last executing test programs: 57.56083702s ago: executing program 2 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000700)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x47, &(0x7f0000000700)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) 54.452236803s ago: executing program 2 (id=310): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) 54.376985825s ago: executing program 2 (id=312): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) (fail_nth: 3) 54.260534901s ago: executing program 2 (id=313): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000580), 0xe5, 0x82d7f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000000)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000040)) r2 = openat$nsim_dev_bool(0xffffffffffffff9c, &(0x7f0000000340)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/dont_allow_reload\x00'}, 0x8000, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/180, 0xb4}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc0000001a00010029bd7000fcdbdf251c302006fd00ff08000400000800010000000c"], 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$NILFS_IOCTL_GET_VINFO(r0, 0x6f2d, 0x0) 54.200002176s ago: executing program 2 (id=315): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f00000003c0)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f0000000580)="e1", 0x1}, {&(0x7f00000005c0)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f00000006c0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f00000007c0)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000880)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000940)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 53.788016498s ago: executing program 2 (id=326): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x801070cf, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x2, 0x0, &(0x7f00000002c0)) 53.595278302s ago: executing program 32 (id=326): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x801070cf, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x2, 0x0, &(0x7f00000002c0)) 4.83403649s ago: executing program 0 (id=1132): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f00000003c0)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f0000000580)="e1", 0x1}, {&(0x7f00000005c0)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f00000006c0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f00000007c0)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000880)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d87", 0x7e}, {&(0x7f0000000940)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 4.771740266s ago: executing program 0 (id=1134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r5, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001140)="442ea407603a16", 0x7}], 0x2}, 0x20000085) 4.621924126s ago: executing program 0 (id=1138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x1f00) 4.566919886s ago: executing program 0 (id=1140): madvise(&(0x7f000084e000/0x4000)=nil, 0x4000, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800006e365402793a3b908169d59d000000000000100000001000000005000000040000000000000e"], 0x0, 0x2d, 0x0, 0x1}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x125c03, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@fallback=r2, r2, 0x2f}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000001780), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000017c0)={@cgroup=r2, r3, 0x2f, 0x10, 0x4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a37000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x1, &(0x7f0000001ac0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000067b000/0x1000)=nil, 0x1000}, 0xd8bb89098a404599}) mbind(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x800000000017, 0x2) 4.452831465s ago: executing program 0 (id=1144): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001400)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001440), 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x300) 4.190204141s ago: executing program 0 (id=1150): r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/37) r1 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x1c0) timerfd_settime(r1, 0x3, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001780), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) write$sndseq(r4, &(0x7f0000001800)=[{0x19, 0x9a, 0x5, 0xfd, @tick=0x10001, {}, {0xe}, @connect={{0x1, 0x9}, {0x8, 0x7f}}}], 0x1c) clock_adjtime(0x6, &(0x7f0000001580)={0x4, 0x5, 0x4, 0x8, 0x0, 0x8af, 0x4, 0x2000000000000, 0x1, 0x7fff, 0x5, 0x7, 0x7, 0xe, 0x100000001, 0x2, 0x5, 0x0, 0x6, 0xa0000000000000, 0xffffffffffffffa1, 0x2, 0x0, 0x0, 0x0, 0x9}) read(r1, &(0x7f0000000040)=""/169, 0xa9) clock_adjtime(0x0, &(0x7f0000001140)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x4000000000000000, 0x100000000, 0x1000, 0x2000000000008, 0xb, 0x4, 0x8000000000005a, 0x3, 0xfffffffffffffffd}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000012c0), 0x418040, 0x0) clock_adjtime(0x7, &(0x7f0000001680)={0x2, 0xffffffffffffd72d, 0xcc77, 0x4, 0x10000, 0x6, 0xa, 0x8, 0x0, 0x8000000000000001, 0x5, 0x3, 0x6, 0x6, 0x2, 0xb44, 0xd725, 0x6, 0x2, 0xb, 0x8, 0x9, 0xfffffffffffffffc, 0xe59, 0xab, 0x5}) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000001540)={0x25, &(0x7f0000001300)=[{0x10, '\x00', @st={0x4, [{0x0, @svalue=0x101}, {0x3, @uvalue=0x5}, {0x3, @svalue=0x4}, {0x3, @uvalue=0xfffffffeffffffff}]}, 0x7b8c951d}, {0xd, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffff2}, {0x3, @uvalue=0x37a6}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x1}]}, 0x8d}, {0x2, '\x00', @st={0x4, [{0x2, @svalue=0x101}, {0x3, @svalue=0x2400000000}, {0x1, @svalue}, {0x2, @svalue=0x4}]}}, {0x27, '\x00', @data=0x1, 0xffffffff}, {0x1, '\x00', @data=0x2}, {0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @svalue}, {0x2, @svalue=0x80000000}, {0x3, @uvalue=0x7}]}, 0x5f15}, {0x16, '\x00', @data=0x5, 0x2}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000140)=""/4096) 4.113365651s ago: executing program 33 (id=1150): r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/37) r1 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x1c0) timerfd_settime(r1, 0x3, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001780), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) write$sndseq(r4, &(0x7f0000001800)=[{0x19, 0x9a, 0x5, 0xfd, @tick=0x10001, {}, {0xe}, @connect={{0x1, 0x9}, {0x8, 0x7f}}}], 0x1c) clock_adjtime(0x6, &(0x7f0000001580)={0x4, 0x5, 0x4, 0x8, 0x0, 0x8af, 0x4, 0x2000000000000, 0x1, 0x7fff, 0x5, 0x7, 0x7, 0xe, 0x100000001, 0x2, 0x5, 0x0, 0x6, 0xa0000000000000, 0xffffffffffffffa1, 0x2, 0x0, 0x0, 0x0, 0x9}) read(r1, &(0x7f0000000040)=""/169, 0xa9) clock_adjtime(0x0, &(0x7f0000001140)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x4000000000000000, 0x100000000, 0x1000, 0x2000000000008, 0xb, 0x4, 0x8000000000005a, 0x3, 0xfffffffffffffffd}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000012c0), 0x418040, 0x0) clock_adjtime(0x7, &(0x7f0000001680)={0x2, 0xffffffffffffd72d, 0xcc77, 0x4, 0x10000, 0x6, 0xa, 0x8, 0x0, 0x8000000000000001, 0x5, 0x3, 0x6, 0x6, 0x2, 0xb44, 0xd725, 0x6, 0x2, 0xb, 0x8, 0x9, 0xfffffffffffffffc, 0xe59, 0xab, 0x5}) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000001540)={0x25, &(0x7f0000001300)=[{0x10, '\x00', @st={0x4, [{0x0, @svalue=0x101}, {0x3, @uvalue=0x5}, {0x3, @svalue=0x4}, {0x3, @uvalue=0xfffffffeffffffff}]}, 0x7b8c951d}, {0xd, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffff2}, {0x3, @uvalue=0x37a6}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x1}]}, 0x8d}, {0x2, '\x00', @st={0x4, [{0x2, @svalue=0x101}, {0x3, @svalue=0x2400000000}, {0x1, @svalue}, {0x2, @svalue=0x4}]}}, {0x27, '\x00', @data=0x1, 0xffffffff}, {0x1, '\x00', @data=0x2}, {0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @svalue}, {0x2, @svalue=0x80000000}, {0x3, @uvalue=0x7}]}, 0x5f15}, {0x16, '\x00', @data=0x5, 0x2}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000140)=""/4096) 1.210347615s ago: executing program 4 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x80) 1.140050593s ago: executing program 4 (id=1195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x1354, &(0x7f0000000040)) 1.106601528s ago: executing program 4 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x1c, 0x1001, 0x5c01, 0x0, 0x0, "", [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x440d0}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 927.399442ms ago: executing program 4 (id=1202): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000040)={0x0, 0x8000002, 0x3a10, 0x2, 0x3}, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000002c0), 0x80000005, 0x20040) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 6) 863.995932ms ago: executing program 4 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000b) 686.886544ms ago: executing program 1 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000040)={0x0, 0x8000002, 0x3a10, 0x2, 0x3}, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000002c0), 0x80000005, 0x20040) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b1e, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 557.770929ms ago: executing program 1 (id=1211): r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x1]}) ptrace(0x8, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/irq/default_smp_affinity\x00', 0x1, 0x81) write(r1, &(0x7f0000002480)='2', 0x1) r2 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x4000010, r2, 0xcfb4e000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000040000f6ffffff000528cb4f00c42b35afc4084cee8e5d7819b3c33de3130ea120ad4482fdf6b6933aba9d41a0b9c05fa509c92e58df49190870b53ab0b64af1532895db0bf536ef97a6c8b21778a12b926add770fa375e308f0e02e5b04b3b5b18d91742ecdbe8adbd2e67db9b2f69e15e9ca547b06d01018b0501aa203"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000100)="0e", &(0x7f0000000140)=""/95}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 486.303672ms ago: executing program 3 (id=1213): creat(&(0x7f0000000480)='./file0\x00', 0xc0) mount$cgroup(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x8002, &(0x7f0000000640)={[{@xattr}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r4}, 0xc) acct(&(0x7f0000000680)='./file0\x00') sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000014080002400000000208000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/109}) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000240)={0x18, 0x110, 0xfa00, {r7, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x0, @empty, 0x858}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r7, 0x8001}}, 0xfffffffe) 483.208005ms ago: executing program 1 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001540)=ANY=[@ANYBLOB="440000001000010429bd7000feffffff0000000009050283ddc197bb7d724867c3bec77e2f241495fa952f5a0fcdf3450000000000000000866e87df171aaaa7500b02bd22f73bc73ae94085224300f79b1e8b2ed89bce77f1a4f247233d05f34f3366929fe1762013d333ad22e27a92abc609400d5213a4c1cbf05f1d55c67bbc588ed6", @ANYRES32=0x0, @ANYBLOB="10000000000000002400128009000100697069700000000014000280060011004e2200000500050000000000"], 0x44}}, 0x24004011) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xfffffffffffffd51, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x40a, 0x2b7906, 0x10003}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000004c0)={{r8}, "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"}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r7, 0x0, 0xffff, 0x1100, &(0x7f0000000380)='|0', 0x5}) memfd_secret(0x80000) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r9, 0x2000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x7, 0x20, 0x3, 0x2, 0x106c, 0x2, 0x8000000000000001, 0x80000004000080, 0x380000, 0x3, 0x8, 0x4], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 391.432599ms ago: executing program 3 (id=1215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x40001002, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) 328.785122ms ago: executing program 1 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r5, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000001140)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 328.490666ms ago: executing program 3 (id=1217): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 248.261815ms ago: executing program 3 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000080)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x1000000, 0x10, r2, 0x20000000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r1, 0xf1aad47e89fb43b5, 0xfffffffe, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async) syz_ublk_setup_io_uring(0x155a, &(0x7f0000000080)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x1000000, 0x10, r2, 0x20000000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r1, 0xf1aad47e89fb43b5, 0xfffffffe, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) (async) 247.939337ms ago: executing program 3 (id=1219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0xffff8000, [{0xe1, 0x0, 0x39}]}) 89.889111ms ago: executing program 3 (id=1220): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0xffff}}, @TCA_U32_SEL={0x24, 0x5, {0x9, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x7, 0x58f, [{0x2, 0x20008000, 0x4, 0xffffffff}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0xffff}}, @TCA_U32_SEL={0x24, 0x5, {0x9, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x7, 0x58f, [{0x2, 0x20008000, 0x4, 0xffffffff}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f022, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r5, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x48000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x48000, 0x0) 88.149165ms ago: executing program 1 (id=1221): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000140)=""/4096) (fail_nth: 3) 223.553µs ago: executing program 4 (id=1222): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000380)=""/127, &(0x7f0000000400)=0x7f) lseek(r0, 0x289e0cb5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="985820e12a205ddedee7030022cf5c", 0xf, r3) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000500)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @broadcast}, 0x44, {0x2, 0x4e21, @remote}, 'virt_wifi0\x00'}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r5, &(0x7f0000000340)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) 0s ago: executing program 1 (id=1223): add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000240)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000003300)=@newtfilter={0x1354, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x1324, 0x2, [@TCA_BASIC_ACT={0x1320, 0x3, [@m_mpls={0x15c, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x6, 0x4, 0x10001, 0xd}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x42b, 0x6b5, 0x4, 0x10000, 0xff}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0xe6, 0x6, "3d116f6599bbfb7a8a2780baf08213151203f331a64bc1c4d0afcace1e76de0c341a3596bcb7aba02394d653e82399f2fedf03071fdfb7b31a150c1a7d81470a3aeee9d93941ad47dca58ef2f0047295381a08e405b8d8c25e5ebb0940e96ee954fbc89f72570e674e8b0ce449e96cdcd52275bb3cf59eff2d372a5307d9c676f6e8d3b7c293e00c4db848487f48b1bbc2f923f1899757e2226be5453e7b8c2c875ca4b6d8f5f8499e633b9212be8f90a43940559a3b38618b75a0f9ea599a38fce930c0b512ecc7f5dcebe34fae6872ade8fd3925704add479c3d00985dd5126273"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x11c0, 0x9, 0x0, 0x0, {{0x7}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x615}, @TCA_IPT_TARG={0x2a, 0x6, {0x4, 'nat\x00', 0x40, 0xe00}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff7}, @TCA_IPT_TARG={0x122, 0x6, {0xfffd, 'nat\x00', 0x6, 0x1000, "9bd5c3958caf056f1b34227e99c24027788efe54075087bc0900d1a3fabe397be5372d387e77c0aacf642d8f29fb50dbad1499519889cb765bd26dd210d8f56ad91961d411c785dfda38e048d29f4deb1efcd05bca7b668f986b38268bf5f6d9c26b8ed976b16149b6b5c36c51637eb519bb8b3b1b6ef1c477e805abe327e0819d516e0932b4700690380276924668d67b7c78cb06ea14d73743a6480116848386660bb94a97f1b384c392313e2c6ff44912ee214772ba71411ff41846f77b12060bb5ca6806e4ae7f3e11950d771c7dbbf7db3841f3a2ce245e6ecae6a9e44b6dd4131df921a870a9cfa34f0dd0d96465b932236c4a489a"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1354}}, 0x0) write$tun(r1, &(0x7f0000000cc0)=ANY=[], 0x46) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x0, 0xe9) read$FUSE(r5, &(0x7f00000012c0)={0x2020}, 0x2020) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0xa0802, 0x1) write(r7, &(0x7f0000000180)="04c1", 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc4}, &(0x7f00000005c0)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5bceeff800000000000000000000200", 0x17}, 0x48, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x35, 0x0, "c98d95ee50c3a78294c18d072a0bae4428949225ff1fa090b9bbf971504b8b197a685cd1f2ec7e03f6530f044e4670cd195506482871d4c255105aec233f88ced3505e0f4e0c2d9a306d9f5dc2a08def"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000980)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, r6) execve(&(0x7f00000003c0)='./dev\x00', &(0x7f0000000640)={[&(0x7f0000000400)='#\x00', &(0x7f0000000440)='syz']}, &(0x7f0000000700)={[&(0x7f0000000680)='!{f,-\x00', &(0x7f00000006c0)='\x00']}) kernel console output (not intermixed with test programs): 4de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 103.688494][ T9434] [ 103.806675][ T9443] FAULT_INJECTION: forcing a failure. [ 103.806675][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.806697][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.1.