/0xa70 [ 162.602203][ T9119] ? __pfx_ksys_unshare+0x10/0x10 [ 162.602216][ T9119] ? xfd_validate_state+0x129/0x190 [ 162.602240][ T9119] __ia32_sys_unshare+0x30/0x40 [ 162.602253][ T9119] __do_fast_syscall_32+0x13a/0x8b0 [ 162.602271][ T9119] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.602289][ T9119] do_fast_syscall_32+0x32/0x70 [ 162.602300][ T9119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.602314][ T9119] RIP: 0023:0xf7f92fec [ 162.602328][ T9119] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 162.602333][ T9119] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 162.602345][ T9119] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 162.602352][ T9119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.602358][ T9119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.602365][ T9119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.602371][ T9119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.602387][ T9119] [ 162.857733][ T9125] FAULT_INJECTION: forcing a failure. [ 162.857733][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 162.857755][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.1.1037 Not tainted syzkaller #0 PREEMPT(full) [ 162.857770][ T9125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.857778][ T9125] Call Trace: [ 162.857782][ T9125] [ 162.857787][ T9125] dump_stack_lvl+0x100/0x190 [ 162.857808][ T9125] should_fail_ex.cold+0x5/0xa [ 162.857825][ T9125] should_failslab+0xc2/0x120 [ 162.857845][ T9125] __kmalloc_noprof+0xfc/0x840 [ 162.857860][ T9125] ? trace_kmalloc+0xeb/0x110 [ 162.857877][ T9125] ? lsm_blob_alloc+0x68/0x90 [ 162.857913][ T9125] lsm_blob_alloc+0x68/0x90 [ 162.857930][ T9125] security_sk_alloc+0x2d/0x290 [ 162.857943][ T9125] sk_prot_alloc+0x12a/0x2a0 [ 162.857961][ T9125] sk_alloc+0x36/0xe80 [ 162.857974][ T9125] __netlink_create+0x5e/0x2c0 [ 162.857991][ T9125] __netlink_kernel_create+0xed/0x750 [ 162.858011][ T9125] ? __pfx___netlink_kernel_create+0x10/0x10 [ 162.858032][ T9125] ? __pfx_diag_net_init+0x10/0x10 [ 162.858044][ T9125] diag_net_init+0xbd/0x140 [ 162.858056][ T9125] ? __pfx_diag_net_init+0x10/0x10 [ 162.858068][ T9125] ? find_held_lock+0x2b/0x80 [ 162.858082][ T9125] ? __pfx_sock_diag_rcv+0x10/0x10 [ 162.858093][ T9125] ? __pfx_sock_diag_bind+0x10/0x10 [ 162.858105][ T9125] ? __raw_spin_lock_init+0x3a/0x110 [ 162.858118][ T9125] ? __pfx_cma_init_net+0x10/0x10 [ 162.858131][ T9125] ops_init+0x1e2/0x5f0 [ 162.858146][ T9125] setup_net+0x118/0x3a0 [ 162.858162][ T9125] ? __pfx_setup_net+0x10/0x10 [ 162.858180][ T9125] copy_net_ns+0x345/0x7a0 [ 162.858196][ T9125] create_new_namespaces+0x3ea/0xac0 [ 162.858217][ T9125] unshare_nsproxy_namespaces+0xf2/0x220 [ 162.858236][ T9125] ksys_unshare+0x4a2/0xa70 [ 162.858249][ T9125] ? __pfx_ksys_unshare+0x10/0x10 [ 162.858266][ T9125] __ia32_sys_unshare+0x30/0x40 [ 162.858278][ T9125] __do_fast_syscall_32+0x13a/0x8b0 [ 162.858296][ T9125] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.858314][ T9125] do_fast_syscall_32+0x32/0x70 [ 162.858325][ T9125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.858342][ T9125] RIP: 0023:0xf73fefec [ 162.858362][ T9125] Code: Unable to access opcode bytes at 0xf73fefc2. [ 162.858370][ T9125] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 162.858388][ T9125] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 162.858401][ T9125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.858411][ T9125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.858422][ T9125] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.858432][ T9125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.858459][ T9125] [ 163.617789][ T9136] FAULT_INJECTION: forcing a failure. [ 163.617789][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 163.617811][ T9136] CPU: 3 UID: 0 PID: 9136 Comm: syz.0.1040 Not tainted syzkaller #0 PREEMPT(full) [ 163.617826][ T9136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.617850][ T9136] Call Trace: [ 163.617856][ T9136] [ 163.617861][ T9136] dump_stack_lvl+0x100/0x190 [ 163.617882][ T9136] should_fail_ex.cold+0x5/0xa [ 163.617899][ T9136] should_failslab+0xc2/0x120 [ 163.617923][ T9136] __kmalloc_cache_noprof+0x91/0x6d0 [ 163.617938][ T9136] ? police_init_net+0x56/0x270 [ 163.617954][ T9136] ? __pfx_police_init_net+0x10/0x10 [ 163.617968][ T9136] police_init_net+0x56/0x270 [ 163.617983][ T9136] ops_init+0x1e2/0x5f0 [ 163.617998][ T9136] setup_net+0x118/0x3a0 [ 163.618012][ T9136] ? __pfx_setup_net+0x10/0x10 [ 163.618031][ T9136] copy_net_ns+0x345/0x7a0 [ 163.618055][ T9136] create_new_namespaces+0x3ea/0xac0 [ 163.618090][ T9136] unshare_nsproxy_namespaces+0xf2/0x220 [ 163.618122][ T9136] ksys_unshare+0x4a2/0xa70 [ 163.618145][ T9136] ? __pfx_ksys_unshare+0x10/0x10 [ 163.618176][ T9136] __ia32_sys_unshare+0x30/0x40 [ 163.618197][ T9136] __do_fast_syscall_32+0x13a/0x8b0 [ 163.618224][ T9136] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.618255][ T9136] do_fast_syscall_32+0x32/0x70 [ 163.618273][ T9136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.618298][ T9136] RIP: 0023:0xf7f34fec [ 163.618320][ T9136] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 163.618329][ T9136] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 163.618349][ T9136] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 163.618363][ T9136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.618374][ T9136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.618386][ T9136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.618398][ T9136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.618422][ T9136] [ 165.076845][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 165.083009][ T9173] macvtap10: entered promiscuous mode [ 165.083122][ T9173] macvtap10: entered allmulticast mode [ 165.145544][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 165.156205][ T9176] macvtap1: entered promiscuous mode [ 165.156219][ T9176] erspan0: entered promiscuous mode [ 165.156291][ T9176] macvtap1: entered allmulticast mode [ 165.156299][ T9176] erspan0: entered allmulticast mode [ 165.173752][ T9176] erspan0: left allmulticast mode [ 165.173769][ T9176] erspan0: left promiscuous mode [ 165.176077][ T9176] macvtap1: left promiscuous mode [ 165.176090][ T9176] macvtap1: left allmulticast mode [ 165.192297][ T5738] Bluetooth: hci3: command 0x0405 tx timeout [ 165.192322][ T5738] Bluetooth: hci0: command 0x0406 tx timeout [ 165.192336][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 165.192350][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 165.251647][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 165.494434][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 165.551781][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 165.559413][ T9197] macvtap1: entered promiscuous mode [ 165.559435][ T9197] erspan0: entered promiscuous mode [ 165.559532][ T9197] macvtap1: entered allmulticast mode [ 165.559541][ T9197] erspan0: entered allmulticast mode [ 165.563739][ T9196] FAULT_INJECTION: forcing a failure. [ 165.563739][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 165.563760][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.0.1055 Not tainted syzkaller #0 PREEMPT(full) [ 165.563773][ T9196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.563780][ T9196] Call Trace: [ 165.563785][ T9196] [ 165.563789][ T9196] dump_stack_lvl+0x100/0x190 [ 165.563809][ T9196] should_fail_ex.cold+0x5/0xa [ 165.563825][ T9196] should_failslab+0xc2/0x120 [ 165.563844][ T9196] __kmalloc_cache_noprof+0x91/0x6d0 [ 165.563859][ T9196] ? police_init_net+0x56/0x270 [ 165.563875][ T9196] ? __pfx_police_init_net+0x10/0x10 [ 165.563889][ T9196] police_init_net+0x56/0x270 [ 165.563903][ T9196] ops_init+0x1e2/0x5f0 [ 165.563918][ T9196] setup_net+0x118/0x3a0 [ 165.563955][ T9196] ? __pfx_setup_net+0x10/0x10 [ 165.563987][ T9196] copy_net_ns+0x345/0x7a0 [ 165.564015][ T9196] create_new_namespaces+0x3ea/0xac0 [ 165.564049][ T9196] unshare_nsproxy_namespaces+0xf2/0x220 [ 165.564076][ T9196] ksys_unshare+0x4a2/0xa70 [ 165.564092][ T9196] ? __pfx_ksys_unshare+0x10/0x10 [ 165.564110][ T9196] __ia32_sys_unshare+0x30/0x40 [ 165.564122][ T9196] __do_fast_syscall_32+0x13a/0x8b0 [ 165.564140][ T9196] ? lockdep_hardirqs_on+0x7d/0x110 [ 165.564158][ T9196] do_fast_syscall_32+0x32/0x70 [ 165.564168][ T9196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.564183][ T9196] RIP: 0023:0xf7f34fec [ 165.564198][ T9196] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 165.564203][ T9196] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 165.564214][ T9196] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 165.564222][ T9196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.564228][ T9196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.564235][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.564242][ T9196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.564257][ T9196] [ 165.575111][ T9197] erspan0: left allmulticast mode [ 165.575126][ T9197] erspan0: left promiscuous mode [ 165.578384][ T9197] macvtap1: left promiscuous mode [ 165.578396][ T9197] macvtap1: left allmulticast mode [ 166.054416][ T9210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.063181][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 166.069397][ T9219] macvtap2: entered promiscuous mode [ 166.069412][ T9219] erspan0: entered promiscuous mode [ 166.069493][ T9219] macvtap2: entered allmulticast mode [ 166.069502][ T9219] erspan0: entered allmulticast mode [ 166.099264][ T9219] erspan0: left allmulticast mode [ 166.099288][ T9219] erspan0: left promiscuous mode [ 166.106005][ T9219] macvtap2: left promiscuous mode [ 166.106022][ T9219] macvtap2: left allmulticast mode [ 166.145604][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 166.151638][ T9225] macvtap3: entered promiscuous mode [ 166.151650][ T9225] erspan0: entered promiscuous mode [ 166.151733][ T9225] macvtap3: entered allmulticast mode [ 166.151741][ T9225] erspan0: entered allmulticast mode [ 166.163442][ T9225] erspan0: left allmulticast mode [ 166.163457][ T9225] erspan0: left promiscuous mode [ 166.163653][ T9225] macvtap3: left promiscuous mode [ 166.163661][ T9225] macvtap3: left allmulticast mode [ 167.010189][ T9258] FAULT_INJECTION: forcing a failure. [ 167.010189][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 167.010210][ T9258] CPU: 2 UID: 0 PID: 9258 Comm: syz.1.1076 Not tainted syzkaller #0 PREEMPT(full) [ 167.010224][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.010231][ T9258] Call Trace: [ 167.010235][ T9258] [ 167.010241][ T9258] dump_stack_lvl+0x100/0x190 [ 167.010261][ T9258] should_fail_ex.cold+0x5/0xa [ 167.010277][ T9258] should_failslab+0xc2/0x120 [ 167.010295][ T9258] __kmalloc_noprof+0xfc/0x840 [ 167.010312][ T9258] ? ops_init+0x77/0x5f0 [ 167.010328][ T9258] ops_init+0x77/0x5f0 [ 167.010343][ T9258] setup_net+0x118/0x3a0 [ 167.010357][ T9258] ? __pfx_setup_net+0x10/0x10 [ 167.010376][ T9258] copy_net_ns+0x345/0x7a0 [ 167.010393][ T9258] create_new_namespaces+0x3ea/0xac0 [ 167.010414][ T9258] unshare_nsproxy_namespaces+0xf2/0x220 [ 167.010434][ T9258] ksys_unshare+0x4a2/0xa70 [ 167.010447][ T9258] ? __pfx_ksys_unshare+0x10/0x10 [ 167.010466][ T9258] __ia32_sys_unshare+0x30/0x40 [ 167.010479][ T9258] __do_fast_syscall_32+0x13a/0x8b0 [ 167.010497][ T9258] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.010521][ T9258] do_fast_syscall_32+0x32/0x70 [ 167.010532][ T9258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.010547][ T9258] RIP: 0023:0xf73fefec [ 167.010562][ T9258] Code: Unable to access opcode bytes at 0xf73fefc2. [ 167.010567][ T9258] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 167.010580][ T9258] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 167.010588][ T9258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.010595][ T9258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.010602][ T9258] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.010609][ T9258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.010627][ T9258] [ 167.213307][ T9266] tmpfs: Bad value for 'mpol' [ 167.460486][ T9272] tmpfs: Bad value for 'mpol' [ 