last executing test programs: 2.330291748s ago: executing program 1 (id=152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002040)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3b}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2.25730753s ago: executing program 3 (id=156): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10) setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305006000070000070000ffffff", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r1], 0x84}}, 0x20008040) 2.256259882s ago: executing program 1 (id=158): io_uring_setup(0x1598, &(0x7f00000000c0)={0x0, 0x1a2b, 0x8, 0x3, 0x1fe}) socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x281) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.207789584s ago: executing program 2 (id=159): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 80) 2.190943548s ago: executing program 3 (id=161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000180)={0x7fff, 0x2, 0x6}) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) r2 = socket(0x2, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) fcntl$lock(r1, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 2.163052745s ago: executing program 0 (id=162): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0xe0c42, 0x8b) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) (fail_nth: 78) 981.881015ms ago: executing program 0 (id=163): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0xe0c42, 0x8b) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) (fail_nth: 73) 981.735025ms ago: executing program 2 (id=164): setns(0xc9, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000340)={{r0}, "80f0e60c50a4c0b8c00c8a139d581a04b5dcc06ae62403259dbc569234d4a00f49787dd6b9f18d38525c7143fd4221137316fd8d371ecbb91dd7365e6ed08efdaa27655052de1f5fec3ca411ec8a8e0f19cabe3fa2656d491d13d76eb21190fa5b7e4d88d4634468e792a959e2b469300dea76d621460c9e269a2a601ed82c1e37742c9647cb353b75f32b26c9ebc619c024444a7706416bc1a56edc997897c4aec46f63d9e76855679eb310fa8efb9f68c081ecc22ca4a9ba19a198f4e9f2413208974a711ed2fdbbe1c9f63f5916a8fd099e08c900316c59ef7bf95817918d35c4f90614c10b0207fde28e21eb90861863914269990fdbd2e6ca44c1c9c26f7c5fee2bf6259b88262e888a920becdf48bfab2fa2616ce512be3bfaa73baef5289b0b333fe9226494654d569d2bad620c83f0e61ff0499ec939986de8790df11e005a20914919b1167072583c6ae52b9ebd80bc84a8db220241c6b05aaa0526e38d3bdf6fe5a920181ae69811a7cf5eab5fcb57a76088ab88946e0933f6051bcf0877f5e7dd257cecb0637858e1d1bd66af4f9c6e5ef5b28a7ef5bd25dd1826347f3b8925c1dc7850223033215464bafc3c92a34c190fe32ed847bb2ff814be3e2239d964ffde734d9107ca570043bccfcf3af7a43b53861f14ba282833278b8e8bfd298b412296f2e64fb115f8612cec6e941cbc2ca034fd056c130061af485841c0644263e76b3f13d495defcbde6745c2c1a9840be7365deaa367020d82fda4e2ffc3f49ecbfbd21eb15f2bb13f2a2c61796af7740d200f429c2b8d510a9bc058ac99c820893f4f637533a1f07bb40ae625c8d247b29b3468f15647797661b84cad06145609c2e8d55630874aebb03a4f82204720a47dc6fac1a6cb1b618d6283584483598db07fad86c4c54097831cd96af13b3974353220fd248e6de7be5cbffa17a8ebde2ef2e8fe248b3ec31f0f2beddee920bf98b2890e244b24fbf394ac566079182f676d831296f992822a9b5f85a1f719e050e78f125a3831f7a31fb6681c3da77c97a4a3b8314ee4ce8afd3d5742fcdade33c60c3e829adbd0ff15cd26e03258108d2b11566a2fc001708d92d8391e70da184e0abc97ed13ef0ef0ca69e396a3d79552ed4ea8f87c9d6387857f9fc71b545af391a432c844949b79ccc2c58bb7947cfe3834aae495c290c4e47f363ab5ddb7abe3bf81dfd8f831a2fd9598129aca1583bd122215057e025c7b36c31cd2a735a6987fc9fb66ad7560ed7370b26d79fac2ac64a451a13c39bc70e557492d36215a068c0e55a4528798bed28f92c64adb3c57b4b3c2e127d396588844956b0bf23b5deea8c4ddad0bf2bd22ec398b3241471c0a28a1310fa1f05a26dc7903c0b8be4e2641f74b4f72b20abe03744ed8ab572f14a067441852a8097d5e0b88d0247700761602c158167eb5dfb360b45fe056d94e53d8d67b94c83001e881208b0e01a6c455eb6ba3f3942b392836f5a5b338baa02c9c18d0dc029034ada8cf15c8e0f56fc1eb712586135a1e33b1e07a82bfeea303b8db036b84cb88958f8ef774c3cf683ab5d91b46bcdb38a574a169dee4f5419f5dbe303df47497299409c118003714142f980312e55c3f2b61d8de894457e79b8b2a90c9d6da487af4bf9d893d6ed7e2056c4d0c82691abd87d26c8584cf4a2e0ec1586d6dce87b4c745618f443dbe0c3d3952e010335e9c9aaf2df4c7819e75f3b08dd74b74ed6a0cedf9093c18b2d53412ce7235489eaa2606b440563502eb929ede5c5c2cfbe93cf8740adc4443a31e5f026512a2112639d9b7c31d7524f144d5e057326c84c8d4204d126964fd8978d4da10411ea08b00a087f881143dcde87d964f4329cd203217468d425b14e86e93cbe0926abc62451566ba6ca926beb6b9fc22c37aad1b0e8014409efe714ddf89da2928ababbaeda00c22962a29880ab759a8e9851447165ec9a7d9a18d3eb34cbd30f85e583ddd6b9f24055ee01c90cd0b9aa864fbf646b633d21af88abfd02fb61a9699afd422993c9bb17209bc77c7fd01f1019f4563659a087934511a06f6f30b6b03569a4f916ae53c565fc311ab3bbf6b57067b7f41d4d49d375b99ec9125fec4bef5afd786d8cba5a0bd0486704c8af32aafe7d76c281e56d243688ff516671b2eac8ebf87c3a062810806943622a8cd9ae6b69145dbe320fc1de9def1d1e3145548ce440661943e738daeca8886ca6a67fb198ed1694646a766351927f04849f12d416f0ac2adbc570b7c3c86f673fa1fb8b7fb1549edbae2bf39800ec07ad8932e1dcf6e607b19dd424a145b2ea2693a942ceb78ae0dc96a8014f3beaaedd412bd4b3cbc01f26289de29578428cfc13d0bf0fcf33480197520cb8db6431ee4c698ade6b148f3b0cdfc438ae38b3ad62f3f3f531a0e005b29accf95931ea9ed29a713f6dd348efdbad3bed83724f770023cea9410b96b2c507a8f6b14ce211b9a8268544dcb192c84d2e6c48d6afcd91d39ea5f6500162a7d92c270c38cdee40dd827ca33e1acdd91004229e852842592d373d4110707ee208d354fe71642dc1c378155cf4aa374cf7201aa6cc91d67f1bf55ac4d1fadace148c1c198fabc13091211104311bf7b5982f8c3e7844c7545ea6a39d3159ef1fffa19db3eec09160b45f281a2e85752dfd4040f6065f2e75d5c023e1c70d9d01766bb1efe7b6fc109b594dd73613f220728788289fdfe079132ef627349445d77624cbd2374bb2a8daf511663ad91293023e77589d9169991d1a73e0b01d7e2221bdbdd651cb3d671ea1cef6f4ca43a84a1b786ef4bf83f0160bd62b0850e208af986fb85782d55d8301a463334ceca0c7d0b4c76af76861790c92e881fe611b734b3067a98019678e15c839bf0c198243a1a9a6dc57dd073534b8d544c5ad13eab07392ce3bd977c3d13153f06436e3de3aee08ba68199e297b6c32a93d7ead0595e92c05b8ddc5d9196ec8508b54e69f5cf420e13ede6c2e0e98d48516881beb212edea5e9f6b11d499e20d83881ff9f68e400dd7a9a40cc1d7486d96095360c9b2f5d1537a58201ba0189fa0af4d6db63143a5b8d5c7bc23346636b9b7d6983c41a072d247ff34e2a1fa2520f5ab58f39ec3b3977ecae345aa7660516873d879a3f635f4b1a9b7afa105ae761bb5247c3036fc0785ee7aaec5958d7d060eba99956631dd101afc5c9d7974a2f7880ea4511b1445496a51d93d0d7ab34e33eac7fac19f85943d2eb5878a677bd0b40dfacfa691b56e20c5a84476919c5beb34f3dfada917b2a777975a28b1d34a15a4ed734e5e1463bfc466c133deaa32a3d8bd5eb3aeacb21c2c4aebf49e43c06ccdc71ddc0dcd24ab0647f0fbecab2322d12c6682dedcf7fbbeeabb2d6ee53f099200dbfb406e84223e95b8baf91561a8ad3f46756640b3c5db9e179683011ac8c572641fcefebb7c0785c7ed283d5d90862f77ca3e51dbdee9cd438787f635016980f02924bf479dd99f2c851fc412f59562cecdbfbcbd7a00d5d75d5eb7a43857ec79145c38ec1f05b9ddbd767846231bef9b2ea26bc89f940f8c38f6bc9f0d37232c2f642fe4b15ddbbf10c2b9006eea5b61749fdf7fc709b2ff90bb1bec8e67c24d749aa62f361ec5f3828c4f5e02cfe9c824c3459be00ae287a3b335c6d08cfc7abef9a156b40824fa0abdc003c50f3bd908b68b6a3befdead04689d643f10d409c5632532c9bce5797414745577a170cd98740f63ad8c62cb8cfcae33576cebb6d4585cad7b5f0a780f69c9c66da49939f8df0df6006f51bae7c13c73af9c4c1fc21be7ea966d8251422a6aebeb222415346b5cdb190dae624cf5dd8bb796556185de2c489ecfc35a8bd8f087f3b37c7eea87c42a697273812a0897d40cfc23b2cca56960ca3be82e34f3680b15020ad25a67d6810c3ab5c27d6e25b5a3e94d2330e7783384b2d875c2f2be93374978c3af01ac1f1993ffd5e431c8645962791f151c0eaa530cb4295fe2139fc4f80bb883795c5fd6e5bfdb91f8a7f4827ef010c43c4924069ec0781520c944817a2252ac9c09bc4300959e7ebda54812696046fd5e0fe5cc051cec27c7a6d15f071b95995b0752618f446fd0eff538636261276f5de2203955c0d95d295889784b3c996ffc1af42502a92339e2a3df7b4b27e7881d32cdca6720858991f3e05c5ceb0fce7ece0406e14986ff95ead7a9b2400013019ff7d150fe9a4ee819006cd40ce83062d62807897af0b96107fa19f49f67cf491bf668ff2b2e7a4f7a30813c3299191d693f4c58537ea1360e30d097761aa14913429891f292fababbb64bd361076192b3571d52065ffdc927bffcb849a1f86e4949f8b8c074e5a854be09cc2146ded1d988ab38e4018807964be7a1712014bc556b6590b36d421a4edb10621a1eb33004d8c8062b097ed1cfd67bb4a651b6dc70bb1a2ecfb65137be14226ddad4d6ccddc6ff7ef4bd9743a43539214480304f7a4d712772c6fc204df7f84d3a95faa4e9d22b1bed748c92f0291664c5fb830152cefc4a0cb3d0f9f678eea71430ae13877ead991434fe170622f12056b072e3b197c0ec5acdab73eb62792a7fe87422654d84342c8b96fd2b706d589ad1308d10417702018a5a7337659eb32e9846cd4f1c55caba12ffb6b329dccd5bf4b4f0f7ff9cdeb995a91c21f962f4acaa860e142c4036f44f88c846635c9144f6e58ddb5226e0ac8238ee411b6379372429bc88b2bc6c39ea8d8d8c51aa2d7efdfc383293c4936718f4e012bb5df283cb87eb3d61961b6330db77dff2b45d954b063b63899ba08bfdfc2d74f71fe488455362fb9a5f0a04a3f8199c1776ab8ceff0d56730d3a3a844afaad3693d44e9c8099c9f512320f314cf9414c076e86e0ec233d8e060fb94029555d771a348c762879ccda5df91e87b61863208e24eee019eadf94373ca854bfca4e8653a0cc5f00b8a461327055c3bada0ac5ec4da51ef3656429e93451d89b4ef8693cba9f20add4b81355420353b6d0e52a2a0c69ab6a5898b0983865033a4e3a70f76b7dd1a738304fee0e655a92b93e3cbaba2f4cfac25f5f58d4ed14337a1d8a34759897569bba5d2dba1d155f330d86b0002e0f67d35a2e1b1d79ab42a07ce0d9ddcc6880b55677eec1802184f0310e352c41d2514ab2dd5f398be5deb873e1bc62564f6edc99280db91f079b713ed61bf598670b3acace4431f8eea5c4cd795d3a7e25bb1ca5e1269b7b5205c45f6cb0aae64fe846ef7f4e1d69e452f0e6f35328107213ed71ca0f69bf512d4552c4336499a8e4f0847d7d49f5849b32f9a6466bd23c4de6c64f8c278881c8fa0da11867e9d063f85c7b74a99dc585bfb98a49c0f704c8410387dba80c9aa1ca518acf88195851c301a7d7f60d4063563774149c50748ca2cf838a297bb4e4abb16983fdd78500e251ac5eb3ba4011d17065cf62b9b78e211738a39a9da78305322460be23aba0279fd2ce4dd2c3bd92aa6771e3e9b37c3bc51f8bc6bfa8a7aed219adae9d17b890355044d95bdbb2470fc73e7ff7ea33338d76e0cf7d8471621fa8abd0b2c4a74b91bb96178242967f83f50eae67db02d4c5f59508d0a1c77d8ae71b35295de83e45e12a5c0c0ba106f0144bd9e79fcd9c1d09e10451769ccff012382c7dc1d5c9250a8417289f140495c3c37be9efde13a92a6e1d94340634f37010fe3ad149a459d48ac6acd37b7530a07566046a692ded6ead84dbe9bfc70cc1f9d0a0e42806d00a9795e836efff426b"}) (async) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) (async) listen(r1, 0x100) (async) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) 981.494667ms ago: executing program 0 (id=165): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000022d000/0x3000)=nil, 0x3000, 0x1}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (fail_nth: 52) 981.358599ms ago: executing program 2 (id=166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50c3ff001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 979.777412ms ago: executing program 0 (id=167): setns(0xc9, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x3000020, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 979.500738ms ago: executing program 1 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x5800, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002040)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3b}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 978.506103ms ago: executing program 2 (id=169): r0 = socket$kcm(0x11, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x5, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f0000000680)=0xffffff17, 0x80000) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000005c0)={'mangle\x00', 0x0, [0x1046, 0x9, 0x9, 0xd, 0x7]}, &(0x7f0000000640)=0x54) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) 978.416152ms ago: executing program 3 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x44}, 0x0) 909.126877ms ago: executing program 1 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800feff1000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 908.85786ms ago: executing program 0 (id=172): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)=""/220, 0xdc}], 0x1}, 0x1}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), &(0x7f0000001040), &(0x7f0000000000)) 908.769891ms ago: executing program 3 (id=173): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 81) 850.617882ms ago: executing program 2 (id=174): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0xe0c42, 0x8b) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) (fail_nth: 74) 849.938551ms ago: executing program 1 (id=175): io_uring_setup(0x1598, &(0x7f00000000c0)={0x0, 0x1a2b, 0x8, 0x3, 0x1fe}) socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x281) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 790.335206ms ago: executing program 2 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) close_range(r4, r3, 0x2) r5 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r3, &(0x7f0000000a80)={&(0x7f0000000280), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000700)=""/19, 0x13}, {&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/223, 0xdf}], 0x8, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x40) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000304000000040313043a8c4f342d499b2b5eaa6b94d78c4d6478378888f454f88b8e506127fdcfffb9e445b92dd577bdb60678af43ac16511d5920247fc8063520eabc48b4109c3d02faf6b9c550ffa6b38c76a7584da0c45fb6cb45cf5af0f4db1c6a1082cfc0a61c8fee11c566b2a6f6bb7156"], 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140), 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0e03020000000203"], 0x0, 0x0}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ad6000/0x4000)=nil, 0x4000) syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) readv(r6, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248320001dbb8910529cb572d4fa1f1eb5690", 0x29}, {&(0x7f0000000300)="0400000002e87fda30", 0x9}, {&(0x7f0000000180)="5d6d5a39fc44e10be7265c681a2064dc", 0x10}], 0x3) 633.129351ms ago: executing program 3 (id=177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50feff001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 632.885294ms ago: executing program 3 (id=178): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000022d000/0x3000)=nil, 0x3000, 0x1}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (fail_nth: 53) 296.397µs ago: executing program 0 (id=179): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) recvmsg$can_bcm(r0, &(0x7f000001aa40)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f000001a9c0)=[{&(0x7f0000019580)=""/4096, 