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.806714][ T9443] Tainted: [L]=SOFTLOCKUP [ 103.806718][ T9443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.806726][ T9443] Call Trace: [ 103.806730][ T9443] [ 103.806742][ T9443] dump_stack_lvl+0x100/0x190 [ 103.806773][ T9443] should_fail_ex.cold+0x5/0xa [ 103.806801][ T9443] _copy_from_user+0x2e/0xd0 [ 103.806829][ T9443] ____sys_sendmsg+0x1df/0xc30 [ 103.806860][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.806885][ T9443] ? lock_acquire+0x1d1/0x380 [ 103.806902][ T9443] ? get_pid_task+0x2a/0x250 [ 103.806914][ T9443] ___sys_sendmsg+0x190/0x1e0 [ 103.806934][ T9443] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.806952][ T9443] ? get_pid_task+0x106/0x250 [ 103.806969][ T9443] ? find_held_lock+0x2b/0x80 [ 103.806991][ T9443] __sys_sendmsg+0x160/0x210 [ 103.807006][ T9443] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.807028][ T9443] do_syscall_64+0x123/0x790 [ 103.807044][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.807056][ T9443] RIP: 0033:0x7f780ad9fb19 [ 103.807067][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.807078][ T9443] RSP: 002b:00007f780bc31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.807090][ T9443] RAX: ffffffffffffffda RBX: 00007f780b025fa0 RCX: 00007f780ad9fb19 [ 103.807098][ T9443] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 103.807105][ T9443] RBP: 00007f780bc31090 R08: 0000000000000000 R09: 0000000000000000 [ 103.807112][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.807119][ T9443] R13: 00007f780b026038 R14: 00007f780b025fa0 R15: 00007ffd07a7f028 [ 103.807133][ T9443] [ 103.875699][ T9447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9447 comm=syz.3.896 [ 103.886915][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 103.894798][ T9453] FAULT_INJECTION: forcing a failure. [ 103.894798][ T9453] name failslab, interval 1, probability 0, space 0, times 0 [ 103.894827][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.4.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.894853][ T9453] Tainted: [L]=SOFTLOCKUP [ 103.894861][ T9453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.894872][ T9453] Call Trace: [ 103.894879][ T9453] [ 103.894887][ T9453] dump_stack_lvl+0x100/0x190 [ 103.894931][ T9453] should_fail_ex.cold+0x5/0xa [ 103.894963][ T9453] should_failslab+0xc2/0x120 [ 103.894986][ T9453] __kvmalloc_node_noprof+0x113/0x9b0 [ 103.895017][ T9453] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 103.895044][ T9453] ? io_uring_setup.cold+0x1f4/0x1c7e [ 103.895072][ T9453] io_uring_setup.cold+0x1f4/0x1c7e [ 103.895095][ T9453] ? lock_acquire+0x1d1/0x380 [ 103.895123][ T9453] ? avc_has_perm_noaudit+0x56/0x470 [ 103.895148][ T9453] ? __pfx_io_uring_setup+0x10/0x10 [ 103.895172][ T9453] ? find_held_lock+0x2b/0x80 [ 103.895192][ T9453] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.895216][ T9453] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.895257][ T9453] ? ksys_write+0x1ac/0x250 [ 103.895279][ T9453] ? __pfx_ksys_write+0x10/0x10 [ 103.895304][ T9453] __x64_sys_io_uring_setup+0xc2/0x170 [ 103.895330][ T9453] do_syscall_64+0x123/0x790 [ 103.895357][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.895377][ T9453] RIP: 0033:0x7f2ab339fb19 [ 103.895415][ T9453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.895434][ T9453] RSP: 002b:00007f2ab417eee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 103.895453][ T9453] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f2ab339fb19 [ 103.895466][ T9453] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 103.895478][ T9453] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 103.895490][ T9453] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 103.895502][ T9453] R13: 0000200000000b10 R14: 00007f2ab417efd8 R15: 0000000000000000 [ 103.895529][ T9453] [ 103.912537][ T9447] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 103.952739][ T5792] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 103.955691][ T9455] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 104.071405][ T9459] syzkaller0: entered promiscuous mode [ 104.071426][ T9459] syzkaller0: entered allmulticast mode [ 104.074671][ T9463] tmpfs: Bad value for 'mpol' [ 104.146780][ T9472] FAULT_INJECTION: forcing a failure. [ 104.146780][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 104.146813][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.0.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.146838][ T9472] Tainted: [L]=SOFTLOCKUP [ 104.146847][ T9472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.146858][ T9472] Call Trace: [ 104.146865][ T9472] [ 104.146874][ T9472] dump_stack_lvl+0x100/0x190 [ 104.146910][ T9472] should_fail_ex.cold+0x5/0xa [ 104.146948][ T9472] should_failslab+0xc2/0x120 [ 104.146973][ T9472] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 104.147005][ T9472] ? __alloc_skb+0x140/0x710 [ 104.147032][ T9472] __alloc_skb+0x140/0x710 [ 104.147054][ T9472] ? __alloc_skb+0x5b7/0x710 [ 104.147077][ T9472] ? __pfx___alloc_skb+0x10/0x10 [ 104.147101][ T9472] ? __mutex_lock+0x267/0x1c10 [ 104.147129][ T9472] netlink_dump+0x187/0xd30 [ 104.147155][ T9472] ? __pfx___mutex_lock+0x10/0x10 [ 104.147178][ T9472] ? __pfx_netlink_dump+0x10/0x10 [ 104.147217][ T9472] __netlink_dump_start+0x6d6/0x990 [ 104.147246][ T9472] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 104.147267][ T9472] rtnetlink_rcv_msg+0xb3e/0xe90 [ 104.147294][ T9472] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 104.147314][ T9472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.147341][ T9472] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 104.147373][ T9472] netlink_rcv_skb+0x159/0x420 [ 104.147398][ T9472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.147427][ T9472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.147451][ T9472] ? __asan_memcpy+0x3c/0x60 [ 104.147488][ T9472] ? netlink_deliver_tap+0x1ae/0xb50 [ 104.147518][ T9472] netlink_unicast+0x668/0x950 [ 104.147548][ T9472] ? __pfx_netlink_unicast+0x10/0x10 [ 104.147580][ T9472] netlink_sendmsg+0x9ac/0x10c0 [ 104.147610][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.147642][ T9472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 104.147673][ T9472] ? ____sys_sendmsg+0xa99/0xc30 [ 104.147700][ T9472] ____sys_sendmsg+0xa99/0xc30 [ 104.147727][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.147756][ T9472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.147790][ T9472] ? lock_acquire+0x1d1/0x380 [ 104.147817][ T9472] ? get_pid_task+0x2a/0x250 [ 104.147839][ T9472] ___sys_sendmsg+0x190/0x1e0 [ 104.147870][ T9472] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.147899][ T9472] ? get_pid_task+0x106/0x250 [ 104.147932][ T9472] ? find_held_lock+0x2b/0x80 [ 104.147971][ T9472] __sys_sendmsg+0x160/0x210 [ 104.147997][ T9472] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.148034][ T9472] do_syscall_64+0x123/0x790 [ 104.148060][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.148080][ T9472] RIP: 0033:0x7f534db9fb19 [ 104.148096][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.148115][ T9472] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.148133][ T9472] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 104.148147][ T9472] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 104.148158][ T9472] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.148170][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.148181][ T9472] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 104.148207][ T9472] [ 104.266245][ T9475] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 104.270082][ T9478] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 104.351591][ T9490] FAULT_INJECTION: forcing a failure. [ 104.351591][ T9490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.351612][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.0.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.351629][ T9490] Tainted: [L]=SOFTLOCKUP [ 104.351634][ T9490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.351641][ T9490] Call Trace: [ 104.351645][ T9490] [ 104.351651][ T9490] dump_stack_lvl+0x100/0x190 [ 104.351675][ T9490] should_fail_ex.cold+0x5/0xa [ 104.351694][ T9490] _copy_to_user+0x32/0xd0 [ 104.351712][ T9490] simple_read_from_buffer+0xcb/0x170 [ 104.351732][ T9490] proc_fail_nth_read+0x1af/0x230 [ 104.351749][ T9490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.351767][ T9490] ? rw_verify_area+0xce/0x6d0 [ 104.351786][ T9490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.351802][ T9490] vfs_read+0x1e4/0xb40 [ 104.351814][ T9490] ? lock_acquire+0x1d1/0x380 [ 104.351831][ T9490] ? __fget_files+0x34/0x3d0 [ 104.351846][ T9490] ? __pfx_vfs_read+0x10/0x10 [ 104.351857][ T9490] ? find_held_lock+0x2b/0x80 [ 104.351870][ T9490] ? __fget_files+0x215/0x3d0 [ 104.351887][ T9490] ? __fget_files+0x21f/0x3d0 [ 104.351906][ T9490] ksys_read+0x12a/0x250 [ 104.351919][ T9490] ? __pfx_ksys_read+0x10/0x10 [ 104.351935][ T9490] do_syscall_64+0x123/0x790 [ 104.351952][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.351966][ T9490] RIP: 0033:0x7f534db6034e [ 104.351975][ T9490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.351987][ T9490] RSP: 002b:00007f534eac2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.351999][ T9490] RAX: ffffffffffffffda RBX: 00007f534eac36c0 RCX: 00007f534db6034e [ 104.352007][ T9490] RDX: 000000000000000f RSI: 00007f534eac30a0 RDI: 0000000000000006 [ 104.352014][ T9490] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.352022][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.352029][ T9490] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 104.352044][ T9490] [ 104.643602][ T9510] syzkaller0: entered promiscuous mode [ 104.643618][ T9510] syzkaller0: entered allmulticast mode [ 104.768313][ T9529] FAULT_INJECTION: forcing a failure. [ 104.768313][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.768334][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.1.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.768351][ T9529] Tainted: [L]=SOFTLOCKUP [ 104.768356][ T9529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.768364][ T9529] Call Trace: [ 104.768368][ T9529] [ 104.768373][ T9529] dump_stack_lvl+0x100/0x190 [ 104.768397][ T9529] should_fail_ex.cold+0x5/0xa [ 104.768416][ T9529] _copy_to_user+0x32/0xd0 [ 104.768433][ T9529] simple_read_from_buffer+0xcb/0x170 [ 104.768450][ T9529] proc_fail_nth_read+0x1af/0x230 [ 104.768467][ T9529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.768485][ T9529] ? rw_verify_area+0xce/0x6d0 [ 104.768503][ T9529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.768519][ T9529] vfs_read+0x1e4/0xb40 [ 104.768531][ T9529] ? lock_acquire+0x1d1/0x380 [ 104.768548][ T9529] ? __fget_files+0x34/0x3d0 [ 104.768563][ T9529] ? __pfx_vfs_read+0x10/0x10 [ 104.768574][ T9529] ? find_held_lock+0x2b/0x80 [ 104.768587][ T9529] ? __fget_files+0x215/0x3d0 [ 104.768604][ T9529] ? __fget_files+0x21f/0x3d0 [ 104.768623][ T9529] ksys_read+0x12a/0x250 [ 104.768635][ T9529] ? __pfx_ksys_read+0x10/0x10 [ 104.768651][ T9529] do_syscall_64+0x123/0x790 [ 104.768667][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.768681][ T9529] RIP: 0033:0x7f780ad6034e [ 104.768691][ T9529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.768702][ T9529] RSP: 002b:00007f780bc30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.768714][ T9529] RAX: ffffffffffffffda RBX: 00007f780bc316c0 RCX: 00007f780ad6034e [ 104.768722][ T9529] RDX: 000000000000000f RSI: 00007f780bc310a0 RDI: 0000000000000004 [ 104.768750][ T9529] RBP: 00007f780bc31090 R08: 0000000000000000 R09: 0000000000000000 [ 104.768759][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.768766][ T9529] R13: 00007f780b026038 R14: 00007f780b025fa0 R15: 00007ffd07a7f028 [ 104.768782][ T9529] [ 104.813435][ T9526] openvswitch: netlink: Missing key (keys=40, expected=100) [ 104.987103][ T9551] syzkaller0: entered promiscuous mode [ 104.987117][ T9551] syzkaller0: entered allmulticast mode [ 104.987322][ T9553] FAULT_INJECTION: forcing a failure. [ 104.987322][ T9553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.987347][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.0.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.987364][ T9553] Tainted: [L]=SOFTLOCKUP [ 104.987368][ T9553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.987376][ T9553] Call Trace: [ 104.987380][ T9553] [ 104.987385][ T9553] dump_stack_lvl+0x100/0x190 [ 104.987409][ T9553] should_fail_ex.cold+0x5/0xa [ 104.987429][ T9553] _copy_from_user+0x2e/0xd0 [ 104.987445][ T9553] kstrtouint_from_user+0xd6/0x1d0 [ 104.987463][ T9553] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.987485][ T9553] ? lock_acquire+0x1d1/0x380 [ 104.987505][ T9553] proc_fail_nth_write+0x83/0x220 [ 104.987522][ T9553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.987543][ T9553] vfs_write+0x2aa/0x1050 [ 104.987557][ T9553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.987573][ T9553] ? lock_acquire+0x1d1/0x380 [ 104.987589][ T9553] ? __fget_files+0x34/0x3d0 [ 104.987604][ T9553] ? __pfx_vfs_write+0x10/0x10 [ 104.987616][ T9553] ? find_held_lock+0x2b/0x80 [ 104.987629][ T9553] ? __fget_files+0x215/0x3d0 [ 104.987646][ T9553] ? __fget_files+0x21f/0x3d0 [ 104.987665][ T9553] ksys_write+0x12a/0x250 [ 104.987677][ T9553] ? __pfx_ksys_write+0x10/0x10 [ 104.987693][ T9553] do_syscall_64+0x123/0x790 [ 104.987710][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.987723][ T9553] RIP: 0033:0x7f534db6034e [ 104.987733][ T9553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.987744][ T9553] RSP: 002b:00007f534eac2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.987756][ T9553] RAX: ffffffffffffffda RBX: 00007f534eac36c0 RCX: 00007f534db6034e [ 104.987764][ T9553] RDX: 0000000000000001 RSI: 00007f534eac30a0 RDI: 0000000000000005 [ 104.987771][ T9553] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.987778][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.987785][ T9553] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 104.987800][ T9553] [ 105.012908][ T9555] CIFS: Invalid mount helper version specified [ 105.048056][ T9561] syz.0.937 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.051196][ T5861] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.102622][ T9567] FAULT_INJECTION: forcing a failure. [ 105.102622][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 105.102644][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.0.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.102661][ T9567] Tainted: [L]=SOFTLOCKUP [ 105.102666][ T9567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.102673][ T9567] Call Trace: [ 105.102677][ T9567] [ 105.102682][ T9567] dump_stack_lvl+0x100/0x190 [ 105.102709][ T9567] should_fail_ex.cold+0x5/0xa [ 105.102729][ T9567] should_failslab+0xc2/0x120 [ 105.102745][ T9567] __kmalloc_cache_noprof+0x91/0x6d0 [ 105.102763][ T9567] ? tcf_chain_create+0x98/0x370 [ 105.102777][ T9567] tcf_chain_create+0x98/0x370 [ 105.102791][ T9567] __tcf_chain_get+0x153/0x1b0 [ 105.102806][ T9567] tc_new_tfilter+0x640/0x24e0 [ 105.102842][ T9567] ? avc_has_perm_noaudit+0x56/0x470 [ 105.102860][ T9567] ? avc_has_perm_noaudit+0x11e/0x470 [ 105.102874][ T9567] ? avc_has_perm_noaudit+0x11e/0x470 [ 105.102890][ T9567] ? __pfx_tc_new_tfilter+0x10/0x10 [ 105.102910][ T9567] ? __lock_acquire+0x5c0/0x1f40 [ 105.102935][ T9567] ? lock_acquire+0x1d1/0x380 [ 105.102950][ T9567] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 105.102968][ T9567] ? find_held_lock+0x2b/0x80 [ 105.102981][ T9567] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 105.102999][ T9567] ? __pfx_tc_new_tfilter+0x10/0x10 [ 105.103015][ T9567] rtnetlink_rcv_msg+0x95e/0xe90 [ 105.103033][ T9567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.103058][ T9567] netlink_rcv_skb+0x159/0x420 [ 105.103075][ T9567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.103093][ T9567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.103108][ T9567] ? __asan_memcpy+0x3c/0x60 [ 105.103131][ T9567] ? netlink_deliver_tap+0x1ae/0xb50 [ 105.103160][ T9567] netlink_unicast+0x668/0x950 [ 105.103178][ T9567] ? __pfx_netlink_unicast+0x10/0x10 [ 105.103204][ T9567] netlink_sendmsg+0x9ac/0x10c0 [ 105.103223][ T9567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.103243][ T9567] ? selinux_socket_sendmsg+0x198/0x2f0 [ 105.103262][ T9567] ? ____sys_sendmsg+0xa99/0xc30 [ 105.103280][ T9567] ____sys_sendmsg+0xa99/0xc30 [ 105.103296][ T9567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.103314][ T9567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.103336][ T9567] ? lock_acquire+0x1d1/0x380 [ 105.103352][ T9567] ? get_pid_task+0x2a/0x250 [ 105.103365][ T9567] ___sys_sendmsg+0x190/0x1e0 [ 105.103385][ T9567] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.103403][ T9567] ? get_pid_task+0x106/0x250 [ 105.103420][ T9567] ? find_held_lock+0x2b/0x80 [ 105.103443][ T9567] __sys_sendmsg+0x160/0x210 [ 105.103458][ T9567] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.103482][ T9567] do_syscall_64+0x123/0x790 [ 105.103498][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.103511][ T9567] RIP: 0033:0x7f534db9fb19 [ 105.103522][ T9567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.103533][ T9567] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.103545][ T9567] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 105.103553][ T9567] RDX: 00000000000c08d4 RSI: 00002000000003c0 RDI: 0000000000000004 [ 105.103560][ T9567] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 105.103567][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.103574][ T9567] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 105.103590][ T9567] [ 105.177347][ T9573] FAULT_INJECTION: forcing a failure. [ 105.177347][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 105.177368][ T9573] CPU: 1 UID: 0 PID: 9573 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.177385][ T9573] Tainted: [L]=SOFTLOCKUP [ 105.177390][ T9573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.177397][ T9573] Call Trace: [ 105.177407][ T9573] [ 105.177412][ T9573] dump_stack_lvl+0x100/0x190 [ 105.177435][ T9573] should_fail_ex.cold+0x5/0xa [ 105.177455][ T9573] should_failslab+0xc2/0x120 [ 105.177470][ T9573] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 105.177490][ T9573] ? __alloc_skb+0x5b7/0x710 [ 105.177504][ T9573] ? __alloc_skb+0x140/0x710 [ 105.177520][ T9573] __alloc_skb+0x140/0x710 [ 105.177532][ T9573] ? __alloc_skb+0x5b7/0x710 [ 105.177546][ T9573] ? __pfx___alloc_skb+0x10/0x10 [ 105.177560][ T9573] ? lock_acquire+0x1d1/0x380 [ 105.177576][ T9573] ? sock_diag_rcv_msg+0x26f/0x7a0 [ 105.177594][ T9573] netlink_ack+0x117/0xba0 [ 105.177614][ T9573] netlink_rcv_skb+0x333/0x420 [ 105.177631][ T9573] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 105.177647][ T9573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.177662][ T9573] ? __asan_memcpy+0x3c/0x60 [ 105.177685][ T9573] ? netlink_deliver_tap+0x1ae/0xb50 [ 105.177702][ T9573] netlink_unicast+0x668/0x950 [ 105.177720][ T9573] ? __pfx_netlink_unicast+0x10/0x10 [ 105.177740][ T9573] netlink_sendmsg+0x9ac/0x10c0 [ 105.177759][ T9573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.177778][ T9573] ? selinux_socket_sendmsg+0x198/0x2f0 [ 105.177798][ T9573] ? ____sys_sendmsg+0xa99/0xc30 [ 105.177815][ T9573] ____sys_sendmsg+0xa99/0xc30 [ 105.177831][ T9573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.177849][ T9573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.177870][ T9573] ? lock_acquire+0x1d1/0x380 [ 105.177885][ T9573] ? get_pid_task+0x2a/0x250 [ 105.177898][ T9573] ___sys_sendmsg+0x190/0x1e0 [ 105.177917][ T9573] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.177936][ T9573] ? get_pid_task+0x106/0x250 [ 105.177952][ T9573] ? find_held_lock+0x2b/0x80 [ 105.177974][ T9573] __sys_sendmsg+0x160/0x210 [ 105.177989][ T9573] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.178012][ T9573] do_syscall_64+0x123/0x790 [ 105.178028][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.178040][ T9573] RIP: 0033:0x7f769d99fb19 [ 105.178050][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.178062][ T9573] RSP: 002b:00007f769e8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.178074][ T9573] RAX: ffffffffffffffda RBX: 00007f769dc25fa0 RCX: 00007f769d99fb19 [ 105.178081][ T9573] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 105.178089][ T9573] RBP: 00007f769e8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.178096][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.178103][ T9573] R13: 00007f769dc26038 R14: 00007f769dc25fa0 R15: 00007fff8f1b9d68 [ 105.178118][ T9573] [ 105.249380][ T5861] usb 6-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00 [ 105.269106][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.269135][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.273132][ T42] kauditd_printk_skb: 3896 callbacks suppressed [ 105.273144][ T42] audit: type=1400 audit(1793968827.572:4825): avc: denied { mount } for pid=9576 comm="syz.3.945" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 105.299959][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.299976][ T5861] usb 6-1: Product: syz [ 105.299984][ T5861] usb 6-1: Manufacturer: syz [ 105.299992][ T5861] usb 6-1: SerialNumber: syz [ 105.305243][ T5861] symbolserial 6-1:1.0: symbol converter detected [ 105.307371][ T5861] usb 6-1: symbol converter now attached to ttyUSB0 [ 105.402452][ T9582] syzkaller0: entered promiscuous mode [ 105.402467][ T9582] syzkaller0: entered allmulticast mode [ 105.408981][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 105.509343][ T9531] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 105.510182][ T5861] usb 6-1: USB disconnect, device number 10 [ 105.515248][ T5861] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 105.516920][ T5861] symbolserial 6-1:1.0: device disconnected [ 105.523531][ T42] audit: type=1400 audit(1793968827.822:4826): avc: denied { mounton } for pid=9583 comm="syz.4.948" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 105.523761][ T9584] Can't find a SQUASHFS superblock on nullb0 [ 105.526852][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 105.579522][ T34] usb 5-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00 [ 105.580966][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.580985][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.582450][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.582464][ T34] usb 5-1: Product: syz [ 105.582473][ T34] usb 5-1: Manufacturer: syz [ 105.582481][ T34] usb 5-1: SerialNumber: syz [ 105.586653][ T34] symbolserial 5-1:1.0: symbol converter detected [ 105.589417][ T34] usb 5-1: symbol converter now attached to ttyUSB0 [ 105.593897][ T9586] kvm: user requested TSC rate below hardware speed [ 105.619558][ T9586] FAULT_INJECTION: forcing a failure. [ 105.619558][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.619578][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.4.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.619594][ T9586] Tainted: [L]=SOFTLOCKUP [ 105.619599][ T9586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.619607][ T9586] Call Trace: [ 105.619611][ T9586] [ 105.619616][ T9586] dump_stack_lvl+0x100/0x190 [ 105.619640][ T9586] should_fail_ex.cold+0x5/0xa [ 105.619659][ T9586] _copy_to_user+0x32/0xd0 [ 105.619676][ T9586] simple_read_from_buffer+0xcb/0x170 [ 105.619693][ T9586] proc_fail_nth_read+0x1af/0x230 [ 105.619711][ T9586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.619728][ T9586] ? rw_verify_area+0xce/0x6d0 [ 105.619747][ T9586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.619763][ T9586] vfs_read+0x1e4/0xb40 [ 105.619775][ T9586] ? lock_acquire+0x1d1/0x380 [ 105.619792][ T9586] ? __fget_files+0x34/0x3d0 [ 105.619807][ T9586] ? __pfx_vfs_read+0x10/0x10 [ 105.619818][ T9586] ? find_held_lock+0x2b/0x80 [ 105.619831][ T9586] ? __fget_files+0x215/0x3d0 [ 105.619849][ T9586] ? __fget_files+0x21f/0x3d0 [ 105.619874][ T9586] ksys_read+0x12a/0x250 [ 105.619886][ T9586] ? __pfx_ksys_read+0x10/0x10 [ 105.619902][ T9586] do_syscall_64+0x123/0x790 [ 105.619918][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.619931][ T9586] RIP: 0033:0x7f2ab336034e [ 105.619941][ T9586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.619970][ T9586] RSP: 002b:00007f2ab417efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.619983][ T9586] RAX: ffffffffffffffda RBX: 00007f2ab417f6c0 RCX: 00007f2ab336034e [ 105.619990][ T9586] RDX: 000000000000000f RSI: 00007f2ab417f0a0 RDI: 0000000000000006 [ 105.619998][ T9586] RBP: 00007f2ab417f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.620005][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.620012][ T9586] R13: 00007f2ab3626038 R14: 00007f2ab3625fa0 R15: 00007ffe6c584a78 [ 105.620028][ T9586] [ 105.739574][ T9590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.951'. [ 105.790769][ T9571] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 105.791433][ T5861] usb 5-1: USB disconnect, device number 14 [ 105.796357][ T5861] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 105.796621][ T5861] symbolserial 5-1:1.0: device disconnected [ 105.998817][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 106.149388][ T34] usb 9-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 106.150280][ T34] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 106.150299][ T34] usb 9-1: config 1 has no interface number 0 [ 106.150317][ T34] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 106.150332][ T34] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 106.150346][ T34] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.152021][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.152034][ T34] usb 9-1: Product: syz [ 106.152042][ T34] usb 9-1: Manufacturer: syz [ 106.152049][ T34] usb 9-1: SerialNumber: syz [ 106.154463][ T9592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.288835][ T5861] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.355698][ T9592] FAULT_INJECTION: forcing a failure. [ 106.355698][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 106.355724][ T9592] CPU: 3 UID: 0 PID: 9592 Comm: syz.4.952 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.355752][ T9592] Tainted: [L]=SOFTLOCKUP [ 106.355757][ T9592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.355765][ T9592] Call Trace: [ 106.355770][ T9592] [ 106.355775][ T9592] dump_stack_lvl+0x100/0x190 [ 106.355800][ T9592] should_fail_ex.cold+0x5/0xa [ 106.355819][ T9592] should_failslab+0xc2/0x120 [ 106.355833][ T9592] __kmalloc_noprof+0xfc/0x840 [ 106.355851][ T9592] ? rcu_is_watching+0x13/0xc0 [ 106.355865][ T9592] ? tomoyo_realpath_from_path+0xb6/0x690 [ 106.355882][ T9592] tomoyo_realpath_from_path+0xb6/0x690 [ 106.355898][ T9592] tomoyo_path_number_perm+0x23c/0x580 [ 106.355916][ T9592] ? tomoyo_path_number_perm+0x22e/0x580 [ 106.355935][ T9592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.355959][ T9592] ? __lock_acquire+0x5c0/0x1f40 [ 106.355983][ T9592] ? __fget_files+0x34/0x3d0 [ 106.355999][ T9592] ? find_held_lock+0x2b/0x80 [ 106.356011][ T9592] ? hook_file_ioctl_common+0x140/0x440 [ 106.356029][ T9592] ? __fget_files+0x21f/0x3d0 [ 106.356047][ T9592] security_file_ioctl+0xd3/0x230 [ 106.356066][ T9592] __x64_sys_ioctl+0xb7/0x210 [ 106.356080][ T9592] do_syscall_64+0x123/0x790 [ 106.356096][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.356109][ T9592] RIP: 0033:0x7f2ab339f7ab [ 106.356119][ T9592] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 106.356130][ T9592] RSP: 002b:00007f2ab417cef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.356143][ T9592] RAX: ffffffffffffffda RBX: 00007f2ab3750320 RCX: 00007f2ab339f7ab [ 106.356150][ T9592] RDX: 0000000000000000 RSI: 0000000040045506 RDI: 0000000000000003 [ 106.356158][ T9592] RBP: 0000000000000003 R08: 00007f2ab3750320 R09: 0000000000000007 [ 106.356165][ T9592] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 106.356172][ T9592] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f2ab3750320 [ 106.356187][ T9592] [ 106.356227][ T9592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.356396][ T9592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.405673][ T9600] syzkaller0: entered promiscuous mode [ 106.405687][ T9600] syzkaller0: entered allmulticast mode [ 106.428896][ T5861] usb 6-1: device descriptor read/64, error -71 [ 106.568001][ T34] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 106.678939][ T5861] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 106.729948][ T9605] FAULT_INJECTION: forcing a failure. [ 106.729948][ T9605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.729970][ T9605] CPU: 3 UID: 0 PID: 9605 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.729998][ T9605] Tainted: [L]=SOFTLOCKUP [ 106.730004][ T9605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.730012][ T9605] Call Trace: [ 106.730016][ T9605] [ 106.730022][ T9605] dump_stack_lvl+0x100/0x190 [ 106.730046][ T9605] should_fail_ex.cold+0x5/0xa [ 106.730066][ T9605] should_fail_alloc_page+0xeb/0x140 [ 106.730082][ T9605] prepare_alloc_pages+0x1f0/0x5b0 [ 106.730098][ T9605] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 106.730119][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.730136][ T9605] ? is_bpf_text_address+0x25/0x1a0 [ 106.730171][ T9605] ? find_held_lock+0x2b/0x80 [ 106.730185][ T9605] ? is_bpf_text_address+0x8a/0x1a0 [ 106.730200][ T9605] ? is_bpf_text_address+0x8a/0x1a0 [ 106.730214][ T9605] ? bpf_ksym_find+0x128/0x1c0 [ 106.730232][ T9605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.730251][ T9605] ? kernel_text_address+0x8d/0x100 [ 106.730266][ T9605] ? __kernel_text_address+0xd/0x30 [ 106.730279][ T9605] ? unwind_get_return_address+0x59/0xa0 [ 106.730292][ T9605] ? arch_stack_walk+0xa6/0xf0 [ 106.730317][ T9605] ? __pfx_stack_trace_save+0x10/0x10 [ 106.730334][ T9605] ? stack_depot_save_flags+0x27/0xa10 [ 106.730354][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.730370][ T9605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.730391][ T9605] ? policy_nodemask+0xed/0x5e0 [ 106.730407][ T9605] alloc_pages_mpol+0x201/0x560 [ 106.730423][ T9605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.730442][ T9605] alloc_pages_noprof+0x1a/0x160 [ 106.730459][ T9605] get_free_pages_noprof+0x10/0xb0 [ 106.730471][ T9605] __kasan_populate_vmalloc+0xa0/0x210 [ 106.730494][ T9605] alloc_vmap_area+0x963/0x2bc0 [ 106.730518][ T9605] ? kasan_save_track+0x14/0x30 [ 106.730530][ T9605] ? __kasan_kmalloc+0xaa/0xb0 [ 106.730542][ T9605] ? __pfx_alloc_vmap_area+0x10/0x10 [ 106.730562][ T9605] ? __get_vm_area_node+0x124/0x350 [ 106.730576][ T9605] __get_vm_area_node+0x1ed/0x350 [ 106.730591][ T9605] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 106.730605][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.730620][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.730635][ T9605] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 106.730655][ T9605] ? find_held_lock+0x2b/0x80 [ 106.730668][ T9605] ? rcu_read_unlock+0x17/0x60 [ 106.730684][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.730705][ T9605] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 106.730724][ T9605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.730739][ T9605] ? rcu_is_watching+0x13/0xc0 [ 106.730753][ T9605] ? trace_kmem_cache_alloc+0xdd/0x100 [ 106.730768][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.730781][ T9605] __vmalloc_node_noprof+0xad/0xf0 [ 106.730795][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.730810][ T9605] copy_process+0x80b/0x88e0 [ 106.730835][ T9605] ? __pfx_copy_process+0x10/0x10 [ 106.730850][ T9605] ? kasan_save_track+0x14/0x30 [ 106.730862][ T9605] ? __kasan_kmalloc+0xaa/0xb0 [ 106.730874][ T9605] ? lockdep_init_map_type+0x5c/0x250 [ 106.730892][ T9605] ? lockdep_init_map_type+0x5c/0x250 [ 106.730910][ T9605] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 106.730924][ T9605] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 106.730944][ T9605] vhost_task_create+0x1db/0x370 [ 106.730959][ T9605] ? __pfx_vhost_task_create+0x10/0x10 [ 106.730977][ T9605] ? __pfx_vhost_task_fn+0x10/0x10 [ 106.730993][ T9605] ? register_lock_class+0x3f/0x7b0 [ 106.731010][ T9605] ? rcu_is_watching+0x13/0xc0 [ 106.731023][ T9605] ? trace_contention_end+0x126/0x160 [ 106.731043][ T9605] kvm_mmu_post_init_vm+0x1b3/0x360 [ 106.731061][ T9605] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 106.731080][ T9605] ? __pfx___mutex_lock+0x10/0x10 [ 106.731094][ T9605] ? kasan_quarantine_put+0x104/0x240 [ 106.731108][ T9605] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 106.731125][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.731141][ T9605] ? do_raw_write_lock+0x11e/0x260 [ 106.731153][ T9605] ? find_held_lock+0x2b/0x80 [ 106.731165][ T9605] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 106.731183][ T9605] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 106.731204][ T9605] kvm_vcpu_ioctl+0x735/0x17b0 [ 106.731224][ T9605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.731243][ T9605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.731263][ T9605] ? do_vfs_ioctl+0x226/0x13e0 [ 106.731276][ T9605] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.731287][ T9605] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 106.731302][ T9605] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.731316][ T9605] ? __fget_files+0x34/0x3d0 [ 106.731338][ T9605] ? selinux_file_ioctl+0x1e0/0x290 [ 106.731349][ T9605] ? selinux_file_ioctl+0x1e7/0x290 [ 106.731361][ T9605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.731381][ T9605] __x64_sys_ioctl+0x18e/0x210 [ 106.731394][ T9605] do_syscall_64+0x123/0x790 [ 106.731409][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.731422][ T9605] RIP: 0033:0x7f534db9fb19 [ 106.731432][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.731444][ T9605] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.731456][ T9605] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 106.731464][ T9605] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 106.731471][ T9605] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 106.731478][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.731485][ T9605] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 106.731501][ T9605] [ 106.732138][ T9605] syz.0.958: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.732221][ T9605] CPU: 3 UID: 0 PID: 9605 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.732238][ T9605] Tainted: [L]=SOFTLOCKUP [ 106.732242][ T9605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.732261][ T9605] Call Trace: [ 106.732266][ T9605] [ 106.732271][ T9605] dump_stack_lvl+0x100/0x190 [ 106.732294][ T9605] warn_alloc.cold+0x9e/0xb2 [ 106.732308][ T9605] ? __pfx_warn_alloc+0x10/0x10 [ 106.732325][ T9605] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.732341][ T9605] ? __get_vm_area_node+0x2f0/0x350 [ 106.732360][ T9605] ? __get_vm_area_node+0x22b/0x350 [ 106.732375][ T9605] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 106.732390][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.732406][ T9605] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 106.732425][ T9605] ? find_held_lock+0x2b/0x80 [ 106.732439][ T9605] ? rcu_read_unlock+0x17/0x60 [ 106.732456][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.732471][ T9605] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 106.732490][ T9605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.732506][ T9605] ? rcu_is_watching+0x13/0xc0 [ 106.732519][ T9605] ? trace_kmem_cache_alloc+0xdd/0x100 [ 106.732534][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.732548][ T9605] __vmalloc_node_noprof+0xad/0xf0 [ 106.732561][ T9605] ? vhost_task_create+0x1db/0x370 [ 106.732577][ T9605] copy_process+0x80b/0x88e0 [ 106.732601][ T9605] ? __pfx_copy_process+0x10/0x10 [ 106.732616][ T9605] ? kasan_save_track+0x14/0x30 [ 106.732628][ T9605] ? __kasan_kmalloc+0xaa/0xb0 [ 106.732640][ T9605] ? lockdep_init_map_type+0x5c/0x250 [ 106.732658][ T9605] ? lockdep_init_map_type+0x5c/0x250 [ 106.732676][ T9605] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 106.732690][ T9605] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 106.732716][ T9605] vhost_task_create+0x1db/0x370 [ 106.732730][ T9605] ? __pfx_vhost_task_create+0x10/0x10 [ 106.732749][ T9605] ? __pfx_vhost_task_fn+0x10/0x10 [ 106.732765][ T9605] ? register_lock_class+0x3f/0x7b0 [ 106.732781][ T9605] ? rcu_is_watching+0x13/0xc0 [ 106.732794][ T9605] ? trace_contention_end+0x126/0x160 [ 106.732814][ T9605] kvm_mmu_post_init_vm+0x1b3/0x360 [ 106.732832][ T9605] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 106.732850][ T9605] ? __pfx___mutex_lock+0x10/0x10 [ 106.732864][ T9605] ? kasan_quarantine_put+0x104/0x240 [ 106.732878][ T9605] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 106.732895][ T9605] ? lock_acquire+0x1d1/0x380 [ 106.732911][ T9605] ? do_raw_write_lock+0x11e/0x260 [ 106.732922][ T9605] ? find_held_lock+0x2b/0x80 [ 106.732935][ T9605] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 106.732953][ T9605] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 106.732974][ T9605] kvm_vcpu_ioctl+0x735/0x17b0 [ 106.732994][ T9605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.733013][ T9605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.733058][ T9605] ? do_vfs_ioctl+0x226/0x13e0 [ 106.733093][ T9605] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.733126][ T9605] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 106.733163][ T9605] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.733179][ T9605] ? __fget_files+0x34/0x3d0 [ 106.733201][ T9605] ? selinux_file_ioctl+0x1e0/0x290 [ 106.733223][ T9605] ? selinux_file_ioctl+0x1e7/0x290 [ 106.733269][ T9605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.733289][ T9605] __x64_sys_ioctl+0x18e/0x210 [ 106.733302][ T9605] do_syscall_64+0x123/0x790 [ 106.733318][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.733330][ T9605] RIP: 0033:0x7f534db9fb19 [ 106.733340][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.733351][ T9605] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.733362][ T9605] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 106.733370][ T9605] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 106.733377][ T9605] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 106.733384][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.733391][ T9605] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 106.733407][ T9605] [ 106.733453][ T9605] Mem-Info: [ 106.733460][ T9605] active_anon:10668 inactive_anon:116 isolated_anon:0 [ 106.733460][ T9605] active_file:2410 inactive_file:50314 isolated_file:0 [ 106.733460][ T9605] unevictable:1000 dirty:331 writeback:0 [ 106.733460][ T9605] slab_reclaimable:9746 slab_unreclaimable:74824 [ 106.733460][ T9605] mapped:26518 shmem:1567 pagetables:3681 [ 106.733460][ T9605] sec_pagetables:306 bounce:0 [ 106.733460][ T9605] kernel_misc_reclaimable:0 [ 106.733460][ T9605] free:444530 free_pcp:12063 free_cma:0 [ 106.733489][ T9605] Node 0 active_anon:42468kB inactive_anon:464kB active_file:9640kB inactive_file:201016kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:106072kB dirty:1324kB writeback:0kB shmem:4264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:13692kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 106.733521][ T9605] Node 1 active_anon:204kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:1032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 106.733550][ T9605] Node 0 DMA free:15100kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 106.733630][ T9605] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 106.733652][ T9605] Node 0 DMA32 free:120176kB boost:0kB min:27064kB low:33828kB high:40592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42460kB inactive_anon:464kB active_file:9640kB inactive_file:201016kB unevictable:2000kB writepending:1324kB zspages:0kB present:2080628kB managed:1230612kB mlocked:0kB bounce:0kB free_pcp:47688kB local_pcp:7032kB free_cma:0kB [ 106.733686][ T9605] lowmem_reserve[]: 0 0 0 0 0 [ 106.733708][ T9605] Node 1 Normal free:1642844kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:204kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:628kB local_pcp:208kB free_cma:0kB [ 106.733778][ T9605] lowmem_reserve[]: 0 0 0 0 0 [ 106.733798][ T9605] Node 0 DMA: 29*4kB (UM) 21*8kB (UM) 20*16kB (UM) 23*32kB (UM) 17*64kB (UM) 15*128kB (UM) 8*256kB (UM) 5*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 0*4096kB = 15100kB [ 106.733943][ T9605] Node 0 DMA32: 1034*4kB (UME) 297*8kB (UME) 172*16kB (UME) 381*32kB (UME) 71*64kB (UME) 53*128kB (UME) 41*256kB (UME) 50*512kB (UM) 12*1024kB (M) 9*2048kB (M) 5*4096kB (M) = 120080kB [ 106.735121][ T9605] Node 1 Normal: 295*4kB (UM) 340*8kB (UME) 330*16kB (UME) 302*32kB (UME) 261*64kB (UME) 239*128kB (UME) 209*256kB (UME) 201*512kB (UME) 175*1024kB (UME) 8*2048kB (UM) 299*4096kB (UM) = 1642844kB [ 106.735210][ T9605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.735267][ T9605] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.735278][ T9605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.735287][ T9605] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.735295][ T9605] 54287 total pagecache pages [ 106.735300][ T9605] 0 pages in swap cache [ 106.735304][ T9605] Free swap = 124996kB [ 106.735308][ T9605] Total swap = 124996kB [ 106.735312][ T9605] 1048443 pages RAM [ 106.735316][ T9605] 0 pages HighMem/MovableOnly [ 106.735320][ T9605] 291480 pages reserved [ 106.735324][ T9605] 0 pages cma reserved [ 106.758936][ T34] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 106.758953][ T34] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 106.760230][ T34] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 106.760243][ T34] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 106.765163][ T34] usb 9-1: USB disconnect, device number 6 [ 106.766619][ T34] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 106.809725][ T5861] usb 6-1: device descriptor read/64, error -71 [ 106.809848][ T34] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 106.921435][ T5861] usb usb6-port1: attempt power cycle [ 107.152666][ T9612] FAULT_INJECTION: forcing a failure. [ 107.152666][ T9612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.152697][ T9612] CPU: 3 UID: 0 PID: 9612 Comm: syz.0.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.152714][ T9612] Tainted: [L]=SOFTLOCKUP [ 107.152718][ T9612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.152726][ T9612] Call Trace: [ 107.152730][ T9612] [ 107.152735][ T9612] dump_stack_lvl+0x100/0x190 [ 107.152759][ T9612] should_fail_ex.cold+0x5/0xa [ 107.152782][ T9612] _copy_from_user+0x2e/0xd0 [ 107.152799][ T9612] kstrtouint_from_user+0xd6/0x1d0 [ 107.152818][ T9612] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 107.152839][ T9612] ? lock_acquire+0x1d1/0x380 [ 107.152859][ T9612] proc_fail_nth_write+0x83/0x220 [ 107.152877][ T9612] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.152898][ T9612] vfs_write+0x2aa/0x1050 [ 107.152912][ T9612] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.152928][ T9612] ? lock_acquire+0x1d1/0x380 [ 107.152944][ T9612] ? __fget_files+0x34/0x3d0 [ 107.152959][ T9612] ? __pfx_vfs_write+0x10/0x10 [ 107.152970][ T9612] ? find_held_lock+0x2b/0x80 [ 107.152983][ T9612] ? __fget_files+0x215/0x3d0 [ 107.153001][ T9612] ? __fget_files+0x21f/0x3d0 [ 107.153019][ T9612] ksys_write+0x12a/0x250 [ 107.153032][ T9612] ? __pfx_ksys_write+0x10/0x10 [ 107.153048][ T9612] do_syscall_64+0x123/0x790 [ 107.153065][ T9612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.153077][ T9612] RIP: 0033:0x7f534db6034e [ 107.153087][ T9612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.153099][ T9612] RSP: 002b:00007f534ea5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.153110][ T9612] RAX: ffffffffffffffda RBX: 00007f534ea606c0 RCX: 00007f534db6034e [ 107.153118][ T9612] RDX: 0000000000000001 RSI: 00007f534ea600a0 RDI: 0000000000000005 [ 107.153125][ T9612] RBP: 00007f534ea60090 R08: 0000000000000000 R09: 0000000000000000 [ 107.153132][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.153139][ T9612] R13: 00007f534de26308 R14: 00007f534de26270 R15: 00007ffcc3b93d88 [ 107.153155][ T9612] [ 107.264518][ T5861] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 107.289281][ T5861] usb 6-1: device descriptor read/8, error -71 [ 107.300163][ T9616] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 107.300178][ T9616] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.961'. [ 107.307394][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 107.307409][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 107.312125][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.458878][ T9625] syzkaller0: entered promiscuous mode [ 107.458893][ T9625] syzkaller0: entered allmulticast mode [ 107.479551][ T42] audit: type=1400 audit(1793968829.782:4827): avc: denied { ioctl } for pid=9621 comm="syz.0.964" path="socket:[35841]" dev="sockfs" ino=35841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.513333][ T42] audit: type=1400 audit(1793968829.812:4828): avc: denied { connect } for pid=9627 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.548946][ T5861] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.569269][ T5861] usb 6-1: device descriptor read/8, error -71 [ 107.631758][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 107.660581][ T9652] FAULT_INJECTION: forcing a failure. [ 107.660581][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.660603][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.4.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.660620][ T9652] Tainted: [L]=SOFTLOCKUP [ 107.660625][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.660632][ T9652] Call Trace: [ 107.660637][ T9652] [ 107.660642][ T9652] dump_stack_lvl+0x100/0x190 [ 107.660666][ T9652] should_fail_ex.cold+0x5/0xa [ 107.660685][ T9652] _copy_from_user+0x2e/0xd0 [ 107.660701][ T9652] drm_ioctl+0x520/0xc60 [ 107.660718][ T9652] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 107.660734][ T9652] ? __pfx_drm_ioctl+0x10/0x10 [ 107.660746][ T9652] ? __fget_files+0x34/0x3d0 [ 107.660767][ T9652] ? selinux_file_ioctl+0x1e0/0x290 [ 107.660779][ T9652] ? selinux_file_ioctl+0x1e7/0x290 [ 107.660791][ T9652] ? __pfx_drm_ioctl+0x10/0x10 [ 107.660805][ T9652] __x64_sys_ioctl+0x18e/0x210 [ 107.660819][ T9652] do_syscall_64+0x123/0x790 [ 107.660835][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.660847][ T9652] RIP: 0033:0x7f2ab339fb19 [ 107.660857][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.660868][ T9652] RSP: 002b:00007f2ab417f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.660881][ T9652] RAX: ffffffffffffffda RBX: 00007f2ab3625fa0 RCX: 00007f2ab339fb19 [ 107.660888][ T9652] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000a [ 107.660895][ T9652] RBP: 00007f2ab417f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.660902][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.660909][ T9652] R13: 00007f2ab3626038 R14: 00007f2ab3625fa0 R15: 00007ffe6c584a78 [ 107.660924][ T9652] [ 107.693186][ T5861] usb usb6-port1: unable to enumerate USB device [ 107.707386][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 107.726233][ T9658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.726335][ T42] audit: type=1400 audit(1793968830.022:4829): avc: denied { setopt } for pid=9657 comm="syz.0.974" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.729786][ T9658] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 107.741096][ T9658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.791778][ T9664] syzkaller0: entered promiscuous mode [ 107.791792][ T9664] syzkaller0: entered allmulticast mode [ 108.005574][ T42] audit: type=1400 audit(1793968830.302:4830): avc: denied { read } for pid=9670 comm="syz.0.978" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.006183][ T42] audit: type=1400 audit(1793968830.302:4831): avc: denied { open } for pid=9670 comm="syz.0.978" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.008019][ T42] audit: type=1400 audit(1793968830.302:4832): avc: denied { ioctl } for pid=9670 comm="syz.0.978" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.013130][ T42] audit: type=1400 audit(1793968830.312:4833): avc: denied { setopt } for pid=9670 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.070201][ T9673] macvlan1: entered promiscuous mode [ 108.073313][ T9673] macvlan1: left promiscuous mode [ 108.166028][ T9683] FAULT_INJECTION: forcing a failure. [ 108.166028][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 108.166050][ T9683] CPU: 3 UID: 0 PID: 9683 Comm: syz.4.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.166068][ T9683] Tainted: [L]=SOFTLOCKUP [ 108.166072][ T9683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.166080][ T9683] Call Trace: [ 108.166084][ T9683] [ 108.166089][ T9683] dump_stack_lvl+0x100/0x190 [ 108.166113][ T9683] should_fail_ex.cold+0x5/0xa [ 108.166132][ T9683] should_failslab+0xc2/0x120 [ 108.166170][ T9683] __kmalloc_cache_noprof+0x91/0x6d0 [ 108.166187][ T9683] ? __lock_acquire+0x5c0/0x1f40 [ 108.166204][ T9683] ? drm_atomic_commit_alloc+0xb8/0x120 [ 108.166221][ T9683] drm_atomic_commit_alloc+0xb8/0x120 [ 108.166235][ T9683] drm_mode_atomic_ioctl+0x393/0x2940 [ 108.166250][ T9683] ? lock_acquire+0x1d1/0x380 [ 108.166267][ T9683] ? find_held_lock+0x2b/0x80 [ 108.166286][ T9683] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 108.166300][ T9683] ? __lock_acquire+0x5c0/0x1f40 [ 108.166324][ T9683] ? drm_is_current_master+0x2c/0x40 [ 108.166338][ T9683] ? drm_is_current_master+0x2c/0x40 [ 108.166353][ T9683] ? do_raw_spin_unlock+0x145/0x1e0 [ 108.166372][ T9683] drm_ioctl_kernel+0x1f3/0x3e0 [ 108.166386][ T9683] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 108.166401][ T9683] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 108.166419][ T9683] drm_ioctl+0x5e6/0xc60 [ 108.166434][ T9683] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 108.166449][ T9683] ? __pfx_drm_ioctl+0x10/0x10 [ 108.166461][ T9683] ? __fget_files+0x34/0x3d0 [ 108.166483][ T9683] ? selinux_file_ioctl+0x1e0/0x290 [ 108.166495][ T9683] ? selinux_file_ioctl+0x1e7/0x290 [ 108.166508][ T9683] ? __pfx_drm_ioctl+0x10/0x10 [ 108.166522][ T9683] __x64_sys_ioctl+0x18e/0x210 [ 108.166535][ T9683] do_syscall_64+0x123/0x790 [ 108.166551][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.166563][ T9683] RIP: 0033:0x7f2ab339fb19 [ 108.166573][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.166585][ T9683] RSP: 002b:00007f2ab417f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.166597][ T9683] RAX: ffffffffffffffda RBX: 00007f2ab3625fa0 RCX: 00007f2ab339fb19 [ 108.166605][ T9683] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 108.166612][ T9683] RBP: 00007f2ab417f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.166619][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.166626][ T9683] R13: 00007f2ab3626038 R14: 00007f2ab3625fa0 R15: 00007ffe6c584a78 [ 108.166641][ T9683] [ 108.195249][ T9685] syzkaller0: entered promiscuous mode [ 108.195269][ T9685] syzkaller0: entered allmulticast mode [ 108.450097][ T42] audit: type=1400 audit(1793968830.752:4834): avc: denied { unmount } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.819906][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88804b66c400: rx timeout, send abort [ 109.210424][ T9704] kvm: Disabled LAPIC found during irq injection [ 109.232646][ T9706] FAULT_INJECTION: forcing a failure. [ 109.232646][ T9706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.232667][ T9706] CPU: 2 UID: 0 PID: 9706 Comm: syz.0.