167.658162][ T9273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.937170][ T9287] batman_adv: batadv0: Adding interface: syzkaller0 [ 167.937190][ T9287] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.937268][ T9287] batman_adv: batadv0: Interface activated: syzkaller0 [ 168.201716][ T9286] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 168.217600][ T9286] batman_adv: batadv0: Removing interface: syzkaller0 [ 168.253971][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1085'. [ 168.333167][ T9278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.453116][ T9304] tmpfs: Bad value for 'mpol' [ 168.670948][ T9311] tmpfs: Bad value for 'mpol' [ 168.713761][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 168.884131][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 168.888353][ T9320] macvtap1: entered promiscuous mode [ 168.888366][ T9320] erspan0: entered promiscuous mode [ 168.888447][ T9320] macvtap1: entered allmulticast mode [ 168.888529][ T9320] erspan0: entered allmulticast mode [ 168.923584][ T9320] erspan0: left allmulticast mode [ 168.923601][ T9320] erspan0: left promiscuous mode [ 168.923884][ T9320] macvtap1: left promiscuous mode [ 168.923896][ T9320] macvtap1: left allmulticast mode [ 169.020487][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 170.347216][ T9357] batman_adv: batadv0: Adding interface: syzkaller0 [ 170.347228][ T9357] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.347243][ T9357] batman_adv: batadv0: Interface activated: syzkaller0 [ 170.497568][ T9356] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 170.511991][ T9356] batman_adv: batadv0: Removing interface: syzkaller0 [ 170.631985][ T9363] batman_adv: batadv0: Adding interface: syzkaller0 [ 170.631997][ T9363] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.632013][ T9363] batman_adv: batadv0: Interface activated: syzkaller0 [ 170.654709][ T9365] batman_adv: batadv0: Adding interface: syzkaller0 [ 170.654725][ T9365] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.654808][ T9365] batman_adv: batadv0: Interface activated: syzkaller0 [ 170.850349][ T9362] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 170.860312][ T9362] batman_adv: batadv0: Removing interface: syzkaller0 [ 170.874785][ T9364] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 170.896204][ T9364] batman_adv: batadv0: Removing interface: syzkaller0 [ 171.006279][ T9382] FAULT_INJECTION: forcing a failure. [ 171.006279][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 171.006302][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.3.1113 Not tainted syzkaller #0 PREEMPT(full) [ 171.006317][ T9382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.006325][ T9382] Call Trace: [ 171.006329][ T9382] [ 171.006335][ T9382] dump_stack_lvl+0x100/0x190 [ 171.006356][ T9382] should_fail_ex.cold+0x5/0xa [ 171.006372][ T9382] should_failslab+0xc2/0x120 [ 171.006392][ T9382] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 171.006410][ T9382] ? create_new_namespaces+0x3ea/0xac0 [ 171.006429][ T9382] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 171.006447][ T9382] ? sock_alloc_inode+0x26/0x2c0 [ 171.006465][ T9382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 171.006482][ T9382] sock_alloc_inode+0x26/0x2c0 [ 171.006497][ T9382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 171.006512][ T9382] alloc_inode+0x68/0x250 [ 171.006524][ T9382] sock_alloc+0x44/0x280 [ 171.006538][ T9382] ? security_socket_create+0x7f/0x250 [ 171.006561][ T9382] sock_create_lite+0x82/0x120 [ 171.006577][ T9382] __netlink_kernel_create+0xbd/0x750 [ 171.006596][ T9382] ? __lock_acquire+0x5c0/0x1f40 [ 171.006616][ T9382] ? __pfx___netlink_kernel_create+0x10/0x10 [ 171.006638][ T9382] ? __pfx_diag_net_init+0x10/0x10 [ 171.006652][ T9382] diag_net_init+0xbd/0x140 [ 171.006665][ T9382] ? __pfx_diag_net_init+0x10/0x10 [ 171.006678][ T9382] ? find_held_lock+0x2b/0x80 [ 171.006693][ T9382] ? __pfx_sock_diag_rcv+0x10/0x10 [ 171.006704][ T9382] ? __pfx_sock_diag_bind+0x10/0x10 [ 171.006718][ T9382] ? __raw_spin_lock_init+0x3a/0x110 [ 171.006732][ T9382] ? __pfx_cma_init_net+0x10/0x10 [ 171.006747][ T9382] ops_init+0x1e2/0x5f0 [ 171.006762][ T9382] setup_net+0x118/0x3a0 [ 171.006778][ T9382] ? __pfx_setup_net+0x10/0x10 [ 171.006796][ T9382] copy_net_ns+0x345/0x7a0 [ 171.006813][ T9382] create_new_namespaces+0x3ea/0xac0 [ 171.006835][ T9382] unshare_nsproxy_namespaces+0xf2/0x220 [ 171.006855][ T9382] ksys_unshare+0x4a2/0xa70 [ 171.006869][ T9382] ? __pfx_ksys_unshare+0x10/0x10 [ 171.006887][ T9382] __ia32_sys_unshare+0x30/0x40 [ 171.006900][ T9382] __do_fast_syscall_32+0x13a/0x8b0 [ 171.006920][ T9382] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.006939][ T9382] do_fast_syscall_32+0x32/0x70 [ 171.006951][ T9382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.006966][ T9382] RIP: 0023:0xf7f54fec [ 171.006979][ T9382] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 171.006985][ T9382] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 171.006997][ T9382] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 171.007004][ T9382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.007011][ T9382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.007017][ T9382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.007024][ T9382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.007045][ T9382] [ 171.106161][ T9396] FAULT_INJECTION: forcing a failure. [ 171.106161][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 171.106181][ T9396] CPU: 2 UID: 0 PID: 9396 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(full) [ 171.106196][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.106203][ T9396] Call Trace: [ 171.106208][ T9396] [ 171.106213][ T9396] dump_stack_lvl+0x100/0x190 [ 171.106233][ T9396] should_fail_ex.cold+0x5/0xa [ 171.106249][ T9396] should_failslab+0xc2/0x120 [ 171.106268][ T9396] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.106282][ T9396] ? police_init_net+0x56/0x270 [ 171.106298][ T9396] ? __pfx_police_init_net+0x10/0x10 [ 171.106312][ T9396] police_init_net+0x56/0x270 [ 171.106342][ T9396] ops_init+0x1e2/0x5f0 [ 171.106360][ T9396] setup_net+0x118/0x3a0 [ 171.106374][ T9396] ? __pfx_setup_net+0x10/0x10 [ 171.106393][ T9396] copy_net_ns+0x345/0x7a0 [ 171.106411][ T9396] create_new_namespaces+0x3ea/0xac0 [ 171.106435][ T9396] unshare_nsproxy_namespaces+0xf2/0x220 [ 171.106456][ T9396] ksys_unshare+0x4a2/0xa70 [ 171.106473][ T9396] ? __pfx_ksys_unshare+0x10/0x10 [ 171.106491][ T9396] __ia32_sys_unshare+0x30/0x40 [ 171.106503][ T9396] __do_fast_syscall_32+0x13a/0x8b0 [ 171.106522][ T9396] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.106540][ T9396] do_fast_syscall_32+0x32/0x70 [ 171.106552][ T9396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.106566][ T9396] RIP: 0023:0xf7f34fec [ 171.106581][ T9396] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 171.106586][ T9396] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 171.106599][ T9396] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 171.106607][ T9396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.106613][ T9396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.106620][ T9396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.106626][ T9396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.106641][ T9396] [ 171.940708][ T9423] __nla_validate_parse: 2 callbacks suppressed [ 171.940722][ T9423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 171.940753][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 172.173254][ T9430] batman_adv: batadv0: Adding interface: syzkaller0 [ 172.173271][ T9430] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.173299][ T9430] batman_adv: batadv0: Interface activated: syzkaller0 [ 172.339219][ T9429] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 172.355474][ T9429] batman_adv: batadv0: Removing interface: syzkaller0 [ 172.420585][ T9438] batman_adv: batadv0: Adding interface: syzkaller0 [ 172.420596][ T9438] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.420611][ T9438] batman_adv: batadv0: Interface activated: syzkaller0 [ 172.446193][ T9439] FAULT_INJECTION: forcing a failure. [ 172.446193][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 172.446213][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.3.1123 Not tainted syzkaller #0 PREEMPT(full) [ 172.446227][ T9439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.446234][ T9439] Call Trace: [ 172.446239][ T9439] [ 172.446244][ T9439] dump_stack_lvl+0x100/0x190 [ 172.446264][ T9439] should_fail_ex.cold+0x5/0xa [ 172.446280][ T9439] should_failslab+0xc2/0x120 [ 172.446298][ T9439] __kmalloc_noprof+0xfc/0x840 [ 172.446313][ T9439] ? evm_inode_alloc_security+0x44/0xc0 [ 172.446332][ T9439] ? sk_prot_alloc+0x10b/0x2a0 [ 172.446350][ T9439] sk_prot_alloc+0x10b/0x2a0 [ 172.446368][ T9439] sk_alloc+0x36/0xe80 [ 172.446380][ T9439] __netlink_create+0x5e/0x2c0 [ 172.446398][ T9439] __netlink_kernel_create+0xed/0x750 [ 172.446417][ T9439] ? __pfx___netlink_kernel_create+0x10/0x10 [ 172.446439][ T9439] ? __pfx_diag_net_init+0x10/0x10 [ 172.446452][ T9439] diag_net_init+0xbd/0x140 [ 172.446465][ T9439] ? __pfx_diag_net_init+0x10/0x10 [ 172.446476][ T9439] ? find_held_lock+0x2b/0x80 [ 172.446491][ T9439] ? __pfx_sock_diag_rcv+0x10/0x10 [ 172.446502][ T9439] ? __pfx_sock_diag_bind+0x10/0x10 [ 172.446514][ T9439] ? __raw_spin_lock_init+0x3a/0x110 [ 172.446527][ T9439] ? __pfx_cma_init_net+0x10/0x10 [ 172.446541][ T9439] ops_init+0x1e2/0x5f0 [ 172.446556][ T9439] setup_net+0x118/0x3a0 [ 172.446570][ T9439] ? __pfx_setup_net+0x10/0x10 [ 172.446588][ T9439] copy_net_ns+0x345/0x7a0 [ 172.446604][ T9439] create_new_namespaces+0x3ea/0xac0 [ 172.446625][ T9439] unshare_nsproxy_namespaces+0xf2/0x220 [ 172.446644][ T9439] ksys_unshare+0x4a2/0xa70 [ 172.446657][ T9439] ? __pfx_ksys_unshare+0x10/0x10 [ 172.446674][ T9439] __ia32_sys_unshare+0x30/0x40 [ 172.446686][ T9439] __do_fast_syscall_32+0x13a/0x8b0 [ 172.446704][ T9439] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.446721][ T9439] do_fast_syscall_32+0x32/0x70 [ 172.446732][ T9439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.446746][ T9439] RIP: 0023:0xf7f54fec [ 172.446760][ T9439] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 172.446766][ T9439] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 172.446779][ T9439] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 172.446786][ T9439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.446793][ T9439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.446800][ T9439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.446806][ T9439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.446821][ T9439] [ 172.560505][ T9437] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 172.567604][ T9437] batman_adv: batadv0: Removing interface: syzkaller0 [ 172.919280][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1127'. [ 172.933301][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 173.112690][ T9457] FAULT_INJECTION: forcing a failure. [ 173.112690][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 173.112711][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.0.1131 Not tainted syzkaller #0 PREEMPT(full) [ 173.112726][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.112733][ T9457] Call Trace: [ 173.112738][ T9457] [ 173.112743][ T9457] dump_stack_lvl+0x100/0x190 [ 173.112762][ T9457] should_fail_ex.cold+0x5/0xa [ 173.112778][ T9457] should_failslab+0xc2/0x120 [ 173.112797][ T9457] __kmalloc_noprof+0xfc/0x840 [ 173.112813][ T9457] ? lockdep_init_map_type+0x5c/0x250 [ 173.112832][ T9457] ? ops_init+0x77/0x5f0 [ 173.112848][ T9457] ops_init+0x77/0x5f0 [ 173.112863][ T9457] setup_net+0x118/0x3a0 [ 173.112882][ T9457] ? __pfx_setup_net+0x10/0x10 [ 173.112900][ T9457] copy_net_ns+0x345/0x7a0 [ 173.112917][ T9457] create_new_namespaces+0x3ea/0xac0 [ 173.112938][ T9457] unshare_nsproxy_namespaces+0xf2/0x220 [ 173.112957][ T9457] ksys_unshare+0x4a2/0xa70 [ 173.112971][ T9457] ? __pfx_ksys_unshare+0x10/0x10 [ 173.112989][ T9457] __ia32_sys_unshare+0x30/0x40 [ 173.113002][ T9457] __do_fast_syscall_32+0x13a/0x8b0 [ 173.113023][ T9457] do_fast_syscall_32+0x32/0x70 [ 173.113034][ T9457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.113049][ T9457] RIP: 0023:0xf7f34fec [ 173.113062][ T9457] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 173.113067][ T9457] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 173.113078][ T9457] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 173.113086][ T9457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.113092][ T9457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.113098][ T9457] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.113105][ T9457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.113120][ T9457] [ 173.301066][ T9466] tmpfs: Bad value for 'mpol' [ 173.499156][ T5826] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 173.649118][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 173.649569][ T5826] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.650985][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.651009][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.652465][ T5826] usb 8-1: config 0 descriptor?? [ 173.656146][ T5826] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 174.243621][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 174.278605][ T9484] batman_adv: batadv0: Adding interface: syzkaller0 [ 174.278617][ T9484] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.278665][ T9484] batman_adv: batadv0: Interface activated: syzkaller0 [ 174.420343][ T9483] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 174.433636][ T9483] batman_adv: batadv0: Removing interface: syzkaller0 [ 174.509657][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 174.672383][ T9489] batman_adv: batadv0: Adding interface: syzkaller0 [ 174.672395][ T9489] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.672448][ T9489] batman_adv: batadv0: Interface activated: syzkaller0 [ 174.882406][ T9488] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 174.893478][ T9488] batman_adv: batadv0: Removing interface: syzkaller0 [ 175.089708][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 175.249173][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 175.251760][ T50] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.252554][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.252577][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.253668][ T50] usb 7-1: config 0 descriptor?? [ 175.256887][ T50] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 175.844223][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 176.273545][ T5826] usb 8-1: USB disconnect, device number 9 [ 176.530995][ T9520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.694221][ T9539] tmpfs: Bad value for 'mpol' [ 177.578519][ T9549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.685844][ T9560] tmpfs: Bad value for 'mpol' [ 177.852748][ T5826] usb 7-1: USB disconnect, device number 12 [ 179.212089][ T9600] tmpfs: Bad value for 'mpol' [ 179.610591][ T5826] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.725250][ T9610] batman_adv: batadv0: Adding interface: syzkaller0 [ 179.725533][ T9610] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.725808][ T9610] batman_adv: batadv0: Interface activated: syzkaller0 [ 179.769518][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 179.770017][ T5826] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.771183][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.771206][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.773232][ T5826] usb 5-1: config 0 descriptor?? [ 179.780771][ T5826] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 179.936994][ T9609] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 179.953607][ T9609] batman_adv: batadv0: Removing interface: syzkaller0 [ 180.038267][ T9616] tmpfs: Bad value for 'mpol' [ 180.687161][ T9630] tmpfs: Bad value for 'mpol' [ 180.820290][ T9635] tmpfs: Bad value for 'mpol' [ 182.116468][ T9656] batman_adv: batadv0: Adding interface: syzkaller0 [ 182.116480][ T9656] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.116497][ T9656] batman_adv: batadv0: Interface activated: syzkaller0 [ 182.215105][ T9659] FAULT_INJECTION: forcing a failure. [ 182.215105][ T9659] name failslab, interval 1, probability 0, space 0, times 0 [ 182.215128][ T9659] CPU: 3 UID: 0 PID: 9659 Comm: syz.1.1196 Not tainted syzkaller #0 PREEMPT(full) [ 182.215142][ T9659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.215150][ T9659] Call Trace: [ 182.215154][ T9659] [ 182.215160][ T9659] dump_stack_lvl+0x100/0x190 [ 182.215190][ T9659] should_fail_ex.cold+0x5/0xa [ 182.215207][ T9659] should_failslab+0xc2/0x120 [ 182.215229][ T9659] __kmalloc_noprof+0xfc/0x840 [ 182.215245][ T9659] ? ops_init+0x77/0x5f0 [ 182.215266][ T9659] ops_init+0x77/0x5f0 [ 182.215281][ T9659] setup_net+0x118/0x3a0 [ 182.215296][ T9659] ? __pfx_setup_net+0x10/0x10 [ 182.215345][ T9659] copy_net_ns+0x345/0x7a0 [ 182.215363][ T9659] create_new_namespaces+0x3ea/0xac0 [ 182.215386][ T9659] unshare_nsproxy_namespaces+0xf2/0x220 [ 182.215407][ T9659] ksys_unshare+0x4a2/0xa70 [ 182.215421][ T9659] ? __pfx_ksys_unshare+0x10/0x10 [ 182.215439][ T9659] __ia32_sys_unshare+0x30/0x40 [ 182.215452][ T9659] __do_fast_syscall_32+0x13a/0x8b0 [ 182.215487][ T9659] ? lockdep_hardirqs_on+0x7d/0x110 [ 182.215505][ T9659] do_fast_syscall_32+0x32/0x70 [ 182.215516][ T9659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.215531][ T9659] RIP: 0023:0xf73fefec [ 182.215545][ T9659] Code: Unable to access opcode bytes at 0xf73fefc2. [ 182.215550][ T9659] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 182.215563][ T9659] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 182.215570][ T9659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.215578][ T9659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.215584][ T9659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.215591][ T9659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.215612][ T9659] [ 182.307198][ T9655] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 182.319974][ T9655] batman_adv: batadv0: Removing interface: syzkaller0 [ 182.658554][ T854] usb 5-1: USB disconnect, device number 7 [ 182.999661][ T9674] tmpfs: Bad value for 'mpol' [ 183.301432][ T9677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.229929][ T9700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.406751][ T9713] tmpfs: Bad value for 'mpol' [ 186.435207][ T9714] FAULT_INJECTION: forcing a failure. [ 186.435207][ T9714] name failslab, interval 1, probability 0, space 0, times 0 [ 186.435228][ T9714] CPU: 3 UID: 0 PID: 9714 Comm: syz.1.1204 Not tainted syzkaller #0 PREEMPT(full) [ 186.435242][ T9714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.435250][ T9714] Call Trace: [ 186.435255][ T9714] [ 186.435260][ T9714] dump_stack_lvl+0x100/0x190 [ 186.435281][ T9714] should_fail_ex.cold+0x5/0xa [ 186.435332][ T9714] should_failslab+0xc2/0x120 [ 186.435357][ T9714] __kmalloc_noprof+0xfc/0x840 [ 186.435373][ T9714] ? lockdep_init_map_type+0x5c/0x250 [ 186.435392][ T9714] ? ops_init+0x77/0x5f0 [ 186.435409][ T9714] ops_init+0x77/0x5f0 [ 186.435424][ T9714] setup_net+0x118/0x3a0 [ 186.435438][ T9714] ? __pfx_setup_net+0x10/0x10 [ 186.435455][ T9714] copy_net_ns+0x345/0x7a0 [ 186.435471][ T9714] create_new_namespaces+0x3ea/0xac0 [ 186.435492][ T9714] unshare_nsproxy_namespaces+0xf2/0x220 [ 186.435512][ T9714] ksys_unshare+0x4a2/0xa70 [ 186.435524][ T9714] ? __pfx_ksys_unshare+0x10/0x10 [ 186.435542][ T9714] __ia32_sys_unshare+0x30/0x40 [ 186.435554][ T9714] __do_fast_syscall_32+0x13a/0x8b0 [ 186.435572][ T9714] ? lockdep_hardirqs_on+0x7d/0x110 [ 186.435590][ T9714] do_fast_syscall_32+0x32/0x70 [ 186.435601][ T9714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.435615][ T9714] RIP: 0023:0xf73fefec [ 186.435629][ T9714] Code: Unable to access opcode bytes at 0xf73fefc2. [ 186.435634][ T9714] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 186.435646][ T9714] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 186.435653][ T9714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.435659][ T9714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.435666][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.435673][ T9714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.435687][ T9714] [ 186.631853][ T9719] tmpfs: Bad value for 'mpol' [ 186.740426][ T9722] tmpfs: Bad value for 'mpol' [ 187.621836][ T9734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.564140][ T9780] FAULT_INJECTION: forcing a failure. [ 189.564140][ T9780] name failslab, interval 1, probability 0, space 0, times 0 [ 189.564161][ T9780] CPU: 2 UID: 0 PID: 9780 Comm: syz.0.1223 Not tainted syzkaller #0 PREEMPT(full) [ 189.564175][ T9780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.564183][ T9780] Call Trace: [ 189.564188][ T9780] [ 189.564193][ T9780] dump_stack_lvl+0x100/0x190 [ 189.564213][ T9780] should_fail_ex.cold+0x5/0xa [ 189.564229][ T9780] should_failslab+0xc2/0x120 [ 189.564247][ T9780] __kmalloc_noprof+0xfc/0x840 [ 189.564264][ T9780] ? ops_init+0x77/0x5f0 [ 189.564281][ T9780] ops_init+0x77/0x5f0 [ 189.564296][ T9780] setup_net+0x118/0x3a0 [ 189.564312][ T9780] ? __pfx_setup_net+0x10/0x10 [ 189.564331][ T9780] copy_net_ns+0x345/0x7a0 [ 189.564347][ T9780] create_new_namespaces+0x3ea/0xac0 [ 189.564368][ T9780] unshare_nsproxy_namespaces+0xf2/0x220 [ 189.564387][ T9780] ksys_unshare+0x4a2/0xa70 [ 189.564405][ T9780] ? __pfx_ksys_unshare+0x10/0x10 [ 189.564431][ T9780] __ia32_sys_unshare+0x30/0x40 [ 189.564449][ T9780] __do_fast_syscall_32+0x13a/0x8b0 [ 189.564477][ T9780] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.564505][ T9780] do_fast_syscall_32+0x32/0x70 [ 189.564526][ T9780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.564549][ T9780] RIP: 0023:0xf7f34fec [ 189.564563][ T9780] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 189.564569][ T9780] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 189.564581][ T9780] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 189.564589][ T9780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.564595][ T9780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.564602][ T9780] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.564609][ T9780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.564624][ T9780] [ 189.649939][ T9784] FAULT_INJECTION: forcing a failure. [ 189.649939][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 189.649959][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.1.1227 Not tainted syzkaller #0 PREEMPT(full) [ 189.649973][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.649981][ T9784] Call Trace: [ 189.649985][ T9784] [ 189.649990][ T9784] dump_stack_lvl+0x100/0x190 [ 189.650010][ T9784] should_fail_ex.cold+0x5/0xa [ 189.650026][ T9784] should_failslab+0xc2/0x120 [ 189.650046][ T9784] __kmalloc_noprof+0xfc/0x840 [ 189.650062][ T9784] ? ops_init+0x77/0x5f0 [ 189.650079][ T9784] ops_init+0x77/0x5f0 [ 189.650095][ T9784] setup_net+0x118/0x3a0 [ 189.650108][ T9784] ? __pfx_setup_net+0x10/0x10 [ 189.650126][ T9784] copy_net_ns+0x345/0x7a0 [ 189.650142][ T9784] create_new_namespaces+0x3ea/0xac0 [ 189.650163][ T9784] unshare_nsproxy_namespaces+0xf2/0x220 [ 189.650183][ T9784] ksys_unshare+0x4a2/0xa70 [ 189.650196][ T9784] ? __pfx_ksys_unshare+0x10/0x10 [ 189.650214][ T9784] __ia32_sys_unshare+0x30/0x40 [ 189.650227][ T9784] __do_fast_syscall_32+0x13a/0x8b0 [ 189.650245][ T9784] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.650263][ T9784] do_fast_syscall_32+0x32/0x70 [ 189.650274][ T9784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.650288][ T9784] RIP: 0023:0xf73fefec [ 189.650301][ T9784] Code: Unable to access opcode bytes at 0xf73fefc2. [ 189.650306][ T9784] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 189.650317][ T9784] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 189.650330][ T9784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.650337][ T9784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.650345][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.650352][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.650367][ T9784] [ 