0x1000}, {&(0x7f000001a580)=""/190, 0xbe}, {&(0x7f000001a640)=""/106, 0x6a}, {&(0x7f000001a6c0)=""/185, 0xb9}, {&(0x7f000001a780)=""/231, 0xe7}, {&(0x7f000001a880)=""/109, 0x6d}, {&(0x7f000001a900)=""/138, 0x8a}], 0x7}, 0x80) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x400c044) r2 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) 0s ago: executing program 1 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20582' (ED25519) to the list of known hosts. [ 43.215919][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 43.216246][ T44] audit: type=1400 audit(1788044511.318:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.219442][ T44] audit: type=1400 audit(1788044511.328:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.222250][ T5713] cgroup: Unknown subsys name 'net' [ 43.224128][ T44] audit: type=1400 audit(1788044511.328:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.380527][ T5713] cgroup: Unknown subsys name 'cpuset' [ 43.387457][ T5713] cgroup: Unknown subsys name 'rlimit' [ 43.544655][ T44] audit: type=1400 audit(1788044511.648:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.545289][ T44] audit: type=1400 audit(1788044511.648:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.545851][ T44] audit: type=1400 audit(1788044511.648:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.547240][ T44] audit: type=1400 audit(1788044511.648:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.582914][ T44] audit: type=1400 audit(1788044511.688:148): avc: denied { read } for pid=5440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.588989][ T44] audit: type=1400 audit(1788044511.698:149): avc: denied { read } for pid=5440 comm="dhcpcd" name="n31" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.589180][ T44] audit: type=1400 audit(1788044511.698:150): avc: denied { open } for pid=5440 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.625757][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.429509][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.224416][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 48.224500][ T44] audit: type=1400 audit(1788044516.328:156): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.461713][ T44] audit: type=1400 audit(1788044516.568:157): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.461873][ T44] audit: type=1400 audit(1788044516.568:158): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.462254][ T44] audit: type=1400 audit(1788044516.568:159): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.470595][ T44] audit: type=1400 audit(1788044516.578:160): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[7656]" dev="sockfs" ino=7656 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.490772][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.499251][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.502930][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.516409][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.517792][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.518769][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.520510][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.520913][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.521426][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.522697][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.523004][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.526896][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.529193][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.529432][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.530526][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.531377][ T44] audit: type=1400 audit(1788044516.638:161): avc: denied { read } for pid=5736 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.531410][ T44] audit: type=1400 audit(1788044516.638:162): avc: denied { open } for pid=5736 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.532105][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.532305][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.534667][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.536595][ T44] audit: type=1400 audit(1788044516.638:163): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.539566][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.545297][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.548808][ T44] audit: type=1400 audit(1788044516.658:164): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.577405][ T44] audit: type=1400 audit(1788044516.678:165): avc: denied { sys_module } for pid=5736 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.057144][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.058202][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.058543][ T5732] bridge_slave_0: entered allmulticast mode [ 49.060251][ T5732] bridge_slave_0: entered promiscuous mode [ 49.071079][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.071154][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.071450][ T5732] bridge_slave_1: entered allmulticast mode [ 49.072525][ T5732] bridge_slave_1: entered promiscuous mode [ 49.139123][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.174683][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.237149][ T5732] team0: Port device team_slave_0 added [ 49.241624][ T5732] team0: Port device team_slave_1 added [ 49.288693][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.289933][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.289975][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.300220][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.300231][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.300244][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.459208][ T5732] hsr_slave_0: entered promiscuous mode [ 49.460054][ T5732] hsr_slave_1: entered promiscuous mode [ 49.478899][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.479018][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.479276][ T5736] bridge_slave_0: entered allmulticast mode [ 49.480244][ T5736] bridge_slave_0: entered promiscuous mode [ 49.512636][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.512762][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.513028][ T5728] bridge_slave_0: entered allmulticast mode [ 49.514313][ T5728] bridge_slave_0: entered promiscuous mode [ 49.516321][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.516379][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.516441][ T5736] bridge_slave_1: entered allmulticast mode [ 49.517247][ T5736] bridge_slave_1: entered promiscuous mode [ 49.537359][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.537482][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.537590][ T5728] bridge_slave_1: entered allmulticast mode [ 49.539178][ T5728] bridge_slave_1: entered promiscuous mode [ 49.564610][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.564800][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.564925][ T5735] bridge_slave_0: entered allmulticast mode [ 49.567132][ T5735] bridge_slave_0: entered promiscuous mode [ 49.610484][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.610811][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.610936][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.611054][ T5735] bridge_slave_1: entered allmulticast mode [ 49.612633][ T5735] bridge_slave_1: entered promiscuous mode [ 49.618121][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.620087][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.622170][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.682039][ T5728] team0: Port device team_slave_0 added [ 49.694423][ T5728] team0: Port device team_slave_1 added [ 49.713395][ T5736] team0: Port device team_slave_0 added [ 49.725787][ T5736] team0: Port device team_slave_1 added [ 49.728847][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.768745][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.779871][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.779924][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.779990][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.812210][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.812270][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.812338][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.813329][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.813343][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.813365][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.814540][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.814553][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.814573][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.856226][ T5735] team0: Port device team_slave_0 added [ 49.888710][ T5735] team0: Port device team_slave_1 added [ 49.895957][ T5736] hsr_slave_0: entered promiscuous mode [ 49.896907][ T5736] hsr_slave_1: entered promiscuous mode [ 49.897441][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 49.897524][ T5736] Cannot create hsr debugfs directory [ 49.944330][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.944382][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.944604][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.996454][ T5728] hsr_slave_0: entered promiscuous mode [ 49.997277][ T5728] hsr_slave_1: entered promiscuous mode [ 49.997888][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.997905][ T5728] Cannot create hsr debugfs directory [ 49.998609][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.998622][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.998644][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.169105][ T5735] hsr_slave_0: entered promiscuous mode [ 50.169944][ T5735] hsr_slave_1: entered promiscuous mode [ 50.170497][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 50.170514][ T5735] Cannot create hsr debugfs directory [ 50.184699][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.193127][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.225270][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.229766][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.259645][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.266489][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.298516][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.305907][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.403090][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.409067][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.409774][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.417661][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.423512][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.429638][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.430486][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.435627][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.529665][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.533448][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.539920][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.547043][ T5086] Bluetooth: hci3: command tx timeout [ 50.547094][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.547976][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.552670][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.561136][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.568995][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.626397][ T5086] Bluetooth: hci2: command tx timeout [ 50.627603][ T5086] Bluetooth: hci1: command tx timeout [ 50.628266][ T5086] Bluetooth: hci0: command tx timeout [ 50.637515][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.654828][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.660072][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.662535][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.665257][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.667308][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.672719][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.678260][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.684556][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.702016][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.727104][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.727258][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.748372][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.748504][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.770035][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.825558][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.831644][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.836872][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.837008][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.862795][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.864327][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.864406][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.894111][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.898442][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.899153][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.919841][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.919989][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.939842][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.957348][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.957476][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.963460][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.963566][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.212369][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.252728][ T5732] veth0_vlan: entered promiscuous mode [ 51.259232][ T5732] veth1_vlan: entered promiscuous mode [ 51.281770][ T5732] veth0_macvtap: entered promiscuous mode [ 51.290045][ T5732] veth1_macvtap: entered promiscuous mode [ 51.299893][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.306984][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.314676][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.340093][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.363457][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.403506][ T5736] veth0_vlan: entered promiscuous mode [ 51.412127][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.432703][ T5736] veth1_vlan: entered promiscuous mode [ 51.449038][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.449124][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.499036][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.499079][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.500693][ T5728] veth0_vlan: entered promiscuous mode [ 51.517520][ T5736] veth0_macvtap: entered promiscuous mode [ 51.529495][ T5736] veth1_macvtap: entered promiscuous mode [ 51.538581][ T5728] veth1_vlan: entered promiscuous mode [ 51.540241][ T5735] veth0_vlan: entered promiscuous mode [ 51.542163][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.556288][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.556416][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.556489][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.559777][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.573921][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.581129][ T5735] veth1_vlan: entered promiscuous mode [ 51.605133][ T5728] veth0_macvtap: entered promiscuous mode [ 51.607226][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.607264][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.607292][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.607343][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.628676][ T5728] veth1_macvtap: entered promiscuous mode [ 51.651747][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.672954][ T5735] veth0_macvtap: entered promiscuous mode [ 51.675847][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.684526][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.684620][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.715575][ T5735] veth1_macvtap: entered promiscuous mode [ 51.722914][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.722965][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.782731][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.793714][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.793769][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.801877][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.835577][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.835626][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.908237][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.908550][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.908749][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.908892][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.909023][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.911775][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.914104][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.917544][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.917556][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.927054][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.961147][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.961205][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.057976][ T5899] affs: No valid root block on device sr0 [ 52.067897][ T5899] affs: No valid root block on device sr0 [ 52.079816][ T5899] affs: No valid root block on device sr0 [ 52.088945][ T5899] affs: No valid root block on device sr0 [ 52.095178][ T5899] affs: No valid root block on device sr0 [ 52.102505][ T5899] affs: No valid root block on device sr0 [ 52.110996][ T5899] affs: No valid root block on device sr0 [ 52.119251][ T5899] affs: No valid root block on device sr0 [ 52.128546][ T5899] affs: No valid root block on device sr0 [ 52.135937][ T5899] affs: No valid root block on device sr0 [ 52.143328][ T5899] affs: No valid root block on device sr0 [ 52.154119][ T5899] affs: No valid root block on device sr0 [ 52.162568][ T5899] affs: No valid root block on device sr0 [ 52.171205][ T5899] affs: No valid root block on device sr0 [ 52.177936][ T5899] affs: No valid root block on device sr0 [ 52.185256][ T5899] affs: No valid root block on device sr0 [ 52.191878][ T5899] affs: No valid root block on device sr0 [ 52.199718][ T5899] affs: No valid root block on device sr0 [ 52.208843][ T5899] affs: No valid root block on device sr0 [ 52.215682][ T5899] affs: No valid root block on device sr0 [ 52.221883][ T5899] affs: No valid root block on device sr0 [ 52.229345][ T5899] affs: No valid root block on device sr0 [ 52.235315][ T5899] affs: No valid root block on device sr0 [ 52.247296][ T5899] affs: No valid root block on device sr0 [ 52.255217][ T5899] affs: No valid root block on device sr0 [ 52.263099][ T5899] affs: No valid root block on device sr0 [ 52.267275][ T5899] affs: No valid root block on device sr0 [ 52.271644][ T5899] affs: No valid root block on device sr0 [ 52.275845][ T5899] affs: No valid root block on device sr0 [ 52.280772][ T5899] affs: No valid root block on device sr0 [ 52.286800][ T5899] affs: No valid root block on device sr0 [ 52.291152][ T5899] affs: No valid root block on device sr0 [ 52.295510][ T5899] affs: No valid root block on device sr0 [ 52.301452][ T5899] affs: No valid root block on device sr0 [ 52.305798][ T5899] affs: No valid root block on device sr0 [ 52.311099][ T5899] affs: No valid root block on device sr0 [ 52.315760][ T5899] affs: No valid root block on device sr0 [ 52.321384][ T5899] affs: No valid root block on device sr0 [ 52.325930][ T5899] affs: No valid root block on device sr0 [ 52.332131][ T5899] affs: No valid root block on device sr0 [ 52.338660][ T5899] affs: No valid root block on device sr0 [ 52.342896][ T5899] affs: No valid root block on device sr0 [ 52.348452][ T5899] affs: No valid root block on device sr0 [ 52.353330][ T5899] affs: No valid root block on device sr0 [ 52.358442][ T5899] affs: No valid root block on device sr0 [ 52.363059][ T5899] affs: No valid root block on device sr0 [ 52.367972][ T5899] affs: No valid root block on device sr0 [ 52.372641][ T5899] affs: No valid root block on device sr0 [ 52.377723][ T5899] affs: No valid root block on device sr0 [ 52.382831][ T5899] affs: No valid root block on device sr0 [ 52.387610][ T5899] affs: No valid root block on device sr0 [ 52.392903][ T5899] affs: No valid root block on device sr0 [ 52.399229][ T5899] affs: No valid root block on device sr0 [ 52.404276][ T5899] affs: No valid root block on device sr0 [ 52.412198][ T5899] affs: No valid root block on device sr0 [ 52.416862][ T5899] affs: No valid root block on device sr0 [ 52.421782][ T5899] affs: No valid root block on device sr0 [ 52.426840][ T5899] affs: No valid root block on device sr0 [ 52.431124][ T5899] affs: No valid root block on device sr0 [ 52.435358][ T5899] affs: No valid root block on device sr0 [ 52.439996][ T5899] affs: No valid root block on device sr0 [ 52.444639][ T5899] affs: No valid root block on device sr0 [ 52.449547][ T5899] affs: No valid root block on device sr0 [ 52.454961][ T5899] affs: No valid root block on device sr0 [ 52.459763][ T5899] affs: No valid root block on device sr0 [ 52.627307][ T65] Bluetooth: hci3: command tx timeout [ 52.667910][ T5914] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 52.686961][ T5912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61801 sclass=netlink_route_socket pid=5912 comm=syz.3.11 [ 52.707980][ T65] Bluetooth: hci0: command tx timeout [ 52.716785][ T65] Bluetooth: hci1: command tx timeout [ 52.716856][ T65] Bluetooth: hci2: command tx timeout [ 53.494456][ T44] kauditd_printk_skb: 93 callbacks suppressed [ 53.494551][ T44] audit: type=1400 audit(1788044521.598:259): avc: denied { write } for pid=5952 comm="syz.3.26" name="/" dev="9p" ino=73159531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.500183][ T44] audit: type=1400 audit(1788044521.608:260): avc: denied { read write } for pid=5952 comm="syz.3.26" name="file0" dev="9p" ino=73159533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.500223][ T44] audit: type=1400 audit(1788044521.608:261): avc: denied { open } for pid=5952 comm="syz.3.26" path="/7/file0/file0" dev="9p" ino=73159533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.506498][ T44] audit: type=1800 audit(1788044521.608:262): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.26" name="file0" dev="9p" ino=73159533 res=0 errno=0 [ 53.517155][ T44] audit: type=1400 audit(1788044521.628:263): avc: denied { create } for pid=5952 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.518194][ T44] audit: type=1400 audit(1788044521.628:264): avc: denied { bind } for pid=5952 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.518806][ T44] audit: type=1400 audit(1788044521.628:265): avc: denied { listen } for pid=5952 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.518970][ T44] audit: type=1400 audit(1788044521.628:266): avc: denied { connect } for pid=5952 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.530432][ T44] audit: type=1400 audit(1788044521.638:267): avc: denied { create } for pid=5954 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.531048][ T44] audit: type=1400 audit(1788044521.638:268): avc: denied { bind } for pid=5954 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.952497][ T5984] FAULT_INJECTION: forcing a failure. [ 53.952497][ T5984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.952574][ T5984] CPU: 3 UID: 0 PID: 5984 Comm: syz.3.35 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.952598][ T5984] Tainted: [L]=SOFTLOCKUP [ 53.952604][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.952615][ T5984] Call Trace: [ 53.952621][ T5984] [ 53.952628][ T5984] dump_stack_lvl+0x100/0x190 [ 53.952679][ T5984] should_fail_ex.cold+0x5/0xa [ 53.952700][ T5984] ? prepare_alloc_pages+0x16d/0x5b0 [ 53.952729][ T5984] should_fail_alloc_page+0xeb/0x140 [ 53.952752][ T5984] prepare_alloc_pages+0x1f0/0x5b0 [ 53.952773][ T5984] ? trace_sched_exit_tp+0x120/0x160 [ 53.952797][ T5984] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 53.952828][ T5984] ? lock_acquire+0x1d1/0x380 [ 53.952982][ T5984] ? __page_table_check_ptes_set+0x1d5/0x530 [ 53.953006][ T5984] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 53.953033][ T5984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.953062][ T5984] ? find_held_lock+0x2b/0x80 [ 53.953085][ T5984] ? rcu_read_unlock+0x2d/0xb0 [ 53.953109][ T5984] ? rcu_read_unlock+0x2d/0xb0 [ 53.953137][ T5984] ? do_anonymous_page+0x922/0x2050 [ 53.953166][ T5984] ? __pfx_do_anonymous_page+0x10/0x10 [ 53.953188][ T5984] ? rcu_read_unlock+0x2d/0xb0 [ 53.953213][ T5984] ? rcu_read_unlock+0x2d/0xb0 [ 53.953234][ T5984] ? __pte_offset_map+0x179/0x310 [ 53.953252][ T5984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.953273][ T5984] ? policy_nodemask+0xed/0x4f0 [ 53.953296][ T5984] alloc_pages_mpol+0x201/0x550 [ 53.953320][ T5984] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 53.953342][ T5984] ? __pfx___css_rstat_updated+0x10/0x10 [ 53.953368][ T5984] folio_alloc_mpol_noprof+0x36/0x260 [ 53.953394][ T5984] shmem_alloc_folio+0x135/0x160 [ 53.953416][ T5984] shmem_alloc_and_add_folio+0x371/0xd40 [ 53.953445][ T5984] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 53.953472][ T5984] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 53.953495][ T5984] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 53.953526][ T5984] shmem_get_folio_gfp+0x75b/0x1980 [ 53.953556][ T5984] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 53.953589][ T5984] shmem_write_begin+0x1a4/0x420 [ 53.953616][ T5984] ? __pfx_shmem_write_begin+0x10/0x10 [ 53.953640][ T5984] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 53.953684][ T5984] generic_perform_write+0x292/0xa40 [ 53.953711][ T5984] ? __pfx_generic_perform_write+0x10/0x10 [ 53.953734][ T5984] ? file_update_time_flags+0x38c/0x520 [ 53.953763][ T5984] shmem_file_write_iter+0x10e/0x140 [ 53.953795][ T5984] do_iter_readv_writev+0x6f7/0x930 [ 53.953821][ T5984] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 53.953846][ T5984] ? lock_acquire+0x1d1/0x380 [ 53.953874][ T5984] vfs_writev+0x360/0xdd0 [ 53.953901][ T5984] ? __lock_acquire+0x4c5/0x1ec0 [ 53.953922][ T5984] ? __pfx_vfs_writev+0x10/0x10 [ 53.953945][ T5984] ? find_held_lock+0x2b/0x80 [ 53.953995][ T5984] ? lock_acquire+0x1d1/0x380 [ 53.954013][ T5984] ? __fget_files+0x34/0x3d0 [ 53.954041][ T5984] ? __fget_files+0x21f/0x3d0 [ 53.954068][ T5984] ? do_pwritev+0x1ac/0x270 [ 53.954091][ T5984] do_pwritev+0x1ac/0x270 [ 53.954117][ T5984] ? __pfx_do_pwritev+0x10/0x10 [ 53.954141][ T5984] ? ksys_write+0x1ac/0x250 [ 53.954159][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 53.954178][ T5984] __x64_sys_pwritev2+0xef/0x160 [ 53.954198][ T5984] do_syscall_64+0x123/0x790 [ 53.954346][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.954365][ T5984] RIP: 0033:0x7f87c8d9e159 [ 53.954381][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.954397][ T5984] RSP: 002b:00007f87c9d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 53.954414][ T5984] RAX: ffffffffffffffda RBX: 00007f87c9025fa0 RCX: 00007f87c8d9e159 [ 53.954425][ T5984] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 53.954435][ T5984] RBP: 00007f87c9d49090 R08: 0000000000029000 R09: 0000000000000003 [ 53.954447][ T5984] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 53.954459][ T5984] R13: 00007f87c9026038 R14: 00007f87c9025fa0 R15: 00007fffe8e86f08 [ 53.954484][ T5984] [ 53.971073][ T5987] netlink: 872 bytes leftover after parsing attributes in