last executing test programs: 2.020296006s ago: executing program 1 (id=2262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf252e0000000c000500000000000000000005002b000000000008000200", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 2.017770874s ago: executing program 1 (id=2266): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4d, 0x215, 0x2, 0x0, 0x7, 0x0, 0xfff9}, 0xc) 1.939851848s ago: executing program 1 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.880046645s ago: executing program 2 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2c, 0x3, {0x0, 0x0, 0xffff}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x6, 0x88, 0x9c7}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) 1.832518023s ago: executing program 2 (id=2278): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.765038274s ago: executing program 2 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x2000600d) 1.716440292s ago: executing program 2 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0x2, 0x14, 0x10, 0xe, 0x3, 0x0, 0x0, 0x3, 0x10000}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x804) 1.637327789s ago: executing program 2 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}}, 0x0) 1.569467765s ago: executing program 2 (id=2293): r0 = syz_io_uring_setup(0x315d, &(0x7f0000000200)={0x0, 0xcfca, 0x8, 0xfffffffd, 0x1000005}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x700, 0x0) 277.017812ms ago: executing program 3 (id=2330): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x3, 0x10}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 276.855185ms ago: executing program 0 (id=2331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0xffff, {0x4, 0x2}}, 0xfffffcb9) 276.532662ms ago: executing program 0 (id=2332): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 275.724683ms ago: executing program 3 (id=2333): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 230.033059ms ago: executing program 1 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000ff0000000094d170b5a8000000fbffffff181100", @ANYRES32, @ANYBLOB], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 229.704397ms ago: executing program 3 (id=2335): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000002140)) 179.465362ms ago: executing program 0 (id=2336): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000500)="9de0c7962c", &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 179.076755ms ago: executing program 1 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e, 0x800}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 179.00896ms ago: executing program 3 (id=2338): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0xfffffffffffffd26, 0x0, 0x0, 0x20040018}, 0x4) 129.861446ms ago: executing program 1 (id=2339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 129.707196ms ago: executing program 3 (id=2340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0xffff, {0x4, 0x2}}, 0xfffffcb9) 56.079871ms ago: executing program 3 (id=2341): socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000007b080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 55.944133ms ago: executing program 0 (id=2342): mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00') 123.668µs ago: executing program 0 (id=2343): syz_io_uring_setup(0x13e5, &(0x7f00000000c0)={0x0, 0x434b, 0x1000, 0x3, 0x341}, &(0x7f0000000140), &(0x7f00000001c0), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) 0s ago: executing program 0 (id=2344): r0 = io_uring_setup(0x358f, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) kernel console output (not intermixed with test programs): de2+0xfb/0x3c0 [ 521.772447][T13282] tomoyo_encode2+0xfb/0x3c0 [ 521.772477][T13282] tomoyo_encode+0x29/0x50 [ 521.772501][T13282] tomoyo_realpath_from_path+0x18c/0x690 [ 521.772534][T13282] tomoyo_path_number_perm+0x23c/0x580 [ 521.772555][T13282] ? tomoyo_path_number_perm+0x22e/0x580 [ 521.772579][T13282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 521.772607][T13282] ? get_pid_task+0x106/0x250 [ 521.772655][T13282] ? find_held_lock+0x2b/0x80 [ 521.772677][T13282] ? __fget_files+0x215/0x3d0 [ 521.772693][T13282] ? hook_file_ioctl_common+0x140/0x440 [ 521.772715][T13282] ? __fget_files+0x215/0x3d0 [ 521.772735][T13282] ? __fget_files+0x21f/0x3d0 [ 521.772756][T13282] security_file_ioctl_compat+0xd3/0x230 [ 521.772800][T13282] __ia32_compat_sys_ioctl+0xc2/0x360 [ 521.772830][T13282] __do_fast_syscall_32+0xe7/0x970 [ 521.772858][T13282] ? lockdep_hardirqs_on+0x78/0x100 [ 521.772884][T13282] do_fast_syscall_32+0x32/0x70 [ 521.772911][T13282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.772934][T13282] RIP: 0023:0xf7f17fec [ 521.772959][T13282] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 521.772967][T13282] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 521.772987][T13282] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008922 [ 521.772998][T13282] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.773007][T13282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.773018][T13282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.773028][T13282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.773052][T13282] [ 521.773069][T13282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 521.855291][T13282] tipc: Resetting bearer [ 521.860884][T13281] tipc: Resetting bearer [ 521.884090][T13281] tipc: Disabling bearer [ 521.986054][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 522.454199][T13293] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 522.539854][T13293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.587484][T13294] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 522.794481][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 522.798943][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 523.059951][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 523.062082][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 523.569959][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 523.572963][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 523.936313][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 523.943802][T13303] hsr_slave_0: left promiscuous mode [ 523.946326][T13303] hsr_slave_1: left promiscuous mode [ 525.089743][ T5641] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 525.221115][ T5641] usb 6-1: device descriptor read/64, error -71 [ 525.244312][T13292] ceph: No mds server is up or the cluster is laggy [ 525.245835][T13326] netlink: 'syz.0.1758': attribute type 3 has an invalid length. [ 525.251539][T12940] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 525.270739][ T5838] usb 44-1: device descriptor read/8, error -110 [ 525.470404][ T5641] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 525.599785][ T5641] usb 6-1: device descriptor read/64, error -71 [ 525.639735][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 525.660463][ T5838] usb usb44-port1: attempt power cycle [ 525.710424][ T5641] usb usb6-port1: attempt power cycle [ 525.789717][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 525.793781][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 525.797147][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 525.801020][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 525.804907][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 525.808804][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 525.813018][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 525.818597][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 525.822516][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.828688][ T10] usb 8-1: config 0 descriptor?? [ 526.046554][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 526.060959][ T5641] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 526.090802][ T5641] usb 6-1: device descriptor read/8, error -71 [ 526.220722][ T5838] usb usb44-port1: unable to enumerate USB device [ 526.309360][ T5838] usb 8-1: USB disconnect, device number 26 [ 526.315703][ T5838] usblp0: removed [ 526.350863][ T5641] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 526.362891][T13341] lo speed is unknown, defaulting to 1000 [ 526.370654][ T5641] usb 6-1: device descriptor read/8, error -71 [ 526.396940][T13342] ptrace attach of "/syz-executor exec"[5734] was attempted by ""[13342] [ 526.429997][ T5809] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 526.458267][T13341] tipc: Enabling of bearer rejected, already enabled [ 526.479946][ T5641] usb usb6-port1: unable to enumerate USB device [ 526.598983][ T5809] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 526.602847][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 526.606307][ T5809] usb 5-1: Product: syz [ 526.608065][ T5809] usb 5-1: Manufacturer: syz [ 526.610500][ T5809] usb 5-1: SerialNumber: syz [ 526.615289][ T5809] usb 5-1: config 0 descriptor?? [ 526.626837][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 526.629793][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 526.722693][T13347] ceph: No mds server is up or the cluster is laggy [ 526.942950][ T6557] usb 5-1: USB disconnect, device number 16 [ 527.381198][T13365] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.388511][ T5838] IPVS: starting estimator thread 0... [ 527.489779][T13367] IPVS: using max 26 ests per chain, 62400 per kthread [ 527.669831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.122312][T13377] lo speed is unknown, defaulting to 1000 [ 528.149695][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.174228][T13378] ptrace attach of "/syz-executor exec"[5733] was attempted by ""[13378] [ 528.180010][T13370] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 528.219748][T13378] tipc: Enabling of bearer rejected, already enabled [ 528.263647][T13380] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 528.291229][ T24] libceph: connect (1)[c::]:6789 error -101 [ 528.293506][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 528.400656][T13380] ceph: No mds server is up or the cluster is laggy [ 528.526521][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 528.528779][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 528.709722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.807165][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 528.809929][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 528.987525][T13409] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 528.992478][T13409] FAULT_INJECTION: forcing a failure. [ 528.992478][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.996685][T13409] CPU: 3 UID: 0 PID: 13409 Comm: syz.3.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.996703][T13409] Tainted: [L]=SOFTLOCKUP [ 528.996707][T13409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 528.996714][T13409] Call Trace: [ 528.996721][T13409] [ 528.996726][T13409] dump_stack_lvl+0x100/0x190 [ 528.996748][T13409] should_fail_ex.cold+0x5/0xa [ 528.996765][T13409] _copy_to_user+0x32/0xd0 [ 528.996784][T13409] simple_read_from_buffer+0xcb/0x170 [ 528.996807][T13409] proc_fail_nth_read+0x1af/0x230 [ 528.996826][T13409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.996844][T13409] ? rw_verify_area+0xce/0x6d0 [ 528.996862][T13409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.996879][T13409] vfs_read+0x1e4/0xb40 [ 528.996892][T13409] ? __pfx_vfs_read+0x10/0x10 [ 528.996902][T13409] ? find_held_lock+0x2b/0x80 [ 528.996919][T13409] ? __fget_files+0x215/0x3d0 [ 528.996933][T13409] ? __fget_files+0x21f/0x3d0 [ 528.996947][T13409] ksys_read+0x12a/0x250 [ 528.996957][T13409] ? __pfx_ksys_read+0x10/0x10 [ 528.996972][T13409] do_int80_emulation+0x14b/0x720 [ 528.996993][T13409] asm_int80_emulation+0x1a/0x20 [ 528.997005][T13409] RIP: 0023:0xf71f74eb [ 528.997015][T13409] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 528.997026][T13409] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 528.997037][T13409] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54ad5d0 [ 528.997044][T13409] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 528.997050][T13409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.997057][T13409] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 528.997063][T13409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 528.997077][T13409] [ 529.122596][T13411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 529.189776][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.237462][T13419] netlink: 'syz.3.1784': attribute type 3 has an invalid length. [ 529.238338][T12940] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 529.283155][T13420] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 529.322771][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 529.323479][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 529.411098][T13422] lo speed is unknown, defaulting to 1000 [ 529.549589][T13422] ptrace attach of "/syz-executor exec"[5733] was attempted by " [ 529.571369][T13422] tipc: Enabling of bearer rejected, already enabled [ 529.749739][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.114000][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 530.116344][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 530.230080][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.259435][T13427] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 530.380101][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 530.382249][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 530.390167][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 530.392752][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 530.789728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.890179][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 530.892501][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 531.269684][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.275973][T13448] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 531.289189][T13448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.302726][T13448] FAULT_INJECTION: forcing a failure. [ 531.302726][T13448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.307578][T13448] CPU: 2 UID: 0 PID: 13448 Comm: syz.0.