190.613543][ T9796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.225219][ T9809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.850578][ T9820] FAULT_INJECTION: forcing a failure. [ 191.850578][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 191.850600][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.3.1236 Not tainted syzkaller #0 PREEMPT(full) [ 191.850614][ T9820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.850622][ T9820] Call Trace: [ 191.850626][ T9820] [ 191.850631][ T9820] dump_stack_lvl+0x100/0x190 [ 191.850652][ T9820] should_fail_ex.cold+0x5/0xa [ 191.850668][ T9820] should_failslab+0xc2/0x120 [ 191.850687][ T9820] __kmalloc_noprof+0xfc/0x840 [ 191.850704][ T9820] ? __netlink_kernel_create+0x181/0x750 [ 191.850726][ T9820] __netlink_kernel_create+0x181/0x750 [ 191.850746][ T9820] ? __pfx___netlink_kernel_create+0x10/0x10 [ 191.850768][ T9820] ? __pfx_diag_net_init+0x10/0x10 [ 191.850782][ T9820] diag_net_init+0xbd/0x140 [ 191.850794][ T9820] ? __pfx_diag_net_init+0x10/0x10 [ 191.850809][ T9820] ? find_held_lock+0x2b/0x80 [ 191.850825][ T9820] ? __pfx_sock_diag_rcv+0x10/0x10 [ 191.850836][ T9820] ? __pfx_sock_diag_bind+0x10/0x10 [ 191.850849][ T9820] ? __raw_spin_lock_init+0x3a/0x110 [ 191.850862][ T9820] ? __pfx_cma_init_net+0x10/0x10 [ 191.850876][ T9820] ops_init+0x1e2/0x5f0 [ 191.850893][ T9820] setup_net+0x118/0x3a0 [ 191.850907][ T9820] ? __pfx_setup_net+0x10/0x10 [ 191.850924][ T9820] copy_net_ns+0x345/0x7a0 [ 191.850940][ T9820] create_new_namespaces+0x3ea/0xac0 [ 191.850962][ T9820] unshare_nsproxy_namespaces+0xf2/0x220 [ 191.850983][ T9820] ksys_unshare+0x4a2/0xa70 [ 191.850996][ T9820] ? __pfx_ksys_unshare+0x10/0x10 [ 191.851013][ T9820] __ia32_sys_unshare+0x30/0x40 [ 191.851025][ T9820] __do_fast_syscall_32+0x13a/0x8b0 [ 191.851043][ T9820] ? lockdep_hardirqs_on+0x7d/0x110 [ 191.851061][ T9820] do_fast_syscall_32+0x32/0x70 [ 191.851072][ T9820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.851086][ T9820] RIP: 0023:0xf7f54fec [ 191.851101][ T9820] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 191.851107][ T9820] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 191.851118][ T9820] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 191.851126][ T9820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.851132][ T9820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.851139][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.851145][ T9820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.851160][ T9820] [ 193.448068][ T9854] FAULT_INJECTION: forcing a failure. [ 193.448068][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 193.448090][ T9854] CPU: 3 UID: 0 PID: 9854 Comm: syz.0.1246 Not tainted syzkaller #0 PREEMPT(full) [ 193.448105][ T9854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.448114][ T9854] Call Trace: [ 193.448118][ T9854] [ 193.448122][ T9854] dump_stack_lvl+0x100/0x190 [ 193.448143][ T9854] should_fail_ex.cold+0x5/0xa [ 193.448159][ T9854] should_failslab+0xc2/0x120 [ 193.448178][ T9854] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.448193][ T9854] ? gact_init_net+0x56/0x270 [ 193.448209][ T9854] ? __pfx_gact_init_net+0x10/0x10 [ 193.448224][ T9854] gact_init_net+0x56/0x270 [ 193.448239][ T9854] ops_init+0x1e2/0x5f0 [ 193.448255][ T9854] setup_net+0x118/0x3a0 [ 193.448268][ T9854] ? __pfx_setup_net+0x10/0x10 [ 193.448286][ T9854] copy_net_ns+0x345/0x7a0 [ 193.448303][ T9854] create_new_namespaces+0x3ea/0xac0 [ 193.448325][ T9854] unshare_nsproxy_namespaces+0xf2/0x220 [ 193.448344][ T9854] ksys_unshare+0x4a2/0xa70 [ 193.448357][ T9854] ? __pfx_ksys_unshare+0x10/0x10 [ 193.448375][ T9854] __ia32_sys_unshare+0x30/0x40 [ 193.448387][ T9854] __do_fast_syscall_32+0x13a/0x8b0 [ 193.448405][ T9854] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.448428][ T9854] do_fast_syscall_32+0x32/0x70 [ 193.448440][ T9854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.448454][ T9854] RIP: 0023:0xf7f34fec [ 193.448468][ T9854] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 193.448474][ T9854] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 193.448486][ T9854] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 193.448494][ T9854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.448502][ T9854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.448509][ T9854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.448516][ T9854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.448532][ T9854] [ 193.601903][ T9857] tmpfs: Bad value for 'mpol' [ 193.842468][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.842527][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.262086][ T9869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.340151][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 194.353633][ T9883] macvtap11: entered promiscuous mode [ 194.353765][ T9883] macvtap11: entered allmulticast mode [ 194.400011][ T9887] tmpfs: Bad value for 'mpol' [ 194.539206][ T5814] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 194.699121][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 194.699569][ T5814] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.700347][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.700368][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.700387][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.704108][ T5814] usb 6-1: config 0 descriptor?? [ 194.705875][ T5814] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 195.875798][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 195.880196][ T9926] macvtap12: entered promiscuous mode [ 195.880375][ T9926] macvtap12: entered allmulticast mode [ 195.915731][ T9928] FAULT_INJECTION: forcing a failure. [ 195.915731][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 195.915752][ T9928] CPU: 2 UID: 0 PID: 9928 Comm: syz.0.1272 Not tainted syzkaller #0 PREEMPT(full) [ 195.915766][ T9928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.915774][ T9928] Call Trace: [ 195.915778][ T9928] [ 195.915784][ T9928] dump_stack_lvl+0x100/0x190 [ 195.915812][ T9928] should_fail_ex.cold+0x5/0xa [ 195.915829][ T9928] should_failslab+0xc2/0x120 [ 195.915864][ T9928] __kmalloc_noprof+0xfc/0x840 [ 195.915881][ T9928] ? ops_init+0x77/0x5f0 [ 195.915898][ T9928] ops_init+0x77/0x5f0 [ 195.915914][ T9928] setup_net+0x118/0x3a0 [ 195.915928][ T9928] ? __pfx_setup_net+0x10/0x10 [ 195.915947][ T9928] copy_net_ns+0x345/0x7a0 [ 195.915965][ T9928] create_new_namespaces+0x3ea/0xac0 [ 195.915986][ T9928] unshare_nsproxy_namespaces+0xf2/0x220 [ 195.916005][ T9928] ksys_unshare+0x4a2/0xa70 [ 195.916019][ T9928] ? __pfx_ksys_unshare+0x10/0x10 [ 195.916037][ T9928] __ia32_sys_unshare+0x30/0x40 [ 195.916050][ T9928] __do_fast_syscall_32+0x13a/0x8b0 [ 195.916068][ T9928] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.916086][ T9928] do_fast_syscall_32+0x32/0x70 [ 195.916097][ T9928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.916111][ T9928] RIP: 0023:0xf7f34fec [ 195.916124][ T9928] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 195.916129][ T9928] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 195.916141][ T9928] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 195.916148][ T9928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.916154][ T9928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.916161][ T9928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.916168][ T9928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.916183][ T9928] [ 196.246766][ T9935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.770350][ T9955] tmpfs: Bad value for 'mpol' [ 197.270070][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 197.281670][ T9968] macvtap13: entered promiscuous mode [ 197.284078][ T9968] macvtap13: entered allmulticast mode [ 197.310465][ T5884] usb 6-1: USB disconnect, device number 7 [ 197.933084][ T9991] tmpfs: Bad value for 'mpol' [ 197.945876][ T9992] FAULT_INJECTION: forcing a failure. [ 197.945876][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 197.945905][ T9992] CPU: 3 UID: 0 PID: 9992 Comm: syz.3.1279 Not tainted syzkaller #0 PREEMPT(full) [ 197.945927][ T9992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.945939][ T9992] Call Trace: [ 197.945946][ T9992] [ 197.945953][ T9992] dump_stack_lvl+0x100/0x190 [ 197.945983][ T9992] should_fail_ex.cold+0x5/0xa [ 197.946007][ T9992] should_failslab+0xc2/0x120 [ 197.946035][ T9992] __kmalloc_cache_noprof+0x91/0x6d0 [ 197.946057][ T9992] ? police_init_net+0x56/0x270 [ 197.946082][ T9992] ? __pfx_police_init_net+0x10/0x10 [ 197.946104][ T9992] police_init_net+0x56/0x270 [ 197.946126][ T9992] ops_init+0x1e2/0x5f0 [ 197.946151][ T9992] setup_net+0x118/0x3a0 [ 197.946173][ T9992] ? __pfx_setup_net+0x10/0x10 [ 197.946202][ T9992] copy_net_ns+0x345/0x7a0 [ 197.946228][ T9992] create_new_namespaces+0x3ea/0xac0 [ 197.946263][ T9992] unshare_nsproxy_namespaces+0xf2/0x220 [ 197.946293][ T9992] ksys_unshare+0x4a2/0xa70 [ 197.946314][ T9992] ? __pfx_ksys_unshare+0x10/0x10 [ 197.946344][ T9992] __ia32_sys_unshare+0x30/0x40 [ 197.946363][ T9992] __do_fast_syscall_32+0x13a/0x8b0 [ 197.946413][ T9992] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.946447][ T9992] do_fast_syscall_32+0x32/0x70 [ 197.946465][ T9992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.946487][ T9992] RIP: 0023:0xf7f54fec [ 197.946507][ T9992] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 197.946517][ T9992] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 197.946536][ T9992] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 197.946548][ T9992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.946559][ T9992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.946570][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.946581][ T9992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.946608][ T9992] [ 198.129867][T10000] tmpfs: Bad value for 'mpol' [ 198.389320][T10006] FAULT_INJECTION: forcing a failure. [ 198.389320][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 198.389342][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.0.1282 Not tainted syzkaller #0 PREEMPT(full) [ 198.389356][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.389363][T10006] Call Trace: [ 198.389367][T10006] [ 198.389372][T10006] dump_stack_lvl+0x100/0x190 [ 198.389397][T10006] should_fail_ex.cold+0x5/0xa [ 198.389414][T10006] should_failslab+0xc2/0x120 [ 198.389433][T10006] __kmalloc_noprof+0xfc/0x840 [ 198.389455][T10006] ? ops_init+0x77/0x5f0 [ 198.389478][T10006] ops_init+0x77/0x5f0 [ 198.389503][T10006] setup_net+0x118/0x3a0 [ 198.389527][T10006] ? __pfx_setup_net+0x10/0x10 [ 198.389575][T10006] copy_net_ns+0x345/0x7a0 [ 198.389598][T10006] create_new_namespaces+0x3ea/0xac0 [ 198.389621][T10006] unshare_nsproxy_namespaces+0xf2/0x220 [ 198.389640][T10006] ksys_unshare+0x4a2/0xa70 [ 198.389653][T10006] ? __pfx_ksys_unshare+0x10/0x10 [ 198.389671][T10006] __ia32_sys_unshare+0x30/0x40 [ 198.389683][T10006] __do_fast_syscall_32+0x13a/0x8b0 [ 198.389701][T10006] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.389719][T10006] do_fast_syscall_32+0x32/0x70 [ 198.389730][T10006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.389745][T10006] RIP: 0023:0xf7f34fec [ 198.389759][T10006] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 198.389764][T10006] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 198.389775][T10006] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 198.389783][T10006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.389789][T10006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.389796][T10006] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.389803][T10006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.389827][T10006] [ 198.878495][T10010] FAULT_INJECTION: forcing a failure. [ 198.878495][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 198.878523][T10010] CPU: 1 UID: 0 PID: 10010 Comm: syz.1.1283 Not tainted syzkaller #0 PREEMPT(full) [ 198.878544][T10010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.878557][T10010] Call Trace: [ 198.878563][T10010] [ 198.878571][T10010] dump_stack_lvl+0x100/0x190 [ 