process `syz.0.36'. [ 53.971092][ T5987] netlink: 872 bytes leftover after parsing attributes in process `syz.0.36'. [ 54.708091][ T5086] Bluetooth: hci3: command tx timeout [ 54.797120][ T5086] Bluetooth: hci2: command tx timeout [ 54.797205][ T5086] Bluetooth: hci1: command tx timeout [ 54.797247][ T5086] Bluetooth: hci0: command tx timeout [ 54.810538][ T6032] tipc: Started in network mode [ 54.811122][ T6032] tipc: Node identity 4, cluster identity 4711 [ 54.814197][ T6032] tipc: Node number set to 4 [ 54.901214][ T6038] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.919068][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 54.939064][ T6042] macvlan0: entered allmulticast mode [ 54.939130][ T6042] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 54.948141][ T6042] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 55.008511][ T6048] FAULT_INJECTION: forcing a failure. [ 55.008511][ T6048] name failslab, interval 1, probability 0, space 0, times 1 [ 55.008553][ T6048] CPU: 3 UID: 0 PID: 6048 Comm: syz.3.52 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.008580][ T6048] Tainted: [L]=SOFTLOCKUP [ 55.008585][ T6048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.008591][ T6048] Call Trace: [ 55.008595][ T6048] [ 55.008600][ T6048] dump_stack_lvl+0x100/0x190 [ 55.008619][ T6048] should_fail_ex.cold+0x5/0xa [ 55.008635][ T6048] should_failslab+0xc2/0x120 [ 55.008649][ T6048] __kmalloc_noprof+0xfc/0x840 [ 55.008665][ T6048] ? trace_kmem_cache_alloc+0xdd/0x100 [ 55.008678][ T6048] ? p9_fcall_init+0x101/0x420 [ 55.008694][ T6048] p9_fcall_init+0x101/0x420 [ 55.008708][ T6048] p9_tag_alloc+0x20d/0x860 [ 55.008723][ T6048] ? __pfx_p9_tag_alloc+0x10/0x10 [ 55.008736][ T6048] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 55.008752][ T6048] ? v9fs_xattr_handler_get+0x6b/0x120 [ 55.008765][ T6048] ? __vfs_getxattr+0x13d/0x1a0 [ 55.008777][ T6048] ? cap_inode_need_killpriv+0x40/0x60 [ 55.008792][ T6048] ? security_inode_need_killpriv+0x87/0x1e0 [ 55.008810][ T6048] ? file_remove_privs_flags+0x2b8/0x590 [ 55.008824][ T6048] ? netfs_unbuffered_write_iter+0x1c9/0x720 [ 55.008837][ T6048] ? v9fs_file_write_iter+0xbf/0x100 [ 55.008847][ T6048] ? iter_file_splice_write+0x830/0x10b0 [ 55.008862][ T6048] p9_client_prepare_req+0x19b/0x4d0 [ 55.008877][ T6048] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 55.008893][ T6048] ? __lock_acquire+0x4c5/0x1ec0 [ 55.008908][ T6048] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 55.008920][ T6048] p9_client_rpc+0x1c4/0xd60 [ 55.008936][ T6048] ? __pfx_p9_client_rpc+0x10/0x10 [ 55.008951][ T6048] ? idr_alloc_u32+0x22b/0x320 [ 55.008964][ T6048] ? __pfx_idr_alloc_u32+0x10/0x10 [ 55.008975][ T6048] ? do_raw_spin_lock+0x128/0x260 [ 55.008989][ T6048] ? find_held_lock+0x2b/0x80 [ 55.009003][ T6048] ? p9_fid_create+0x26d/0x460 [ 55.009017][ T6048] ? rcu_is_watching+0x13/0xc0 [ 55.009031][ T6048] ? trace_9p_fid_ref+0x72/0x1f0 [ 55.009046][ T6048] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 55.009059][ T6048] p9_client_xattrwalk+0xc0/0x2a0 [ 55.009076][ T6048] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 55.009089][ T6048] v9fs_fid_xattr_get+0x10f/0x300 [ 55.009102][ T6048] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 55.009116][ T6048] ? stack_trace_save+0x8e/0xc0 [ 55.009133][ T6048] ? __pfx_stack_trace_save+0x10/0x10 [ 55.009153][ T6048] ? v9fs_fid_lookup+0xec/0xf50 [ 55.009169][ T6048] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 55.009181][ T6048] v9fs_xattr_handler_get+0x6b/0x120 [ 55.009196][ T6048] __vfs_getxattr+0x13d/0x1a0 [ 55.009209][ T6048] ? __pfx___vfs_getxattr+0x10/0x10 [ 55.009223][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.009235][ T6048] cap_inode_need_killpriv+0x40/0x60 [ 55.009250][ T6048] security_inode_need_killpriv+0x87/0x1e0 [ 55.009268][ T6048] file_remove_privs_flags+0x2b8/0x590 [ 55.009284][ T6048] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 55.009300][ T6048] ? generic_write_checks+0x321/0x490 [ 55.009316][ T6048] ? __pfx_generic_write_checks+0x10/0x10 [ 55.009336][ T6048] netfs_unbuffered_write_iter+0x1c9/0x720 [ 55.009352][ T6048] v9fs_file_write_iter+0xbf/0x100 [ 55.009363][ T6048] iter_file_splice_write+0x830/0x10b0 [ 55.009384][ T6048] ? __pfx_iter_file_splice_write+0x10/0x10 [ 55.009400][ T6048] ? __pfx_copy_splice_read+0x10/0x10 [ 55.009421][ T6048] ? __pfx_iter_file_splice_write+0x10/0x10 [ 55.009436][ T6048] direct_splice_actor+0x192/0x690 [ 55.009451][ T6048] splice_direct_to_actor+0x345/0xa30 [ 55.009465][ T6048] ? __pfx_direct_splice_actor+0x10/0x10 [ 55.009481][ T6048] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 55.009497][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.009509][ T6048] do_splice_direct+0x174/0x240 [ 55.009523][ T6048] ? __pfx_do_splice_direct+0x10/0x10 [ 55.009536][ T6048] ? avc_policy_seqno+0x9/0x20 [ 55.009549][ T6048] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 55.009564][ T6048] ? rw_verify_area+0xce/0x6d0 [ 55.009581][ T6048] do_sendfile+0xadc/0xe20 [ 55.009600][ T6048] ? __pfx_do_sendfile+0x10/0x10 [ 55.009621][ T6048] __x64_sys_sendfile64+0x154/0x220 [ 55.009634][ T6048] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 55.009655][ T6048] do_syscall_64+0x123/0x790 [ 55.009668][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.009680][ T6048] RIP: 0033:0x7f87c8d9e159 [ 55.009689][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.009699][ T6048] RSP: 002b:00007f87c9d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 55.009711][ T6048] RAX: ffffffffffffffda RBX: 00007f87c9025fa0 RCX: 00007f87c8d9e159 [ 55.009718][ T6048] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 55.009724][ T6048] RBP: 00007f87c9d49090 R08: 0000000000000000 R09: 0000000000000000 [ 55.009730][ T6048] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 55.009737][ T6048] R13: 00007f87c9026038 R14: 00007f87c9025fa0 R15: 00007fffe8e86f08 [ 55.009752][ T6048] [ 55.086114][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.103179][ T6053] geneve2: entered allmulticast mode [ 55.258172][ T42] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.262959][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.263034][ T42] usb 7-1: Product: syz [ 55.263056][ T42] usb 7-1: Manufacturer: syz [ 55.263065][ T42] usb 7-1: SerialNumber: syz [ 55.314390][ T5835] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.380910][ T6062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.443526][ T6062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.513166][ T6062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.536947][ T1044] usb 7-1: USB disconnect, device number 2 [ 55.595034][ T6062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.696276][ T5838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.716180][ T5838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.716252][ T5838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.736188][ T5838] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.340633][ T6103] FAULT_INJECTION: forcing a failure. [ 56.340633][ T6103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.340741][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.0.66 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.340782][ T6103] Tainted: [L]=SOFTLOCKUP [ 56.340791][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.340803][ T6103] Call Trace: [ 56.340810][ T6103] [ 56.340818][ T6103] dump_stack_lvl+0x100/0x190 [ 56.340851][ T6103] should_fail_ex.cold+0x5/0xa [ 56.340888][ T6103] ? prepare_alloc_pages+0x16d/0x5b0 [ 56.340912][ T6103] should_fail_alloc_page+0xeb/0x140 [ 56.340935][ T6103] prepare_alloc_pages+0x1f0/0x5b0 [ 56.340962][ T6103] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 56.340995][ T6103] ? lock_acquire+0x1d1/0x380 [ 56.341015][ T6103] ? __page_table_check_ptes_set+0x1d5/0x530 [ 56.341041][ T6103] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 56.341071][ T6103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.341101][ T6103] ? find_held_lock+0x2b/0x80 [ 56.341126][ T6103] ? rcu_read_unlock+0x2d/0xb0 [ 56.341152][ T6103] ? rcu_read_unlock+0x2d/0xb0 [ 56.341183][ T6103] ? do_anonymous_page+0x922/0x2050 [ 56.341287][ T6103] ? __pfx_do_anonymous_page+0x10/0x10 [ 56.341310][ T6103] ? rcu_read_unlock+0x2d/0xb0 [ 56.341335][ T6103] ? rcu_read_unlock+0x2d/0xb0 [ 56.341360][ T6103] ? __pte_offset_map+0x179/0x310 [ 56.341378][ T6103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.341407][ T6103] ? policy_nodemask+0xed/0x4f0 [ 56.341431][ T6103] alloc_pages_mpol+0x201/0x550 [ 56.341453][ T6103] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 56.341477][ T6103] ? __pfx___css_rstat_updated+0x10/0x10 [ 56.341505][ T6103] folio_alloc_mpol_noprof+0x36/0x260 [ 56.341534][ T6103] shmem_alloc_folio+0x135/0x160 [ 56.341559][ T6103] shmem_alloc_and_add_folio+0x371/0xd40 [ 56.341589][ T6103] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 56.341617][ T6103] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 56.341640][ T6103] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 56.341677][ T6103] shmem_get_folio_gfp+0x75b/0x1980 [ 56.341710][ T6103] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 56.341744][ T6103] shmem_write_begin+0x1a4/0x420 [ 56.341773][ T6103] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.341800][ T6103] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 56.341832][ T6103] generic_perform_write+0x292/0xa40 [ 56.341862][ T6103] ? __pfx_generic_perform_write+0x10/0x10 [ 56.341888][ T6103] ? file_update_time_flags+0x38c/0x520 [ 56.341919][ T6103] shmem_file_write_iter+0x10e/0x140 [ 56.341949][ T6103] do_iter_readv_writev+0x6f7/0x930 [ 56.342018][ T6103] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 56.342045][ T6103] ? lock_acquire+0x1d1/0x380 [ 56.342075][ T6103] vfs_writev+0x360/0xdd0 [ 56.342103][ T6103] ? __lock_acquire+0x4c5/0x1ec0 [ 56.342125][ T6103] ? __pfx_vfs_writev+0x10/0x10 [ 56.342149][ T6103] ? find_held_lock+0x2b/0x80 [ 56.342177][ T6103] ? lock_acquire+0x1d1/0x380 [ 56.342196][ T6103] ? __fget_files+0x34/0x3d0 [ 56.342235][ T6103] ? __fget_files+0x21f/0x3d0 [ 56.342270][ T6103] ? do_pwritev+0x1ac/0x270 [ 56.342295][ T6103] do_pwritev+0x1ac/0x270 [ 56.342322][ T6103] ? __pfx_do_pwritev+0x10/0x10 [ 56.342348][ T6103] ? ksys_write+0x1ac/0x250 [ 56.342364][ T6103] ? __pfx_ksys_write+0x10/0x10 [ 56.342385][ T6103] __x64_sys_pwritev2+0xef/0x160 [ 56.342420][ T6103] do_syscall_64+0x123/0x790 [ 56.342447][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.342467][ T6103] RIP: 0033:0x7fbff6d9e159 [ 56.342485][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.342503][ T6103] RSP: 002b:00007fbff7c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 56.342523][ T6103] RAX: ffffffffffffffda RBX: 00007fbff7025fa0 RCX: 00007fbff6d9e159 [ 56.342536][ T6103] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.342546][ T6103] RBP: 00007fbff7c94090 R08: 0000000000029000 R09: 0000000000000003 [ 56.342559][ T6103] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 56.342570][ T6103] R13: 00007fbff7026038 R14: 00007fbff7025fa0 R15: 00007ffe3a45e178 [ 56.342595][ T6103] [ 56.388381][ T5835] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 56.388715][ T5835] ath9k_htc: Failed to initialize the device [ 56.390402][ T1044] usb 7-1: ath9k_htc: USB layer deinitialized [ 56.513463][ T6123] FAULT_INJECTION: forcing a failure. [ 56.513463][ T6123] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.513483][ T6123] CPU: 2 UID: 0 PID: 6123 Comm: syz.1.71 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.513498][ T6123] Tainted: [L]=SOFTLOCKUP [ 56.513502][ T6123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.513508][ T6123] Call Trace: [ 56.513512][ T6123] [ 56.513517][ T6123] dump_stack_lvl+0x100/0x190 [ 56.513537][ T6123] should_fail_ex.cold+0x5/0xa [ 56.513553][ T6123] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 56.513583][ T6123] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 56.513600][ T6123] ? shmem_write_begin+0x1ba/0x420 [ 56.513617][ T6123] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.513633][ T6123] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 56.513653][ T6123] generic_perform_write+0x4cb/0xa40 [ 56.513669][ T6123] ? __pfx_generic_perform_write+0x10/0x10 [ 56.513683][ T6123] ? file_update_time_flags+0x38c/0x520 [ 56.513701][ T6123] shmem_file_write_iter+0x10e/0x140 [ 56.513720][ T6123] do_iter_readv_writev+0x6f7/0x930 [ 56.513737][ T6123] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 56.513753][ T6123] ? lock_acquire+0x1d1/0x380 [ 56.513770][ T6123] vfs_writev+0x360/0xdd0 [ 56.513787][ T6123] ? __lock_acquire+0x4c5/0x1ec0 [ 56.513799][ T6123] ? __pfx_vfs_writev+0x10/0x10 [ 56.513814][ T6123] ? find_held_lock+0x2b/0x80 [ 56.513831][ T6123] ? lock_acquire+0x1d1/0x380 [ 56.513841][ T6123] ? __fget_files+0x34/0x3d0 [ 56.513858][ T6123] ? __fget_files+0x21f/0x3d0 [ 56.513873][ T6123] ? do_pwritev+0x1ac/0x270 [ 56.513888][ T6123] do_pwritev+0x1ac/0x270 [ 56.513904][ T6123] ? __pfx_do_pwritev+0x10/0x10 [ 56.513920][ T6123] ? ksys_write+0x1ac/0x250 [ 56.513930][ T6123] ? __pfx_ksys_write+0x10/0x10 [ 56.513941][ T6123] __x64_sys_pwritev2+0xef/0x160 [ 56.513954][ T6123] do_syscall_64+0x123/0x790 [ 56.513991][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.514002][ T6123] RIP: 0033:0x7ff87519e159 [ 56.514012][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.514022][ T6123] RSP: 002b:00007ff8733f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 56.514033][ T6123] RAX: ffffffffffffffda RBX: 00007ff875425fa0 RCX: 00007ff87519e159 [ 56.514040][ T6123] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.514046][ T6123] RBP: 00007ff8733f6090 R08: 0000000000029000 R09: 0000000000000003 [ 56.514053][ T6123] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 56.514059][ T6123] R13: 00007ff875426038 R14: 00007ff875425fa0 R15: 