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.307602][T13448] Tainted: [L]=SOFTLOCKUP [ 531.307608][T13448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.307617][T13448] Call Trace: [ 531.307624][T13448] [ 531.307631][T13448] dump_stack_lvl+0x100/0x190 [ 531.307657][T13448] should_fail_ex.cold+0x5/0xa [ 531.307676][T13448] _copy_from_iter+0x1f4/0x1690 [ 531.307702][T13448] ? __asan_memset+0x23/0x50 [ 531.307721][T13448] ? __pfx__copy_from_iter+0x10/0x10 [ 531.307742][T13448] ? __pfx___alloc_skb+0x10/0x10 [ 531.307773][T13448] netlink_sendmsg+0x808/0xda0 [ 531.307812][T13448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.307832][T13448] ? apparmor_socket_sendmsg+0x15b/0x270 [ 531.307851][T13448] ____sys_sendmsg+0xa4d/0xbe0 [ 531.307868][T13448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.307892][T13448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.307923][T13448] ___sys_sendmsg+0x190/0x1e0 [ 531.307945][T13448] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.307976][T13448] ? find_held_lock+0x2b/0x80 [ 531.308014][T13448] __sys_sendmsg+0x160/0x210 [ 531.308042][T13448] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.308074][T13448] ? __pfx_ksys_write+0x10/0x10 [ 531.308098][T13448] __do_fast_syscall_32+0xe7/0x970 [ 531.308126][T13448] ? lockdep_hardirqs_on+0x78/0x100 [ 531.308159][T13448] do_fast_syscall_32+0x32/0x70 [ 531.308186][T13448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.308211][T13448] RIP: 0023:0xf7f48fec [ 531.308234][T13448] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 531.308243][T13448] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 531.308261][T13448] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 531.308273][T13448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.308282][T13448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.308293][T13448] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 531.308302][T13448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.308326][T13448] [ 531.335870][T13453] block nbd0: Unsupported socket: should be TCP or UNIX. [ 531.407235][T13456] lo speed is unknown, defaulting to 1000 [ 531.432518][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 531.435310][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 531.444861][T13457] ptrace attach of "/syz-executor exec"[5736] was attempted by " [ 531.461946][T13457] tipc: Enabling of bearer rejected, already enabled [ 531.497948][T13395] ceph: No mds server is up or the cluster is laggy [ 531.638494][T13464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 531.772350][T13466] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 531.829852][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.033242][T13472] Cannot find add_set index 2 as target [ 532.220796][T13475] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1800'. [ 532.223954][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'. [ 532.390200][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 532.393308][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 532.404606][T13477] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1801'. [ 532.460326][T13481] tmpfs: Bad value for 'size' [ 532.475287][T13483] netlink: 'syz.2.1804': attribute type 10 has an invalid length. [ 532.479518][T13483] ªªªªªª: renamed from vlan0 (while UP) [ 532.536235][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 532.536254][ T42] audit: type=1326 audit(1786217109.640:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.3.1805" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 532.588475][T13490] syzkaller0: entered promiscuous mode [ 532.590662][T13490] syzkaller0: entered allmulticast mode [ 532.605575][T13490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 532.807268][T13496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 532.847347][T13428] ceph: No mds server is up or the cluster is laggy [ 532.869805][ C1] net_ratelimit: 1 callbacks suppressed [ 532.869824][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.349816][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.416122][ T42] audit: type=1800 audit(1786217110.520:2569): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1812" name="attr_allow_any_host" dev="configfs" ino=41486 res=0 errno=0 [ 533.424188][T13508] fuse: Bad value for 'fd' [ 533.491257][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 533.611093][T13517] program syz.0.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.748633][T13519] pim6reg: entered allmulticast mode [ 533.763930][T13519] pim6reg: left allmulticast mode [ 533.910051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.939396][T13528] fuse: Bad value for 'fd' [ 534.118018][T13536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 534.276347][T13535] lo speed is unknown, defaulting to 1000 [ 534.351187][T13538] ptrace attach of "/syz-executor exec"[5734] was attempted by " [ 534.389757][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.479963][T13538] tipc: Enabling of bearer rejected, already enabled [ 534.781441][T13544] syzkaller0: entered promiscuous mode [ 534.783312][T13544] syzkaller0: entered allmulticast mode [ 534.951531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.985293][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 535.024286][T13547] program syz.1.1827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.032241][T13552] syzkaller0: entered promiscuous mode [ 535.039166][T13552] syzkaller0: entered allmulticast mode [ 535.069202][ T42] audit: type=1326 audit(1786217112.170:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.092908][ T42] audit: type=1326 audit(1786217112.170:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.093041][T13557] fuse: Bad value for 'fd' [ 535.100104][ T42] audit: type=1326 audit(1786217112.170:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.108543][ T42] audit: type=1326 audit(1786217112.180:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.115534][ T42] audit: type=1326 audit(1786217112.180:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.124555][ T42] audit: type=1326 audit(1786217112.180:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a74eb code=0x7ffc0000 [ 535.131619][ T42] audit: type=1326 audit(1786217112.180:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.138956][ T42] audit: type=1326 audit(1786217112.180:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 535.207350][T13561] program syz.3.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.391693][T13569] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 535.406560][T13569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.428818][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 535.433308][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.438741][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 535.443724][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 535.447993][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 535.452581][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 535.457843][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 535.462455][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 535.466867][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 535.471309][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 535.475687][T13569] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 535.480342][T13569] jffs2: Further such events for this erase block will not be printed [ 535.483790][T13569] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 535.486651][T13569] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 535.490783][T13569] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 535.517473][T13569] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 535.523558][T13569] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 535.614591][T13578] FAULT_INJECTION: forcing a failure. [ 535.614591][T13578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.629297][T13578] CPU: 2 UID: 0 PID: 13578 Comm: syz.1.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.629328][T13578] Tainted: [L]=SOFTLOCKUP [ 535.629335][T13578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.629347][T13578] Call Trace: [ 535.629355][T13578] [ 535.629376][T13578] dump_stack_lvl+0x100/0x190 [ 535.629404][T13578] should_fail_ex.cold+0x5/0xa [ 535.629427][T13578] _copy_from_user+0x2e/0xd0 [ 535.629457][T13578] __do_sys_add_key+0x278/0x460 [ 535.629478][T13578] ? __pfx___do_sys_add_key+0x10/0x10 [ 535.629494][T13578] ? fput+0x79/0x100 [ 535.629518][T13578] ? __pfx_ksys_write+0x10/0x10 [ 535.629541][T13578] __do_fast_syscall_32+0xe7/0x970 [ 535.629569][T13578] ? lockdep_hardirqs_on+0x78/0x100 [ 535.629611][T13578] do_fast_syscall_32+0x32/0x70 [ 535.629640][T13578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.629664][T13578] RIP: 0023:0xf7f17fec [ 535.629686][T13578] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 535.629695][T13578] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 535.629714][T13578] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 535.629726][T13578] RDX: 0000000080000200 RSI: 0000000000000005 RDI: 000000000dc7e404 [ 535.629737][T13578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.629748][T13578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 535.629758][T13578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.629782][T13578] [ 535.631458][T13572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.829302][T13573] bond2: (slave geneve2): making interface the new active one [ 535.837606][T13573] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 535.861203][T13461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.864313][T13461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.867615][T13461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.874747][T13461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.989917][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.999079][T13586] FAULT_INJECTION: forcing a failure. [ 535.999079][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 536.006483][T13586] CPU: 3 UID: 0 PID: 13586 Comm: syz.3.1842 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.006513][T13586] Tainted: [L]=SOFTLOCKUP [ 536.006519][T13586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.006529][T13586] Call Trace: [ 536.006536][T13586] [ 536.006543][T13586] dump_stack_lvl+0x100/0x190 [ 536.006569][T13586] should_fail_ex.cold+0x5/0xa [ 536.006591][T13586] should_failslab+0xc2/0x120 [ 536.006615][T13586] __kmalloc_noprof+0xfc/0x820 [ 536.006638][T13586] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 536.006666][T13586] kernfs_fop_write_iter+0x26a/0x5f0 [ 536.006696][T13586] aio_write+0x3ba/0x920 [ 536.006717][T13586] ? __pfx_aio_write+0x10/0x10 [ 536.006735][T13586] ? __lock_acquire+0x49f/0x1a40 [ 536.006774][T13586] ? __might_fault+0xc5/0x140 [ 536.006799][T13586] ? io_submit_one+0x1142/0x1fb0 [ 536.006816][T13586] io_submit_one+0x1142/0x1fb0 [ 536.006837][T13586] ? __lock_acquire+0x49f/0x1a40 [ 536.006865][T13586] ? __pfx_io_submit_one+0x10/0x10 [ 536.006891][T13586] ? __might_fault+0xc5/0x140 [ 536.006914][T13586] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 536.006934][T13586] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 536.006954][T13586] ? __fget_files+0x21f/0x3d0 [ 536.006972][T13586] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 536.006995][T13586] ? ksys_write+0x1ac/0x250 [ 536.007010][T13586] ? __pfx_ksys_write+0x10/0x10 [ 536.007030][T13586] __do_fast_syscall_32+0xe7/0x970 [ 536.007056][T13586] ? lockdep_hardirqs_on+0x78/0x100 [ 536.007081][T13586] do_fast_syscall_32+0x32/0x70 [ 536.007105][T13586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.007144][T13586] RIP: 0023:0xf70befec [ 536.007166][T13586] Code: Unable to access opcode bytes at 0xf70befc2. [ 536.007174][T13586] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 536.007192][T13586] RAX: ffffffffffffffda RBX: 00000000f748f000 RCX: 0000000000000001 [ 536.007203][T13586] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.007213][T13586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.007222][T13586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.007232][T13586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.007254][T13586] [ 536.140093][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 536.145682][T13584] FAULT_INJECTION: forcing a failure. [ 536.145682][T13584] name failslab, interval 1, probability 0, space 0, times 0 [ 536.156068][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.1.1841 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.156115][T13584] Tainted: [L]=SOFTLOCKUP [ 536.156122][T13584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.156132][T13584] Call Trace: [ 536.156139][T13584] [ 536.156146][T13584] dump_stack_lvl+0x100/0x190 [ 536.156172][T13584] should_fail_ex.cold+0x5/0xa [ 536.156194][T13584] should_failslab+0xc2/0x120 [ 536.156219][T13584] __kvmalloc_node_noprof+0x116/0x970 [ 536.156240][T13584] ? __might_fault+0xc5/0x140 [ 536.156260][T13584] ? xt_alloc_table_info+0x44/0xa0 [ 536.156300][T13584] xt_alloc_table_info+0x44/0xa0 [ 536.156322][T13584] compat_do_replace+0x19b/0x500 [ 536.156356][T13584] ? __lock_acquire+0x49f/0x1a40 [ 536.156383][T13584] ? __pfx_compat_do_replace+0x10/0x10 [ 536.156419][T13584] ? bpf_lsm_capable+0x9/0x10 [ 536.156439][T13584] ? security_capable+0x80/0x260 [ 536.156460][T13584] do_ipt_set_ctl+0x2cb/0xbc0 [ 536.156483][T13584] ? nf_sockopt_find.isra.0+0x222/0x290 [ 536.156517][T13584] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 536.156539][T13584] ? __mutex_unlock_slowpath+0x35d/0x930 [ 536.156566][T13584] ? sockopt_release_sock+0x5c/0x70 [ 536.156591][T13584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 536.156617][T13584] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 536.156646][T13584] ? nf_sockopt_find.isra.0+0x222/0x290 [ 536.156669][T13584] nf_setsockopt+0x8d/0xf0 [ 536.156692][T13584] ip_setsockopt+0xcb/0xf0 [ 536.156718][T13584] udp_setsockopt+0x64/0xb0 [ 536.156740][T13584] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 536.156756][T13584] do_sock_setsockopt+0xf3/0x1d0 [ 536.156784][T13584] __sys_setsockopt+0x119/0x190 [ 536.156810][T13584] __ia32_sys_setsockopt+0xbc/0x160 [ 536.156830][T13584] ? __do_fast_syscall_32+0x98/0x970 [ 536.156853][T13584] ? lockdep_hardirqs_on+0x78/0x100 [ 536.156875][T13584] __do_fast_syscall_32+0xe7/0x970 [ 536.156897][T13584] ? lockdep_hardirqs_on+0x78/0x100 [ 536.156920][T13584] do_fast_syscall_32+0x32/0x70 [ 536.156944][T13584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.156964][T13584] RIP: 0023:0xf7f17fec [ 536.156986][T13584] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 536.156993][T13584] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 536.157010][T13584] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 536.157020][T13584] RDX: 0000000000000040 RSI: 0000000080000600 RDI: 0000000000000a7c [ 536.157030][T13584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.157039][T13584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.157048][T13584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.157067][T13584] [ 536.469798][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.520413][T13594] overlayfs: failed to clone upperpath [ 536.650453][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1844'. [ 536.673681][T13600] Cannot find add_set index 2 as target [ 536.836276][T13607] FAULT_INJECTION: forcing a failure. [ 536.836276][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 536.841962][T13607] CPU: 3 UID: 0 PID: 13607 Comm: syz.1.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.841983][T13607] Tainted: [L]=SOFTLOCKUP [ 536.841988][T13607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.841995][T13607] Call Trace: [ 536.842000][T13607] [ 536.842005][T13607] dump_stack_lvl+0x100/0x190 [ 536.842026][T13607] should_fail_ex.cold+0x5/0xa [ 536.842041][T13607] should_failslab+0xc2/0x120 [ 536.842060][T13607] __kmalloc_noprof+0xfc/0x820 [ 536.842075][T13607] ? __lock_acquire+0x49f/0x1a40 [ 536.842095][T13607] ? tomoyo_encode2+0xfb/0x3c0 [ 536.842116][T13607] tomoyo_encode2+0xfb/0x3c0 [ 536.842136][T13607] tomoyo_encode+0x29/0x50 [ 536.842153][T13607] tomoyo_mount_acl+0x14c/0x8b0 [ 536.842168][T13607] ? is_bpf_text_address+0x8a/0x1a0 [ 536.842188][T13607] ? is_bpf_text_address+0x8a/0x1a0 [ 536.842206][T13607] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.842226][T13607] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 536.842242][T13607] ? kernel_text_address+0x8d/0x100 [ 536.842262][T13607] ? unwind_get_return_address+0x59/0xa0 [ 536.842282][T13607] ? arch_stack_walk+0xa6/0xf0 [ 536.842313][T13607] ? tomoyo_domain+0xb2/0x150 [ 536.842324][T13607] ? tomoyo_profile+0x47/0x60 [ 536.842337][T13607] tomoyo_mount_permission+0x214/0x460 [ 536.842354][T13607] ? tomoyo_mount_permission+0x1f6/0x460 [ 536.842372][T13607] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 536.842419][T13607] security_sb_mount+0xdd/0x270 [ 536.842435][T13607] path_mount+0x158/0x23d0 [ 536.842453][T13607] ? __pfx_path_mount+0x10/0x10 [ 536.842467][T13607] ? lockdep_hardirqs_on+0x78/0x100 [ 536.842487][T13607] ? putname+0xb1/0x110 [ 536.842500][T13607] ? kmem_cache_free+0x127/0x6b0 [ 536.842518][T13607] ? __ia32_sys_mount+0x292/0x310 [ 536.842532][T13607] __ia32_sys_mount+0x292/0x310 [ 536.842547][T13607] ? __pfx___ia32_sys_mount+0x10/0x10 [ 536.842562][T13607] ? ksys_write+0x1ac/0x250 [ 536.842579][T13607] ? __pfx_ksys_write+0x10/0x10 [ 536.842593][T13607] __do_fast_syscall_32+0xe7/0x970 [ 536.842614][T13607] ? lockdep_hardirqs_on+0x78/0x100 [ 536.842632][T13607] do_fast_syscall_32+0x32/0x70 [ 536.842650][T13607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.842666][T13607] RIP: 0023:0xf7f17fec [ 536.842680][T13607] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 536.842686][T13607] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 536.842697][T13607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800001c0 [ 536.842704][T13607] RDX: 0000000000000000 RSI: 0000000000003020 RDI: 0000000000000000 [ 536.842711][T13607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.842718][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.842724][T13607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.842738][T13607] [ 537.029831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.110952][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 537.132414][T13613] Cannot find add_set index 2 as target [ 537.509825][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.585993][T13622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1853'. [ 537.604811][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.655699][T11423] libceph: connect (1)[c::]:6789 error -101 [ 537.667398][T11423] libceph: mon0 (1)[c::]:6789 connect error [ 537.683762][T11423] libceph: connect (1)[c::]:6789 error -101 [ 537.691863][T11423] libceph: mon0 (1)[c::]:6789 connect error [ 537.819268][T13615] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 537.950253][T11423] libceph: connect (1)[c::]:6789 error -101 [ 537.953655][T11423] libceph: mon0 (1)[c::]:6789 connect error [ 538.069767][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.252190][T13631] fuse: fd is not a fuse device [ 538.260740][T13631] fuse: fd is not a fuse device [ 538.462528][T11423] libceph: connect (1)[c::]:6789 error -101 [ 538.469866][T11423] libceph: mon0 (1)[c::]:6789 connect error [ 538.549722][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.856028][T13650] lo speed is unknown, defaulting to 1000 [ 538.902231][T13651] ptrace attach of "/syz-executor exec"[5729] was attempted by " [ 538.969484][T13651] tipc: Enabling of bearer rejected, already enabled [ 539.109719][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.351731][T11423] libceph: connect (1)[c::]:6789 error -101 [ 539.354446][T11423] libceph: mon0 (1)[c::]:6789 connect error [ 539.589749][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.159779][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.331498][T13618] ceph: No mds server is up or the cluster is laggy [ 540.423279][T13677] binder: 13676:13677 ioctl c0306201 80000080 returned -14 [ 540.426356][T13677] FAULT_INJECTION: forcing a failure. [ 540.426356][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.432158][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.0.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.432181][T13677] Tainted: [L]=SOFTLOCKUP [ 540.432185][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.432193][T13677] Call Trace: [ 540.432197][T13677] [ 540.432202][T13677] dump_stack_lvl+0x100/0x190 [ 540.432220][T13677] should_fail_ex.cold+0x5/0xa [ 540.432235][T13677] _copy_from_user+0x2e/0xd0 [ 540.432255][T13677] ? __pfx_binder_ioctl+0x10/0x10 [ 540.432314][T13677] binder_ioctl+0x4cb/0x74a0 [ 540.432333][T13677] ? find_held_lock+0x2b/0x80 [ 540.432349][T13677] ? tomoyo_path_number_perm+0x28f/0x580 [ 540.432364][T13677] ? tomoyo_path_number_perm+0x28f/0x580 [ 540.432381][T13677] ? tomoyo_path_number_perm+0x188/0x580 [ 540.432396][T13677] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.432411][T13677] ? __pfx_binder_ioctl+0x10/0x10 [ 540.432431][T13677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.432449][T13677] ? do_vfs_ioctl+0x226/0x13e0 [ 540.432467][T13677] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 540.432487][T13677] ? find_held_lock+0x2b/0x80 [ 540.432501][T13677] ? __fget_files+0x215/0x3d0 [ 540.432511][T13677] ? hook_file_ioctl_common+0x140/0x440 [ 540.432529][T13677] ? __fget_files+0x21f/0x3d0 [ 540.432541][T13677] ? __pfx_binder_ioctl+0x10/0x10 [ 540.432558][T13677] compat_ptr_ioctl+0x6e/0xa0 [ 540.432574][T13677] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 540.432589][T13677] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 540.432610][T13677] __do_fast_syscall_32+0xe7/0x970 [ 540.432630][T13677] ? lockdep_hardirqs_on+0x78/0x100 [ 540.432647][T13677] do_fast_syscall_32+0x32/0x70 [ 540.432666][T13677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.432686][T13677] RIP: 0023:0xf7f48fec [ 540.432707][T13677] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 540.432713][T13677] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 540.432728][T13677] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 540.432738][T13677] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.432747][T13677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.432757][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.432765][T13677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.432779][T13677] [ 540.432785][T13677] binder: 13676:13677 ioctl c0306201 800003c0 returned -14 [ 540.445488][T13675] lo speed is unknown, defaulting to 1000 [ 540.549996][T13682] ptrace attach of "/syz-executor exec"[5729] was attempted by " [ 540.594440][T13682] tipc: Enabling of bearer rejected, already enabled [ 540.629762][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.065632][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 541.065652][ T42] audit: type=1804 audit(1786217118.170:2629): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1884" name="file0" dev="tmpfs" ino=2707 res=1 errno=0 [ 541.073941][T13706] ref_ctr increment failed for inode: 0xa93 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804c0f0cc0 [ 541.191157][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.504191][T13705] uprobe: syz.2.1884:13705 failed to unregister, leaking uprobe [ 541.669694][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.229726][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.457680][T13731] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 542.709780][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.269709][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.336392][T13736] lo speed is unknown, defaulting to 1000 [ 543.371459][T13737] ptrace attach of "/syz-executor exec"[5734] was attempted by " [ 543.395959][T13737] tipc: Enabling of bearer rejected, already enabled [ 543.483553][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1895'. [ 543.730350][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 543.749708][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.934959][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.946619][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 543.979484][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 543.989576][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.006891][ T10] usb 5-1: Product: syz [ 544.016466][ T10] usb 5-1: Manufacturer: syz [ 544.029123][ T10] usb 5-1: SerialNumber: syz [ 544.309839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.483099][T13753] Console: switching to colour dummy device 80x25 [ 544.493777][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 544.541298][ T10] usb 5-1: USB disconnect, device number 17 [ 544.591790][ T10] usblp0: removed [ 544.790547][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.221687][T13763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.349729][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.446616][T13765] netlink: Unknown NAT attribute (type=16383, max=9) [ 545.448889][T13765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.620507][T13771] lo speed is unknown, defaulting to 1000 [ 545.662317][T13774] ptrace attach of "/syz-executor exec"[5736] was attempted by " [ 545.681020][T13774] tipc: Enabling of bearer rejected, already enabled [ 545.777063][T13770] netlink: 'syz.2.1904': attribute type 3 has an invalid length. [ 545.784735][T12940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 545.826865][T13780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.839697][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.188331][T13792] FAULT_INJECTION: forcing a failure. [ 546.188331][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.195910][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.1.1913 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.195942][T13792] Tainted: [L]=SOFTLOCKUP [ 546.195948][T13792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.195961][T13792] Call Trace: [ 546.195970][T13792] [ 546.195978][T13792] dump_stack_lvl+0x100/0x190 [ 546.196007][T13792] should_fail_ex.cold+0x5/0xa [ 546.196034][T13792] _copy_to_user+0x32/0xd0 [ 546.196080][T13792] simple_read_from_buffer+0xcb/0x170 [ 546.196117][T13792] proc_fail_nth_read+0x1af/0x230 [ 546.196144][T13792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.196175][T13792] ? rw_verify_area+0xce/0x6d0 [ 546.196219][T13792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.196244][T13792] vfs_read+0x1e4/0xb40 [ 546.196267][T13792] ? __pfx_vfs_read+0x10/0x10 [ 546.196280][T13792] ? find_held_lock+0x2b/0x80 [ 546.196306][T13792] ? __fget_files+0x215/0x3d0 [ 546.196333][T13792] ? __fget_files+0x21f/0x3d0 [ 546.196361][T13792] ksys_read+0x12a/0x250 [ 546.196380][T13792] ? __pfx_ksys_read+0x10/0x10 [ 546.196406][T13792] do_int80_emulation+0x14b/0x720 [ 546.196440][T13792] asm_int80_emulation+0x1a/0x20 [ 546.196462][T13792] RIP: 0023:0xf71174eb [ 546.196479][T13792] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 546.196500][T13792] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 546.196522][T13792] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 546.196532][T13792] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 546.196543][T13792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.196553][T13792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.196565][T13792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.196596][T13792] [ 546.389933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.728334][ T5641] libceph: connect (1)[c::]:6789 error -101 [ 546.737187][ T5641] libceph: mon0 (1)[c::]:6789 connect error [ 546.748981][T13804] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 546.879770][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.003296][ T5641] libceph: connect (1)[c::]:6789 error -101 [ 547.015197][ T5641] libceph: mon0 (1)[c::]:6789 connect error [ 547.301185][T13820] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 547.359309][T13823] netlink: 'syz.3.1919': attribute type 2 has an invalid length. [ 547.369971][T13823] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 547.534767][ T5641] libceph: connect (1)[c::]:6789 error -101 [ 547.543540][ T5641] libceph: mon0 (1)[c::]:6789 connect error [ 548.239943][ T42] audit: type=1326 audit(1786217125.330:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.270591][ T42] audit: type=1326 audit(1786217125.330:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.293042][ T42] audit: type=1326 audit(1786217125.340:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.318852][ T42] audit: type=1326 audit(1786217125.360:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.343867][ T42] audit: type=1326 audit(1786217125.360:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a74eb code=0x7ffc0000 [ 548.371685][ T42] audit: type=1326 audit(1786217125.370:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.392721][ T42] audit: type=1326 audit(1786217125.370:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.417294][ T42] audit: type=1326 audit(1786217125.370:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.428054][T13831] FAULT_INJECTION: forcing a failure. [ 548.428054][T13831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.444240][ T42] audit: type=1326 audit(1786217125.370:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.447515][T13831] CPU: 0 UID: 0 PID: 13831 Comm: syz.3.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.447543][T13831] Tainted: [L]=SOFTLOCKUP [ 548.447550][T13831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.447574][T13831] Call Trace: [ 548.447582][T13831] [ 548.447589][T13831] dump_stack_lvl+0x100/0x190 [ 548.447613][T13831] should_fail_ex.cold+0x5/0xa [ 548.447634][T13831] _copy_from_user+0x2e/0xd0 [ 548.447663][T13831] kstrtouint_from_user+0xd6/0x1d0 [ 548.447682][T13831] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 548.447702][T13831] ? __lock_acquire+0x49f/0x1a40 [ 548.447740][T13831] proc_fail_nth_write+0x83/0x220 [ 548.447763][T13831] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 548.447793][T13831] vfs_write+0x2aa/0x1050 [ 548.447812][T13831] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 548.447838][T13831] ? __pfx_vfs_write+0x10/0x10 [ 548.447848][T13831] ? find_held_lock+0x2b/0x80 [ 548.447870][T13831] ? __fget_files+0x215/0x3d0 [ 548.447891][T13831] ? __fget_files+0x21f/0x3d0 [ 548.447914][T13831] ksys_write+0x12a/0x250 [ 548.447930][T13831] ? __pfx_ksys_write+0x10/0x10 [ 548.447952][T13831] do_int80_emulation+0x14b/0x720 [ 548.447979][T13831] asm_int80_emulation+0x1a/0x20 [ 548.448001][T13831] RIP: 0023:0xf71f74eb [ 548.448015][T13831] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 548.448030][T13831] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 548.448047][T13831] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0 [ 548.448058][T13831] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.448068][T13831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.448078][T13831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 548.448087][T13831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.448104][T13831] [ 548.469719][ C1] net_ratelimit: 2 callbacks suppressed [ 548.469732][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.471570][ T5641] libceph: connect (1)[c::]:6789 error -101 [ 548.635696][T12940] Bluetooth: hci1: ACL packet for unknown connection handle 233 [ 548.656033][ T42] audit: type=1326 audit(1786217125.370:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.2.1924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 548.782677][ T5641] libceph: mon0 (1)[c::]:6789 connect error [ 548.949684][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.509697][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.615530][T13872] can: request_module (can-proto-0) failed. [ 549.631388][T13875] FAULT_INJECTION: forcing a failure. [ 549.631388][T13875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.635909][T13875] CPU: 3 UID: 0 PID: 13875 Comm: syz.0.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.635928][T13875] Tainted: [L]=SOFTLOCKUP [ 549.635932][T13875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 549.635939][T13875] Call Trace: [ 549.635945][T13875] [ 549.635950][T13875] dump_stack_lvl+0x100/0x190 [ 549.635968][T13875] should_fail_ex.cold+0x5/0xa [ 549.635982][T13875] _copy_from_iter+0x1f4/0x1690 [ 549.636007][T13875] ? __asan_memset+0x23/0x50 [ 549.636028][T13875] ? __pfx__copy_from_iter+0x10/0x10 [ 549.636056][T13875] ? __pfx___alloc_skb+0x10/0x10 [ 549.636086][T13875] netlink_sendmsg+0x808/0xda0 [ 549.636103][T13875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.636118][T13875] ? apparmor_socket_sendmsg+0x15b/0x270 [ 549.636133][T13875] ____sys_sendmsg+0xa4d/0xbe0 [ 549.636145][T13875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.636160][T13875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.636178][T13875] ___sys_sendmsg+0x190/0x1e0 [ 549.636192][T13875] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.636210][T13875] ? find_held_lock+0x2b/0x80 [ 549.636234][T13875] __sys_sendmsg+0x160/0x210 [ 549.636251][T13875] ? __pfx___sys_sendmsg+0x10/0x10 [ 549.636270][T13875] ? __pfx_ksys_write+0x10/0x10 [ 549.636285][T13875] __do_fast_syscall_32+0xe7/0x970 [ 549.636303][T13875] ? lockdep_hardirqs_on+0x78/0x100 [ 549.636320][T13875] do_fast_syscall_32+0x32/0x70 [ 549.636337][T13875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 549.636352][T13875] RIP: 0023:0xf7f48fec [ 549.636367][T13875] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 549.636373][T13875] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 549.636385][T13875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 549.636392][T13875] RDX: 0000000004048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.636399][T13875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.636406][T13875] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 549.636412][T13875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.636425][T13875] [ 549.989713][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.343033][T13805] ceph: No mds server is up or the cluster is laggy [ 550.559964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.631928][T13878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 550.637056][T13878] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 550.656135][T13878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.658682][T13878] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 550.670501][T13878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.673000][T13878] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 550.684128][T13878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 550.686664][T13878] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 550.975012][T13917] lo speed is unknown, defaulting to 1000 [ 550.996569][T13910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 550.999298][T13919] ptrace attach of "/syz-executor exec"[5729] was attempted by " [ 551.039400][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.076635][T13917] tipc: Enabling of bearer rejected, already enabled [ 551.459721][ T5641] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 551.589762][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.611165][ T5641] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 551.615084][ T5641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.618626][ T5641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.622097][ T5641] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 551.627497][ T5641] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 551.630752][ T5641] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 551.633497][ T5641] usb 6-1: Manufacturer: syz [ 551.636545][ T5641] usb 6-1: config 0 descriptor?? [ 551.870254][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 551.874077][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 551.960837][T13931] ceph: No mds server is up or the cluster is laggy [ 552.069691][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.459314][ T5641] appleir 0003:05AC:8243.00A3: unknown main item tag 0x0 [ 552.629915][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.109824][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.671027][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.022503][ T5641] appleir 0003:05AC:8243.00A3: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 554.035883][ T5641] usb 6-1: USB disconnect, device number 18 [ 554.149712][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.151353][T13989] fido_id[13989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 554.162263][T13992] lo speed is unknown, defaulting to 1000 [ 554.196226][T13996] ptrace attach of "/syz-executor exec"[5729] was attempted by " [ 554.210911][T13996] tipc: Enabling of bearer rejected, already enabled [ 554.389881][ T5641] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 554.466955][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 554.470189][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 554.539748][ T5641] usb 6-1: Using ep0 maxpacket: 32 [ 554.542695][ T5641] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.547476][ T5641] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.550737][ T5641] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.553272][ T5641] usb 6-1: Product: syz [ 554.554615][ T5641] usb 6-1: Manufacturer: syz [ 554.556120][ T5641] usb 6-1: SerialNumber: syz [ 554.565464][ T5641] usb 6-1: config 0 descriptor?? [ 554.567671][T13967] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 554.571332][ T5641] hub 6-1:0.0: bad descriptor, ignoring hub [ 554.574940][ T5641] hub 6-1:0.0: probe with driver hub failed with error -5 [ 554.709786][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.730364][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 554.732494][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 554.840030][T14022] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 554.860001][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 554.862765][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 555.120075][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 555.122799][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 555.189759][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.248422][T13967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.250096][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 555.254478][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 555.260504][T13967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.378448][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.385682][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.456905][T14035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 555.599567][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.605579][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.640104][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 555.642388][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 555.759750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.092778][ T217] raw-gadget.0 gadget.1: failed to queue suspend event [ 556.169830][T14029] raw-gadget.0 gadget.1: failed to queue resume event [ 556.192735][ T217] raw-gadget.0 gadget.1: failed to queue suspend event [ 556.229697][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.259728][T13967] raw-gadget.0 gadget.1: failed to queue resume event [ 556.293752][ T36] raw-gadget.0 gadget.1: failed to queue suspend event [ 556.320207][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 556.346554][T14032] raw-gadget.0 gadget.1: failed to queue disconnect event [ 556.366713][ T24] libceph: connect (1)[c::]:6789 error -101 [ 556.394947][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 556.474719][T14039] ceph: No mds server is up or the cluster is laggy [ 556.673311][ T24] libceph: connect (1)[c::]:6789 error -101 [ 556.678209][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 556.704501][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 556.769483][T11204] usb 6-1: USB disconnect, device number 19 [ 556.799899][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.000469][T11204] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 557.158970][T11204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 557.174115][T11204] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 557.178369][T11204] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 557.182243][T11204] usb 6-1: Product: syz [ 557.184095][T11204] usb 6-1: Manufacturer: syz [ 557.186704][T11204] usb 6-1: SerialNumber: syz [ 557.191854][ T24] libceph: connect (1)[c::]:6789 error -101 [ 557.202800][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 557.213542][T11204] usb 6-1: config 0 descriptor?? [ 557.222096][T14032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 557.236225][T11204] hub 6-1:0.0: bad descriptor, ignoring hub [ 557.238624][T11204] hub 6-1:0.0: probe with driver hub failed with error -5 [ 557.269689][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.360502][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 557.422633][T14012] ceph: No mds server is up or the cluster is laggy [ 557.489317][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 557.491960][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 557.496957][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 557.590078][T11204] usb 6-1: USB disconnect, device number 20 [ 557.735013][T14022] ceph: No mds server is up or the cluster is laggy [ 557.827575][ T5520] lo speed is unknown, defaulting to 1000 [ 557.829987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.843284][ T5520] lo speed is unknown, defaulting to 1000 [ 557.902858][T14055] fuse: fd is not a fuse device [ 557.908064][T14055] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 557.956961][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 558.143841][T14064] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 558.152479][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 558.165355][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 558.169304][T14072] binder_alloc: 14071: pid 14071 spamming oneway? 1 buffers allocated for a total size of 4096 [ 558.236885][T14074] FAULT_INJECTION: forcing a failure. [ 558.236885][T14074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.252095][T14074] CPU: 3 UID: 0 PID: 14074 Comm: syz.0.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.252127][T14074] Tainted: [L]=SOFTLOCKUP [ 558.252135][T14074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.252162][T14074] Call Trace: [ 558.252171][T14074] [ 558.252196][T14074] dump_stack_lvl+0x100/0x190 [ 558.252226][T14074] should_fail_ex.cold+0x5/0xa [ 558.252251][T14074] _copy_from_user+0x2e/0xd0 [ 558.252283][T14074] binder_thread_write+0x12a0/0x4db0 [ 558.252319][T14074] ? kasan_save_track+0x14/0x30 [ 558.252344][T14074] ? kasan_save_free_info+0x3b/0x70 [ 558.252370][T14074] ? __pfx_binder_thread_write+0x10/0x10 [ 558.252402][T14074] ? binder_debug+0xe0/0x190 [ 558.252428][T14074] ? __pfx_binder_debug+0x10/0x10 [ 558.252454][T14074] ? binder_debug+0xe0/0x190 [ 558.252483][T14074] ? __pfx_binder_debug+0x10/0x10 [ 558.252515][T14074] ? __pfx_binder_ioctl+0x10/0x10 [ 558.252538][T14074] binder_ioctl+0x28ca/0x74a0 [ 558.252565][T14074] ? tomoyo_path_number_perm+0x28f/0x580 [ 558.252586][T14074] ? tomoyo_path_number_perm+0x28f/0x580 [ 558.252610][T14074] ? tomoyo_path_number_perm+0x188/0x580 [ 558.252631][T14074] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 558.252653][T14074] ? __pfx_binder_ioctl+0x10/0x10 [ 558.252687][T14074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.252712][T14074] ? do_vfs_ioctl+0x226/0x13e0 [ 558.252736][T14074] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 558.252764][T14074] ? find_held_lock+0x2b/0x80 [ 558.252789][T14074] ? __fget_files+0x215/0x3d0 [ 558.252808][T14074] ? hook_file_ioctl_common+0x140/0x440 [ 558.252838][T14074] ? __fget_files+0x21f/0x3d0 [ 558.252857][T14074] ? __pfx_binder_ioctl+0x10/0x10 [ 558.252883][T14074] compat_ptr_ioctl+0x6e/0xa0 [ 558.252910][T14074] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 558.252936][T14074] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 558.252967][T14074] __do_fast_syscall_32+0xe7/0x970 [ 558.252996][T14074] ? lockdep_hardirqs_on+0x78/0x100 [ 558.253025][T14074] do_fast_syscall_32+0x32/0x70 [ 558.253053][T14074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.253079][T14074] RIP: 0023:0xf7f48fec [ 558.253103][T14074] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 558.253113][T14074] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 558.253133][T14074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 558.253145][T14074] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.253157][T14074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.253168][T14074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.253180][T14074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.253204][T14074] [ 558.253251][T14074] binder: 14073:14074 ioctl c0306201 800001c0 returned -14 [ 558.310223][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.422095][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 558.433488][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 558.869904][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.949939][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 558.952195][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 559.015843][T14094] tipc: Enabled bearer , priority 0 [ 559.028246][T14093] tipc: Disabling bearer [ 559.349706][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.544303][T14116] FAULT_INJECTION: forcing a failure. [ 559.544303][T14116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.554365][T14116] CPU: 2 UID: 0 PID: 14116 Comm: syz.0.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.554385][T14116] Tainted: [L]=SOFTLOCKUP [ 559.554390][T14116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.554397][T14116] Call Trace: [ 559.554402][T14116] [ 559.554407][T14116] dump_stack_lvl+0x100/0x190 [ 559.554426][T14116] should_fail_ex.cold+0x5/0xa [ 559.554440][T14116] _copy_from_user+0x2e/0xd0 [ 559.554463][T14116] copy_mount_options+0x76/0x190 [ 559.554487][T14116] __ia32_sys_mount+0x1ab/0x310 [ 559.554508][T14116] ? __pfx___ia32_sys_mount+0x10/0x10 [ 559.554527][T14116] ? ksys_write+0x1ac/0x250 [ 559.554540][T14116] ? __pfx_ksys_write+0x10/0x10 [ 559.554554][T14116] __do_fast_syscall_32+0xe7/0x970 [ 559.554573][T14116] ? lockdep_hardirqs_on+0x78/0x100 [ 559.554590][T14116] do_fast_syscall_32+0x32/0x70 [ 559.554612][T14116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.554627][T14116] RIP: 0023:0xf7f48fec [ 559.554642][T14116] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 559.554648][T14116] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 559.554659][T14116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 559.554666][T14116] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 559.554673][T14116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.554680][T14116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 559.554687][T14116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.554701][T14116] [ 559.556647][T14116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 559.910032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.084516][T14129] FAULT_INJECTION: forcing a failure. [ 560.084516][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.091196][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.1.1992 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.091227][T14129] Tainted: [L]=SOFTLOCKUP [ 560.091234][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.091247][T14129] Call Trace: [ 560.091254][T14129] [ 560.091263][T14129] dump_stack_lvl+0x100/0x190 [ 560.091294][T14129] should_fail_ex.cold+0x5/0xa [ 560.091319][T14129] _copy_from_iter+0x1f4/0x1690 [ 560.091357][T14129] ? __pfx__copy_from_iter+0x10/0x10 [ 560.091384][T14129] ? trace_kmalloc+0xeb/0x110 [ 560.091411][T14129] ? __kasan_kmalloc+0xaa/0xb0 [ 560.091438][T14129] ? __kmalloc_noprof+0x343/0x820 [ 560.091463][T14129] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 560.091493][T14129] kernfs_fop_write_iter+0x186/0x5f0 [ 560.091521][T14129] vfs_write+0x6ac/0x1050 [ 560.091543][T14129] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 560.091570][T14129] ? __pfx_vfs_write+0x10/0x10 [ 560.091588][T14129] ? find_held_lock+0x2b/0x80 [ 560.091630][T14129] ksys_write+0x12a/0x250 [ 560.091649][T14129] ? __pfx_ksys_write+0x10/0x10 [ 560.091667][T14129] ? ksys_write+0x1ac/0x250 [ 560.091686][T14129] ? __pfx_ksys_write+0x10/0x10 [ 560.091709][T14129] __do_fast_syscall_32+0xe7/0x970 [ 560.091740][T14129] ? lockdep_hardirqs_on+0x78/0x100 [ 560.091770][T14129] do_fast_syscall_32+0x32/0x70 [ 560.091799][T14129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.091824][T14129] RIP: 0023:0xf7f17fec [ 560.091849][T14129] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 560.091859][T14129] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 560.091877][T14129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005000 [ 560.091890][T14129] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 560.091902][T14129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.091913][T14129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 560.091925][T14129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.091949][T14129] [ 560.217058][T14131] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 560.389796][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.390156][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 560.395626][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 560.949814][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.003942][T14068] ceph: No mds server is up or the cluster is laggy [ 561.179044][T14135] binder_alloc: 14134: pid 14134 spamming oneway? 1 buffers allocated for a total size of 4096 [ 561.230800][T14142] overlayfs: failed to clone upperpath [ 561.350431][T14147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 561.357667][T14147] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1994'. [ 561.429725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.487393][T14151] FAULT_INJECTION: forcing a failure. [ 561.487393][T14151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.492207][T14151] CPU: 0 UID: 0 PID: 14151 Comm: syz.3.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.492227][T14151] Tainted: [L]=SOFTLOCKUP [ 561.492231][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.492238][T14151] Call Trace: [ 561.492244][T14151] [ 561.492249][T14151] dump_stack_lvl+0x100/0x190 [ 561.492268][T14151] should_fail_ex.cold+0x5/0xa [ 561.492283][T14151] _copy_to_user+0x32/0xd0 [ 561.492303][T14151] simple_read_from_buffer+0xcb/0x170 [ 561.492346][T14151] proc_fail_nth_read+0x1af/0x230 [ 561.492365][T14151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.492383][T14151] ? rw_verify_area+0xce/0x6d0 [ 561.492400][T14151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.492416][T14151] vfs_read+0x1e4/0xb40 [ 561.492429][T14151] ? __pfx_vfs_read+0x10/0x10 [ 561.492439][T14151] ? find_held_lock+0x2b/0x80 [ 561.492455][T14151] ? __fget_files+0x215/0x3d0 [ 561.492469][T14151] ? __fget_files+0x21f/0x3d0 [ 561.492483][T14151] ksys_read+0x12a/0x250 [ 561.492494][T14151] ? __pfx_ksys_read+0x10/0x10 [ 561.492509][T14151] do_int80_emulation+0x14b/0x720 [ 561.492530][T14151] asm_int80_emulation+0x1a/0x20 [ 561.492542][T14151] RIP: 0023:0xf71f74eb [ 561.492552][T14151] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 561.492563][T14151] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 561.492575][T14151] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54ad5d0 [ 561.492582][T14151] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 561.492589][T14151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.492596][T14151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 561.492602][T14151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.492618][T14151] [ 561.989806][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.299366][T14163] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 562.308475][ T10] libceph: connect (1)[c::]:6789 error -101 [ 562.315422][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 562.473172][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.473587][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.477889][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.581143][ T10] libceph: connect (1)[c::]:6789 error -101 [ 562.583871][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 562.660184][T11204] libceph: connect (1)[c::]:6789 error -101 [ 562.795792][T14187] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2010'. [ 562.867389][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 563.039757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.090084][ T10] libceph: connect (1)[c::]:6789 error -101 [ 563.092462][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 563.231904][T11204] libceph: mon0 (1)[c::]:6789 connect error [ 563.509687][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.940100][T11204] libceph: connect (1)[c::]:6789 error -101 [ 563.943519][T11204] libceph: mon0 (1)[c::]:6789 connect error [ 564.070679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.450937][T11204] libceph: connect (1)[c::]:6789 error -101 [ 564.453789][T11204] libceph: mon0 (1)[c::]:6789 connect error [ 564.470196][ T10] libceph: connect (1)[c::]:6789 error -101 [ 564.472888][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 564.549712][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.898177][T14219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.919892][T14219] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2019'. [ 565.109866][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.164754][T14166] ceph: No mds server is up or the cluster is laggy [ 565.318781][T14171] ceph: No mds server is up or the cluster is laggy [ 565.374119][T11204] libceph: connect (1)[c::]:6789 error -101 [ 565.377013][T11204] libceph: mon0 (1)[c::]:6789 connect error [ 565.380261][T11204] libceph: connect (1)[c::]:6789 error -101 [ 565.382622][T11204] libceph: mon0 (1)[c::]:6789 connect error [ 565.589736][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.727975][T14238] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 565.755863][ T42] kauditd_printk_skb: 140 callbacks suppressed [ 565.755877][ T42] audit: type=1326 audit(1786217142.860:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.767295][ T42] audit: type=1326 audit(1786217142.860:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.774337][ T42] audit: type=1326 audit(1786217142.860:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.781513][ T42] audit: type=1326 audit(1786217142.860:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.788272][ T42] audit: type=1326 audit(1786217142.860:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.795279][ T42] audit: type=1326 audit(1786217142.860:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.801931][ T42] audit: type=1326 audit(1786217142.860:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.809373][ T42] audit: type=1326 audit(1786217142.860:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.816810][ T42] audit: type=1326 audit(1786217142.860:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 565.824323][ T42] audit: type=1326 audit(1786217142.860:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.3.2026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 566.149806][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.308482][T14243] overlayfs: failed to clone upperpath [ 566.599802][ T5520] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 566.629701][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.751133][ T5520] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 566.753751][ T5520] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 566.757436][ T5520] usb 6-1: config 0 has no interface number 0 [ 566.760623][ T5520] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 48, using maximum allowed: 30 [ 566.765431][ T5520] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 566.771487][ T5520] usb 6-1: config 0 interface 255 has no altsetting 0 [ 566.777171][ T5520] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 566.782273][ T5520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.785683][ T5520] usb 6-1: Product: syz [ 566.787227][ T5520] usb 6-1: Manufacturer: syz [ 566.788734][ T5520] usb 6-1: SerialNumber: syz [ 566.794963][ T5520] usb 6-1: config 0 descriptor?? [ 566.974868][T14252] lo speed is unknown, defaulting to 1000 [ 567.013535][T14254] ptrace attach of "/syz-executor exec"[5734] was attempted by " [ 567.027955][ T5520] usb 6-1: USB disconnect, device number 21 [ 567.080906][T14254] tipc: Enabling of bearer rejected, already enabled [ 567.173619][T14256] FAULT_INJECTION: forcing a failure. [ 567.173619][T14256] name failslab, interval 1, probability 0, space 0, times 0 [ 567.193037][T14256] CPU: 1 UID: 0 PID: 14256 Comm: syz.3.2031 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.193072][T14256] Tainted: [L]=SOFTLOCKUP [ 567.193078][T14256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.193089][T14256] Call Trace: [ 567.193095][T14256] [ 567.193103][T14256] dump_stack_lvl+0x100/0x190 [ 567.193132][T14256] should_fail_ex.cold+0x5/0xa [ 567.193155][T14256] should_failslab+0xc2/0x120 [ 567.193181][T14256] __kmalloc_noprof+0xfc/0x820 [ 567.193204][T14256] ? tomoyo_encode2+0xfb/0x3c0 [ 567.193235][T14256] tomoyo_encode2+0xfb/0x3c0 [ 567.193264][T14256] tomoyo_encode+0x29/0x50 [ 567.193287][T14256] tomoyo_realpath_from_path+0x18c/0x690 [ 567.193319][T14256] tomoyo_path_number_perm+0x23c/0x580 [ 567.193340][T14256] ? tomoyo_path_number_perm+0x22e/0x580 [ 567.193364][T14256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 567.193387][T14256] ? get_pid_task+0x106/0x250 [ 567.193434][T14256] ? find_held_lock+0x2b/0x80 [ 567.193456][T14256] ? __fget_files+0x215/0x3d0 [ 567.193473][T14256] ? hook_file_ioctl_common+0x140/0x440 [ 567.193496][T14256] ? __fget_files+0x215/0x3d0 [ 567.193517][T14256] ? __fget_files+0x21f/0x3d0 [ 567.193539][T14256] security_file_ioctl_compat+0xd3/0x230 [ 567.193566][T14256] __ia32_compat_sys_ioctl+0xc2/0x360 [ 567.193597][T14256] __do_fast_syscall_32+0xe7/0x970 [ 567.193625][T14256] ? lockdep_hardirqs_on+0x78/0x100 [ 567.193652][T14256] do_fast_syscall_32+0x32/0x70 [ 567.193679][T14256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.193701][T14256] RIP: 0023:0xf70befec [ 567.193723][T14256] Code: Unable to access opcode bytes at 0xf70befc2. [ 567.193731][T14256] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 567.193748][T14256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008108551b [ 567.193760][T14256] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.193771][T14256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.193781][T14256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 567.193791][T14256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.193815][T14256] [ 567.193834][T14256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 567.200562][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.252640][T14260] usb usb5: usbfs: process 14260 (syz.3.2031) did not claim interface 0 before use [ 567.496053][T14269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 567.503236][T14269] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2034'. [ 567.564550][T14272] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 567.570636][ T5520] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 567.589862][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.669729][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.739677][ T5520] usb 6-1: Using ep0 maxpacket: 16 [ 567.752311][ T5520] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 567.754987][ T5520] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 567.758559][ T5520] usb 6-1: config 0 has no interface number 0 [ 567.761869][ T5520] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 48, using maximum allowed: 30 [ 567.766984][ T5520] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 567.771979][ T5520] usb 6-1: config 0 interface 255 has no altsetting 0 [ 567.786426][ T5520] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 567.790989][ T5520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.794048][ T5520] usb 6-1: Product: syz [ 567.796009][ T5520] usb 6-1: Manufacturer: syz [ 567.797799][ T5520] usb 6-1: SerialNumber: syz [ 567.809414][ T5520] usb 6-1: config 0 descriptor?? [ 568.028751][ T6557] IPVS: starting estimator thread 0... [ 568.094002][ T5520] usb 6-1: USB disconnect, device number 22 [ 568.139705][T14276] IPVS: using max 43 ests per chain, 103200 per kthread [ 568.229726][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.242507][T14280] FAULT_INJECTION: forcing a failure. [ 568.242507][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.248228][T14280] CPU: 3 UID: 0 PID: 14280 Comm: syz.0.2038 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.248256][T14280] Tainted: [L]=SOFTLOCKUP [ 568.248262][T14280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 568.248272][T14280] Call Trace: [ 568.248280][T14280] [ 568.248287][T14280] dump_stack_lvl+0x100/0x190 [ 568.248312][T14280] should_fail_ex.cold+0x5/0xa [ 568.248333][T14280] _copy_from_iter+0x1f4/0x1690 [ 568.248363][T14280] ? __asan_memset+0x23/0x50 [ 568.248384][T14280] ? __pfx__copy_from_iter+0x10/0x10 [ 568.248409][T14280] ? __pfx___alloc_skb+0x10/0x10 [ 568.248443][T14280] netlink_sendmsg+0x808/0xda0 [ 568.248469][T14280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.248491][T14280] ? apparmor_socket_sendmsg+0x15b/0x270 [ 568.248515][T14280] ____sys_sendmsg+0xa4d/0xbe0 [ 568.248534][T14280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.248554][T14280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.248583][T14280] ___sys_sendmsg+0x190/0x1e0 [ 568.248608][T14280] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.248639][T14280] ? find_held_lock+0x2b/0x80 [ 568.248681][T14280] __sys_sendmsg+0x160/0x210 [ 568.248708][T14280] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.248739][T14280] ? __pfx_ksys_write+0x10/0x10 [ 568.248762][T14280] __do_fast_syscall_32+0xe7/0x970 [ 568.248789][T14280] ? lockdep_hardirqs_on+0x78/0x100 [ 568.248815][T14280] do_fast_syscall_32+0x32/0x70 [ 568.248841][T14280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.248864][T14280] RIP: 0023:0xf7f48fec [ 568.248888][T14280] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 568.248897][T14280] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 568.248915][T14280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 568.248926][T14280] RDX: 00000000040080c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.248936][T14280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.248947][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.248957][T14280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.248979][T14280] [ 568.424669][T14288] lo speed is unknown, defaulting to 1000 [ 568.469161][T14290] ptrace attach of "/syz-executor exec"[5734] was attempted by " [ 568.515693][T14288] tipc: Enabling of bearer rejected, already enabled [ 568.634098][T14295] FAULT_INJECTION: forcing a failure. [ 568.634098][T14295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.640641][T14295] CPU: 1 UID: 0 PID: 14295 Comm: syz.1.2044 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.640660][T14295] Tainted: [L]=SOFTLOCKUP [ 568.640664][T14295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 568.640672][T14295] Call Trace: [ 568.640677][T14295] [ 568.640681][T14295] dump_stack_lvl+0x100/0x190 [ 568.640700][T14295] should_fail_ex.cold+0x5/0xa [ 568.640715][T14295] _copy_from_user+0x2e/0xd0 [ 568.640735][T14295] copy_mount_options+0x76/0x190 [ 568.640753][T14295] __ia32_sys_mount+0x1ab/0x310 [ 568.640858][T14295] ? __pfx___ia32_sys_mount+0x10/0x10 [ 568.640872][T14295] ? ksys_write+0x1ac/0x250 [ 568.640883][T14295] ? __pfx_ksys_write+0x10/0x10 [ 568.640900][T14295] __do_fast_syscall_32+0xe7/0x970 [ 568.640919][T14295] ? lockdep_hardirqs_on+0x78/0x100 [ 568.640936][T14295] do_fast_syscall_32+0x32/0x70 [ 568.640968][T14295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.640984][T14295] RIP: 0023:0xf7f17fec [ 568.640998][T14295] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 568.641004][T14295] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 568.641015][T14295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000300 [ 568.641033][T14295] RDX: 0000000080000180 RSI: 0000000002004890 RDI: 0000000080000340 [ 568.641040][T14295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.641046][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.641058][T14295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.641073][T14295] [ 568.709762][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.837038][T14303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.872564][ T6557] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 569.009741][ T6557] usb 8-1: device descriptor read/64, error -71 [ 569.269908][ T6557] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 569.279781][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.410312][ T6557] usb 8-1: device descriptor read/64, error -71 [ 569.520428][ T6557] usb usb8-port1: attempt power cycle [ 569.749715][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.869738][ T6557] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 569.891815][ T6557] usb 8-1: device descriptor read/8, error -71 [ 569.979286][T14323] xt_TCPMSS: Only works on TCP SYN packets [ 570.139741][ T6557] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 570.170553][ T6557] usb 8-1: device descriptor read/8, error -71 [ 570.242950][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 570.246729][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 570.271690][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x7 [ 570.275090][ T10] hid-generic 0000:0000:0002.00A4: ignoring exceeding usage max [ 570.279166][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.286481][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.289908][ T6557] usb usb8-port1: unable to enumerate USB device [ 570.294082][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.297239][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.300372][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.303431][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.306441][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.309493][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.312951][ T10] hid-generic 0000:0000:0002.00A4: unknown main item tag 0x0 [ 570.319678][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.335299][ T10] hid-generic 0000:0000:0002.00A4: hidraw1: HID v0.00 Device [syz0] on syz1 [ 570.502727][T14331] lo speed is unknown, defaulting to 1000 [ 570.584804][T14331] ptrace attach of "/syz-executor exec"[5733] was attempted by " [ 570.601536][T14331] tipc: Enabling of bearer rejected, already enabled [ 570.789806][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.179805][ T10] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 571.341630][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 571.344847][ T10] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 571.348704][ T10] usb 6-1: config 0 has no interface number 0 [ 571.349956][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.351114][ T10] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 571.358176][ T10] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 571.363697][ T10] usb 6-1: config 0 interface 143 has no altsetting 0 [ 571.368945][ T10] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 571.372802][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.376193][ T10] usb 6-1: Product: syz [ 571.377943][ T10] usb 6-1: Manufacturer: syz [ 571.381441][ T10] usb 6-1: SerialNumber: syz [ 571.385458][ T10] usb 6-1: config 0 descriptor?? [ 571.513398][T14351] FAULT_INJECTION: forcing a failure. [ 571.513398][T14351] name failslab, interval 1, probability 0, space 0, times 0 [ 571.517223][T14351] CPU: 0 UID: 0 PID: 14351 Comm: syz.3.