198.878596][T10010] should_fail_ex.cold+0x5/0xa [ 198.878620][T10010] should_failslab+0xc2/0x120 [ 198.878649][T10010] __kmalloc_noprof+0xfc/0x840 [ 198.878670][T10010] ? ops_init+0x77/0x5f0 [ 198.878694][T10010] ops_init+0x77/0x5f0 [ 198.878717][T10010] setup_net+0x118/0x3a0 [ 198.878740][T10010] ? __pfx_setup_net+0x10/0x10 [ 198.878762][T10010] copy_net_ns+0x345/0x7a0 [ 198.878789][T10010] create_new_namespaces+0x3ea/0xac0 [ 198.878824][T10010] unshare_nsproxy_namespaces+0xf2/0x220 [ 198.878849][T10010] ksys_unshare+0x4a2/0xa70 [ 198.878894][T10010] ? __pfx_ksys_unshare+0x10/0x10 [ 198.878925][T10010] __ia32_sys_unshare+0x30/0x40 [ 198.878940][T10010] __do_fast_syscall_32+0x13a/0x8b0 [ 198.878967][T10010] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.878996][T10010] do_fast_syscall_32+0x32/0x70 [ 198.879013][T10010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.879031][T10010] RIP: 0023:0xf73fefec [ 198.879051][T10010] Code: Unable to access opcode bytes at 0xf73fefc2. [ 198.879059][T10010] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 198.879077][T10010] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 198.879088][T10010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.879098][T10010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.879104][T10010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.879113][T10010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.879139][T10010] [ 199.035276][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 199.053197][T10012] macvtap14: entered promiscuous mode [ 199.053449][T10012] macvtap14: entered allmulticast mode [ 199.121661][T10016] tmpfs: Bad value for 'mpol' [ 199.388492][T10020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.997225][T10065] tmpfs: Bad value for 'mpol' [ 201.150733][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'. [ 201.162088][T10075] macvtap15: entered promiscuous mode [ 201.163794][T10075] macvtap15: entered allmulticast mode [ 201.636354][T10063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.752074][T10093] tmpfs: Bad value for 'mpol' [ 201.960613][T10098] tmpfs: Bad value for 'mpol' [ 202.200699][T10100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.942134][T10112] tmpfs: Bad value for 'mpol' [ 203.154452][T10117] FAULT_INJECTION: forcing a failure. [ 203.154452][T10117] name failslab, interval 1, probability 0, space 0, times 0 [ 203.154485][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.2.1309 Not tainted syzkaller #0 PREEMPT(full) [ 203.154510][T10117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.154523][T10117] Call Trace: [ 203.154530][T10117] [ 203.154539][T10117] dump_stack_lvl+0x100/0x190 [ 203.154573][T10117] should_fail_ex.cold+0x5/0xa [ 203.154601][T10117] should_failslab+0xc2/0x120 [ 203.154634][T10117] __kmalloc_noprof+0xfc/0x840 [ 203.154661][T10117] ? ops_init+0x77/0x5f0 [ 203.154690][T10117] ops_init+0x77/0x5f0 [ 203.154717][T10117] setup_net+0x118/0x3a0 [ 203.154742][T10117] ? __pfx_setup_net+0x10/0x10 [ 203.154774][T10117] copy_net_ns+0x345/0x7a0 [ 203.154802][T10117] create_new_namespaces+0x3ea/0xac0 [ 203.154839][T10117] unshare_nsproxy_namespaces+0xf2/0x220 [ 203.154872][T10117] ksys_unshare+0x4a2/0xa70 [ 203.154895][T10117] ? __pfx_ksys_unshare+0x10/0x10 [ 203.154927][T10117] __ia32_sys_unshare+0x30/0x40 [ 203.154948][T10117] __do_fast_syscall_32+0x13a/0x8b0 [ 203.154979][T10117] ? lockdep_hardirqs_on+0x7d/0x110 [ 203.155010][T10117] do_fast_syscall_32+0x32/0x70 [ 203.155030][T10117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.155055][T10117] RIP: 0023:0xf7f92fec [ 203.155077][T10117] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 203.155086][T10117] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 203.155106][T10117] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 203.155119][T10117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.155130][T10117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.155141][T10117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.155153][T10117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.155181][T10117] [ 203.526185][T10126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'. [ 204.887772][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 205.225978][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 205.245898][T10165] macvtap16: entered promiscuous mode [ 205.246134][T10165] macvtap16: entered allmulticast mode [ 205.265072][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 205.266654][T10165] macvtap16: left promiscuous mode [ 205.266675][T10165] macvtap16: left allmulticast mode [ 205.313832][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'. [ 205.495407][T10183] FAULT_INJECTION: forcing a failure. [ 205.495407][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 205.495437][T10183] CPU: 2 UID: 0 PID: 10183 Comm: syz.1.1323 Not tainted syzkaller #0 PREEMPT(full) [ 205.495459][T10183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.495471][T10183] Call Trace: [ 205.495478][T10183] [ 205.495486][T10183] dump_stack_lvl+0x100/0x190 [ 205.495516][T10183] should_fail_ex.cold+0x5/0xa [ 205.495542][T10183] should_failslab+0xc2/0x120 [ 205.495570][T10183] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 205.495594][T10183] ? create_new_namespaces+0x3ea/0xac0 [ 205.495620][T10183] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 205.495646][T10183] ? sock_alloc_inode+0x26/0x2c0 [ 205.495672][T10183] ? __pfx_sock_alloc_inode+0x10/0x10 [ 205.495697][T10183] sock_alloc_inode+0x26/0x2c0 [ 205.495719][T10183] ? __pfx_sock_alloc_inode+0x10/0x10 [ 205.495755][T10183] alloc_inode+0x68/0x250 [ 205.495777][T10183] sock_alloc+0x44/0x280 [ 205.495798][T10183] ? security_socket_create+0x7f/0x250 [ 205.495830][T10183] sock_create_lite+0x82/0x120 [ 205.495855][T10183] __netlink_kernel_create+0xbd/0x750 [ 205.495883][T10183] ? __lock_acquire+0x5c0/0x1f40 [ 205.495910][T10183] ? __pfx___netlink_kernel_create+0x10/0x10 [ 205.495945][T10183] ? __pfx_diag_net_init+0x10/0x10 [ 205.495964][T10183] diag_net_init+0xbd/0x140 [ 205.495983][T10183] ? __pfx_diag_net_init+0x10/0x10 [ 205.496001][T10183] ? find_held_lock+0x2b/0x80 [ 205.496023][T10183] ? __pfx_sock_diag_rcv+0x10/0x10 [ 205.496040][T10183] ? __pfx_sock_diag_bind+0x10/0x10 [ 205.496060][T10183] ? __raw_spin_lock_init+0x3a/0x110 [ 205.496081][T10183] ? __pfx_cma_init_net+0x10/0x10 [ 205.496103][T10183] ops_init+0x1e2/0x5f0 [ 205.496127][T10183] setup_net+0x118/0x3a0 [ 205.496149][T10183] ? __pfx_setup_net+0x10/0x10 [ 205.496177][T10183] copy_net_ns+0x345/0x7a0 [ 205.496203][T10183] create_new_namespaces+0x3ea/0xac0 [ 205.496235][T10183] unshare_nsproxy_namespaces+0xf2/0x220 [ 205.496264][T10183] ksys_unshare+0x4a2/0xa70 [ 205.496284][T10183] ? __pfx_ksys_unshare+0x10/0x10 [ 205.496313][T10183] __ia32_sys_unshare+0x30/0x40 [ 205.496331][T10183] __do_fast_syscall_32+0x13a/0x8b0 [ 205.496366][T10183] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.496394][T10183] do_fast_syscall_32+0x32/0x70 [ 205.496413][T10183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.496438][T10183] RIP: 0023:0xf73fefec [ 205.496459][T10183] Code: Unable to access opcode bytes at 0xf73fefc2. [ 205.496467][T10183] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 205.496486][T10183] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 205.496499][T10183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.496509][T10183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.496519][T10183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.496532][T10183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.496558][T10183] [ 207.116279][T10220] tmpfs: Bad value for 'mpol' [ 207.378213][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 207.385383][T10226] macvtap17: entered promiscuous mode [ 207.385459][T10226] macvtap17: entered allmulticast mode [ 207.396350][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 207.398627][T10228] tmpfs: Bad value for 'mpol' [ 207.408360][T10226] macvtap17: left promiscuous mode [ 207.408373][T10226] macvtap17: left allmulticast mode [ 207.953584][T10261] FAULT_INJECTION: forcing a failure. [ 207.953584][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 207.953617][T10261] CPU: 3 UID: 0 PID: 10261 Comm: syz.0.1335 Not tainted syzkaller #0 PREEMPT(full) [ 207.953641][T10261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.953654][T10261] Call Trace: [ 207.953662][T10261] [ 207.953671][T10261] dump_stack_lvl+0x100/0x190 [ 207.953704][T10261] should_fail_ex.cold+0x5/0xa [ 207.953732][T10261] should_failslab+0xc2/0x120 [ 207.953765][T10261] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.953808][T10261] ? __proc_create+0xc1/0x8f0 [ 207.953826][T10261] ? __proc_create+0x247/0x8f0 [ 207.953849][T10261] __proc_create+0x247/0x8f0 [ 207.953870][T10261] ? __pfx___proc_create+0x10/0x10 [ 207.953900][T10261] proc_mkdir+0x81/0x170 [ 207.953919][T10261] ? __pfx_proc_mkdir+0x10/0x10 [ 207.953937][T10261] ? cache_register_net+0x137/0x5e0 [ 207.953960][T10261] ? cache_register_net+0x137/0x5e0 [ 207.953986][T10261] cache_register_net+0x18f/0x5e0 [ 207.954011][T10261] nfsd_export_init+0xb6/0x250 [ 207.954043][T10261] ? __pfx_nfsd_net_init+0x10/0x10 [ 207.954068][T10261] nfsd_net_init+0x69/0x480 [ 207.954095][T10261] ? __pfx_nfsd_net_init+0x10/0x10 [ 207.954121][T10261] ops_init+0x1e2/0x5f0 [ 207.954148][T10261] setup_net+0x118/0x3a0 [ 207.954173][T10261] ? __pfx_setup_net+0x10/0x10 [ 207.954204][T10261] copy_net_ns+0x345/0x7a0 [ 207.954233][T10261] create_new_namespaces+0x3ea/0xac0 [ 207.954271][T10261] unshare_nsproxy_namespaces+0xf2/0x220 [ 207.954303][T10261] ksys_unshare+0x4a2/0xa70 [ 207.954331][T10261] ? __pfx_ksys_unshare+0x10/0x10 [ 207.954363][T10261] __ia32_sys_unshare+0x30/0x40 [ 207.954385][T10261] __do_fast_syscall_32+0x13a/0x8b0 [ 207.954416][T10261] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.954449][T10261] do_fast_syscall_32+0x32/0x70 [ 207.954468][T10261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.954492][T10261] RIP: 0023:0xf7f34fec [ 207.954515][T10261] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 207.954524][T10261] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 207.954544][T10261] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 207.954555][T10261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.954569][T10261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.954580][T10261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.954592][T10261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.954620][T10261] [ 208.165886][T10271] tmpfs: Bad value for 'mpol' [ 208.554307][T10288] FAULT_INJECTION: forcing a failure. [ 208.554307][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.554328][T10288] CPU: 2 UID: 0 PID: 10288 Comm: syz.2.1341 Not tainted syzkaller #0 PREEMPT(full) [ 208.554341][T10288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.554348][T10288] Call Trace: [ 208.554351][T10288] [ 208.554356][T10288] dump_stack_lvl+0x100/0x190 [ 208.554376][T10288] should_fail_ex.cold+0x5/0xa [ 208.554391][T10288] _copy_from_iter+0x1f4/0x1690 [ 208.554413][T10288] ? __pfx__copy_from_iter+0x10/0x10 [ 208.554432][T10288] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 208.554452][T10288] ? lock_acquire+0x1d1/0x380 [ 208.554471][T10288] copy_page_from_iter+0x238/0x300 [ 208.554490][T10288] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 208.554507][T10288] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 208.554521][T10288] ? __lock_acquire+0x5c0/0x1f40 [ 208.554543][T10288] ? aa_file_perm+0x197/0x14d0 [ 208.554559][T10288] ? find_held_lock+0x2b/0x80 [ 208.554574][T10288] tun_get_user+0x1674/0x3cc0 [ 208.554590][T10288] ? __lock_acquire+0x5c0/0x1f40 [ 208.554606][T10288] ? __pfx_tun_get_user+0x10/0x10 [ 208.554618][T10288] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 208.554637][T10288] ? find_held_lock+0x2b/0x80 [ 208.554649][T10288] ? tun_get+0x191/0x370 [ 208.554658][T10288] ? tun_get+0x191/0x370 [ 208.554672][T10288] tun_chr_write_iter+0xdc/0x200 [ 208.554684][T10288] vfs_write+0x6af/0x1050 [ 208.554699][T10288] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 