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.232684][ T9706] Tainted: [L]=SOFTLOCKUP [ 109.232688][ T9706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.232696][ T9706] Call Trace: [ 109.232700][ T9706] [ 109.232705][ T9706] dump_stack_lvl+0x100/0x190 [ 109.232736][ T9706] should_fail_ex.cold+0x5/0xa [ 109.232756][ T9706] _copy_to_user+0x32/0xd0 [ 109.232773][ T9706] simple_read_from_buffer+0xcb/0x170 [ 109.232790][ T9706] proc_fail_nth_read+0x1af/0x230 [ 109.232808][ T9706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.232826][ T9706] ? rw_verify_area+0xce/0x6d0 [ 109.232844][ T9706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.232863][ T9706] vfs_read+0x1e4/0xb40 [ 109.232876][ T9706] ? lock_acquire+0x1d1/0x380 [ 109.232892][ T9706] ? __fget_files+0x34/0x3d0 [ 109.232907][ T9706] ? __pfx_vfs_read+0x10/0x10 [ 109.232918][ T9706] ? find_held_lock+0x2b/0x80 [ 109.232932][ T9706] ? __fget_files+0x215/0x3d0 [ 109.232949][ T9706] ? __fget_files+0x21f/0x3d0 [ 109.232968][ T9706] ksys_read+0x12a/0x250 [ 109.232980][ T9706] ? __pfx_ksys_read+0x10/0x10 [ 109.232997][ T9706] do_syscall_64+0x123/0x790 [ 109.233012][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.233026][ T9706] RIP: 0033:0x7f534db6034e [ 109.233036][ T9706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.233048][ T9706] RSP: 002b:00007f534eac2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.233060][ T9706] RAX: ffffffffffffffda RBX: 00007f534eac36c0 RCX: 00007f534db6034e [ 109.233068][ T9706] RDX: 000000000000000f RSI: 00007f534eac30a0 RDI: 0000000000000004 [ 109.233075][ T9706] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 109.233082][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.233089][ T9706] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 109.233104][ T9706] [ 109.312256][ T9710] syzkaller0: entered promiscuous mode [ 109.312270][ T9710] syzkaller0: entered allmulticast mode [ 109.320561][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88804b66c400: abort rx timeout. Force session deactivation [ 109.322241][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88804b66dc00: rx timeout, send abort [ 109.456623][ T9725] FAULT_INJECTION: forcing a failure. [ 109.456623][ T9725] name failslab, interval 1, probability 0, space 0, times 0 [ 109.456644][ T9725] CPU: 1 UID: 0 PID: 9725 Comm: syz.4.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.456661][ T9725] Tainted: [L]=SOFTLOCKUP [ 109.456665][ T9725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.456672][ T9725] Call Trace: [ 109.456676][ T9725] [ 109.456681][ T9725] dump_stack_lvl+0x100/0x190 [ 109.456706][ T9725] should_fail_ex.cold+0x5/0xa [ 109.456725][ T9725] should_failslab+0xc2/0x120 [ 109.456740][ T9725] __kmalloc_cache_noprof+0x91/0x6d0 [ 109.456757][ T9725] ? percpu_ref_init+0xec/0x3f0 [ 109.456779][ T9725] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 109.456792][ T9725] percpu_ref_init+0xec/0x3f0 [ 109.456812][ T9725] io_uring_setup.cold+0x2be/0x1c7e [ 109.456828][ T9725] ? lock_acquire+0x1d1/0x380 [ 109.456844][ T9725] ? avc_has_perm_noaudit+0x56/0x470 [ 109.456859][ T9725] ? __pfx_io_uring_setup+0x10/0x10 [ 109.456878][ T9725] ? find_held_lock+0x2b/0x80 [ 109.456891][ T9725] ? avc_has_perm_noaudit+0x11e/0x470 [ 109.456905][ T9725] ? avc_has_perm_noaudit+0x11e/0x470 [ 109.456929][ T9725] ? ksys_write+0x1ac/0x250 [ 109.456942][ T9725] ? __pfx_ksys_write+0x10/0x10 [ 109.456957][ T9725] __x64_sys_io_uring_setup+0xc2/0x170 [ 109.456973][ T9725] do_syscall_64+0x123/0x790 [ 109.456988][ T9725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.457001][ T9725] RIP: 0033:0x7f2ab339fb19 [ 109.457011][ T9725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.457024][ T9725] RSP: 002b:00007f2ab417eee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 109.457036][ T9725] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f2ab339fb19 [ 109.457043][ T9725] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 109.457051][ T9725] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 109.457058][ T9725] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 109.457065][ T9725] R13: 0000200000000b10 R14: 00007f2ab417efd8 R15: 0000000000000000 [ 109.457080][ T9725] [ 109.704348][ T9750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9750 comm=syz.1.1010 [ 109.764969][ T9755] syzkaller0: entered promiscuous mode [ 109.764985][ T9755] syzkaller0: entered allmulticast mode [ 109.778957][ T5861] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.822317][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88804b66dc00: abort rx timeout. Force session deactivation [ 109.928913][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 109.929528][ T5861] usb 5-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22 [ 109.930573][ T5861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.930591][ T5861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.930605][ T5861] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.933026][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 109.933041][ T5861] usb 5-1: Product: syz [ 109.933049][ T5861] usb 5-1: Manufacturer: syz [ 109.933058][ T5861] usb 5-1: SerialNumber: syz [ 109.942004][ T5861] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input20 [ 110.353706][ T24] usb 5-1: USB disconnect, device number 15 [ 110.374652][ T24] appletouch 5-1:1.0: input: appletouch disconnected [ 110.419308][ T9779] FAULT_INJECTION: forcing a failure. [ 110.419308][ T9779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.419329][ T9779] CPU: 2 UID: 0 PID: 9779 Comm: syz.1.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.419346][ T9779] Tainted: [L]=SOFTLOCKUP [ 110.419350][ T9779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.419358][ T9779] Call Trace: [ 110.419362][ T9779] [ 110.419367][ T9779] dump_stack_lvl+0x100/0x190 [ 110.419393][ T9779] should_fail_ex.cold+0x5/0xa [ 110.419413][ T9779] _copy_to_user+0x32/0xd0 [ 110.419429][ T9779] simple_read_from_buffer+0xcb/0x170 [ 110.419447][ T9779] proc_fail_nth_read+0x1af/0x230 [ 110.419465][ T9779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.419482][ T9779] ? rw_verify_area+0xce/0x6d0 [ 110.419501][ T9779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.419517][ T9779] vfs_read+0x1e4/0xb40 [ 110.419529][ T9779] ? lock_acquire+0x1d1/0x380 [ 110.419546][ T9779] ? __fget_files+0x34/0x3d0 [ 110.419561][ T9779] ? __pfx_vfs_read+0x10/0x10 [ 110.419572][ T9779] ? find_held_lock+0x2b/0x80 [ 110.419585][ T9779] ? __fget_files+0x215/0x3d0 [ 110.419602][ T9779] ? __fget_files+0x21f/0x3d0 [ 110.419621][ T9779] ksys_read+0x12a/0x250 [ 110.419633][ T9779] ? __pfx_ksys_read+0x10/0x10 [ 110.419645][ T9779] ? trace_hardirqs_off+0x70/0x170 [ 110.419663][ T9779] do_syscall_64+0x123/0x790 [ 110.419680][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.419693][ T9779] RIP: 0033:0x7f780ad6034e [ 110.419703][ T9779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.419715][ T9779] RSP: 002b:00007f780bc30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.419727][ T9779] RAX: ffffffffffffffda RBX: 00007f780bc316c0 RCX: 00007f780ad6034e [ 110.419737][ T9779] RDX: 000000000000000f RSI: 00007f780bc310a0 RDI: 0000000000000005 [ 110.419745][ T9779] RBP: 00007f780bc31090 R08: 0000000000000000 R09: 0000000000000000 [ 110.419752][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.419759][ T9779] R13: 00007f780b026038 R14: 00007f780b025fa0 R15: 00007ffd07a7f028 [ 110.419780][ T9779] [ 110.450118][ T9781] syzkaller0: entered promiscuous mode [ 110.450159][ T9781] syzkaller0: entered allmulticast mode [ 110.947050][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 110.947064][ T42] audit: type=1400 audit(1793968833.242:4844): avc: denied { create } for pid=9794 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 110.947348][ T42] audit: type=1400 audit(1793968833.242:4845): avc: denied { write } for pid=9794 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 110.952955][ T9795] vcan1: entered allmulticast mode [ 110.953379][ T42] audit: type=1400 audit(1793968833.252:4846): avc: denied { setopt } for pid=9794 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 110.959281][ T9798] vcan2: entered allmulticast mode [ 110.983992][ T42] audit: type=1400 audit(1793968833.282:4847): avc: denied { watch watch_reads } for pid=9800 comm="syz.0.1028" path="/254" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.103053][ T9811] syzkaller0: entered promiscuous mode [ 111.103067][ T9811] syzkaller0: entered allmulticast mode [ 111.216060][ T42] audit: type=1400 audit(1793968833.512:4848): avc: denied { mount } for pid=9814 comm="syz.4.1032" name="/" dev="overlay" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.394428][ T42] audit: type=1400 audit(1793968833.692:4849): avc: denied { listen } for pid=9833 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.433757][ T42] audit: type=1400 audit(1793968833.732:4850): avc: denied { unmount } for pid=7531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.458853][ T5779] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.549820][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.595156][ T42] audit: type=1400 audit(1793968833.892:4851): avc: denied { unmount } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 111.616457][ T9846] syzkaller0: entered promiscuous mode [ 111.616473][ T9846] syzkaller0: entered allmulticast mode [ 111.641437][ T5779] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 111.642284][ T5779] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.642310][ T5779] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.642324][ T5779] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.643909][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.643924][ T5779] usb 5-1: Product: syz [ 111.643933][ T5779] usb 5-1: Manufacturer: syz [ 111.643942][ T5779] usb 5-1: SerialNumber: syz [ 111.718901][ T50] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 111.869599][ T50] usb 9-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 111.871062][ T50] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 111.871077][ T50] usb 9-1: config 1 has no interface number 0 [ 111.871096][ T50] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 111.871110][ T50] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 111.871124][ T50] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.872704][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.872718][ T50] usb 9-1: Product: syz [ 111.872725][ T50] usb 9-1: Manufacturer: syz [ 111.872733][ T50] usb 9-1: SerialNumber: syz [ 111.877654][ T9841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.987499][ T9859] netlink: 'syz.3.1044': attribute type 5 has an invalid length. [ 112.079109][ T9841] FAULT_INJECTION: forcing a failure. [ 112.079109][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 112.079131][ T9841] CPU: 2 UID: 0 PID: 9841 Comm: syz.4.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.079148][ T9841] Tainted: [L]=SOFTLOCKUP [ 112.079152][ T9841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.079160][ T9841] Call Trace: [ 112.079164][ T9841] [ 112.079169][ T9841] dump_stack_lvl+0x100/0x190 [ 112.079206][ T9841] should_fail_ex.cold+0x5/0xa [ 112.079228][ T9841] should_failslab+0xc2/0x120 [ 112.079242][ T9841] __kmalloc_noprof+0xfc/0x840 [ 112.079262][ T9841] ? tomoyo_encode2+0xfb/0x3c0 [ 112.079278][ T9841] tomoyo_encode2+0xfb/0x3c0 [ 112.079293][ T9841] tomoyo_encode+0x29/0x50 [ 112.079305][ T9841] tomoyo_realpath_from_path+0x18c/0x690 [ 112.079322][ T9841] tomoyo_path_number_perm+0x23c/0x580 [ 112.079340][ T9841] ? tomoyo_path_number_perm+0x22e/0x580 [ 112.079359][ T9841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.079383][ T9841] ? __lock_acquire+0x5c0/0x1f40 [ 112.079408][ T9841] ? __fget_files+0x34/0x3d0 [ 112.079423][ T9841] ? find_held_lock+0x2b/0x80 [ 112.079436][ T9841] ? hook_file_ioctl_common+0x140/0x440 [ 112.079455][ T9841] ? __fget_files+0x21f/0x3d0 [ 112.079472][ T9841] security_file_ioctl+0xd3/0x230 [ 112.079492][ T9841] __x64_sys_ioctl+0xb7/0x210 [ 112.079505][ T9841] do_syscall_64+0x123/0x790 [ 112.079522][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.079535][ T9841] RIP: 0033:0x7f2ab339f7ab [ 112.079545][ T9841] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 112.079557][ T9841] RSP: 002b:00007f2ab417cef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.079570][ T9841] RAX: ffffffffffffffda RBX: 00007f2ab3750320 RCX: 00007f2ab339f7ab [ 112.079578][ T9841] RDX: 0000000000000000 RSI: 0000000040045506 RDI: 0000000000000003 [ 112.079585][ T9841] RBP: 0000000000000003 R08: 00007f2ab3750320 R09: 0000000000000007 [ 112.079592][ T9841] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 112.079600][ T9841] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f2ab3750320 [ 112.079615][ T9841] [ 112.079691][ T9841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.079869][ T9841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.150325][ T5779] usb 5-1: Cannot retrieve CPort count: -110 [ 112.150353][ T5779] usb 5-1: Cannot retrieve CPort count: -110 [ 112.150370][ T5779] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 112.285113][ T50] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:04:07 [ 112.429373][ T9862] __nla_validate_parse: 2 callbacks suppressed [ 112.429388][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1045'. [ 112.430832][ T42] audit: type=1400 audit(1793968834.732:4852): avc: denied { accept } for pid=9861 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.431174][ T9862] x_tables: duplicate underflow at hook 3 [ 112.464316][ T9] usb 5-1: USB disconnect, device number 16 [ 112.482400][ T50] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 112.482426][ T50] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 112.487121][ T50] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 112.487144][ T50] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 112.505185][ T50] usb 9-1: USB disconnect, device number 7 [ 112.511036][ T50] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 112.569363][ T50] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 113.017122][ T9899] syzkaller0: entered promiscuous mode [ 113.017137][ T9899] syzkaller0: entered allmulticast mode [ 113.221845][ T42] audit: type=1400 audit(1793968835.522:4853): avc: denied { accept } for pid=9925 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.582210][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1060'. [ 113.588922][ T9] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 113.739687][ T9] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.740478][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.740492][ T9] usb 9-1: config 0 has no interface number 0 [ 113.740510][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.740522][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 113.740536][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 113.740550][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 113.740564][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 113.740577][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.740598][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.742346][ T9] usb 9-1: config 0 descriptor?? [ 113.742881][ T9941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.742979][ T9941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.745327][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 113.954047][ T5861] usb 9-1: USB disconnect, device number 8 [ 113.954056][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 113.962037][ T5861] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 114.066795][ T9975] syzkaller0: entered promiscuous mode [ 114.066809][ T9975] syzkaller0: entered allmulticast mode [ 114.162939][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'. [ 114.236823][T10000] ufs: You didn't specify the type of your ufs filesystem [ 114.236823][T10000] [ 114.236823][T10000] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 114.236823][T10000] [ 114.236823][T10000] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 114.236844][T10000] ufs: ufstype=old is supported read-only [ 114.240368][T10000] ufs: ufs_fill_super(): bad magic number [ 114.259850][T10000] mmap: syz.0.1067 (10000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.260948][T10000] ima: rule for LSM 'u' is undefined [ 114.262396][ T9999] ima: policy update failed [ 114.294191][T10005] TC_ACT_REPEAT abuse ? [ 114.413622][T10023] syzkaller0: entered promiscuous mode [ 114.413637][T10023] syzkaller0: entered allmulticast mode [ 114.517611][T10036] FAULT_INJECTION: forcing a failure. [ 114.517611][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.517632][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.0.1076 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.517649][T10036] Tainted: [L]=SOFTLOCKUP [ 114.517653][T10036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.517661][T10036] Call Trace: [ 114.517666][T10036] [ 114.517671][T10036] dump_stack_lvl+0x100/0x190 [ 114.517695][T10036] should_fail_ex.cold+0x5/0xa [ 114.517714][T10036] _copy_from_user+0x2e/0xd0 [ 114.517730][T10036] drm_ioctl+0x520/0xc60 [ 114.517746][T10036] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 