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.517242][T14351] Tainted: [L]=SOFTLOCKUP [ 571.517246][T14351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 571.517254][T14351] Call Trace: [ 571.517259][T14351] [ 571.517264][T14351] dump_stack_lvl+0x100/0x190 [ 571.517283][T14351] should_fail_ex.cold+0x5/0xa [ 571.517297][T14351] should_failslab+0xc2/0x120 [ 571.517316][T14351] __kmalloc_noprof+0xfc/0x820 [ 571.517345][T14351] ? tomoyo_encode2+0xfb/0x3c0 [ 571.517367][T14351] tomoyo_encode2+0xfb/0x3c0 [ 571.517385][T14351] tomoyo_encode+0x29/0x50 [ 571.517401][T14351] tomoyo_realpath_from_path+0x18c/0x690 [ 571.517421][T14351] tomoyo_path_number_perm+0x23c/0x580 [ 571.517435][T14351] ? tomoyo_path_number_perm+0x22e/0x580 [ 571.517451][T14351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.517466][T14351] ? get_pid_task+0x106/0x250 [ 571.517494][T14351] ? find_held_lock+0x2b/0x80 [ 571.517508][T14351] ? __fget_files+0x215/0x3d0 [ 571.517519][T14351] ? hook_file_ioctl_common+0x140/0x440 [ 571.517533][T14351] ? __fget_files+0x215/0x3d0 [ 571.517546][T14351] ? __fget_files+0x21f/0x3d0 [ 571.517559][T14351] security_file_ioctl_compat+0xd3/0x230 [ 571.517576][T14351] __ia32_compat_sys_ioctl+0xc2/0x360 [ 571.517595][T14351] __do_fast_syscall_32+0xe7/0x970 [ 571.517615][T14351] ? lockdep_hardirqs_on+0x78/0x100 [ 571.517632][T14351] do_fast_syscall_32+0x32/0x70 [ 571.517649][T14351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.517664][T14351] RIP: 0023:0xf70befec [ 571.517678][T14351] Code: Unable to access opcode bytes at 0xf70befc2. [ 571.517683][T14351] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 571.517694][T14351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008924 [ 571.517702][T14351] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.517708][T14351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.517715][T14351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 571.517722][T14351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.517736][T14351] [ 571.517783][T14351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.606854][ T10] usb 6-1: USB disconnect, device number 23 [ 571.644139][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 571.646852][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 571.708563][T14357] lo speed is unknown, defaulting to 1000 [ 571.732712][T14359] ptrace attach of "/syz-executor exec"[5729] was attempted by " [ 571.829816][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.857255][ C2] hpet_rtc_timer_reinit: 2 callbacks suppressed [ 571.857268][ C2] hpet: Lost 1 RTC interrupts [ 571.900992][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 571.903991][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 572.042002][T14369] FAULT_INJECTION: forcing a failure. [ 572.042002][T14369] name failslab, interval 1, probability 0, space 0, times 0 [ 572.046369][T14369] CPU: 0 UID: 0 PID: 14369 Comm: syz.3.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.046388][T14369] Tainted: [L]=SOFTLOCKUP [ 572.046392][T14369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.046400][T14369] Call Trace: [ 572.046407][T14369] [ 572.046412][T14369] dump_stack_lvl+0x100/0x190 [ 572.046432][T14369] should_fail_ex.cold+0x5/0xa [ 572.046446][T14369] should_failslab+0xc2/0x120 [ 572.046463][T14369] __kmalloc_noprof+0xfc/0x820 [ 572.046478][T14369] ? trace_kmem_cache_alloc+0xdd/0x100 [ 572.046495][T14369] ? lsm_blob_alloc+0x68/0x90 [ 572.046521][T14369] lsm_blob_alloc+0x68/0x90 [ 572.046539][T14369] security_prepare_creds+0x2d/0x290 [ 572.046557][T14369] prepare_creds+0x5d6/0x950 [ 572.046577][T14369] copy_creds+0xa7/0xa50 [ 572.046596][T14369] copy_process+0x1420/0x8030 [ 572.046613][T14369] ? __lock_acquire+0x49f/0x1a40 [ 572.046636][T14369] ? __pfx_copy_process+0x10/0x10 [ 572.046652][T14369] ? get_pid_task+0xfc/0x250 [ 572.046667][T14369] ? get_pid_task+0xfc/0x250 [ 572.046684][T14369] kernel_clone+0x176/0x9d0 [ 572.046697][T14369] ? proc_fail_nth_write+0x9f/0x220 [ 572.046716][T14369] ? __pfx_kernel_clone+0x10/0x10 [ 572.046733][T14369] ? find_held_lock+0x2b/0x80 [ 572.046747][T14369] ? ksys_write+0x190/0x250 [ 572.046758][T14369] ? ksys_write+0x190/0x250 [ 572.046771][T14369] __do_compat_sys_ia32_clone+0xd4/0x120 [ 572.046786][T14369] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 572.046804][T14369] ? fput+0x79/0x100 [ 572.046817][T14369] ? ksys_write+0x1ac/0x250 [ 572.046828][T14369] ? __pfx_ksys_write+0x10/0x10 [ 572.046841][T14369] __do_fast_syscall_32+0xe7/0x970 [ 572.046859][T14369] ? lockdep_hardirqs_on+0x78/0x100 [ 572.046876][T14369] do_fast_syscall_32+0x32/0x70 [ 572.046893][T14369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.046908][T14369] RIP: 0023:0xf70befec [ 572.046923][T14369] Code: Unable to access opcode bytes at 0xf70befc2. [ 572.046928][T14369] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 572.046940][T14369] RAX: ffffffffffffffda RBX: 0000000001000011 RCX: 0000000000000000 [ 572.046947][T14369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.046953][T14369] RBP: 00000000f74b4f80 R08: 0000000000000000 R09: 0000000000000000 [ 572.046960][T14369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 572.046967][T14369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.046980][T14369] [ 572.069777][ T5520] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 572.279949][ T5520] usb 6-1: Using ep0 maxpacket: 16 [ 572.284030][ T5520] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 572.287120][ T5520] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 572.291168][ T5520] usb 6-1: config 0 has no interface number 0 [ 572.293346][ T5520] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 572.297208][ T5520] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 572.301887][ T5520] usb 6-1: config 0 interface 143 has no altsetting 0 [ 572.306098][ T5520] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 572.309097][ T5520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.312586][ T5520] usb 6-1: Product: syz [ 572.314141][ T5520] usb 6-1: Manufacturer: syz [ 572.315913][ T5520] usb 6-1: SerialNumber: syz [ 572.319997][ T5520] usb 6-1: config 0 descriptor?? [ 572.323831][T14383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2073'. [ 572.389847][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.442461][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 572.444930][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 572.537148][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.551738][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.580756][ T5520] usb 6-1: USB disconnect, device number 24 [ 572.869730][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.097952][ T9] IPVS: starting estimator thread 0... [ 573.199828][T14409] IPVS: using max 24 ests per chain, 57600 per kthread [ 573.439757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.443212][ T5520] libceph: connect (1)[c::]:6789 error -101 [ 573.448214][ T5520] libceph: mon0 (1)[c::]:6789 connect error [ 573.909702][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.316662][T14515] cgroup: fork rejected by pids controller in /syz0 [ 574.378638][T14520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2139'. [ 574.477602][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.502420][ T5781] bridge_slave_1: left promiscuous mode [ 574.507718][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.541644][ T5781] bridge_slave_0: left allmulticast mode [ 574.544217][ T5781] bridge_slave_0: left promiscuous mode [ 574.546187][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.555870][ T5781] veth5: left allmulticast mode [ 574.557505][ T5781] veth5: left promiscuous mode [ 574.559241][ T5781] bridge1: port 2(veth5) entered disabled state [ 574.567513][ T5781] veth3: left allmulticast mode [ 574.569161][ T5781] veth3: left promiscuous mode [ 574.572948][ T5781] bridge1: port 1(veth3) entered disabled state [ 574.638865][T14353] ceph: No mds server is up or the cluster is laggy [ 574.853113][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 574.870940][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 574.878964][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 574.884202][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 574.889979][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 574.899507][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.906178][T12940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 574.908717][T12940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 574.908942][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2150'. [ 574.912719][T12940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 574.919143][T12940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 574.925231][T12940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 574.925513][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.942127][ T5781] bond0 (unregistering): Released all slaves [ 574.947820][ T5781] bond1 (unregistering): Released all slaves [ 574.951094][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.959330][ T5781] bond2 (unregistering): Released all slaves [ 574.981573][ T5781] bond3 (unregistering): Released all slaves [ 574.989494][ T5781] bond4 (unregistering): Released all slaves [ 575.150767][T14536] lo speed is unknown, defaulting to 1000 [ 575.201690][ T5781] tipc: Disabling bearer [ 575.226008][ T5781] tipc: Left network mode [ 575.405932][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.408273][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.410824][T14536] bridge_slave_0: entered allmulticast mode [ 575.414687][T14536] bridge_slave_0: entered promiscuous mode [ 575.419834][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.422958][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.426012][T14536] bridge_slave_1: entered allmulticast mode [ 575.430303][T14536] bridge_slave_1: entered promiscuous mode [ 575.450933][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.455853][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.473894][T14536] team0: Port device team_slave_0 added [ 575.478264][T14536] team0: Port device team_slave_1 added [ 575.496981][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.499985][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.510475][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.513300][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.519113][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.521984][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.531936][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.569365][T14536] hsr_slave_0: entered promiscuous mode [ 575.571782][T14536] hsr_slave_1: entered promiscuous mode [ 575.578706][ C2] hpet: Lost 1 RTC interrupts [ 575.737316][ T42] audit: type=1326 audit(1786217152.840:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7fc00000 [ 575.820162][T14536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.828818][T14536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.832870][T14536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.838923][T14536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.852609][T14536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.858455][T14536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.862476][T14536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.866427][T14536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.884379][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.886761][T14536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.889408][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.891743][T14536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.924862][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.989726][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.014146][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.017007][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.026308][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.034376][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.038435][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.039316][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 