208.554712][T10288] ? __pfx_vfs_write+0x10/0x10 [ 208.554725][T10288] ? find_held_lock+0x2b/0x80 [ 208.554746][T10288] ksys_write+0x12a/0x250 [ 208.554759][T10288] ? __pfx_ksys_write+0x10/0x10 [ 208.554777][T10288] do_int80_emulation+0x166/0x650 [ 208.554796][T10288] asm_int80_emulation+0x1a/0x20 [ 208.554808][T10288] RIP: 0023:0xf71875eb [ 208.554817][T10288] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 208.554827][T10288] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 208.554839][T10288] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 208.554846][T10288] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.554852][T10288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.554859][T10288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.554865][T10288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.554878][T10288] [ 209.184176][T10308] tmpfs: Bad value for 'mpol' [ 209.295629][T10311] binder: 10310:10311 ioctl c0306201 800003c0 returned -14 [ 209.295964][T10311] FAULT_INJECTION: forcing a failure. [ 209.295964][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 209.295980][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.3.1345 Not tainted syzkaller #0 PREEMPT(full) [ 209.295993][T10311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.295999][T10311] Call Trace: [ 209.296003][T10311] [ 209.296007][T10311] dump_stack_lvl+0x100/0x190 [ 209.296027][T10311] should_fail_ex.cold+0x5/0xa [ 209.296042][T10311] should_failslab+0xc2/0x120 [ 209.296059][T10311] __kmalloc_noprof+0xfc/0x840 [ 209.296075][T10311] ? tomoyo_encode2+0xfb/0x3c0 [ 209.296092][T10311] tomoyo_encode2+0xfb/0x3c0 [ 209.296108][T10311] tomoyo_encode+0x29/0x50 [ 209.296122][T10311] tomoyo_realpath_from_path+0x18c/0x690 [ 209.296140][T10311] tomoyo_path_number_perm+0x23c/0x580 [ 209.296152][T10311] ? tomoyo_path_number_perm+0x22e/0x580 [ 209.296165][T10311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.296178][T10311] ? get_pid_task+0x106/0x250 [ 209.296194][T10311] ? __lock_acquire+0x5c0/0x1f40 [ 209.296217][T10311] ? __fget_files+0x34/0x3d0 [ 209.296231][T10311] ? find_held_lock+0x2b/0x80 [ 209.296244][T10311] ? __fget_files+0x215/0x3d0 [ 209.296258][T10311] ? hook_file_ioctl_common+0x140/0x440 [ 209.296275][T10311] ? __fget_files+0x215/0x3d0 [ 209.296292][T10311] ? __fget_files+0x21f/0x3d0 [ 209.296309][T10311] security_file_ioctl_compat+0xd3/0x230 [ 209.296323][T10311] __ia32_compat_sys_ioctl+0xc2/0x360 [ 209.296338][T10311] __do_fast_syscall_32+0x13a/0x8b0 [ 209.296356][T10311] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.296373][T10311] do_fast_syscall_32+0x32/0x70 [ 209.296396][T10311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.296411][T10311] RIP: 0023:0xf7f54fec [ 209.296423][T10311] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 209.296428][T10311] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 209.296439][T10311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 209.296446][T10311] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.296453][T10311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.296459][T10311] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.296466][T10311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.296480][T10311] [ 209.296604][T10311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.467919][T10319] tmpfs: Bad value for 'mpol' [ 209.901213][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.901688][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.902186][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.902648][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.902834][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.903009][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.903208][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.903380][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.903552][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.903723][T10316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.226461][T10358] tmpfs: Bad value for 'mpol' [ 211.412902][T10364] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 211.433994][T10367] tmpfs: Bad value for 'mpol' [ 211.451965][T10364] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 211.469438][T10364] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 211.482097][T10364] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 211.548283][T10372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.618713][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 211.624161][T10377] macvtap18: entered promiscuous mode [ 211.624227][T10377] macvtap18: entered allmulticast mode [ 211.644440][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 211.645161][T10377] macvtap18: left promiscuous mode [ 211.645173][T10377] macvtap18: left allmulticast mode [ 211.833288][T10385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1361'. [ 212.664657][T10389] binder: 10388:10389 ioctl c0306201 80001000 returned -22 [ 212.817266][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 213.118784][T10392] binder: 10388:10392 ioctl 4018620d 80000040 returned -22 [ 213.121521][T10392] binder: 10388:10392 ioctl c0306201 800003c0 returned -14 [ 213.122685][T10392] binder: 10388:10392 ioctl c0306201 80000000 returned -14 [ 213.312625][T10412] FAULT_INJECTION: forcing a failure. [ 213.312625][T10412] name failslab, interval 1, probability 0, space 0, times 0 [ 213.312645][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz.3.1364 Not tainted syzkaller #0 PREEMPT(full) [ 213.312657][T10412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.312664][T10412] Call Trace: [ 213.312668][T10412] [ 213.312672][T10412] dump_stack_lvl+0x100/0x190 [ 213.312692][T10412] should_fail_ex.cold+0x5/0xa [ 213.312707][T10412] should_failslab+0xc2/0x120 [ 213.312724][T10412] __kmalloc_noprof+0xfc/0x840 [ 213.312739][T10412] ? __pfx_dynamic_dname+0x10/0x10 [ 213.312752][T10412] ? tomoyo_encode2+0xfb/0x3c0 [ 213.312769][T10412] tomoyo_encode2+0xfb/0x3c0 [ 213.312785][T10412] tomoyo_encode+0x29/0x50 [ 213.312799][T10412] tomoyo_realpath_from_path+0x18c/0x690 [ 213.312818][T10412] tomoyo_path_number_perm+0x23c/0x580 [ 213.312830][T10412] ? tomoyo_path_number_perm+0x22e/0x580 [ 213.312843][T10412] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.312857][T10412] ? get_pid_task+0x106/0x250 [ 213.312873][T10412] ? __lock_acquire+0x5c0/0x1f40 [ 213.312896][T10412] ? __fget_files+0x34/0x3d0 [ 213.312911][T10412] ? find_held_lock+0x2b/0x80 [ 213.312924][T10412] ? __fget_files+0x215/0x3d0 [ 213.312938][T10412] ? hook_file_ioctl_common+0x140/0x440 [ 213.312950][T10412] ? __fget_files+0x215/0x3d0 [ 213.312967][T10412] ? __fget_files+0x21f/0x3d0 [ 213.312984][T10412] security_file_ioctl_compat+0xd3/0x230 [ 213.312998][T10412] __ia32_compat_sys_ioctl+0xc2/0x360 [ 213.313013][T10412] __do_fast_syscall_32+0x13a/0x8b0 [ 213.313031][T10412] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.313049][T10412] do_fast_syscall_32+0x32/0x70 [ 213.313059][T10412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.313073][T10412] RIP: 0023:0xf7f54fec [ 213.313086][T10412] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 213.313091][T10412] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 213.313102][T10412] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 213.313109][T10412] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.313115][T10412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.313121][T10412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.313128][T10412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.313148][T10412] [ 213.313157][T10412] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.278786][T10431] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 214.647253][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 214.666085][T10452] macvtap19: entered promiscuous mode [ 214.666155][T10452] macvtap19: entered allmulticast mode [ 214.707006][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 214.734342][T10452] macvtap19: left promiscuous mode [ 214.734383][T10452] macvtap19: left allmulticast mode [ 214.782245][T10456] FAULT_INJECTION: forcing a failure. [ 214.782245][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 214.782276][T10456] CPU: 1 UID: 0 PID: 10456 Comm: syz.1.1371 Not tainted syzkaller #0 PREEMPT(full) [ 214.782299][T10456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.782310][T10456] Call Trace: [ 214.782324][T10456] [ 214.782333][T10456] dump_stack_lvl+0x100/0x190 [ 214.782362][T10456] should_fail_ex.cold+0x5/0xa [ 214.782385][T10456] should_failslab+0xc2/0x120 [ 214.782414][T10456] __kmalloc_noprof+0xfc/0x840 [ 214.782442][T10456] ? ops_init+0x77/0x5f0 [ 214.782469][T10456] ops_init+0x77/0x5f0 [ 214.782491][T10456] setup_net+0x118/0x3a0 [ 214.782513][T10456] ? __pfx_setup_net+0x10/0x10 [ 214.782544][T10456] copy_net_ns+0x345/0x7a0 [ 214.782573][T10456] create_new_namespaces+0x3ea/0xac0 [ 214.782609][T10456] unshare_nsproxy_namespaces+0xf2/0x220 [ 214.782642][T10456] ksys_unshare+0x4a2/0xa70 [ 214.782664][T10456] ? __pfx_ksys_unshare+0x10/0x10 [ 214.782730][T10456] __ia32_sys_unshare+0x30/0x40 [ 214.782753][T10456] __do_fast_syscall_32+0x13a/0x8b0 [ 214.782784][T10456] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.782816][T10456] do_fast_syscall_32+0x32/0x70 [ 214.782834][T10456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.782855][T10456] RIP: 0023:0xf73fefec [ 214.782877][T10456] Code: Unable to access opcode bytes at 0xf73fefc2. [ 214.782886][T10456] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 214.782905][T10456] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 214.782917][T10456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.782929][T10456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.782941][T10456] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.782953][T10456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.782981][T10456] [ 214.890251][T10461] FAULT_INJECTION: forcing a failure. [ 214.890251][T10461] name failslab, interval 1, probability 0, space 0, times 0 [ 214.890281][T10461] CPU: 1 UID: 0 PID: 10461 Comm: syz.2.1372 Not tainted syzkaller #0 PREEMPT(full) [ 214.890301][T10461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.890311][T10461] Call Trace: [ 214.890317][T10461] [ 214.890324][T10461] dump_stack_lvl+0x100/0x190 [ 214.890354][T10461] should_fail_ex.cold+0x5/0xa [ 214.890377][T10461] should_failslab+0xc2/0x120 [ 214.890404][T10461] __kmalloc_noprof+0xfc/0x840 [ 214.890428][T10461] ? __pfx_dynamic_dname+0x10/0x10 [ 214.890448][T10461] ? tomoyo_encode2+0xfb/0x3c0 [ 214.890477][T10461] tomoyo_encode2+0xfb/0x3c0 [ 214.890503][T10461] tomoyo_encode+0x29/0x50 [ 214.890524][T10461] tomoyo_realpath_from_path+0x18c/0x690 [ 214.890553][T10461] tomoyo_path_number_perm+0x23c/0x580 [ 214.890571][T10461] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.890592][T10461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.890612][T10461] ? get_pid_task+0x106/0x250 [ 214.890639][T10461] ? __lock_acquire+0x5c0/0x1f40 [ 214.890677][T10461] ? __fget_files+0x34/0x3d0 [ 214.890701][T10461] ? find_held_lock+0x2b/0x80 [ 214.890721][T10461] ? __fget_files+0x215/0x3d0 [ 214.890746][T10461] ? hook_file_ioctl_common+0x140/0x440 [ 214.890767][T10461] ? __fget_files+0x215/0x3d0 [ 214.890794][T10461] ? __fget_files+0x21f/0x3d0 [ 214.890821][T10461] security_file_ioctl_compat+0xd3/0x230 [ 214.890843][T10461] __ia32_compat_sys_ioctl+0xc2/0x360 [ 214.890867][T10461] __do_fast_syscall_32+0x13a/0x8b0 [ 214.890895][T10461] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.890923][T10461] do_fast_syscall_32+0x32/0x70 [ 214.890939][T10461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.890960][T10461] RIP: 0023:0xf7f92fec [ 214.890978][T10461] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 214.890986][T10461] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 214.891003][T10461] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448e2 [ 214.891014][T10461] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.891024][T10461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.891034][T10461] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.891044][T10461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.891069][T10461] [ 