114.517762][T10036] ? __pfx_drm_ioctl+0x10/0x10 [ 114.517774][T10036] ? __fget_files+0x34/0x3d0 [ 114.517796][T10036] ? selinux_file_ioctl+0x1e0/0x290 [ 114.517808][T10036] ? selinux_file_ioctl+0x1e7/0x290 [ 114.517820][T10036] ? __pfx_drm_ioctl+0x10/0x10 [ 114.517834][T10036] __x64_sys_ioctl+0x18e/0x210 [ 114.517847][T10036] do_syscall_64+0x123/0x790 [ 114.517863][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.517882][T10036] RIP: 0033:0x7f534db9fb19 [ 114.517892][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.517904][T10036] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.517916][T10036] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 114.517924][T10036] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000008 [ 114.517931][T10036] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.517938][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.517945][T10036] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 114.517960][T10036] [ 114.553354][T10039] FAULT_INJECTION: forcing a failure. [ 114.553354][T10039] name failslab, interval 1, probability 0, space 0, times 0 [ 114.553375][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.0.1077 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.553392][T10039] Tainted: [L]=SOFTLOCKUP [ 114.553396][T10039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.553403][T10039] Call Trace: [ 114.553407][T10039] [ 114.553413][T10039] dump_stack_lvl+0x100/0x190 [ 114.553437][T10039] should_fail_ex.cold+0x5/0xa [ 114.553456][T10039] should_failslab+0xc2/0x120 [ 114.553471][T10039] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.553490][T10039] ? netlink_deliver_tap+0x103/0xb50 [ 114.553505][T10039] ? skb_clone+0x187/0x3f0 [ 114.553522][T10039] skb_clone+0x187/0x3f0 [ 114.553537][T10039] netlink_deliver_tap+0x82f/0xb50 [ 114.553556][T10039] netlink_unicast+0x708/0x950 [ 114.553573][T10039] ? __pfx_netlink_unicast+0x10/0x10 [ 114.553593][T10039] netlink_sendmsg+0x9ac/0x10c0 [ 114.553612][T10039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.553631][T10039] ? selinux_socket_sendmsg+0x198/0x2f0 [ 114.553651][T10039] ? ____sys_sendmsg+0xa99/0xc30 [ 114.553668][T10039] ____sys_sendmsg+0xa99/0xc30 [ 114.553690][T10039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.553723][T10039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.553745][T10039] ? lock_acquire+0x1d1/0x380 [ 114.553761][T10039] ? get_pid_task+0x2a/0x250 [ 114.553775][T10039] ___sys_sendmsg+0x190/0x1e0 [ 114.553794][T10039] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.553813][T10039] ? get_pid_task+0x106/0x250 [ 114.553830][T10039] ? find_held_lock+0x2b/0x80 [ 114.553852][T10039] __sys_sendmsg+0x160/0x210 [ 114.553867][T10039] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.553890][T10039] do_syscall_64+0x123/0x790 [ 114.553907][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.553920][T10039] RIP: 0033:0x7f534db9fb19 [ 114.553930][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.553942][T10039] RSP: 002b:00007f534eac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.553954][T10039] RAX: ffffffffffffffda RBX: 00007f534de25fa0 RCX: 00007f534db9fb19 [ 114.553961][T10039] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 114.553969][T10039] RBP: 00007f534eac3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.553976][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.553983][T10039] R13: 00007f534de26038 R14: 00007f534de25fa0 R15: 00007ffcc3b93d88 [ 114.553998][T10039] [ 114.689170][T10065] syzkaller0: entered promiscuous mode [ 114.689185][T10065] syzkaller0: entered allmulticast mode [ 114.781276][T10075] geneve2: entered promiscuous mode [ 114.781291][T10075] geneve2: entered allmulticast mode [ 114.782081][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 114.782096][T10075] nbd: must specify a size in bytes for the device [ 114.793602][T10075] xt_hashlimit: size too large, truncated to 1048576 [ 114.798871][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.798897][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.798915][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.798934][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.857848][T10080] ip_tables: iptables: counters copy to user failed while replacing table [ 115.061581][T10098] FAULT_INJECTION: forcing a failure. [ 115.061581][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 115.061603][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.0.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.061619][T10098] Tainted: [L]=SOFTLOCKUP [ 115.061624][T10098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.061631][T10098] Call Trace: [ 115.061636][T10098] [ 115.061640][T10098] dump_stack_lvl+0x100/0x190 [ 115.061664][T10098] should_fail_ex.cold+0x5/0xa [ 115.061684][T10098] should_failslab+0xc2/0x120 [ 115.061699][T10098] __kvmalloc_node_noprof+0x113/0x9b0 [ 115.061718][T10098] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 115.061735][T10098] ? percpu_ref_init+0xec/0x3f0 [ 115.061753][T10098] ? io_alloc_cache_init+0x38/0x170 [ 115.061774][T10098] io_alloc_cache_init+0x38/0x170 [ 115.061793][T10098] io_uring_setup.cold+0x450/0x1c7e [ 115.061809][T10098] ? lock_acquire+0x1d1/0x380 [ 115.061825][T10098] ? avc_has_perm_noaudit+0x56/0x470 [ 115.061840][T10098] ? __pfx_io_uring_setup+0x10/0x10 [ 115.061855][T10098] ? find_held_lock+0x2b/0x80 [ 115.061867][T10098] ? avc_has_perm_noaudit+0x11e/0x470 [ 115.061882][T10098] ? avc_has_perm_noaudit+0x11e/0x470 [ 115.061905][T10098] ? ksys_write+0x1ac/0x250 [ 115.061917][T10098] ? __pfx_ksys_write+0x10/0x10 [ 115.061932][T10098] __x64_sys_io_uring_setup+0xc2/0x170 [ 115.061948][T10098] do_syscall_64+0x123/0x790 [ 115.061964][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.061977][T10098] RIP: 0033:0x7f534db9fb19 [ 115.061987][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.061999][T10098] RSP: 002b:00007f534eac2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 115.062011][T10098] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f534db9fb19 [ 115.062018][T10098] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 115.062026][T10098] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 115.062033][T10098] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 115.062040][T10098] R13: 0000200000000b10 R14: 00007f534eac2fd8 R15: 0000000000000000 [ 115.062074][T10098] [ 115.075051][T10099] syzkaller0: entered promiscuous mode [ 115.075064][T10099] syzkaller0: entered allmulticast mode [ 115.170739][T10108] SQUASHFS error: Failed to read block 0x0: -5 [ 115.170766][T10108] unable to read squashfs_super_block [ 115.209956][ T5779] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 115.359692][ T5779] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.361055][ T5779] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 115.361097][ T5779] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.361120][ T5779] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.363169][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.363183][ T5779] usb 8-1: Product: syz [ 115.363191][ T5779] usb 8-1: Manufacturer: syz [ 115.363199][ T5779] usb 8-1: SerialNumber: syz [ 115.364651][ T5779] usb 8-1: config 0 descriptor?? [ 115.365903][ T5779] hub 8-1:0.0: bad descriptor, ignoring hub [ 115.365916][ T5779] hub 8-1:0.0: probe with driver hub failed with error -5 [ 115.367580][ T5779] usb 8-1: selecting invalid altsetting 0 [ 115.468930][ T50] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 115.475252][T10129] syzkaller0: entered promiscuous mode [ 115.475266][T10129] syzkaller0: entered allmulticast mode [ 115.621425][ T50] usb 9-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 115.622623][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.622642][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.622667][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.627547][ T50] usb 9-1: config 0 descriptor?? [ 115.808298][T10163] syzkaller0: entered promiscuous mode [ 115.808312][T10163] syzkaller0: entered allmulticast mode [ 115.859601][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.859793][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.934187][T10175] random: crng reseeded on system resumption [ 115.989142][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 115.989157][ T42] audit: type=1400 audit(1793968838.292:4892): avc: denied { ioctl } for pid=10171 comm="syz.1.1125" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 116.037783][ T50] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 116.044167][ T50] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0926:3333.0004/input/input22 [ 116.089077][ T42] audit: type=1400 audit(1793968838.392:4893): avc: denied { connect } for pid=10114 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.091666][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.092031][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.185776][ T50] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 116.192909][T10173] Restarting kernel threads ... [ 116.194621][T10173] Done restarting kernel threads. [ 116.240284][ T5894] usb 9-1: USB disconnect, device number 9 [ 116.265803][T10201] syzkaller0: entered promiscuous mode [ 116.265824][T10201] syzkaller0: entered allmulticast mode [ 116.480534][T10217] FAULT_INJECTION: forcing a failure. [ 116.480534][T10217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.480555][T10217] CPU: 3 UID: 0 PID: 10217 Comm: syz.1.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.480572][T10217] Tainted: [L]=SOFTLOCKUP [ 116.480576][T10217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.480584][T10217] Call Trace: [ 116.480588][T10217] [ 116.480593][T10217] dump_stack_lvl+0x100/0x190 [ 116.480617][T10217] should_fail_ex.cold+0x5/0xa [ 116.480637][T10217] should_fail_alloc_page+0xeb/0x140 [ 116.480662][T10217] prepare_alloc_pages+0x1f0/0x5b0 [ 116.480678][T10217] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 116.480703][T10217] ? stack_trace_save+0x8e/0xc0 [ 116.480720][T10217] ? __pfx_stack_trace_save+0x10/0x10 [ 116.480737][T10217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.480754][T10217] ? stack_trace_save+0x8e/0xc0 [ 116.480773][T10217] ? kasan_save_stack+0x3f/0x50 [ 116.480784][T10217] ? kasan_save_stack+0x30/0x50 [ 116.480795][T10217] ? kasan_save_track+0x14/0x30 [ 116.480806][T10217] ? __kasan_slab_alloc+0x89/0x90 [ 116.480819][T10217] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 116.480837][T10217] ? kmalloc_reserve+0x148/0x350 [ 116.480855][T10217] ? __alloc_skb+0x185/0x710 [ 116.480879][T10217] ? tls_strp_init+0x55/0x1b0 [ 116.480896][T10217] ? tls_set_sw_offload+0x126c/0x1670 [ 116.480909][T10217] ? tls_setsockopt+0x1948/0x2350 [ 116.480926][T10217] ? do_sock_setsockopt+0xf3/0x1d0 [ 116.480942][T10217] ? __sys_setsockopt+0x195/0x220 [ 116.480955][T10217] ? __x64_sys_setsockopt+0xbd/0x160 [ 116.480968][T10217] ? do_syscall_64+0x123/0x790 [ 116.480981][T10217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.481000][T10217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.481020][T10217] ? policy_nodemask+0xed/0x5e0 [ 116.481036][T10217] alloc_pages_mpol+0x201/0x560 [ 116.481052][T10217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 116.481067][T10217] ? do_raw_spin_lock+0x128/0x260 [ 116.481082][T10217] alloc_pages_noprof+0x1a/0x160 [ 116.481098][T10217] tls_strp_read_copy+0x39a/0xe10 [ 116.481119][T10217] ? __pfx_tls_strp_read_copy+0x10/0x10 [ 116.481136][T10217] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 116.481154][T10217] ? __alloc_skb+0x5b7/0x710 [ 116.481168][T10217] ? __pfx___alloc_skb+0x10/0x10 [ 116.481183][T10217] tls_strp_check_rcv+0x72f/0x900 [ 116.481201][T10217] ? __pfx_tls_strp_check_rcv+0x10/0x10 [ 116.481221][T10217] ? __local_bh_enable_ip+0xa5/0x120 [ 116.481238][T10217] tls_setsockopt+0x1db7/0x2350 [ 116.481258][T10217] ? __pfx_tls_setsockopt+0x10/0x10 [ 116.481281][T10217] ? selinux_socket_setsockopt+0x6a/0x80 [ 116.481294][T10217] ? sock_common_setsockopt+0x2e/0xf0 [ 116.481310][T10217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 116.481329][T10217] do_sock_setsockopt+0xf3/0x1d0 [ 116.481347][T10217] __sys_setsockopt+0x195/0x220 [ 116.481364][T10217] __x64_sys_setsockopt+0xbd/0x160 [ 116.481377][T10217] ? do_syscall_64+0xae/0x790 [ 116.481390][T10217] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.481404][T10217] do_syscall_64+0x123/0x790 [ 116.481419][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.481432][T10217] RIP: 0033:0x7f780ad9fb19 [ 116.481442][T10217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.481453][T10217] RSP: 002b:00007f780bc31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.481465][T10217] RAX: ffffffffffffffda RBX: 00007f780b025fa0 RCX: 00007f780ad9fb19 [ 116.481473][T10217] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 116.481480][T10217] RBP: 00007f780bc31090 R08: 0000000000000028 R09: 0000000000000000 [ 116.481487][T10217] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 116.481494][T10217] R13: 00007f780b026038 R14: 00007f780b025fa0 R15: 00007ffd07a7f028 [ 116.481509][T10217] [ 116.651541][T10226] syzkaller0: entered promiscuous mode [ 116.651563][T10226] syzkaller0: entered allmulticast mode [ 116.811502][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.891252][ T5861] usb 8-1: USB disconnect, device number 7 [ 116.914299][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.976937][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.982746][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.983413][T10241] syzkaller0: entered promiscuous mode [ 116.983425][T10241] syzkaller0: entered allmulticast mode [ 116.983589][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.984005][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.984250][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.027548][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.073896][T10254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.108177][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.200999][T10240] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.247654][ T13] bridge_slave_1: left allmulticast mode [ 117.247674][ T13] bridge_slave_1: left promiscuous mode [ 117.248920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.257452][ T13] bridge_slave_0: left allmulticast mode [ 117.257470][ T13] bridge_slave_0: left promiscuous mode [ 117.257587][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.370197][ T13] bond2 (unregistering): (slave gre1): Releasing backup interface [ 117.370240][ T13] gre1 (unregistering): left promiscuous mode [ 117.387169][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.391260][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.400947][ T13] bond0 (unregistering): Released all slaves [ 117.404667][ T13] bond1 (unregistering): (slave team0): Releasing active interface [ 117.405699][ T13] bond1 (unregistering): Released all slaves [ 117.412125][ T13] bond2 (unregistering): Released all slaves [ 117.418009][ T13] bond3 (unregistering): Released all slaves [ 117.477015][T10277] syzkaller0: entered promiscuous mode [ 117.477033][T10277] syzkaller0: entered allmulticast mode [ 117.499035][ T42] audit: type=1400 audit(1793968839.792:4894): avc: denied { write } for pid=10287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.566933][ T42] audit: type=1400 audit(1793968839.862:4895): avc: denied { write } for pid=10290 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.679071][ T5894] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 117.833778][ T5894] usb 8-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00 [ 117.841935][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.841954][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.843744][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.843759][ T5894] usb 8-1: Product: syz [ 117.843767][ T5894] usb 8-1: Manufacturer: syz [ 117.843775][ T5894] usb 8-1: SerialNumber: syz [ 117.857400][ T5894] symbolserial 8-1:1.0: symbol converter detected [ 117.858973][ T5894] usb 8-1: symbol converter now attached to ttyUSB0 [ 118.060297][T10286] FAULT_INJECTION: forcing a failure. [ 118.060297][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 118.060317][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.3.1168 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.060334][T10286] Tainted: [L]=SOFTLOCKUP [ 118.060339][T10286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.060346][T10286] Call Trace: [ 118.060351][T10286] [ 118.060356][T10286] dump_stack_lvl+0x100/0x190 [ 118.060381][T10286] should_fail_ex.cold+0x5/0xa [ 118.060401][T10286] should_failslab+0xc2/0x120 [ 118.060416][T10286] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.060433][T10286] ? alloc_tty_struct+0x96/0x8e0 [ 118.060450][T10286] alloc_tty_struct+0x96/0x8e0 [ 118.060465][T10286] ? __pfx_alloc_tty_struct+0x10/0x10 [ 118.060480][T10286] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 118.060498][T10286] tty_init_dev.part.0+0x20/0x470 [ 118.060513][T10286] tty_open+0x99d/0xee0 [ 118.060529][T10286] ? __pfx_tty_open+0x10/0x10 [ 118.060541][T10286] ? chrdev_open+0x589/0x6a0 [ 118.060556][T10286] ? chrdev_open+0x589/0x6a0 [ 118.060572][T10286] ? __pfx_tty_open+0x10/0x10 [ 118.060585][T10286] chrdev_open+0x234/0x6a0 [ 