00007ffdb8ba5648 [ 56.514073][ T6123] [ 56.568226][ T6127] support for cryptoloop has been removed. Use dm-crypt instead. [ 56.582689][ T6133] FAULT_INJECTION: forcing a failure. [ 56.582689][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.582723][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.3.74 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.582750][ T6133] Tainted: [L]=SOFTLOCKUP [ 56.582757][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.582768][ T6133] Call Trace: [ 56.582775][ T6133] [ 56.582782][ T6133] dump_stack_lvl+0x100/0x190 [ 56.582815][ T6133] should_fail_ex.cold+0x5/0xa [ 56.582843][ T6133] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 56.582886][ T6133] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 56.582916][ T6133] ? shmem_write_begin+0x1ba/0x420 [ 56.582944][ T6133] ? __pfx_fault_in_readable+0x10/0x10 [ 56.582976][ T6133] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.583004][ T6133] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 56.583040][ T6133] generic_perform_write+0x4cb/0xa40 [ 56.583069][ T6133] ? __pfx_generic_perform_write+0x10/0x10 [ 56.583091][ T6133] ? mnt_put_write_access_file+0x4e/0x100 [ 56.583114][ T6133] ? file_update_time_flags+0x38c/0x520 [ 56.583143][ T6133] shmem_file_write_iter+0x10e/0x140 [ 56.583177][ T6133] do_iter_readv_writev+0x6f7/0x930 [ 56.583206][ T6133] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 56.583232][ T6133] ? lock_acquire+0x1d1/0x380 [ 56.583261][ T6133] vfs_writev+0x360/0xdd0 [ 56.583306][ T6133] ? __lock_acquire+0x4c5/0x1ec0 [ 56.583328][ T6133] ? __pfx_vfs_writev+0x10/0x10 [ 56.583353][ T6133] ? find_held_lock+0x2b/0x80 [ 56.583383][ T6133] ? lock_acquire+0x1d1/0x380 [ 56.583401][ T6133] ? __fget_files+0x34/0x3d0 [ 56.583431][ T6133] ? __fget_files+0x21f/0x3d0 [ 56.583457][ T6133] ? do_pwritev+0x1ac/0x270 [ 56.583482][ T6133] do_pwritev+0x1ac/0x270 [ 56.583510][ T6133] ? __pfx_do_pwritev+0x10/0x10 [ 56.583537][ T6133] ? ksys_write+0x1ac/0x250 [ 56.583552][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 56.583571][ T6133] __x64_sys_pwritev2+0xef/0x160 [ 56.583592][ T6133] do_syscall_64+0x123/0x790 [ 56.583615][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.583635][ T6133] RIP: 0033:0x7f87c8d9e159 [ 56.583650][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.583671][ T6133] RSP: 002b:00007f87c9d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 56.583691][ T6133] RAX: ffffffffffffffda RBX: 00007f87c9025fa0 RCX: 00007f87c8d9e159 [ 56.583702][ T6133] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.583715][ T6133] RBP: 00007f87c9d49090 R08: 0000000000029000 R09: 0000000000000003 [ 56.583727][ T6133] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 56.583737][ T6133] R13: 00007f87c9026038 R14: 00007f87c9025fa0 R15: 00007fffe8e86f08 [ 56.583763][ T6133] [ 56.663404][ T6142] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 56.728013][ T1044] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.749272][ T6143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.754015][ T6156] FAULT_INJECTION: forcing a failure. [ 56.754015][ T6156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.754052][ T6156] CPU: 2 UID: 0 PID: 6156 Comm: syz.3.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.754097][ T6156] Tainted: [L]=SOFTLOCKUP [ 56.754106][ T6156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.754118][ T6156] Call Trace: [ 56.754126][ T6156] [ 56.754135][ T6156] dump_stack_lvl+0x100/0x190 [ 56.754173][ T6156] should_fail_ex.cold+0x5/0xa [ 56.754203][ T6156] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 56.754252][ T6156] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 56.754285][ T6156] ? shmem_write_begin+0x1ba/0x420 [ 56.754316][ T6156] ? __pfx_fault_in_readable+0x10/0x10 [ 56.754355][ T6156] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.754387][ T6156] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 56.754425][ T6156] generic_perform_write+0x4cb/0xa40 [ 56.754459][ T6156] ? __pfx_generic_perform_write+0x10/0x10 [ 56.754496][ T6156] ? file_update_time_flags+0x38c/0x520 [ 56.754531][ T6156] shmem_file_write_iter+0x10e/0x140 [ 56.754568][ T6156] do_iter_readv_writev+0x6f7/0x930 [ 56.754603][ T6156] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 56.754634][ T6156] ? lock_acquire+0x1d1/0x380 [ 56.754670][ T6156] vfs_writev+0x360/0xdd0 [ 56.754702][ T6156] ? __lock_acquire+0x4c5/0x1ec0 [ 56.754727][ T6156] ? __pfx_vfs_writev+0x10/0x10 [ 56.754754][ T6156] ? find_held_lock+0x2b/0x80 [ 56.754788][ T6156] ? lock_acquire+0x1d1/0x380 [ 56.754807][ T6156] ? __fget_files+0x34/0x3d0 [ 56.754841][ T6156] ? __fget_files+0x21f/0x3d0 [ 56.754873][ T6156] ? do_pwritev+0x1ac/0x270 [ 56.754902][ T6156] do_pwritev+0x1ac/0x270 [ 56.754933][ T6156] ? __pfx_do_pwritev+0x10/0x10 [ 56.754962][ T6156] ? ksys_write+0x1ac/0x250 [ 56.754981][ T6156] ? __pfx_ksys_write+0x10/0x10 [ 56.755005][ T6156] __x64_sys_pwritev2+0xef/0x160 [ 56.755029][ T6156] do_syscall_64+0x123/0x790 [ 56.755059][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.755080][ T6156] RIP: 0033:0x7f87c8d9e159 [ 56.755100][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.755119][ T6156] RSP: 002b:00007f87c9d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 56.755138][ T6156] RAX: ffffffffffffffda RBX: 00007f87c9025fa0 RCX: 00007f87c8d9e159 [ 56.755152][ T6156] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.755165][ T6156] RBP: 00007f87c9d49090 R08: 0000000000029000 R09: 0000000000000003 [ 56.755177][ T6156] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 56.755190][ T6156] R13: 00007f87c9026038 R14: 00007f87c9025fa0 R15: 00007fffe8e86f08 [ 56.755220][ T6156] [ 56.797004][ T65] Bluetooth: hci3: command tx timeout [ 56.840091][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 56.855891][ T6143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.867045][ T65] Bluetooth: hci0: command tx timeout [ 56.867082][ T65] Bluetooth: hci1: command tx timeout [ 56.896502][ T1044] usb 7-1: Using ep0 maxpacket: 16 [ 56.899385][ T1044] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 56.903394][ T1044] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.903423][ T1044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.906341][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.906359][ T1044] usb 7-1: Product: syz [ 56.906373][ T1044] usb 7-1: Manufacturer: syz [ 56.906388][ T1044] usb 7-1: SerialNumber: syz [ 56.913662][ T1044] usb 7-1: config 0 descriptor?? [ 56.944598][ T6143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.038923][ T6143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.132537][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 57.164623][ T5838] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175807][ T1044] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 57.199814][ T1044] imon:send_packet: packet tx failed (-71) [ 57.204370][ T5838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.206849][ T5838] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.217154][ T1044] imon 7-1:0.0: panel buttons/knobs setup failed [ 57.222539][ T5838] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287186][ T1044] rc_core: IR keymap rc-imon-pad not found [ 57.287267][ T1044] Registered IR keymap rc-empty [ 57.288297][ T1044] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 57.288312][ T1044] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 57.289049][ T1044] imon:send_packet: packet tx failed (-71) [ 57.318684][ T1044] imon 7-1:0.0: remote input dev register failed [ 57.318898][ T1044] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 57.336964][ T1044] imon 7-1:0.0: unable to initialize intf0, err 0 [ 57.337026][ T1044] imon:imon_probe: failed to initialize context! [ 57.337079][ T1044] imon 7-1:0.0: unable to register, err -19 [ 57.342806][ T1044] usb 7-1: USB disconnect, device number 3 [ 57.362081][ T6200] fuse: Unknown parameter 'user_i00000000000000000000' [ 57.479889][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 57.490501][ T6209] macvlan1: entered allmulticast mode [ 57.496721][ T6209] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 57.660265][ T6220] ======================================================= [ 57.660265][ T6220] WARNING: The mand mount option has been deprecated and [ 57.660265][ T6220] and is ignored by this kernel. Remove the mand [ 57.660265][ T6220] option from the mount to silence this warning. [ 57.660265][ T6220] ======================================================= [ 57.677567][ T1044] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 57.826923][ T1044] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 57.827779][ T1044] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 57.827797][ T1044] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 57.827809][ T1044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.831987][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.832002][ T1044] usb 7-1: Product: syz [ 57.832009][ T1044] usb 7-1: Manufacturer: syz [ 57.832016][ T1044] usb 7-1: SerialNumber: syz [ 57.835355][ T1044] usb 7-1: config 0 descriptor?? [ 57.835854][ T6102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.038840][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 58.039681][ T1044] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 58.306255][ T1044] rc_core: IR keymap rc-imon-pad not found [ 58.306307][ T1044] Registered IR keymap rc-empty [ 58.306380][ T1044] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 58.306390][ T1044] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 58.470282][ T1044] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 58.472559][ T1044] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 58.479500][ T1044] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:4> initialized [ 58.641578][ T6102] imon:lcd_write: invalid payload size: 0 (expected 8) [ 58.655129][ T850] usb 7-1: USB disconnect, device number 4 [ 58.719458][ T44] kauditd_printk_skb: 108 callbacks suppressed [ 58.719604][ T44] audit: type=1400 audit(1788044526.828:377): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.736089][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 58.787947][ T44] audit: type=1400 audit(1788044526.898:378): avc: denied { write } for pid=6258 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.855152][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 58.855583][ T6266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6266 comm=syz.0.101 [ 58.876136][ T5086] Bluetooth: hci3: command tx timeout [ 58.935775][ T44] audit: type=1326 audit(1788044527.038:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.107" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff6d9e159 code=0x0 [ 58.974058][ T44] audit: type=1400 audit(1788044527.078:380): avc: denied { write } for pid=6279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.030208][ T44] audit: type=1400 audit(1788044527.138:381): avc: denied { write } for pid=6285 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.041222][ T6288] fuse: Unknown parameter 'user_id00000000000000000000' [ 59.158593][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 59.169819][ T6299] macvlan2: entered allmulticast mode [ 59.180346][ T6299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.217046][ T6301] support for the xor transformation has been removed. [ 59.275160][ T6311] FAULT_INJECTION: forcing a failure. [ 59.275160][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 59.275221][ T6311] CPU: 3 UID: 0 PID: 6311 Comm: syz.2.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.275248][ T6311] Tainted: [L]=SOFTLOCKUP [ 59.275253][ T6311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.275259][ T6311] Call Trace: [ 59.275263][ T6311] [ 59.275268][ T6311] dump_stack_lvl+0x100/0x190 [ 59.275287][ T6311] should_fail_ex.cold+0x5/0xa [ 59.275304][ T6311] should_failslab+0xc2/0x120 [ 59.275317][ T6311] kmem_cache_alloc_bulk_noprof+0x77/0x890 [ 59.275330][ T6311] ? __pfx___cant_migrate+0x10/0x10 [ 59.275347][ T6311] xdp_test_run_batch.constprop.0+0x1561/0x1ca0 [ 59.275377][ T6311] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.275391][ T6311] ? lock_acquire+0x1d1/0x380 [ 59.275403][ T6311] ? find_held_lock+0x2b/0x80 [ 59.275421][ T6311] ? ktime_get+0x23e/0x320 [ 59.275432][ T6311] ? ktime_get+0x1a4/0x320 [ 59.275445][ T6311] bpf_test_run_xdp_live+0x367/0x760 [ 59.275460][ T6311] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.275476][ T6311] ? lock_acquire+0x1d1/0x380 [ 59.275489][ T6311] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.275503][ T6311] ? find_held_lock+0x2b/0x80 [ 59.275517][ T6311] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 59.275546][ T6311] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.275564][ T6311] ? 0xffffffffa0404e80 [ 59.275576][ T6311] ? 