214.891084][T10461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.988715][T10465] syzkaller0: entered promiscuous mode [ 214.988728][T10465] syzkaller0: entered allmulticast mode [ 215.010921][T10468] FAULT_INJECTION: forcing a failure. [ 215.010921][T10468] name failslab, interval 1, probability 0, space 0, times 0 [ 215.010941][T10468] CPU: 1 UID: 0 PID: 10468 Comm: syz.0.1368 Not tainted syzkaller #0 PREEMPT(full) [ 215.010954][T10468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.010961][T10468] Call Trace: [ 215.010964][T10468] [ 215.010969][T10468] dump_stack_lvl+0x100/0x190 [ 215.010988][T10468] should_fail_ex.cold+0x5/0xa [ 215.011003][T10468] should_failslab+0xc2/0x120 [ 215.011020][T10468] __kmalloc_noprof+0xfc/0x840 [ 215.011036][T10468] ? tomoyo_encode2+0xfb/0x3c0 [ 215.011053][T10468] tomoyo_encode2+0xfb/0x3c0 [ 215.011070][T10468] tomoyo_encode+0x29/0x50 [ 215.011083][T10468] tomoyo_realpath_from_path+0x18c/0x690 [ 215.011101][T10468] tomoyo_path_number_perm+0x23c/0x580 [ 215.011113][T10468] ? tomoyo_path_number_perm+0x22e/0x580 [ 215.011126][T10468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.011140][T10468] ? get_pid_task+0x106/0x250 [ 215.011174][T10468] ? __lock_acquire+0x5c0/0x1f40 [ 215.011200][T10468] ? __fget_files+0x34/0x3d0 [ 215.011215][T10468] ? find_held_lock+0x2b/0x80 [ 215.011228][T10468] ? __fget_files+0x215/0x3d0 [ 215.011241][T10468] ? hook_file_ioctl_common+0x140/0x440 [ 215.011254][T10468] ? __fget_files+0x215/0x3d0 [ 215.011271][T10468] ? __fget_files+0x21f/0x3d0 [ 215.011288][T10468] security_file_ioctl_compat+0xd3/0x230 [ 215.011302][T10468] __ia32_compat_sys_ioctl+0xc2/0x360 [ 215.011317][T10468] __do_fast_syscall_32+0x13a/0x8b0 [ 215.011335][T10468] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.011352][T10468] do_fast_syscall_32+0x32/0x70 [ 215.011363][T10468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.011377][T10468] RIP: 0023:0xf7f34fec [ 215.011390][T10468] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 215.011395][T10468] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 215.011407][T10468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040046109 [ 215.011414][T10468] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.011420][T10468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.011427][T10468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.011433][T10468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.011448][T10468] [ 215.011458][T10468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.062450][T10489] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 216.146378][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.203008][T10498] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 217.049546][ T5826] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 217.209573][ T5826] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.210369][ T5826] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 217.210393][ T5826] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.210404][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.212010][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.212023][ T5826] usb 8-1: Product: syz [ 217.212031][ T5826] usb 8-1: Manufacturer: syz [ 217.212038][ T5826] usb 8-1: SerialNumber: syz [ 217.213365][ T5826] usb 8-1: config 0 descriptor?? [ 217.216972][ T5826] hub 8-1:0.0: bad descriptor, ignoring hub [ 217.216987][ T5826] hub 8-1:0.0: probe with driver hub failed with error -5 [ 217.257222][ T5826] usb 8-1: selecting invalid altsetting 0 [ 217.374126][T10569] FAULT_INJECTION: forcing a failure. [ 217.374126][T10569] name failslab, interval 1, probability 0, space 0, times 0 [ 217.374149][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.1.1386 Not tainted syzkaller #0 PREEMPT(full) [ 217.374164][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.374171][T10569] Call Trace: [ 217.374175][T10569] [ 217.374180][T10569] dump_stack_lvl+0x100/0x190 [ 217.374201][T10569] should_fail_ex.cold+0x5/0xa [ 217.374217][T10569] should_failslab+0xc2/0x120 [ 217.374237][T10569] __kmalloc_noprof+0xfc/0x840 [ 217.374253][T10569] ? ops_init+0x77/0x5f0 [ 217.374270][T10569] ops_init+0x77/0x5f0 [ 217.374285][T10569] setup_net+0x118/0x3a0 [ 217.374299][T10569] ? __pfx_setup_net+0x10/0x10 [ 217.374317][T10569] copy_net_ns+0x345/0x7a0 [ 217.374333][T10569] create_new_namespaces+0x3ea/0xac0 [ 217.374354][T10569] unshare_nsproxy_namespaces+0xf2/0x220 [ 217.374373][T10569] ksys_unshare+0x4a2/0xa70 [ 217.374386][T10569] ? __pfx_ksys_unshare+0x10/0x10 [ 217.374405][T10569] __ia32_sys_unshare+0x30/0x40 [ 217.374417][T10569] __do_fast_syscall_32+0x13a/0x8b0 [ 217.374438][T10569] do_fast_syscall_32+0x32/0x70 [ 217.374449][T10569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.374464][T10569] RIP: 0023:0xf73fefec [ 217.374476][T10569] Code: Unable to access opcode bytes at 0xf73fefc2. [ 217.374481][T10569] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 217.374493][T10569] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 217.374500][T10569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.374507][T10569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.374514][T10569] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.374521][T10569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.374537][T10569] [ 217.430637][T10572] FAULT_INJECTION: forcing a failure. [ 217.430637][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.430667][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.0.1387 Not tainted syzkaller #0 PREEMPT(full) [ 217.430686][T10572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.430696][T10572] Call Trace: [ 217.430702][T10572] [ 217.430709][T10572] dump_stack_lvl+0x100/0x190 [ 217.430738][T10572] should_fail_ex.cold+0x5/0xa [ 217.430760][T10572] _copy_from_iter+0x1f4/0x1690 [ 217.430783][T10572] ? __pfx__copy_from_iter+0x10/0x10 [ 217.430802][T10572] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.430821][T10572] ? lock_acquire+0x1d1/0x380 [ 217.430840][T10572] copy_page_from_iter+0x238/0x300 [ 217.430860][T10572] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 217.430878][T10572] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 217.430891][T10572] ? __lock_acquire+0x5c0/0x1f40 [ 217.430914][T10572] ? aa_file_perm+0x197/0x14d0 [ 217.430929][T10572] ? find_held_lock+0x2b/0x80 [ 217.430944][T10572] tun_get_user+0x1674/0x3cc0 [ 217.430961][T10572] ? __lock_acquire+0x5c0/0x1f40 [ 217.430977][T10572] ? __pfx_tun_get_user+0x10/0x10 [ 217.430989][T10572] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.431008][T10572] ? find_held_lock+0x2b/0x80 [ 217.431020][T10572] ? tun_get+0x191/0x370 [ 217.431030][T10572] ? tun_get+0x191/0x370 [ 217.431055][T10572] tun_chr_write_iter+0xdc/0x200 [ 217.431071][T10572] vfs_write+0x6af/0x1050 [ 217.431086][T10572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.431099][T10572] ? __pfx_vfs_write+0x10/0x10 [ 217.431111][T10572] ? find_held_lock+0x2b/0x80 [ 217.431133][T10572] ksys_write+0x12a/0x250 [ 217.431165][T10572] ? __pfx_ksys_write+0x10/0x10 [ 217.431188][T10572] do_int80_emulation+0x166/0x650 [ 217.431208][T10572] asm_int80_emulation+0x1a/0x20 [ 217.431219][T10572] RIP: 0023:0xf71275eb [ 217.431229][T10572] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 217.431239][T10572] RSP: 002b:00000000f53e644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 217.431251][T10572] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800002c0 [ 217.431257][T10572] RDX: 00000000000000a2 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.431264][T10572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.431270][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.431276][T10572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.431290][T10572] [ 217.912860][T10527] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 218.676042][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 218.676059][ T43] audit: type=1804 audit(1791433847.060:731): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1394" name="bus" dev="ramfs" ino=37686 res=1 errno=0 [ 218.676822][ T43] audit: type=1804 audit(1791433847.060:732): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1394" name="bus" dev="ramfs" ino=37686 res=1 errno=0 [ 218.879967][T10610] FAULT_INJECTION: forcing a failure. [ 218.879967][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 218.879993][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.0.1396 Not tainted syzkaller #0 PREEMPT(full) [ 218.880012][T10610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.880022][T10610] Call Trace: [ 218.880030][T10610] [ 218.880037][T10610] dump_stack_lvl+0x100/0x190 [ 218.880066][T10610] should_fail_ex.cold+0x5/0xa [ 218.880087][T10610] should_failslab+0xc2/0x120 [ 218.880120][T10610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 218.880146][T10610] ? dst_alloc+0x99/0x1a0 [ 218.880167][T10610] dst_alloc+0x99/0x1a0 [ 218.880187][T10610] rt_dst_alloc+0x35/0x3a0 [ 218.880211][T10610] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 218.880252][T10610] ip_route_output_key_hash+0x118/0x2b0 [ 218.880270][T10610] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 218.880291][T10610] ? udp_sendmsg+0x6db/0x2710 [ 218.880312][T10610] ? find_held_lock+0x2b/0x80 [ 218.880337][T10610] ip_route_output_flow+0x27/0x150 [ 218.880356][T10610] udp_sendmsg+0x19c5/0x2710 [ 218.880384][T10610] ? __pfx_udp_sendmsg+0x10/0x10 [ 218.880405][T10610] ? __lock_acquire+0x5c0/0x1f40 [ 218.880442][T10610] ? release_sock+0x21/0x280 [ 218.880466][T10610] ? inet_autobind+0x145/0x1a0 [ 218.880487][T10610] ? find_held_lock+0x2b/0x80 [ 218.880511][T10610] ? lockdep_hardirqs_on+0x7d/0x110 [ 218.880537][T10610] ? inet_autobind+0x145/0x1a0 [ 218.880557][T10610] ? __local_bh_enable_ip+0xa5/0x120 [ 218.880584][T10610] ? inet_autobind+0x14a/0x1a0 [ 218.880605][T10610] ? __pfx_udp_sendmsg+0x10/0x10 [ 218.880627][T10610] inet_sendmsg+0x105/0x140 [ 218.880653][T10610] __sys_sendto+0x453/0x4e0 [ 218.880669][T10610] ? __pfx_inet_sendmsg+0x10/0x10 [ 218.880694][T10610] ? __pfx___sys_sendto+0x10/0x10 [ 218.880730][T10610] ? fput+0x7c/0x100 [ 218.880755][T10610] ? ksys_write+0x1ac/0x250 [ 218.880778][T10610] __ia32_sys_sendto+0xdd/0x1b0 [ 218.880796][T10610] ? __do_fast_syscall_32+0xb3/0x8b0 [ 218.880821][T10610] ? lockdep_hardirqs_on+0x7d/0x110 [ 218.880845][T10610] __do_fast_syscall_32+0x13a/0x8b0 [ 218.880870][T10610] ? lockdep_hardirqs_on+0x7d/0x110 [ 218.880895][T10610] do_fast_syscall_32+0x32/0x70 [ 218.880912][T10610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.880933][T10610] RIP: 0023:0xf7f34fec [ 218.880953][T10610] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 218.880961][T10610] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 218.880977][T10610] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 218.880988][T10610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000900 [ 218.880998][T10610] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 218.881007][T10610] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 218.881018][T10610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.881043][T10610] [ 218.996791][T10599] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 219.092400][T10599] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.310155][T10527] usb 8-1: device firmware changed [ 219.312231][ T1351] usb 8-1: USB disconnect, device number 10 [ 219.637704][T10615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.302098][T10654] batman_adv: batadv0: Adding interface: syzkaller0 [ 220.302111][T10654] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.302163][T10654] batman_adv: batadv0: Interface activated: syzkaller0 [ 220.307890][T10654] FAULT_INJECTION: forcing a failure. [ 220.307890][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 220.307912][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 220.307927][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.307934][T10654] Call Trace: [ 220.307938][T10654] [ 220.307943][T10654] dump_stack_lvl+0x100/0x190 [ 220.307982][T10654] should_fail_ex.cold+0x5/0xa [ 220.308000][T10654] should_failslab+0xc2/0x120 [ 220.308020][T10654] __kmalloc_cache_noprof+0x91/0x6d0 [ 220.308034][T10654] ? batadv_orig_ifinfo_new+0x94/0x420 [ 220.308055][T10654] batadv_orig_ifinfo_new+0x94/0x420 [ 220.308073][T10654] batadv_iv_ogm_process_per_outif+0x274/0x3980 [ 220.308099][T10654] ? lock_acquire+0x1d1/0x380 [ 220.308117][T10654] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 220.308135][T10654] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 220.308158][T10654] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 220.308183][T10654] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 220.308202][T10654] ? __pfx___up_read+0x10/0x10 [ 220.308213][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.308227][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.308243][T10654] batadv_batman_skb_recv+0x5e0/0x850 [ 220.308264][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.308285][T10654] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.308304][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.308323][T10654] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 220.308345][T10654] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 220.308366][T10654] ? lock_acquire+0x1d1/0x380 [ 220.308390][T10654] __netif_receive_skb+0x1f/0x120 [ 220.308411][T10654] netif_receive_skb+0x139/0x7d0 [ 220.308430][T10654] ? __pfx_netif_receive_skb+0x10/0x10 [ 220.308449][T10654] ? _copy_from_iter+0x270/0x1690 [ 220.308472][T10654] tun_rx_batched.isra.0+0x3f6/0x750 [ 220.308494][T10654] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 220.308518][T10654] ? tun_get_user+0x1e1e/0x3cc0 [ 220.308534][T10654] tun_get_user+0x1f53/0x3cc0 [ 220.308552][T10654] ? __lock_acquire+0x5c0/0x1f40 [ 220.308570][T10654] ? __pfx_tun_get_user+0x10/0x10 [ 220.308584][T10654] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 220.308604][T10654] ? find_held_lock+0x2b/0x80 [ 220.308618][T10654] ? tun_get+0x191/0x370 [ 220.308628][T10654] ? tun_get+0x191/0x370 [ 220.308643][T10654] tun_chr_write_iter+0xdc/0x200 [ 220.308670][T10654] vfs_write+0x6af/0x1050 [ 220.308688][T10654] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 220.308705][T10654] ? __pfx_vfs_write+0x10/0x10 [ 220.308720][T10654] ? find_held_lock+0x2b/0x80 [ 220.308743][T10654] ksys_write+0x12a/0x250 [ 220.308758][T10654] ? __pfx_ksys_write+0x10/0x10 [ 220.308777][T10654] __do_fast_syscall_32+0x13a/0x8b0 [ 220.308799][T10654] do_fast_syscall_32+0x32/0x70 [ 220.308810][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.308827][T10654] RIP: 0023:0xf7f34fec [ 220.308842][T10654] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 220.308848][T10654] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 220.308860][T10654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 220.308868][T10654] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 220.308875][T10654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.308882][T10654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.308889][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.308905][T10654] [ 220.309547][T10654] ------------[ cut here ]------------ [ 220.309555][T10654] !orig_ifinfo [ 220.309559][T10654] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x2d62/0x3980, CPU#0: syz.0.1404/10654 [ 220.461675][T10654] Modules linked in: [ 220.463399][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 220.467088][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.471261][T10654] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.474243][T10654] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 220.481951][T10654] RSP: 0018:ffffc9000d557460 EFLAGS: 00010202 [ 220.484456][T10654] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000200 [ 220.487715][T10654] RDX: ffff88802ae82580 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 220.491007][T10654] RBP: ffff888054420040 R08: 0000000000000001 R09: 0000000000000000 [ 220.494304][T10654] R10: 0000000000000001 R11: 000000000005f594 R12: dffffc0000000000 [ 220.497026][T10654] R13: ffff888014f28000 R14: ffff88806fa51a40 R15: ffff88806ae50000 [ 220.499436][T10654] FS: 0000000000000000(0000) GS:ffff88809574d000(0063) knlGS:00000000f53e6b40 [ 220.502088][T10654] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 220.504062][T10654] CR2: 00000000f7f35000 CR3: 000000007794e000 CR4: 0000000000352ef0 [ 220.506363][T10654] Call Trace: [ 220.507370][T10654] [ 220.508299][T10654] ? lock_acquire+0x1d1/0x380 [ 220.509786][T10654] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 220.511689][T10654] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 220.513992][T10654] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 220.515974][T10654] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 220.517975][T10654] ? __pfx___up_read+0x10/0x10 [ 220.519728][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.521536][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.523495][T10654] batadv_batman_skb_recv+0x5e0/0x850 [ 220.525468][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.527745][T10654] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.529720][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.531973][T10654] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 220.534189][T10654] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 220.536564][T10654] ? lock_acquire+0x1d1/0x380 [ 220.538305][T10654] __netif_receive_skb+0x1f/0x120 [ 220.540265][T10654] netif_receive_skb+0x139/0x7d0 [ 220.541995][T10654] ? __pfx_netif_receive_skb+0x10/0x10 [ 220.543967][T10654] ? _copy_from_iter+0x270/0x1690 [ 220.545812][T10654] tun_rx_batched.isra.0+0x3f6/0x750 [ 220.547666][T10654] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 220.549826][T10654] ? tun_get_user+0x1e1e/0x3cc0 [ 220.551269][T10654] tun_get_user+0x1f53/0x3cc0 [ 220.552680][T10654] ? __lock_acquire+0x5c0/0x1f40 [ 220.554196][T10654] ? __pfx_tun_get_user+0x10/0x10 [ 220.555695][T10654] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 220.557300][T10654] ? find_held_lock+0x2b/0x80 [ 220.558712][T10654] ? tun_get+0x191/0x370 [ 220.560053][T10654] ? tun_get+0x191/0x370 [ 220.561336][T10654] tun_chr_write_iter+0xdc/0x200 [ 220.562886][T10654] vfs_write+0x6af/0x1050 [ 220.564247][T10654] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 220.565903][T10654] ? __pfx_vfs_write+0x10/0x10 [ 220.567401][T10654] ? find_held_lock+0x2b/0x80 [ 220.568828][T10654] ksys_write+0x12a/0x250 [ 220.570191][T10654] ? __pfx_ksys_write+0x10/0x10 [ 220.571656][T10654] __do_fast_syscall_32+0x13a/0x8b0 [ 220.573199][T10654] do_fast_syscall_32+0x32/0x70 [ 220.574655][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.576586][T10654] RIP: 0023:0xf7f34fec [ 220.577814][T10654] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 220.579834][T10654] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 220.582370][T10654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 220.584732][T10654] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 220.587084][T10654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.589873][T10654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.592258][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.594674][T10654] [ 220.595639][T10654] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.597811][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 220.600590][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.603640][T10654] Call Trace: [ 220.604654][T10654] [ 220.605542][T10654] dump_stack_lvl+0x100/0x190 [ 220.606942][T10654] vpanic+0x553/0x970 [ 220.608148][T10654] ? __pfx_vpanic+0x10/0x10 [ 220.609512][T10654] panic+0xd1/0xe0 [ 220.610660][T10654] ? __pfx_panic+0x10/0x10 [ 220.612023][T10654] check_panic_on_warn.cold+0x19/0x34 [ 220.613583][T10654] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.615485][T10654] __warn.cold+0x191/0x318 [ 220.616842][T10654] __report_bug+0x30f/0x440 [ 220.618185][T10654] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.620103][T10654] ? __pfx___report_bug+0x10/0x10 [ 220.621598][T10654] ? dump_stack_lvl+0x176/0x190 [ 220.623093][T10654] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 220.624922][T10654] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.626832][T10654] report_bug+0xb3/0x220 [ 220.628135][T10654] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.630090][T10654] handle_bug+0x16a/0x2a0 [ 220.631391][T10654] exc_invalid_op+0x17/0x50 [ 220.632765][T10654] asm_exc_invalid_op+0x1a/0x20 [ 220.634221][T10654] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 220.636281][T10654] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 220.641930][T10654] RSP: 0018:ffffc9000d557460 EFLAGS: 00010202 [ 220.643764][T10654] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000200 [ 220.646081][T10654] RDX: ffff88802ae82580 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 220.648489][T10654] RBP: ffff888054420040 R08: 0000000000000001 R09: 0000000000000000 [ 220.650801][T10654] R10: 0000000000000001 R11: 000000000005f594 R12: dffffc0000000000 [ 220.653148][T10654] R13: ffff888014f28000 R14: ffff88806fa51a40 R15: ffff88806ae50000 [ 220.655542][T10654] ? batadv_iv_ogm_process_per_outif+0x2d61/0x3980 [ 220.657491][T10654] ? lock_acquire+0x1d1/0x380 [ 220.658921][T10654] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 220.660551][T10654] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 220.662551][T10654] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 220.664192][T10654] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 220.665927][T10654] ? __pfx___up_read+0x10/0x10 [ 220.667499][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.669088][T10654] ? do_user_addr_fault+0x7d7/0x12f0 [ 220.670688][T10654] batadv_batman_skb_recv+0x5e0/0x850 [ 220.672310][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.674061][T10654] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.675593][T10654] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 220.677350][T10654] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 220.679096][T10654] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 220.681027][T10654] ? lock_acquire+0x1d1/0x380 [ 220.682439][T10654] __netif_receive_skb+0x1f/0x120 [ 220.684006][T10654] netif_receive_skb+0x139/0x7d0 [ 220.685516][T10654] ? __pfx_netif_receive_skb+0x10/0x10 [ 220.687159][T10654] ? _copy_from_iter+0x270/0x1690 [ 220.688707][T10654] tun_rx_batched.isra.0+0x3f6/0x750 [ 220.690290][T10654] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 220.692042][T10654] ? tun_get_user+0x1e1e/0x3cc0 [ 220.693505][T10654] tun_get_user+0x1f53/0x3cc0 [ 220.694908][T10654] ? __lock_acquire+0x5c0/0x1f40 [ 220.696434][T10654] ? __pfx_tun_get_user+0x10/0x10 [ 220.697983][T10654] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 220.699770][T10654] ? find_held_lock+0x2b/0x80 [ 220.701189][T10654] ? tun_get+0x191/0x370 [ 220.702458][T10654] ? tun_get+0x191/0x370 [ 220.703753][T10654] tun_chr_write_iter+0xdc/0x200 [ 220.705235][T10654] vfs_write+0x6af/0x1050 [ 220.706518][T10654] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 220.708221][T10654] ? __pfx_vfs_write+0x10/0x10 [ 220.709691][T10654] ? find_held_lock+0x2b/0x80 [ 220.711103][T10654] ksys_write+0x12a/0x250 [ 220.712441][T10654] ? __pfx_ksys_write+0x10/0x10 [ 220.713908][T10654] __do_fast_syscall_32+0x13a/0x8b0 [ 220.715463][T10654] do_fast_syscall_32+0x32/0x70 [ 220.716917][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.718898][T10654] RIP: 0023:0xf7f34fec [ 220.720189][T10654] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 220.722248][T10654] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 220.724885][T10654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 220.727322][T10654] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 220.729761][T10654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.732214][T10654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.734645][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.737100][T10654] [ 220.738692][T10654] Kernel Offset: disabled [ 220.740052][T10654] Rebooting in 86400 seconds..