118.060600][T10286] ? __pfx_chrdev_open+0x10/0x10 [ 118.060616][T10286] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 118.060638][T10286] do_dentry_open+0x674/0x1470 [ 118.060651][T10286] ? __pfx_chrdev_open+0x10/0x10 [ 118.060668][T10286] vfs_open_consume+0xcc/0x460 [ 118.060687][T10286] path_openat+0x1547/0x23f0 [ 118.060705][T10286] ? __pfx_path_openat+0x10/0x10 [ 118.060724][T10286] do_file_open+0x20e/0x430 [ 118.060740][T10286] ? __pfx_do_file_open+0x10/0x10 [ 118.060786][T10286] ? _raw_spin_unlock+0x28/0x50 [ 118.060798][T10286] ? alloc_fd+0x471/0x7a0 [ 118.060818][T10286] do_sys_openat2+0x163/0x1d0 [ 118.060835][T10286] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.060853][T10286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.060868][T10286] ? __fget_files+0x21f/0x3d0 [ 118.060885][T10286] __x64_sys_openat+0x12d/0x210 [ 118.060903][T10286] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.060919][T10286] ? ksys_write+0x1ac/0x250 [ 118.060936][T10286] do_syscall_64+0x123/0x790 [ 118.060952][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.060965][T10286] RIP: 0033:0x7f769d99fb19 [ 118.060976][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.060987][T10286] RSP: 002b:00007f769e8e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.060999][T10286] RAX: ffffffffffffffda RBX: 00007f769dc25fa0 RCX: 00007f769d99fb19 [ 118.061007][T10286] RDX: 000000000000f000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 118.061015][T10286] RBP: 00007f769e8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.061022][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.061029][T10286] R13: 00007f769dc26038 R14: 00007f769dc25fa0 R15: 00007fff8f1b9d68 [ 118.061044][T10286] [ 118.061520][ T5894] usb 8-1: USB disconnect, device number 8 [ 118.067011][ T5894] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 118.067263][ T5894] symbolserial 8-1:1.0: device disconnected [ 118.677843][ T5494] 8021q: adding VLAN 0 to HW filter on device eth6 [ 118.690468][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'. [ 118.772392][T10317] grow_buffers: requested out-of-range block 1229764173265895679 for device sda1 [ 118.772414][T10317] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 118.786113][ T42] audit: type=1400 audit(1793968841.082:4896): avc: denied { write } for pid=10312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.833592][ T42] audit: type=1400 audit(1793968841.132:4897): avc: denied { write } for pid=10321 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.866238][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.867386][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.867451][T10240] bridge_slave_0: entered allmulticast mode [ 118.871821][T10240] bridge_slave_0: entered promiscuous mode [ 118.873662][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.875062][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.875125][T10240] bridge_slave_1: entered allmulticast mode [ 118.875774][T10240] bridge_slave_1: entered promiscuous mode [ 118.906356][ T5494] 8021q: adding VLAN 0 to HW filter on device eth7 [ 118.922369][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.922397][T10328] IPVS: Unknown mcast interface: pim6reg [ 118.926839][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.963958][T10240] team0: Port device team_slave_0 added [ 118.965252][T10240] team0: Port device team_slave_1 added [ 118.988878][ T5792] Bluetooth: hci0: command tx timeout [ 119.004047][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.004063][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.004111][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.005600][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.005612][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.005639][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.074145][ T42] audit: type=1400 audit(1793968841.372:4898): avc: denied { write } for pid=10333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.093021][ T13] hsr_slave_0: left promiscuous mode [ 119.093631][ T13] hsr_slave_1: left promiscuous mode [ 119.094071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.094084][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.095101][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.095112][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.113893][ T13] veth0_macvtap: left promiscuous mode [ 119.113955][ T13] veth1_vlan: left promiscuous mode [ 119.113990][ T13] veth0_vlan: left promiscuous mode [ 119.130082][ T42] audit: type=1400 audit(1793968841.432:4899): avc: denied { write } for pid=10344 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.297747][ T13] team0 (unregistering): Port device team_slave_1 removed [ 119.302753][ T13] team0 (unregistering): Port device team_slave_0 removed [ 119.367273][T10240] hsr_slave_0: entered promiscuous mode [ 119.367806][T10240] hsr_slave_1: entered promiscuous mode [ 119.368257][T10240] debugfs: 'hsr0' already exists in 'hsr' [ 119.368268][T10240] Cannot create hsr debugfs directory [ 119.380805][ T5494] 8021q: adding VLAN 0 to HW filter on device eth8 [ 119.547122][ T42] audit: type=1400 audit(1793968841.842:4900): avc: denied { write } for pid=10368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.590245][T10381] FAULT_INJECTION: forcing a failure. [ 119.590245][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 119.590272][T10381] CPU: 3 UID: 0 PID: 10381 Comm: syz.3.1189 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.590289][T10381] Tainted: [L]=SOFTLOCKUP [ 119.590294][T10381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.590301][T10381] Call Trace: [ 119.590305][T10381] [ 119.590311][T10381] dump_stack_lvl+0x100/0x190 [ 119.590334][T10381] should_fail_ex.cold+0x5/0xa [ 119.590354][T10381] should_failslab+0xc2/0x120 [ 119.590369][T10381] __kmalloc_cache_noprof+0x91/0x6d0 [ 119.590385][T10381] ? __lock_acquire+0x5c0/0x1f40 [ 119.590402][T10381] ? drm_atomic_commit_alloc+0xb8/0x120 [ 119.590420][T10381] drm_atomic_commit_alloc+0xb8/0x120 [ 119.590434][T10381] drm_mode_atomic_ioctl+0x393/0x2940 [ 119.590449][T10381] ? lock_acquire+0x1d1/0x380 [ 119.590466][T10381] ? find_held_lock+0x2b/0x80 [ 119.590484][T10381] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 119.590498][T10381] ? __lock_acquire+0x5c0/0x1f40 [ 119.590523][T10381] ? drm_is_current_master+0x2c/0x40 [ 119.590537][T10381] ? drm_is_current_master+0x2c/0x40 [ 119.590553][T10381] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.590566][T10381] drm_ioctl_kernel+0x1f3/0x3e0 [ 119.590579][T10381] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 119.590594][T10381] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 119.590612][T10381] drm_ioctl+0x5e6/0xc60 [ 119.590628][T10381] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 119.590643][T10381] ? __pfx_drm_ioctl+0x10/0x10 [ 119.590655][T10381] ? __fget_files+0x34/0x3d0 [ 119.590677][T10381] ? selinux_file_ioctl+0x1e0/0x290 [ 119.590689][T10381] ? selinux_file_ioctl+0x1e7/0x290 [ 119.590701][T10381] ? __pfx_drm_ioctl+0x10/0x10 [ 119.590715][T10381] __x64_sys_ioctl+0x18e/0x210 [ 119.590733][T10381] do_syscall_64+0x123/0x790 [ 119.590749][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.590762][T10381] RIP: 0033:0x7f769d99fb19 [ 119.590773][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.590785][T10381] RSP: 002b:00007f769e8e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.590797][T10381] RAX: ffffffffffffffda RBX: 00007f769dc25fa0 RCX: 00007f769d99fb19 [ 119.590805][T10381] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000008 [ 119.590813][T10381] RBP: 00007f769e8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.590820][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.590827][T10381] R13: 00007f769dc26038 R14: 00007f769dc25fa0 R15: 00007fff8f1b9d68 [ 119.590842][T10381] [ 119.618548][ T42] audit: type=1400 audit(1793968841.912:4901): avc: denied { write } for pid=10382 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.644103][T10240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.654397][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.655239][T10240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.658627][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.660742][T10240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.672692][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.673133][T10240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.675078][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.692538][ T5494] 8021q: adding VLAN 0 to HW filter on device eth9 [ 119.771895][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.782781][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.791267][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.791282][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.793277][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.793360][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.802631][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.802677][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.804196][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.804208][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.815632][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.815647][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.817986][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.817999][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 119.925732][T10429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10429 comm=syz.1.1198 [ 119.962242][T10431] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 120.003063][T10425] netlink: 'syz.4.1197': attribute type 2 has an invalid length. [ 120.071892][T10452] FAULT_INJECTION: forcing a failure. [ 120.071892][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 120.071913][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.4.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.071930][T10452] Tainted: [L]=SOFTLOCKUP [ 120.071934][T10452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.071941][T10452] Call Trace: [ 120.071945][T10452] [ 120.071951][T10452] dump_stack_lvl+0x100/0x190 [ 120.071974][T10452] should_fail_ex.cold+0x5/0xa [ 120.071994][T10452] should_failslab+0xc2/0x120 [ 120.072009][T10452] __kvmalloc_node_noprof+0x113/0x9b0 [ 120.072028][T10452] ? __kmalloc_cache_noprof+0x241/0x6d0 [ 120.072045][T10452] ? percpu_ref_init+0xec/0x3f0 [ 120.072063][T10452] ? io_alloc_cache_init+0x38/0x170 [ 120.072084][T10452] io_alloc_cache_init+0x38/0x170 [ 120.072103][T10452] io_uring_setup.cold+0x46e/0x1c7e [ 120.072118][T10452] ? lock_acquire+0x1d1/0x380 [ 120.072135][T10452] ? avc_has_perm_noaudit+0x56/0x470 [ 120.072150][T10452] ? __pfx_io_uring_setup+0x10/0x10 [ 120.072164][T10452] ? find_held_lock+0x2b/0x80 [ 120.072177][T10452] ? avc_has_perm_noaudit+0x11e/0x470 [ 120.072191][T10452] ? avc_has_perm_noaudit+0x11e/0x470 [ 120.072215][T10452] ? ksys_write+0x1ac/0x250 [ 120.072227][T10452] ? __pfx_ksys_write+0x10/0x10 [ 120.072242][T10452] __x64_sys_io_uring_setup+0xc2/0x170 [ 120.072258][T10452] do_syscall_64+0x123/0x790 [ 120.072274][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.072287][T10452] RIP: 0033:0x7f2ab339fb19 [ 120.072297][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.072309][T10452] RSP: 002b:00007f2ab417eee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 120.072321][T10452] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f2ab339fb19 [ 120.072328][T10452] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 120.072336][T10452] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 120.072343][T10452] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 120.072350][T10452] R13: 0000200000000b10 R14: 00007f2ab417efd8 R15: 0000000000000000 [ 120.072365][T10452] [ 120.119669][T10456] bond1: entered allmulticast mode [ 120.119892][T10456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.136997][T10464] ip_tables: iptables: counters copy to user failed while replacing table [ 120.153400][T10456] bond2: entered allmulticast mode [ 120.153633][T10456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.155986][T10467] tmpfs: Using encoding : utf8-12.1.0 [ 120.158314][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 120.160294][T10469] tmpfs: Using encoding : utf8-12.1.0 [ 120.168632][T10456] bond3: entered allmulticast mode [ 120.169327][T10456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.223150][T10456] bond4: entered allmulticast mode [ 120.223489][T10456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.242577][T10456] bond5: entered allmulticast mode [ 120.242902][T10456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.246888][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.247873][T10476] syzkaller0: entered promiscuous mode [ 120.247892][T10476] syzkaller0: entered allmulticast mode [ 120.276890][T10456] bond6: entered allmulticast mode [ 120.277158][T10456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.290613][T10456] bond7: entered allmulticast mode [ 120.290807][T10456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 120.301644][T10456] bond8: entered allmulticast mode [ 120.301822][T10456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 120.328278][T10456] bond9: entered allmulticast mode [ 120.328499][T10456] 8021q: adding VLAN 0 to HW filter on device bond9 [ 120.350127][T10456] bond10: entered allmulticast mode [ 120.350536][T10456] 8021q: adding VLAN 0 to HW filter on device bond10 [ 120.375606][T10456] bond11: entered allmulticast mode [ 120.375949][T10456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 120.392121][T10456] bond12: entered allmulticast mode [ 120.392448][T10456] 8021q: adding VLAN 0 to HW filter on device bond12 [ 120.405715][T10456] bond13: entered allmulticast mode [ 120.405924][T10456] 8021q: adding VLAN 0 to HW filter on device bond13 [ 120.416699][T10456] bond14: entered allmulticast mode [ 120.416875][T10456] 8021q: adding VLAN 0 to HW filter on device bond14 [ 120.436586][T10503] FAULT_INJECTION: forcing a failure. [ 120.436586][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.436608][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.3.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.436627][T10503] Tainted: [L]=SOFTLOCKUP [ 120.436632][T10503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.436639][T10503] Call Trace: [ 120.436644][T10503] [ 120.436649][T10503] dump_stack_lvl+0x100/0x190 [ 120.436673][T10503] should_fail_ex.cold+0x5/0xa [ 120.436692][T10503] _copy_to_user+0x32/0xd0 [ 120.436708][T10503] simple_read_from_buffer+0xcb/0x170 [ 120.436726][T10503] proc_fail_nth_read+0x1af/0x230 [ 120.436743][T10503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.436761][T10503] ? rw_verify_area+0xce/0x6d0 [ 120.436779][T10503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.436796][T10503] vfs_read+0x1e4/0xb40 [ 120.436808][T10503] ? lock_acquire+0x1d1/0x380 [ 120.436830][T10503] ? __fget_files+0x34/0x3d0 [ 120.436852][T10503] ? __pfx_vfs_read+0x10/0x10 [ 120.436867][T10503] ? find_held_lock+0x2b/0x80 [ 120.436887][T10503] ? __fget_files+0x215/0x3d0 [ 120.436916][T10503] ? __fget_files+0x21f/0x3d0 [ 120.436941][T10503] ksys_read+0x12a/0x250 [ 120.436953][T10503] ? __pfx_ksys_read+0x10/0x10 [ 120.436970][T10503] do_syscall_64+0x123/0x790 [ 120.436986][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.436999][T10503] RIP: 0033:0x7f769d96034e [ 120.437008][T10503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.437020][T10503] RSP: 002b:00007f769e8e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.437032][T10503] RAX: ffffffffffffffda RBX: 00007f769e8e56c0 RCX: 00007f769d96034e [ 120.437040][T10503] RDX: 000000000000000f RSI: 00007f769e8e50a0 RDI: 0000000000000004 [ 120.437047][T10503] RBP: 00007f769e8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 120.437054][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.437061][T10503] R13: 00007f769dc26038 R14: 00007f769dc25fa0 R15: 00007fff8f1b9d68 [ 120.437076][T10503] [ 120.456701][T10456] bond15: entered allmulticast mode [ 120.456942][T10456] 8021q: adding VLAN 0 to HW filter on device bond15 [ 120.477184][T10456] bond16: entered allmulticast mode [ 120.477471][T10456] 8021q: adding VLAN 0 to HW filter on device bond16 [ 120.502059][T10456] bond17: entered allmulticast mode [ 120.502291][T10456] 8021q: adding VLAN 0 to HW filter on device bond17 [ 120.527356][T10456] bond18: entered allmulticast mode [ 120.527600][T10456] 8021q: adding VLAN 0 to HW filter on device bond18 [ 120.538455][T10456] bond19: entered allmulticast mode [ 120.538610][T10456] 8021q: adding VLAN 0 to HW filter on device bond19 [ 120.582604][T10456] bond20: entered allmulticast mode [ 120.582816][T10456] 8021q: adding VLAN 0 to HW filter on device bond20 [ 120.594112][T10456] bond21: entered allmulticast mode [ 120.594292][T10456] 8021q: adding VLAN 0 to HW filter on device bond21 [ 120.594633][T10519] Process accounting resumed [ 120.603780][T10456] bond22: entered allmulticast mode [ 120.603959][T10456] 8021q: adding VLAN 0 to HW filter on device bond22 [ 120.616232][T10456] bond23: entered allmulticast mode [ 120.616426][T10456] 8021q: adding VLAN 0 to HW filter on device bond23 [ 120.621564][T10530] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.684727][T10456] bond24: entered allmulticast mode [ 120.685007][T10456] 8021q: adding VLAN 0 to HW filter on device bond24 [ 120.700568][T10456] bond25: entered allmulticast mode [ 120.701035][T10456] 8021q: adding VLAN 0 to HW filter on device bond25 [ 120.730478][T10456] bond26: entered allmulticast mode [ 120.730764][T10456] 8021q: adding VLAN 0 to HW filter on device bond26 [ 120.773105][T10456] bond27: entered allmulticast mode [ 120.774946][T10456] 8021q: adding VLAN 0 to HW filter on device bond27 [ 120.787086][T10541] syzkaller0: entered promiscuous mode [ 120.787100][T10541] syzkaller0: entered allmulticast mode [ 120.804361][T10456] bond28: entered allmulticast mode [ 120.804697][T10456] 8021q: adding VLAN 0 to HW filter on device bond28 [ 120.818515][T10456] bond29: entered allmulticast mode [ 120.819265][T10456] 8021q: adding VLAN 0 to HW filter on device bond29 [ 120.830016][T10456] bond30: entered allmulticast mode [ 120.830201][T10456] 8021q: adding VLAN 0 to HW filter on device bond30 [ 120.884982][T10456] bond31: entered allmulticast mode [ 120.885181][T10456] 8021q: adding VLAN 0 to HW filter on device bond31 [ 120.903329][T10456] bond32: entered allmulticast mode [ 120.903721][T10456] 8021q: adding VLAN 0 to HW filter on device bond32 [ 120.904432][T10240] veth0_vlan: entered promiscuous mode [ 120.927906][T10456] bond33: entered allmulticast mode [ 120.928090][T10456] 8021q: adding VLAN 0 to HW filter on device bond33 [ 120.935446][T10569] FAULT_INJECTION: forcing a failure. [ 120.935446][T10569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.935475][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.1.