0xffffffffa0404e80 [ 59.275588][ T6311] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 59.275616][ T6311] bpf_prog_test_run_xdp+0xd86/0x1670 [ 59.275637][ T6311] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.275656][ T6311] ? fput+0x7c/0x100 [ 59.275668][ T6311] ? __bpf_prog_get+0x97/0x290 [ 59.275687][ T6311] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.275702][ T6311] __sys_bpf+0x2265/0x4a30 [ 59.275722][ T6311] ? __pfx___sys_bpf+0x10/0x10 [ 59.275738][ T6311] ? find_held_lock+0x2b/0x80 [ 59.275752][ T6311] ? get_pid_task+0xfc/0x250 [ 59.275766][ T6311] ? get_pid_task+0xfc/0x250 [ 59.275784][ T6311] ? find_held_lock+0x2b/0x80 [ 59.275801][ T6311] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.275816][ T6311] ? find_held_lock+0x2b/0x80 [ 59.275830][ T6311] ? ksys_write+0x190/0x250 [ 59.275839][ T6311] ? ksys_write+0x190/0x250 [ 59.275848][ T6311] ? lock_acquire+0x1d1/0x380 [ 59.275867][ T6311] ? fput+0x7c/0x100 [ 59.275879][ T6311] ? ksys_write+0x1ac/0x250 [ 59.275890][ T6311] ? __x64_sys_bpf+0xce/0x140 [ 59.275899][ T6311] __x64_sys_bpf+0xce/0x140 [ 59.275910][ T6311] ? do_syscall_64+0xae/0x790 [ 59.275923][ T6311] do_syscall_64+0x123/0x790 [ 59.275936][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.275947][ T6311] RIP: 0033:0x7f0902f9e159 [ 59.275957][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.275979][ T6311] RSP: 002b:00007f0903e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.275991][ T6311] RAX: ffffffffffffffda RBX: 00007f0903225fa0 RCX: 00007f0902f9e159 [ 59.275998][ T6311] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 59.276005][ T6311] RBP: 00007f0903e50090 R08: 0000000000000000 R09: 0000000000000000 [ 59.276011][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.276017][ T6311] R13: 00007f0903226038 R14: 00007f0903225fa0 R15: 00007ffe2284f698 [ 59.276031][ T6311] [ 59.390807][ T44] audit: type=1400 audit(1788044527.498:382): avc: denied { write } for pid=6318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.454628][ T44] audit: type=1400 audit(1788044527.558:383): avc: denied { write } for pid=6328 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.463475][ T44] audit: type=1400 audit(1788044527.578:384): avc: denied { setopt } for pid=6319 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.416780][ T6353] FAULT_INJECTION: forcing a failure. [ 60.416780][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 60.416864][ T6353] CPU: 2 UID: 0 PID: 6353 Comm: syz.2.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.416907][ T6353] Tainted: [L]=SOFTLOCKUP [ 60.416915][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.416927][ T6353] Call Trace: [ 60.416934][ T6353] [ 60.416942][ T6353] dump_stack_lvl+0x100/0x190 [ 60.416975][ T6353] should_fail_ex.cold+0x5/0xa [ 60.417003][ T6353] should_failslab+0xc2/0x120 [ 60.417028][ T6353] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.417047][ T6353] ? llc_sap_find+0x268/0x440 [ 60.417071][ T6353] ? llc_sap_find+0x27d/0x440 [ 60.417095][ T6353] ? skb_clone+0x190/0x400 [ 60.417118][ T6353] skb_clone+0x190/0x400 [ 60.417136][ T6353] ? __pfx_llc_conn_handler+0x10/0x10 [ 60.417166][ T6353] ? __pfx_stp_pdu_rcv+0x10/0x10 [ 60.417210][ T6353] llc_rcv+0x525/0xcb0 [ 60.417238][ T6353] ? __pfx_llc_rcv+0x10/0x10 [ 60.417263][ T6353] __netif_receive_skb_list_core+0x6da/0x940 [ 60.417300][ T6353] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.417328][ T6353] ? lock_acquire+0x1d1/0x380 [ 60.417348][ T6353] ? netif_receive_skb_list_internal+0x34a/0xd40 [ 60.417386][ T6353] netif_receive_skb_list_internal+0x722/0xd40 [ 60.417419][ T6353] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 60.417452][ T6353] ? __asan_memset+0x23/0x50 [ 60.417493][ T6353] netif_receive_skb_list+0x72/0x500 [ 60.417524][ T6353] xdp_test_run_batch.constprop.0+0x16bb/0x1ca0 [ 60.417570][ T6353] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 60.417596][ T6353] ? lock_acquire+0x1d1/0x380 [ 60.417617][ T6353] ? find_held_lock+0x2b/0x80 [ 60.417652][ T6353] ? ktime_get+0x23e/0x320 [ 60.417671][ T6353] ? ktime_get+0x1a4/0x320 [ 60.417699][ T6353] bpf_test_run_xdp_live+0x367/0x760 [ 60.417727][ T6353] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 60.417757][ T6353] ? lock_acquire+0x1d1/0x380 [ 60.417781][ T6353] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 60.417806][ T6353] ? find_held_lock+0x2b/0x80 [ 60.417830][ T6353] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 60.417875][ T6353] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.417898][ T6353] ? 0xffffffffa0404e80 [ 60.417916][ T6353] ? 0xffffffffa0404e80 [ 60.417934][ T6353] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 60.417991][ T6353] bpf_prog_test_run_xdp+0xd86/0x1670 [ 60.418029][ T6353] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.418065][ T6353] ? fput+0x7c/0x100 [ 60.418090][ T6353] ? __bpf_prog_get+0x97/0x290 [ 60.418115][ T6353] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.418143][ T6353] __sys_bpf+0x2265/0x4a30 [ 60.418182][ T6353] ? __pfx___sys_bpf+0x10/0x10 [ 60.418211][ T6353] ? find_held_lock+0x2b/0x80 [ 60.418238][ T6353] ? get_pid_task+0xfc/0x250 [ 60.418263][ T6353] ? get_pid_task+0xfc/0x250 [ 60.418297][ T6353] ? find_held_lock+0x2b/0x80 [ 60.418330][ T6353] ? rcu_read_lock_any_held+0x6a/0x90 [ 60.418358][ T6353] ? find_held_lock+0x2b/0x80 [ 60.418384][ T6353] ? ksys_write+0x190/0x250 [ 60.418400][ T6353] ? ksys_write+0x190/0x250 [ 60.418418][ T6353] ? lock_acquire+0x1d1/0x380 [ 60.418458][ T6353] ? fput+0x7c/0x100 [ 60.418480][ T6353] ? ksys_write+0x1ac/0x250 [ 60.418502][ T6353] ? __x64_sys_bpf+0xce/0x140 [ 60.418519][ T6353] __x64_sys_bpf+0xce/0x140 [ 60.418539][ T6353] ? do_syscall_64+0xae/0x790 [ 60.418568][ T6353] do_syscall_64+0x123/0x790 [ 60.418593][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.418614][ T6353] RIP: 0033:0x7f0902f9e159 [ 60.418630][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.418649][ T6353] RSP: 002b:00007f0903e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.418669][ T6353] RAX: ffffffffffffffda RBX: 00007f0903225fa0 RCX: 00007f0902f9e159 [ 60.418682][ T6353] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 60.418694][ T6353] RBP: 00007f0903e50090 R08: 0000000000000000 R09: 0000000000000000 [ 60.418706][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.418717][ T6353] R13: 00007f0903226038 R14: 00007f0903225fa0 R15: 00007ffe2284f698 [ 60.418745][ T6353] [ 60.423441][ T44] audit: type=1400 audit(1788044528.528:385): avc: denied { create } for pid=6337 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.423723][ T44] audit: type=1400 audit(1788044528.528:386): avc: denied { bind } for pid=6337 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.732051][ T6370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.732125][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 60.732183][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 60.772477][ T6375] netlink: 168 bytes leftover after parsing attributes in process `syz.3.134'. [ 60.772953][ T6376] fuse: Unknown parameter 'user_id00000000000000000000' [ 60.825104][ T6387] netlink: 'syz.0.137': attribute type 3 has an invalid length. [ 60.828000][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.828015][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.828331][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.828342][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.828434][ T6387] Zero length message leads to an empty skb [ 60.862699][ T6394] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 60.891127][ T6396] FAULT_INJECTION: forcing a failure. [ 60.891127][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 60.891188][ T6396] CPU: 0 UID: 0 PID: 6396 Comm: syz.0.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.891225][ T6396] Tainted: [L]=SOFTLOCKUP [ 60.891232][ T6396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.891243][ T6396] Call Trace: [ 60.891249][ T6396] [ 60.891256][ T6396] dump_stack_lvl+0x100/0x190 [ 60.891288][ T6396] should_fail_ex.cold+0x5/0xa [ 60.891316][ T6396] should_failslab+0xc2/0x120 [ 60.891338][ T6396] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.891356][ T6396] ? llc_sap_find+0x268/0x440 [ 60.891376][ T6396] ? llc_sap_find+0x27d/0x440 [ 60.891396][ T6396] ? skb_clone+0x190/0x400 [ 60.891415][ T6396] skb_clone+0x190/0x400 [ 60.891432][ T6396] ? __pfx_llc_conn_handler+0x10/0x10 [ 60.891457][ T6396] ? __pfx_stp_pdu_rcv+0x10/0x10 [ 60.891481][ T6396] llc_rcv+0x525/0xcb0 [ 60.891505][ T6396] ? __pfx_llc_rcv+0x10/0x10 [ 60.891526][ T6396] __netif_receive_skb_list_core+0x6da/0x940 [ 60.891559][ T6396] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.891585][ T6396] ? lock_acquire+0x1d1/0x380 [ 60.891602][ T6396] ? netif_receive_skb_list_internal+0x34a/0xd40 [ 60.891637][ T6396] netif_receive_skb_list_internal+0x722/0xd40 [ 60.891671][ T6396] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 60.891701][ T6396] ? __asan_memset+0x23/0x50 [ 60.891750][ T6396] netif_receive_skb_list+0x72/0x500 [ 60.891779][ T6396] xdp_test_run_batch.constprop.0+0x16bb/0x1ca0 [ 60.891816][ T6396] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 60.891839][ T6396] ? lock_acquire+0x1d1/0x380 [ 60.891857][ T6396] ? find_held_lock+0x2b/0x80 [ 60.891888][ T6396] ? ktime_get+0x23e/0x320 [ 60.891906][ T6396] ? ktime_get+0x1a4/0x320 [ 60.891930][ T6396] bpf_test_run_xdp_live+0x367/0x760 [ 60.891954][ T6396] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 60.891987][ T6396] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 60.892009][ T6396] ? find_held_lock+0x2b/0x80 [ 60.892032][ T6396] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 60.892072][ T6396] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.892093][ T6396] ? 0xffffffffa0404e80 [ 60.892109][ T6396] ? 0xffffffffa0404e80 [ 60.892124][ T6396] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 60.892155][ T6396] bpf_prog_test_run_xdp+0xd86/0x1670 [ 60.892188][ T6396] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.892219][ T6396] ? fput+0x7c/0x100 [ 60.892240][ T6396] ? __bpf_prog_get+0x97/0x290 [ 60.892263][ T6396] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.892287][ T6396] __sys_bpf+0x2265/0x4a30 [ 60.892322][ T6396] ? __pfx___sys_bpf+0x10/0x10 [ 60.892348][ T6396] ? find_held_lock+0x2b/0x80 [ 60.892370][ T6396] ? get_pid_task+0xfc/0x250 [ 60.892393][ T6396] ? get_pid_task+0xfc/0x250 [ 60.892423][ T6396] ? find_held_lock+0x2b/0x80 [ 60.892452][ T6396] ? rcu_read_lock_any_held+0x6a/0x90 [ 60.892476][ T6396] ? find_held_lock+0x2b/0x80 [ 60.892499][ T6396] ? ksys_write+0x190/0x250 [ 60.892514][ T6396] ? ksys_write+0x190/0x250 [ 60.892529][ T6396] ? lock_acquire+0x1d1/0x380 [ 60.892562][ T6396] ? fput+0x7c/0x100 [ 60.892581][ T6396] ? ksys_write+0x1ac/0x250 [ 60.892599][ T6396] ? __x64_sys_bpf+0xce/0x140 [ 60.892614][ T6396] __x64_sys_bpf+0xce/0x140 [ 60.892631][ T6396] ? do_syscall_64+0xae/0x790 [ 60.892652][ T6396] do_syscall_64+0x123/0x790 [ 60.892679][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.892697][ T6396] RIP: 0033:0x7fbff6d9e159 [ 60.892712][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.892729][ T6396] RSP: 002b:00007fbff7c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.892748][ T6396] RAX: ffffffffffffffda RBX: 00007fbff7025fa0 RCX: 00007fbff6d9e159 [ 60.892760][ T6396] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 60.892770][ T6396] RBP: 00007fbff7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 60.892781][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.892791][ T6396] R13: 00007fbff7026038 R14: 00007fbff7025fa0 R15: 00007ffe3a45e178 [ 60.892815][ T6396] [ 61.107766][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 61.118827][ T6407] macvlan3: entered allmulticast mode [ 61.134294][ T6407] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 61.420868][ T6423] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 61.438892][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.524984][ T6438] FAULT_INJECTION: forcing a failure. [ 61.524984][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.525050][ T6438] CPU: 2 UID: 0 PID: 6438 Comm: syz.2.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.525085][ T6438] Tainted: [L]=SOFTLOCKUP [ 61.525092][ T6438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.525101][ T6438] Call Trace: [ 61.525108][ T6438] [ 61.525115][ T6438] dump_stack_lvl+0x100/0x190 [ 61.525162][ T6438] should_fail_ex.cold+0x5/0xa [ 61.525190][ T6438] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 61.525223][ T6438] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 61.525241][ T6438] ? shmem_write_begin+0x1ba/0x420 [ 61.525259][ T6438] ? __pfx_shmem_write_begin+0x10/0x10 [ 61.525275][ T6438] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 61.525296][ T6438] generic_perform_write+0x4cb/0xa40 [ 61.525313][ T6438] ? __pfx_generic_perform_write+0x10/0x10 [ 61.525327][ T6438] ? file_update_time_flags+0x38c/0x520 [ 61.525346][ T6438] shmem_file_write_iter+0x10e/0x140 [ 61.525365][ T6438] do_iter_readv_writev+0x6f7/0x930 [ 61.525383][ T6438] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 61.525399][ T6438] ? lock_acquire+0x1d1/0x380 [ 61.525417][ T6438] vfs_writev+0x360/0xdd0 [ 61.525438][ T6438] ? __lock_acquire+0x4c5/0x1ec0 [ 61.525469][ T6438] ? __pfx_vfs_writev+0x10/0x10 [ 61.525490][ T6438] ? find_held_lock+0x2b/0x80 [ 61.525514][ T6438] ? lock_acquire+0x1d1/0x380 [ 61.525528][ T6438] ? __fget_files+0x34/0x3d0 [ 61.525557][ T6438] ? __fget_files+0x21f/0x3d0 [ 61.525581][ T6438] ? do_pwritev+0x1ac/0x270 [ 61.525601][ T6438] do_pwritev+0x1ac/0x270 [ 61.525633][ T6438] ? __pfx_do_pwritev+0x10/0x10 [ 61.525653][ T6438] ? ksys_write+0x1ac/0x250 [ 61.525662][ T6438] ? __pfx_ksys_write+0x10/0x10 [ 61.525674][ T6438] __x64_sys_pwritev2+0xef/0x160 [ 61.525688][ T6438] do_syscall_64+0x123/0x790 [ 61.525707][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.525720][ T6438] RIP: 0033:0x7f0902f9e159 [ 61.525730][ T6438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.525740][ T6438] RSP: 002b:00007f0903e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 61.525752][ T6438] RAX: ffffffffffffffda RBX: 00007f0903225fa0 RCX: 00007f0902f9e159 [ 61.525759][ T6438] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 61.525766][ T6438] RBP: 00007f0903e50090 R08: 0000000000029000 R09: 0000000000000003 [ 61.525773][ T6438] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 61.525783][ T6438] R13: 00007f0903226038 R14: 00007f0903225fa0 R15: 00007ffe2284f698 [ 61.525805][ T6438] [ 62.359810][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 62.385755][ T6453] macvlan4: entered allmulticast mode [ 62.396925][ T6453] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 62.460540][ T6466] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 62.487014][ T6469] fuse: Unknown parameter 'user_id00000000000000000000' [ 62.494805][ T6472] FAULT_INJECTION: forcing a failure. [ 62.494805][ T6472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.494870][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.0.162 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.494898][ T6472] Tainted: [L]=SOFTLOCKUP [ 62.494903][ T6472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.494910][ T6472] Call Trace: [ 62.494914][ T6472] [ 62.494919][ T6472] dump_stack_lvl+0x100/0x190 [ 62.494940][ T6472] should_fail_ex.cold+0x5/0xa [ 62.494957][ T6472] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 62.494982][ T6472] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 62.495000][ T6472] ? shmem_write_begin+0x1ba/0x420 [ 62.495017][ T6472] ? __pfx_fault_in_readable+0x10/0x10 [ 62.495035][ T6472] ? __pfx_shmem_write_begin+0x10/0x10 [ 62.495052][ T6472] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 62.495073][ T6472] generic_perform_write+0x4cb/0xa40 [ 62.495090][ T6472] ? __pfx_generic_perform_write+0x10/0x10 [ 62.495104][ T6472] ? file_update_time_flags+0x38c/0x520 [ 62.495123][ T6472] shmem_file_write_iter+0x10e/0x140 [ 62.495143][ T6472] do_iter_readv_writev+0x6f7/0x930 [ 62.495161][ T6472] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 62.495177][ T6472] ? lock_acquire+0x1d1/0x380 [ 62.495195][ T6472] vfs_writev+0x360/0xdd0 [ 62.495212][ T6472] ? __lock_acquire+0x4c5/0x1ec0 [ 62.495225][ T6472] ? __pfx_vfs_writev+0x10/0x10 [ 62.495241][ T6472] ? find_held_lock+0x2b/0x80 [ 62.495259][ T6472] ? lock_acquire+0x1d1/0x380 [ 62.495270][ T6472] ? __fget_files+0x34/0x3d0 [ 62.495287][ T6472] ? __fget_files+0x21f/0x3d0 [ 62.495304][ T6472] ? do_pwritev+0x1ac/0x270 [ 62.495319][ T6472] do_pwritev+0x1ac/0x270 [ 62.495336][ T6472] ? __pfx_do_pwritev+0x10/0x10 [ 62.495364][ T6472] ? ksys_write+0x1ac/0x250 [ 62.495376][ T6472] ? __pfx_ksys_write+0x10/0x10 [ 62.495388][ T6472] __x64_sys_pwritev2+0xef/0x160 [ 62.495402][ T6472] do_syscall_64+0x123/0x790 [ 62.495416][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.495428][ T6472] RIP: 0033:0x7fbff6d9e159 [ 62.495438][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.495449][ T6472] RSP: 002b:00007fbff7c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 62.495460][ T6472] RAX: ffffffffffffffda RBX: 00007fbff7025fa0 RCX: 00007fbff6d9e159 [ 62.495467][ T6472] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 62.495473][ T6472] RBP: 00007fbff7c94090 R08: 0000000000029000 R09: 0000000000000003 [ 62.495480][ T6472] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 62.495486][ T6472] R13: 00007fbff7026038 R14: 00007fbff7025fa0 R15: 00007ffe3a45e178 [ 62.495506][ T6472] [ 62.537244][ T6467] bond2 (unregistering): Released all slaves [ 62.543514][ T6476] FAULT_INJECTION: forcing a failure. [ 62.543514][ T6476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.543536][ T6476] CPU: 2 UID: 0 PID: 6476 Comm: syz.0.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.543552][ T6476] Tainted: [L]=SOFTLOCKUP [ 62.543555][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.543562][ T6476] Call Trace: [ 62.543566][ T6476] [ 62.543572][ T6476] dump_stack_lvl+0x100/0x190 [ 62.543592][ T6476] should_fail_ex.cold+0x5/0xa [ 62.543606][ T6476] ? prepare_alloc_pages+0x16d/0x5b0 [ 62.543621][ T6476] should_fail_alloc_page+0xeb/0x140 [ 62.543636][ T6476] prepare_alloc_pages+0x1f0/0x5b0 [ 62.543651][ T6476] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 62.543671][ T6476] ? lock_acquire+0x1d1/0x380 [ 62.543682][ T6476] ? __page_table_check_ptes_set+0x1d5/0x530 [ 62.543698][ T6476] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 62.543714][ T6476] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 62.543733][ T6476] ? find_held_lock+0x2b/0x80 [ 62.543747][ T6476] ? rcu_read_unlock+0x2d/0xb0 [ 62.543762][ T6476] ? rcu_read_unlock+0x2d/0xb0 [ 62.543780][ T6476] ? do_anonymous_page+0x922/0x2050 [ 62.543798][ T6476] ? __pfx_do_anonymous_page+0x10/0x10 [ 62.543812][ T6476] ? rcu_read_unlock+0x2d/0xb0 [ 62.543827][ T6476] ? rcu_read_unlock+0x2d/0xb0 [ 62.543841][ T6476] ? __pte_offset_map+0x179/0x310 [ 62.543852][ T6476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.543866][ T6476] ? policy_nodemask+0xed/0x4f0 [ 62.543881][ T6476] alloc_pages_mpol+0x201/0x550 [ 62.543895][ T6476] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 62.543909][ T6476] ? __pfx___css_rstat_updated+0x10/0x10 [ 62.543925][ T6476] folio_alloc_mpol_noprof+0x36/0x260 [ 62.543942][ T6476] shmem_alloc_folio+0x135/0x160 [ 62.543956][ T6476] shmem_alloc_and_add_folio+0x371/0xd40 [ 62.543974][ T6476] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 62.543991][ T6476] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 62.544005][ T6476] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 62.544026][ T6476] shmem_get_folio_gfp+0x75b/0x1980 [ 62.544044][ T6476] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 62.544064][ T6476] shmem_write_begin+0x1a4/0x420 [ 62.544085][ T6476] ? __pfx_shmem_write_begin+0x10/0x10 [ 62.544101][ T6476] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 62.544121][ T6476] generic_perform_write+0x292/0xa40 [ 62.544137][ T6476] ? __pfx_generic_perform_write+0x10/0x10 [ 62.544151][ T6476] ? file_update_time_flags+0x38c/0x520 [ 62.544169][ T6476] shmem_file_write_iter+0x10e/0x140 [ 62.544187][ T6476] do_iter_readv_writev+0x6f7/0x930 [ 62.544204][ T6476] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 62.544220][ T6476] ? lock_acquire+0x1d1/0x380 [ 62.544236][ T6476] vfs_writev+0x360/0xdd0 [ 62.544253][ T6476] ? __lock_acquire+0x4c5/0x1ec0 [ 62.544265][ T6476] ? __pfx_vfs_writev+0x10/0x10 [ 62.544280][ T6476] ? find_held_lock+0x2b/0x80 [ 62.544297][ T6476] ? lock_acquire+0x1d1/0x380 [ 62.544307][ T6476] ? __fget_files+0x34/0x3d0 [ 62.544324][ T6476] ? __fget_files+0x21f/0x3d0 [ 62.544340][ T6476] ? do_pwritev+0x1ac/0x270 [ 62.544355][ T6476] do_pwritev+0x1ac/0x270 [ 62.544371][ T6476] ? __pfx_do_pwritev+0x10/0x10 [ 62.544387][ T6476] ? ksys_write+0x1ac/0x250 [ 62.544397][ T6476] ? __pfx_ksys_write+0x10/0x10 [ 62.544408][ T6476] __x64_sys_pwritev2+0xef/0x160 [ 62.544421][ T6476] do_syscall_64+0x123/0x790 [ 62.544434][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.544446][ T6476] RIP: 0033:0x7fbff6d9e159 [ 62.544455][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.544466][ T6476] RSP: 002b:00007fbff7c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 62.544477][ T6476] RAX: ffffffffffffffda RBX: 00007fbff7025fa0 RCX: 00007fbff6d9e159 [ 62.544484][ T6476] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 62.544490][ T6476] RBP: 00007fbff7c94090 R08: 0000000000029000 R09: 0000000000000003 [ 62.544497][ T6476] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 62.544503][ T6476] R13: 00007fbff7026038 R14: 00007fbff7025fa0 R15: 00007ffe3a45e178 [ 62.544517][ T6476] [ 62.756986][ T6485] FAULT_INJECTION: forcing a failure. [ 62.756986][ T6485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.757021][ T6485] CPU: 2 UID: 0 PID: 6485 Comm: syz.0.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.757049][ T6485] Tainted: [L]=SOFTLOCKUP [ 62.757056][ T6485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.757068][ T6485] Call Trace: [ 62.757075][ T6485] [ 62.757083][ T6485] dump_stack_lvl+0x100/0x190 [ 62.757123][ T6485] should_fail_ex.cold+0x5/0xa [ 62.757148][ T6485] ? prepare_alloc_pages+0x16d/0x5b0 [ 62.757175][ T6485] should_fail_alloc_page+0xeb/0x140 [ 62.757202][ T6485] prepare_alloc_pages+0x1f0/0x5b0 [ 62.757232][ T6485] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 62.757268][ T6485] ? find_held_lock+0x2b/0x80 [ 62.757296][ T6485] ? debug_check_no_obj_freed+0x31f/0x630 [ 62.757324][ T6485] ? __lock_acquire+0x4c5/0x1ec0 [ 62.757346][ T6485] ? debug_check_no_obj_freed+0x31f/0x630 [ 62.757367][ T6485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 62.757404][ T6485] ? lock_acquire+0x1d1/0x380 [ 62.757422][ T6485] ? __free_frozen_pages+0x57e/0x10f0 [ 62.757446][ T6485] ? find_held_lock+0x2b/0x80 [ 62.757496][ T6485] ? __free_frozen_pages+0x747/0x10f0 [ 62.757518][ T6485] ? __free_frozen_pages+0x747/0x10f0 [ 62.757549][ T6485] ? _raw_spin_unlock+0x28/0x50 [ 62.757588][ T6485] ? __free_frozen_pages+0x751/0x10f0 [ 62.757615][ T6485] ? migrate_folio_undo_src+0x288/0x3d0 [ 62.757654][ T6485] __folio_alloc_noprof+0x16/0x260 [ 62.757684][ T6485] alloc_migration_target+0x1d7/0x6d0 [ 62.757715][ T6485] migrate_pages_batch+0x5c4/0x4680 [ 62.757746][ T6485] ? __pfx_alloc_migration_target+0x10/0x10 [ 62.757780][ T6485] ? __pfx_migrate_pages_batch+0x10/0x10 [ 62.757815][ T6485] ? __pfx_remove_migration_pte+0x10/0x10 [ 62.757850][ T6485] migrate_pages_sync+0x12c/0x880 [ 62.757878][ T6485] ? __pfx_alloc_migration_target+0x10/0x10 [ 62.757909][ T6485] ? __pfx_migrate_pages_sync+0x10/0x10 [ 62.757959][ T6485] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 62.757994][ T6485] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 62.758032][ T6485] migrate_pages+0x1a83/0x2850 [ 62.758062][ T6485] ? __pfx_alloc_migration_target+0x10/0x10 [ 62.758094][ T6485] ? __pfx_migrate_pages+0x10/0x10 [ 62.758122][ T6485] ? queue_pages_range+0x11e/0x180 [ 62.758145][ T6485] ? rcu_is_watching+0x13/0xc0 [ 62.758172][ T6485] ? __up_read+0x333/0x980 [ 62.758198][ T6485] ? __pfx___up_read+0x10/0x10 [ 62.758221][ T6485] ? do_migrate_pages+0x451/0x740 [ 62.758245][ T6485] ? do_migrate_pages+0x451/0x740 [ 62.758277][ T6485] do_migrate_pages+0x488/0x740 [ 62.758309][ T6485] ? __pfx_do_migrate_pages+0x10/0x10 [ 62.758339][ T6485] ? lock_acquire+0x1d1/0x380 [ 62.758358][ T6485] ? rcu_is_watching+0x13/0xc0 [ 62.758386][ T6485] ? cap_capable+0x107/0x430 [ 62.758411][ T6485] ? get_task_mm+0xc2/0xf0 [ 62.758442][ T6485] ? security_capable+0xbd/0x260 [ 62.758471][ T6485] kernel_migrate_pages+0x560/0x700 [ 62.758497][ T6485] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 62.758523][ T6485] ? __pfx_ksys_write+0x10/0x10 [ 62.758546][ T6485] __x64_sys_migrate_pages+0x96/0x100 [ 62.758572][ T6485] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.758602][ T6485] do_syscall_64+0x123/0x790 [ 62.758627][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.758647][ T6485] RIP: 0033:0x7fbff6d9e159 [ 62.758663][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.758679][ T6485] RSP: 002b:00007fbff7c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 62.758698][ T6485] RAX: ffffffffffffffda RBX: 00007fbff7026090 RCX: 00007fbff6d9e159 [ 62.758711][ T6485] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 62.758723][ T6485] RBP: 00007fbff7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 62.758735][ T6485] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 62.758748][ T6485] R13: 00007fbff7026128 R14: 00007fbff7026090 R15: 00007ffe3a45e178 [ 62.758776][ T6485] [ 63.768152][ T6522] FAULT_INJECTION: forcing a failure. [ 63.768152][ T6522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.768215][ T6522] CPU: 2 UID: 0 PID: 6522 Comm: syz.2.174 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.768253][ T6522] Tainted: [L]=SOFTLOCKUP [ 63.768260][ T6522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.768269][ T6522] Call Trace: [ 63.768276][ T6522] [ 63.768284][ T6522] dump_stack_lvl+0x100/0x190 [ 63.768314][ T6522] should_fail_ex.cold+0x5/0xa [ 63.768339][ T6522] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 63.768376][ T6522] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 63.768404][ T6522] ? shmem_write_begin+0x1ba/0x420 [ 63.768431][ T6522] ? __pfx_shmem_write_begin+0x10/0x10 [ 63.768457][ T6522] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 63.768486][ T6522] generic_perform_write+0x4cb/0xa40 [ 63.768513][ T6522] ? __pfx_generic_perform_write+0x10/0x10 [ 63.768537][ T6522] ? file_update_time_flags+0x38c/0x520 [ 63.768572][ T6522] shmem_file_write_iter+0x10e/0x140 [ 63.768601][ T6522] do_iter_readv_writev+0x6f7/0x930 [ 63.768642][ T6522] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 63.768670][ T6522] ? lock_acquire+0x1d1/0x380 [ 63.768699][ T6522] vfs_writev+0x360/0xdd0 [ 63.768724][ T6522] ? __lock_acquire+0x4c5/0x1ec0 [ 63.768745][ T6522] ? __pfx_vfs_writev+0x10/0x10 [ 63.768768][ T6522] ? find_held_lock+0x2b/0x80 [ 63.768797][ T6522] ? lock_acquire+0x1d1/0x380 [ 63.768815][ T6522] ? __fget_files+0x34/0x3d0 [ 63.768841][ T6522] ? __fget_files+0x21f/0x3d0 [ 63.768868][ T6522] ? do_pwritev+0x1ac/0x270 [ 63.768892][ T6522] do_pwritev+0x1ac/0x270 [ 63.768919][ T6522] ? __pfx_do_pwritev+0x10/0x10 [ 63.768944][ T6522] ? ksys_write+0x1ac/0x250 [ 63.768958][ T6522] ? __pfx_ksys_write+0x10/0x10 [ 63.768978][ T6522] __x64_sys_pwritev2+0xef/0x160 [ 63.768999][ T6522] do_syscall_64+0x123/0x790 [ 63.769022][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.769041][ T6522] RIP: 0033:0x7f0902f9e159 [ 63.769056][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.769071][ T6522] RSP: 002b:00007f0903e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 63.769089][ T6522] RAX: ffffffffffffffda RBX: 00007f0903225fa0 RCX: 00007f0902f9e159 [ 63.769100][ T6522] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 63.769111][ T6522] RBP: 00007f0903e50090 R08: 0000000000029000 R09: 0000000000000003 [ 63.769122][ T6522] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 63.769133][ T6522] R13: 00007f0903226038 R14: 00007f0903225fa0 R15: 00007ffe2284f698 [ 63.769158][ T6522] [ 63.786618][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 63.786635][ T44] audit: type=1400 audit(1788044531.888:417): avc: denied { map } for pid=6511 comm="syz.0.172" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.786680][ T44] audit: type=1400 audit(1788044531.888:418): avc: denied { write execute } for pid=6511 comm="syz.0.172" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.789786][ T44] audit: type=1400 audit(1788044531.898:419): avc: denied { sqpoll } for pid=6511 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.789827][ T44] audit: type=1400 audit(1788044531.898:420): avc: denied { write } for pid=6520 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.807632][ T44] audit: type=1326 audit(1788044531.908:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.1.175" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87519e159 code=0x0 [ 63.890424][ T44] audit: type=1400 audit(1788044531.998:422): avc: denied { write } for pid=6528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.904780][ T6532] fuse: Bad value for 'fd' [ 63.984056][ T44] audit: type=1400 audit(1788044532.088:423): avc: denied { write } for pid=6533 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.098803][ T6541] FAULT_INJECTION: forcing a failure. [ 64.098803][ T6541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.098903][ T6541] CPU: 3 UID: 0 PID: 6541 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.098945][ T6541] Tainted: [L]=SOFTLOCKUP [ 64.098954][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.098968][ T6541] Call Trace: [ 64.098976][ T6541] [ 64.098986][ T6541] dump_stack_lvl+0x100/0x190 [ 64.099022][ T6541] should_fail_ex.cold+0x5/0xa [ 64.099046][ T6541] ? prepare_alloc_pages+0x16d/0x5b0 [ 64.099070][ T6541] should_fail_alloc_page+0xeb/0x140 [ 64.099093][ T6541] prepare_alloc_pages+0x1f0/0x5b0 [ 64.099123][ T6541] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 64.099162][ T6541] ? find_held_lock+0x2b/0x80 [ 64.099188][ T6541] ? debug_check_no_obj_freed+0x31f/0x630 [ 64.099213][ T6541] ? __lock_acquire+0x4c5/0x1ec0 [ 64.099233][ T6541] ? debug_check_no_obj_freed+0x31f/0x630 [ 64.099252][ T6541] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.099301][ T6541] ? lock_acquire+0x1d1/0x380 [ 64.099323][ T6541] ? __free_frozen_pages+0x57e/0x10f0 [ 64.099348][ T6541] ? find_held_lock+0x2b/0x80 [ 64.099372][ T6541] ? __free_frozen_pages+0x747/0x10f0 [ 64.099395][ T6541] ? __free_frozen_pages+0x747/0x10f0 [ 64.099423][ T6541] ? _raw_spin_unlock+0x28/0x50 [ 64.099457][ T6541] ? __free_frozen_pages+0x751/0x10f0 [ 64.099485][ T6541] ? migrate_folio_undo_src+0x288/0x3d0 [ 64.099517][ T6541] __folio_alloc_noprof+0x16/0x260 [ 64.099544][ T6541] alloc_migration_target+0x1d7/0x6d0 [ 64.099570][ T6541] migrate_pages_batch+0x5c4/0x4680 [ 64.099606][ T6541] ? __pfx_alloc_migration_target+0x10/0x10 [ 64.099644][ T6541] ? __pfx_migrate_pages_batch+0x10/0x10 [ 64.099676][ T6541] ? __pfx_remove_migration_pte+0x10/0x10 [ 64.099709][ T6541] migrate_pages_sync+0x12c/0x880 [ 64.099735][ T6541] ? __pfx_alloc_migration_target+0x10/0x10 [ 64.099770][ T6541] ? __pfx_migrate_pages_sync+0x10/0x10 [ 64.099797][ T6541] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 64.099827][ T6541] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 64.099862][ T6541] migrate_pages+0x1a83/0x2850 [ 64.099889][ T6541] ? __pfx_alloc_migration_target+0x10/0x10 [ 64.099922][ T6541] ? __pfx_migrate_pages+0x10/0x10 [ 64.099954][ T6541] ? queue_pages_range+0x11e/0x180 [ 64.099975][ T6541] ? rcu_is_watching+0x13/0xc0 [ 64.099998][ T6541] ? __up_read+0x333/0x980 [ 64.100020][ T6541] ? __pfx___up_read+0x10/0x10 [ 64.100040][ T6541] ? do_migrate_pages+0x451/0x740 [ 64.100064][ T6541] ? do_migrate_pages+0x451/0x740 [ 64.100095][ T6541] do_migrate_pages+0x488/0x740 [ 64.100128][ T6541] ? __pfx_do_migrate_pages+0x10/0x10 [ 64.100152][ T6541] ? lock_acquire+0x1d1/0x380 [ 64.100171][ T6541] ? rcu_is_watching+0x13/0xc0 [ 64.100193][ T6541] ? cap_capable+0x107/0x430 [ 64.100217][ T6541] ? get_task_mm+0xc2/0xf0 [ 64.100252][ T6541] ? security_capable+0xbd/0x260 [ 64.100282][ T6541] kernel_migrate_pages+0x560/0x700 [ 64.100306][ T6541] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 64.100330][ T6541] ? __pfx_ksys_write+0x10/0x10 [ 64.100351][ T6541] __x64_sys_migrate_pages+0x96/0x100 [ 64.100375][ T6541] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.100478][ T6541] do_syscall_64+0x123/0x790 [ 64.100505][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.100526][ T6541] RIP: 0033:0x7f87c8d9e159 [ 64.100543][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.100562][ T6541] RSP: 002b:00007f87c9d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 64.100583][ T6541] RAX: ffffffffffffffda RBX: 00007f87c9026090 RCX: 00007f87c8d9e159 [ 64.100598][ T6541] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 64.100608][ T6541] RBP: 00007f87c9d28090 R08: 0000000000000000 R09: 0000000000000000 [ 64.100618][ T6541] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 64.100628][ T6541] R13: 00007f87c9026128 R14: 00007f87c9026090 R15: 00007fffe8e86f08 [ 64.100650][ T6541] [ 64.104002][ T44] audit: type=1400 audit(1788044532.208:424): avc: denied { write } for pid=6540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.148066][ T1044] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 64.184571][ T44] audit: type=1400 audit(1788044532.288:425): avc: denied { write } for pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.292239][ T44] audit: type=1400 audit(1788044532.398:426): avc: denied { write } for pid=6546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.317799][ T1044] usb 7-1: unable to get BOS descriptor or descriptor too short [ 64.318431][ T1044] usb 7-1: not running at top speed; connect to a high speed hub [ 64.318461][ T1044] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 64.319346][ T1044] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 64.319366][ T1044] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 64.319379][ T1044] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 64.319392][ T1044] usb 7-1: config 14 has no interface number 0 [ 64.319404][ T1044] usb 7-1: config 14 has no interface number 1 [ 64.319449][ T1044] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 64.319466][ T1044] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 64.319485][ T1044] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.319504][ T1044] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 64.319523][ T1044] usb 7-1: config 14 interface 57 has no altsetting 0 [ 64.319536][ T1044] usb 7-1: config 14 interface 228 has no altsetting 0 [ 64.322170][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.322183][ T1044] usb 7-1: Product: syz [ 64.322190][ T1044] usb 7-1: Manufacturer: syz [ 64.322198][ T1044] usb 7-1: SerialNumber: syz [ 64.679893][ T6560] FAULT_ ** replaying previous printk message ** [ 64.679893][ T6560] FAULT_INJECTION: forcing a failure. [ 64.679893][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 64.679982][ T6560] CPU: 2 UID: 0 PID: 6560 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.680034][ T6560] Tainted: [L]=SOFTLOCKUP [ 64.680041][ T6560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.680053][ T6560] Call Trace: [ 64.680060][ T6560] [ 64.680069][ T6560] dump_stack_lvl+0x100/0x190 [ 64.680105][ T6560] should_fail_ex.cold+0x5/0xa [ 64.680136][ T6560] should_failslab+0xc2/0x120 [ 64.680161][ T6560] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.680180][ T6560] ? netfs_alloc_subrequest+0x116/0x3f0 [ 64.680210][ T6560] netfs_alloc_subrequest+0x116/0x3f0 [ 64.680237][ T6560] netfs_prepare_write+0x76/0x7b0 [ 64.680272][ T6560] netfs_unbuffered_write+0x75c/0x2020 [ 64.680301][ T6560] ? rolling_buffer_init+0x8d/0xc0 [ 64.680333][ T6560] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 64.680362][ T6560] netfs_unbuffered_write_iter+0x442/0x720 [ 64.680393][ T6560] v9fs_file_write_iter+0xbf/0x100 [ 64.680417][ T6560] iter_file_splice_write+0x830/0x10b0 [ 64.680459][ T6560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 64.680488][ T6560] ? __pfx_copy_splice_read+0x10/0x10 [ 64.680529][ T6560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 64.680558][ T6560] direct_splice_actor+0x192/0x690 [ 64.680588][ T6560] splice_direct_to_actor+0x345/0xa30 [ 64.680615][ T6560] ? __pfx_direct_splice_actor+0x10/0x10 [ 64.680642][ T6560] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 64.680672][ T6560] ? lock_acquire+0x1d1/0x380 [ 64.680697][ T6560] do_splice_direct+0x174/0x240 [ 64.680724][ T6560] ? __pfx_do_splice_direct+0x10/0x10 [ 64.680749][ T6560] ? avc_policy_seqno+0x9/0x20 [ 64.680772][ T6560] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 64.680802][ T6560] ? rw_verify_area+0xce/0x6d0 [ 64.680834][ T6560] do_sendfile+0xadc/0xe20 [ 64.680871][ T6560] ? __pfx_do_sendfile+0x10/0x10 [ 64.680909][ T6560] __x64_sys_sendfile64+0x154/0x220 [ 64.680935][ T6560] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 64.680970][ T6560] do_syscall_64+0x123/0x790 [ 64.680998][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.681019][ T6560] RIP: 0033:0x7ff87519e159 [ 64.681045][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.681066][ T6560] RSP: 002b:00007ff8733f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 64.681089][ T6560] RAX: ffffffffffffffda RBX: 00007ff875425fa0 RCX: 00007ff87519e159 [ 64.681103][ T6560] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 64.681116][ T6560] RBP: 00007ff8733f6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.681129][ T6560] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 64.681142][ T6560] R13: 00007ff875426038 R14: 00007ff875425fa0 R15: 00007ffdb8ba5648 [ 64.681168][ T6560] [ 64.681237][ T6560] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] SMP KASAN NOPTI [ 64.737656][ T1044] legousbtower 7-1:14.57: interrupt endpoints not found [ 64.793426][ T6560] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 64.796356][ T6560] CPU: 2 UID: 0 PID: 6560 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.800078][ T6560] Tainted: [L]=SOFTLOCKUP [ 64.801480][ T6560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.804924][ T6560] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 64.806916][ T6560] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 64.813018][ T6560] RSP: 0018:ffffc900055d7740 EFLAGS: 00010203 [ 64.815131][ T6560] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 64.818108][ T6560] RDX: dffffc0000000000 RSI: ffffffff82d0acf9 RDI: 00000000000000ad [ 64.821076][ T6560] RBP: ffff88803e0ee2a0 R08: 00000000ffffffff R09: fffffbfff1dffe42 [ 64.823814][ T6560] R10: ffffffff8efff213 R11: 0000000000000001 R12: ffff88803e0ee1c0 [ 64.826389][ T6560] R13: ffff88803e0ee378 R14: 00000000000000a0 R15: ffff88803e0ee2f2 [ 64.828886][ T6560] FS: 00007ff8733f66c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 64.831660][ T6560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.833836][ T6560] CR2: 00007ff8733f5ff8 CR3: 0000000035d48000 CR4: 0000000000352ef0 [ 64.836527][ T6560] Call Trace: [ 64.837666][ T6560] [ 64.838619][ T6560] netfs_unbuffered_write+0x75c/0x2020 [ 64.840298][ T6560] ? rolling_buffer_init+0x8d/0xc0 [ 64.842121][ T6560] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 64.844732][ T6560] netfs_unbuffered_write_iter+0x442/0x720 [ 64.847089][ T6560] v9fs_file_write_iter+0xbf/0x100 [ 64.849298][ T6560] iter_file_splice_write+0x830/0x10b0 [ 64.851102][ T6560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 64.852920][ T6560] ? __pfx_copy_splice_read+0x10/0x10 [ 64.854592][ T6560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 64.856555][ T6560] direct_splice_actor+0x192/0x690 [ 64.858291][ T6560] splice_direct_to_actor+0x345/0xa30 [ 64.859981][ T6560] ? __pfx_direct_splice_actor+0x10/0x10 [ 64.861732][ T6560] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 64.863620][ T6560] ? lock_acquire+0x1d1/0x380 [ 64.865064][ T6560] do_splice_direct+0x174/0x240 [ 64.866608][ T6560] ? __pfx_do_splice_direct+0x10/0x10 [ 64.868308][ T6560] ? avc_policy_seqno+0x9/0x20 [ 64.869909][ T6560] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 64.871949][ T6560] ? rw_verify_area+0xce/0x6d0 [ 64.873711][ T6560] do_sendfile+0xadc/0xe20 [ 64.875463][ T6560] ? __pfx_do_sendfile+0x10/0x10 [ 64.877262][ T6560] __x64_sys_sendfile64+0x154/0x220 [ 64.878980][ T6560] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 64.880968][ T6560] do_syscall_64+0x123/0x790 [ 64.882367][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.884210][ T6560] RIP: 0033:0x7ff87519e159 [ 64.885630][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.891562][ T6560] RSP: 002b:00007ff8733f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 64.894144][ T6560] RAX: ffffffffffffffda RBX: 00007ff875425fa0 RCX: 00007ff87519e159 [ 64.896575][ T6560] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 64.899422][ T6560] RBP: 00007ff8733f6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.902449][ T6560] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 64.904975][ T6560] R13: 00007ff875426038 R14: 00007ff875425fa0 R15: 00007ffdb8ba5648 [ 64.906158][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.910003][ T6560] [ 64.910992][ T6560] Modules linked in: [ 64.913848][ T6560] ---[ end trace 0000000000000000 ]--- ** replaying previous printk message ** [ 64.916502][ T6560] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 64.916552][ T6560] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 64.916577][ T6560] RSP: 0018:ffffc900055d7740 EFLAGS: 00010203 [ 64.916588][ T6560] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 64.916595][ T6560] RDX: dffffc0000000000 RSI: ffffffff82d0acf9 RDI: 00000000000000ad [ 64.916602][ T6560] RBP: ffff88803e0ee2a0 R08: 00000000ffffffff R09: fffffbfff1dffe42 [ 64.916609][ T6560] R10: ffffffff8efff213 R11: 0000000000000001 R12: ffff88803e0ee1c0 [ 64.916616][ T6560] R13: ffff88803e0ee378 R14: 00000000000000a0 R15: ffff88803e0ee2f2 [ 64.916622][ T6560] FS: 00007ff8733f66c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 64.916645][ T6560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.916654][ T6560] CR2: 00007ff8751eb840 CR3: 0000000035d48000 CR4: 0000000000352ef0 [ 64.916663][ T6560] Kernel panic - not syncing: Fatal exception [ 64.953955][ T6560] Kernel Offset: disabled [ 64.955440][ T6560] Rebooting in 86400 seconds..