576.045605][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.048095][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.063785][ T5781] veth1_macvtap: left promiscuous mode [ 576.067729][ T5781] veth0_macvtap: left promiscuous mode [ 576.135650][ T5781] team0 (unregistering): Port device vlan2 removed [ 576.258507][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 576.267445][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 576.381050][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.384051][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.411870][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.414196][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.457423][T14628] usb usb7: usbfs: process 14628 (syz.1.2178) did not claim interface 0 before use [ 576.530608][T14631] lo speed is unknown, defaulting to 1000 [ 576.559759][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.827147][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.890707][T14536] veth0_vlan: entered promiscuous mode [ 576.893784][T14652] base or size exceeds the MTRR width [ 576.897420][T14536] veth1_vlan: entered promiscuous mode [ 576.915537][T14536] veth0_macvtap: entered promiscuous mode [ 576.921694][T14536] veth1_macvtap: entered promiscuous mode [ 576.930231][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.941648][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.950808][ T5781] IPVS: stop unused estimator thread 0... [ 576.990022][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.995774][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.004971][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.009204][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.030664][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.037879][T12940] Bluetooth: hci3: command tx timeout [ 577.142577][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.145907][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.168633][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'. [ 577.223022][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.226744][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.236915][T14666] lo speed is unknown, defaulting to 1000 [ 577.320472][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 577.589780][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.810843][ C2] hpet: Lost 1 RTC interrupts [ 578.069767][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.629870][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.109702][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.109881][T12940] Bluetooth: hci3: command tx timeout [ 579.308177][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 579.328462][T14804] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2255'. [ 579.333051][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 579.350633][T14798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.357312][T14807] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2256'. [ 579.361258][T14807] ksmbd: Unknown IPC event: 3, ignore. [ 579.450994][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2262'. [ 579.529580][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 579.533946][T14829] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 579.555083][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 579.669897][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.024147][ T5735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.032938][ T5735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.036055][ T5735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.042427][ T5735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.045835][ T5735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.149738][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.314881][T13734] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.320351][T13734] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.403442][T14891] lo speed is unknown, defaulting to 1000 [ 580.495445][T13734] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.507565][T13734] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.629753][T13734] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.632926][T13734] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.648196][T14891] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.650767][T14891] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.653096][T14891] bridge_slave_0: entered allmulticast mode [ 580.655773][T14891] bridge_slave_0: entered promiscuous mode [ 580.660050][T14891] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.662391][T14891] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.664700][T14891] bridge_slave_1: entered allmulticast mode [ 580.667340][T14891] bridge_slave_1: entered promiscuous mode [ 580.687337][T14891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.691957][T14891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.715296][T14891] team0: Port device team_slave_0 added [ 580.719764][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.723227][T13734] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.727166][T13734] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.743004][T14891] team0: Port device team_slave_1 added [ 580.757424][T14891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.761297][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.771606][T14891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.776242][T14891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.778465][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.787679][T14891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.821747][T14891] hsr_slave_0: entered promiscuous mode [ 580.824177][T14891] hsr_slave_1: entered promiscuous mode [ 580.826356][T14891] debugfs: 'hsr0' already exists in 'hsr' [ 580.828156][T14891] Cannot create hsr debugfs directory [ 580.857281][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.859971][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.903361][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.908427][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.143536][T13734] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.146841][T13734] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.189743][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.193394][T12940] Bluetooth: hci3: command tx timeout [ 581.210223][T13461] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.220013][T13461] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.269090][ T5443] 8021q: adding VLAN 0 to HW filter on device eth1 [ 581.295522][T13461] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.367903][T14891] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.411193][T13461] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.413963][T13461] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.416965][T13461] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.447846][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.459848][T13461] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.469922][T13461] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.473023][T13461] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.495532][T15026] ------------[ cut here ]------------ [ 581.499235][T15026] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 581.501632][T15026] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#3: syz.0.2344/15026 [ 581.505122][T15026] Modules linked in: [ 581.506591][T15026] CPU: 3 UID: 0 PID: 15026 Comm: syz.0.2344 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.510050][T15026] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 581.511452][T15026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 581.514766][T15026] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 581.516773][T15026] Code: 89 c5 89 c6 e8 87 24 6c f8 45 85 ed 0f 85 be fb ff ff e8 09 2a 6c f8 48 8d 3d 12 34 93 07 ba 48 00 00 00 48 c7 c6 60 11 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 e7 29 6c f8 48 8d bd 00 08 00 00 [ 581.522814][T15026] RSP: 0018:ffffc90004fffa68 EFLAGS: 00010287 [ 581.524727][T15026] RAX: 0000000000000282 RBX: ffff88806b500000 RCX: ffffc90032400000 [ 581.527334][T15026] RDX: 0000000000000048 RSI: ffffffff8d181160 RDI: ffffffff9130cb10 [ 581.529891][T15026] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 581.532371][T15026] R10: 0000000000000000 R11: 000000000000001f R12: 0000000000000000 [ 581.534845][T15026] R13: 0000000000000000 R14: ffff8880518e6568 R15: ffffc90004fffbc8 [ 581.537305][T15026] FS: 0000000000000000(0000) GS:ffff888096ef3000(0063) knlGS:00000000f53edb40 [ 581.540451][T15026] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 581.543138][T15026] CR2: 0000564f18da06c0 CR3: 000000006be12000 CR4: 0000000000352ef0 [ 581.545801][T15026] Call Trace: [ 581.546875][T15026] [ 581.548125][T15026] io_register_zcrx+0xe94/0x1d30 [ 581.549877][T15026] ? __pfx_io_register_zcrx+0x10/0x10 [ 581.551582][T15026] ? rcu_is_watching+0x12/0xc0 [ 581.553109][T15026] ? trace_contention_end+0x126/0x160 [ 581.554799][T15026] ? __fget_files+0x215/0x3d0 [ 581.556275][T15026] __do_sys_io_uring_register+0x1193/0x1bc0 [ 581.558131][T15026] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 581.560065][T15026] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 581.561774][T15026] ? xfd_validate_state+0x129/0x190 [ 581.563413][T15026] __do_fast_syscall_32+0xe7/0x970 [ 581.565166][T15026] do_fast_syscall_32+0x32/0x70 [ 581.566710][T15026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.568684][T15026] RIP: 0023:0xf6ffefec [ 581.570205][T15026] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 581.572301][T15026] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 581.575116][T15026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000020 [ 581.577754][T15026] RDX: 0000000080000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 581.580272][T15026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.582741][T15026] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 581.585202][T15026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.587689][T15026] [ 581.588681][T15026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.590988][T15026] CPU: 3 UID: 0 PID: 15026 Comm: syz.0.2344 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.594363][T15026] Tainted: [L]=SOFTLOCKUP [ 581.595731][T15026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 581.598844][T15026] Call Trace: [ 581.599889][T15026] [ 581.600818][T15026] dump_stack_lvl+0x100/0x190 [ 581.602319][T15026] vpanic+0x552/0x970 [ 581.603583][T15026] ? __pfx_vpanic+0x10/0x10 [ 581.605026][T15026] panic+0xd1/0xe0 [ 581.606206][T15026] ? __pfx_panic+0x10/0x10 [ 581.607573][T15026] check_panic_on_warn.cold+0x19/0x34 [ 581.609230][T15026] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 581.610994][T15026] __warn.cold+0x191/0x318 [ 581.612407][T15026] __report_bug+0x30f/0x440 [ 581.613848][T15026] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 581.615671][T15026] ? __pfx___report_bug+0x10/0x10 [ 581.617382][T15026] report_bug_entry+0xe1/0x290 [ 581.618906][T15026] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 581.620702][T15026] handle_bug+0x1cd/0x2a0 [ 581.622031][T15026] exc_invalid_op+0x17/0x50 [ 581.623451][T15026] asm_exc_invalid_op+0x1a/0x20 [ 581.624977][T15026] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 581.626881][T15026] Code: 89 c5 89 c6 e8 87 24 6c f8 45 85 ed 0f 85 be fb ff ff e8 09 2a 6c f8 48 8d 3d 12 34 93 07 ba 48 00 00 00 48 c7 c6 60 11 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 e7 29 6c f8 48 8d bd 00 08 00 00 [ 581.632827][T15026] RSP: 0018:ffffc90004fffa68 EFLAGS: 00010287 [ 581.634736][T15026] RAX: 0000000000000282 RBX: ffff88806b500000 RCX: ffffc90032400000 [ 581.637219][T15026] RDX: 0000000000000048 RSI: ffffffff8d181160 RDI: ffffffff9130cb10 [ 581.639692][T15026] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 581.642206][T15026] R10: 0000000000000000 R11: 000000000000001f R12: 0000000000000000 [ 581.644691][T15026] R13: 0000000000000000 R14: ffff8880518e6568 R15: ffffc90004fffbc8 [ 581.647173][T15026] ? netdev_queue_get_dma_dev+0x527/0x660 [ 581.648967][T15026] io_register_zcrx+0xe94/0x1d30 [ 581.650577][T15026] ? __pfx_io_register_zcrx+0x10/0x10 [ 581.652270][T15026] ? rcu_is_watching+0x12/0xc0 [ 581.653789][T15026] ? trace_contention_end+0x126/0x160 [ 581.655511][T15026] ? __fget_files+0x215/0x3d0 [ 581.656992][T15026] __do_sys_io_uring_register+0x1193/0x1bc0 [ 581.659776][T15026] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 581.661612][T15026] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 581.663306][T15026] ? xfd_validate_state+0x129/0x190 [ 581.664831][T15026] __do_fast_syscall_32+0xe7/0x970 [ 581.666317][T15026] do_fast_syscall_32+0x32/0x70 [ 581.667731][T15026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.669536][T15026] RIP: 0023:0xf6ffefec [ 581.670728][T15026] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 581.672628][T15026] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 581.675061][T15026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000020 [ 581.677308][T15026] RDX: 0000000080000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 581.679575][T15026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.681837][T15026] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 581.684130][T15026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.686402][T15026] [ 581.687834][T15026] Kernel Offset: disabled [ 581.689089][T15026] Rebooting in 86400 seconds..