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.935500][T10569] Tainted: [L]=SOFTLOCKUP [ 120.935506][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.935516][T10569] Call Trace: [ 120.935522][T10569] [ 120.935529][T10569] dump_stack_lvl+0x100/0x190 [ 120.935563][T10569] should_fail_ex.cold+0x5/0xa [ 120.935594][T10569] should_fail_alloc_page+0xeb/0x140 [ 120.935618][T10569] prepare_alloc_pages+0x1f0/0x5b0 [ 120.935640][T10569] ? rcu_is_watching+0x13/0xc0 [ 120.935664][T10569] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 120.935693][T10569] ? find_held_lock+0x2b/0x80 [ 120.935715][T10569] ? process_measurement+0x4c8/0x2360 [ 120.935735][T10569] ? process_measurement+0x4c8/0x2360 [ 120.935754][T10569] ? down_write+0x141/0x1f0 [ 120.935778][T10569] ? up_write+0x2dc/0x5b0 [ 120.935791][T10569] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.935808][T10569] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.935828][T10569] ? __lock_acquire+0x5c0/0x1f40 [ 120.935848][T10569] ? __lock_acquire+0x5c0/0x1f40 [ 120.935870][T10569] ? __lock_acquire+0x5c0/0x1f40 [ 120.935887][T10569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.935908][T10569] ? policy_nodemask+0xed/0x5e0 [ 120.935924][T10569] alloc_pages_mpol+0x201/0x560 [ 120.935940][T10569] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.935955][T10569] ? find_held_lock+0x2b/0x80 [ 120.935967][T10569] ? __pud_alloc+0x4f6/0x690 [ 120.935978][T10569] ? __pud_alloc+0x4f6/0x690 [ 120.935991][T10569] alloc_pages_noprof+0x1a/0x160 [ 120.936008][T10569] __pmd_alloc+0x3b/0x950 [ 120.936018][T10569] ? __pud_alloc+0x4fb/0x690 [ 120.936030][T10569] __handle_mm_fault+0xa9d/0x2f40 [ 120.936065][T10569] ? __pfx___handle_mm_fault+0x10/0x10 [ 120.936078][T10569] ? __pfx_mt_find+0x10/0x10 [ 120.936103][T10569] ? find_vma+0xbf/0x140 [ 120.936120][T10569] ? __pfx_find_vma+0x10/0x10 [ 120.936139][T10569] handle_mm_fault+0x363/0xa30 [ 120.936156][T10569] do_user_addr_fault+0x745/0x12f0 [ 120.936180][T10569] exc_page_fault+0x6f/0xd0 [ 120.936193][T10569] asm_exc_page_fault+0x26/0x30 [ 120.936205][T10569] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 120.936220][T10569] Code: 89 ee 48 89 ef e8 e1 56 d3 fc 4d 85 ff 75 26 e8 f7 5c d3 fc 89 de 4c 89 e7 e8 9d cc 4d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 d1 5c d3 fc 48 89 d8 5b 5d 41 [ 120.936232][T10569] RSP: 0018:ffffc90005657d78 EFLAGS: 00050246 [ 120.936242][T10569] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 120.936250][T10569] RDX: 0000000000000001 RSI: ffffc90005657dd8 RDI: 0000200000000140 [ 120.936257][T10569] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000acafbe [ 120.936265][T10569] R10: ffffc90005657df7 R11: 0000000000000000 R12: ffffc90005657dd8 [ 120.936272][T10569] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 120.936287][T10569] ? _copy_to_user+0x93/0xd0 [ 120.936302][T10569] ksys_msgctl.constprop.0+0x2cc/0x340 [ 120.936318][T10569] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 120.936331][T10569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.936358][T10569] do_syscall_64+0x123/0x790 [ 120.936374][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.936386][T105 ** replaying previous printk message ** [ 120.936386][T10569] RIP: 0033:0x7f780ad9fb19 [ 120.936395][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.936406][T10569] RSP: 002b:00007f780bc31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 120.936417][T10569] RAX: ffffffffffffffda RBX: 00007f780b025fa0 RCX: 00007f780ad9fb19 [ 120.936424][T10569] RDX: 0000200000000140 RSI: 000000000000000c RDI: 0000000000000000 [ 120.936431][T10569] RBP: 00007f780bc31090 R08: 0000000000000000 R09: 0000000000000000 [ 120.936438][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.936445][T10569] R13: 00007f780b026038 R14: 00007f780b025fa0 R15: 00007ffd07a7f028 [ 120.936460][T10569] [ 120.942926][T10240] veth1_vlan: entered promiscuous mode [ 120.986678][T10240] veth0_macvtap: entered promiscuous mode [ 120.999123][T10240] veth1_macvtap: entered promiscuous mode [ 121.002596][T10564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.002610][T10564] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.012452][T10574] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 121.012467][T10574] PKCS7: Only support pkcs7_signedData type [ 121.014100][T10564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.014119][T10564] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.021619][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.025999][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.027352][T10564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.027365][T10564] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.036975][ T5849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.037010][ T5849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.037042][ T5849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.037074][ T5849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.052774][T10564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.052794][T10564] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.068898][ C3] ------------[ cut here ]------------ [ 121.068911][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 121.068935][ C3] WARNING: kernel/workqueue.c:2436 at __queue_work+0xe18/0x16f0, CPU#3: dhcpcd-run-hook/10575 [ 121.146568][ C3] Modules linked in: [ 121.147845][ C3] CPU: 3 UID: 0 PID: 10575 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 121.151116][ C3] Tainted: [L]=SOFTLOCKUP [ 121.152306][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.155308][ C3] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 121.156928][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 48 f6 9a 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 121.162739][ C3] RSP: 0018:ffffc900006f8b68 EFLAGS: 00010046 [ 121.164654][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100c92194e [ 121.167111][ C3] RDX: ffff888027da2178 RSI: ffffffff8aded1d0 RDI: ffffffff926d9170 [ 121.169573][ C3] RBP: ffff88806490ca58 R08: 0000000000000000 R09: 0000000000000100 [ 121.172036][ C3] R10: ffffffff926aa95f R11: 0000000000000001 R12: ffff888027da2000 [ 121.174522][ C3] R13: 0000000000000000 R14: 1ffff920000df18e R15: ffffffff81d2a410 [ 121.177383][ C3] FS: 0000000000000000(0000) GS:ffff8880d4775000(0000) knlGS:0000000000000000 [ 121.180774][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.182812][ C3] CR2: 00007f6cdd456000 CR3: 00000000288c7000 CR4: 0000000000352ef0 [ 121.185314][ C3] Call Trace: [ 121.186380][ C3] [ 121.187532][ C3] ? lock_acquire+0x1d1/0x380 [ 121.189543][ C3] ? call_timer_fn+0x11d/0x5f0 [ 121.191587][ C3] ? __pfx___queue_work+0x10/0x10 [ 121.193168][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 121.194985][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 121.196787][ C3] call_timer_fn+0x198/0x5f0 [ 121.198205][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 121.199728][ C3] ? lock_acquire+0x1d1/0x380 [ 121.201143][ C3] ? __run_timers+0x560/0xb00 [ 121.202557][ C3] ? __run_timers+0x560/0xb00 [ 121.203964][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 121.205740][ C3] __run_timers+0x570/0xb00 [ 121.207142][ C3] ? __pfx___run_timers+0x10/0x10 [ 121.208633][ C3] ? lock_acquire+0x1d1/0x380 [ 121.210100][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 121.211605][ C3] run_timer_base+0x114/0x190 [ 121.213025][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 121.214690][ C3] run_timer_softirq+0x1a/0x50 [ 121.216674][ C3] handle_softirqs+0x216/0xa20 [ 121.218464][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 121.220195][ C3] ? _raw_spin_unlock+0x28/0x50 [ 121.221649][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 121.223338][ C3] __irq_exit_rcu+0x178/0x220 [ 121.224791][ C3] irq_exit_rcu+0x9/0x30 [ 121.226037][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 121.227692][ C3] [ 121.228571][ C3] [ 121.229499][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.231427][ C3] RIP: 0010:mt_validate+0x1fff/0x3420 [ 121.233044][ C3] Code: 00 00 0f 85 ea 05 00 00 e8 5e 08 25 f6 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 13 00 00 <48> 8b 44 24 08 4c 8b 28 4d 85 ed 74 42 e8 2f 08 25 f6 be ff ff ff [ 121.240373][ C3] RSP: 0018:ffffc90004487788 EFLAGS: 00000246 [ 121.243044][ C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.246460][ C3] RDX: 1ffff11003a9a008 RSI: ffffffff8be97042 RDI: 0000000000000005 [ 121.249852][ C3] RBP: 00007f6cdd498fff R08: 0000000000000300 R09: 0000000000000300 [ 121.253173][ C3] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88805c98af00 [ 121.256501][ C3] R13: 0000000000000300 R14: dffffc0000000000 R15: 0000000000000000 [ 121.259852][ C3] ? mt_validate+0x1fe2/0x3420 [ 121.261966][ C3] ? mt_validate+0x1fe2/0x3420 [ 121.264085][ C3] ? __pfx_mt_validate+0x10/0x10 [ 121.266307][ C3] validate_mm+0xab/0x780 [ 121.268240][ C3] ? __pfx_validate_mm+0x10/0x10 [ 121.270532][ C3] mmap_region+0x40b/0x6d0 [ 121.272546][ C3] ? __pfx_mmap_region+0x10/0x10 [ 121.274710][ C3] ? memfd_check_seals_mmap+0x24b/0x310 [ 121.277158][ C3] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 121.279743][ C3] ? selinux_mmap_addr+0x2b/0x100 [ 121.282010][ C3] ? bpf_lsm_mmap_addr+0x9/0x30 [ 121.284138][ C3] ? security_mmap_addr+0x71/0x1e0 [ 121.286414][ C3] ? __get_unmapped_area+0x255/0x3e0 [ 121.288153][ C3] do_mmap+0x12c7/0x1c30 [ 121.289451][ C3] ? lock_acquire+0x1d1/0x380 [ 121.290891][ C3] ? __pfx_do_mmap+0x10/0x10 [ 121.292331][ C3] ? __pfx___might_resched+0x10/0x10 [ 121.294042][ C3] ? ima_file_mmap+0x1b1/0x1e0 [ 121.295686][ C3] ? __pfx_down_write_killable+0x10/0x10 [ 121.297438][ C3] vm_mmap_pgoff+0x283/0x490 [ 121.298909][ C3] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 121.300514][ C3] ? __fget_files+0x215/0x3d0 [ 121.301984][ C3] ? __fget_files+0x21f/0x3d0 [ 121.303460][ C3] ksys_mmap_pgoff+0x3cb/0x610 [ 121.304984][ C3] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 121.306686][ C3] ? xfd_validate_state+0x129/0x190 [ 121.308321][ C3] __x64_sys_mmap+0x125/0x190 [ 121.309912][ C3] do_syscall_64+0x123/0x790 [ 121.311375][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.313191][ C3] RIP: 0033:0x7f6cdd77f242 [ 121.314627][ C3] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 121.320623][ C3] RSP: 002b:00007fffeed30ca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 121.323216][ C3] RAX: ffffffffffffffda RBX: 00007f6cdd44e000 RCX: 00007f6cdd77f242 [ 121.325779][ C3] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 00007f6cdd44e000 [ 121.328271][ C3] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000002000 [ 121.330710][ C3] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffeed30cf8 [ 121.333074][ C3] R13: 00007f6cdd4560c0 R14: 00007fffeed310e0 R15: 00000ffffdda6198 [ 121.335574][ C3] [ 121.336601][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.338999][ C3] CPU: 3 UID: 0 PID: 10575 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 121.342477][ C3] Tainted: [L]=SOFTLOCKUP [ 121.343821][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.346926][ C3] Call Trace: [ 121.347934][ C3] [ 121.348803][ C3] dump_stack_lvl+0x100/0x190 [ 121.350251][ C3] vpanic+0x2dc/0x6f8 [ 121.351457][ C3] panic+0xd1/0xe0 [ 121.352586][ C3] ? __pfx_panic+0x10/0x10 [ 121.353942][ C3] check_panic_on_warn.cold+0x19/0x34 [ 121.355675][ C3] ? __queue_work+0xe18/0x16f0 [ 121.357274][ C3] __warn.cold+0x191/0x321 [ 121.358713][ C3] __report_bug+0x30f/0x440 [ 121.360297][ C3] ? __queue_work+0xe18/0x16f0 [ 121.361876][ C3] ? __pfx___report_bug+0x10/0x10 [ 121.363498][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 121.365236][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.366912][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.368803][ C3] report_bug_entry+0xe2/0x290 [ 121.370564][ C3] ? __queue_work+0xe1c/0x16f0 [ 121.372247][ C3] handle_bug+0x1cd/0x2a0 [ 121.373674][ C3] exc_invalid_op+0x17/0x50 [ 121.375167][ C3] asm_exc_invalid_op+0x1a/0x20 [ 121.376707][ C3] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 121.378408][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 48 f6 9a 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 121.384332][ C3] RSP: 0018:ffffc900006f8b68 EFLAGS: 00010046 [ 121.386244][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100c92194e [ 121.388664][ C3] RDX: ffff888027da2178 RSI: ffffffff8aded1d0 RDI: ffffffff926d9170 [ 121.391123][ C3] RBP: ffff88806490ca58 R08: 0000000000000000 R09: 0000000000000100 [ 121.393561][ C3] R10: ffffffff926aa95f R11: 0000000000000001 R12: ffff888027da2000 [ 121.396017][ C3] R13: 0000000000000000 R14: 1ffff920000df18e R15: ffffffff81d2a410 [ 121.398457][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 121.400308][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 121.401947][ C3] ? __queue_work+0xdea/0x16f0 [ 121.403448][ C3] ? lock_acquire+0x1d1/0x380 [ 121.404916][ C3] ? call_timer_fn+0x11d/0x5f0 [ 121.406431][ C3] ? __pfx___queue_work+0x10/0x10 [ 121.407994][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 121.409754][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 121.411556][ C3] call_timer_fn+0x198/0x5f0 [ 121.413039][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 121.414910][ C3] ? lock_acquire+0x1d1/0x380 [ 121.416507][ C3] ? __run_timers+0x560/0xb00 [ 121.418274][ C3] ? __run_timers+0x560/0xb00 [ 121.420176][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 121.422343][ C3] __run_timers+0x570/0xb00 [ 121.423795][ C3] ? __pfx___run_timers+0x10/0x10 [ 121.425420][ C3] ? lock_acquire+0x1d1/0x380 [ 121.426942][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 121.428524][ C3] run_timer_base+0x114/0x190 [ 121.430023][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 121.431656][ C3] run_timer_softirq+0x1a/0x50 [ 121.433174][ C3] handle_softirqs+0x216/0xa20 [ 121.434679][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 121.436341][ C3] ? _raw_spin_unlock+0x28/0x50 [ 121.437864][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 121.439667][ C3] __irq_exit_rcu+0x178/0x220 [ 121.441140][ C3] irq_exit_rcu+0x9/0x30 [ 121.442480][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 121.444224][ C3] [ 121.445161][ C3] [ 121.446119][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.448000][ C3] RIP: 0010:mt_validate+0x1fff/0x3420 [ 121.449689][ C3] Code: 00 00 0f 85 ea 05 00 00 e8 5e 08 25 f6 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 13 00 00 <48> 8b 44 24 08 4c 8b 28 4d 85 ed 74 42 e8 2f 08 25 f6 be ff ff ff [ 121.455601][ C3] RSP: 0018:ffffc90004487788 EFLAGS: 00000246 [ 121.457503][ C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.459946][ C3] RDX: 1ffff11003a9a008 RSI: ffffffff8be97042 RDI: 0000000000000005 [ 121.462376][ C3] RBP: 00007f6cdd498fff R08: 0000000000000300 R09: 0000000000000300 [ 121.464912][ C3] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88805c98af00 [ 121.467379][ C3] R13: 0000000000000300 R14: dffffc0000000000 R15: 0000000000000000 [ 121.469843][ C3] ? mt_validate+0x1fe2/0x3420 [ 121.471349][ C3] ? mt_validate+0x1fe2/0x3420 [ 121.472859][ C3] ? __pfx_mt_validate+0x10/0x10 [ 121.474446][ C3] validate_mm+0xab/0x780 [ 121.475806][ C3] ? __pfx_validate_mm+0x10/0x10 [ 121.477372][ C3] mmap_region+0x40b/0x6d0 [ 121.478781][ C3] ? __pfx_mmap_region+0x10/0x10 [ 121.480360][ C3] ? memfd_check_seals_mmap+0x24b/0x310 [ 121.482076][ C3] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 121.483925][ C3] ? selinux_mmap_addr+0x2b/0x100 [ 121.485485][ C3] ? bpf_lsm_mmap_addr+0x9/0x30 [ 121.487008][ C3] ? security_mmap_addr+0x71/0x1e0 [ 121.488539][ C3] ? __get_unmapped_area+0x255/0x3e0 [ 121.490170][ C3] do_mmap+0x12c7/0x1c30 [ 121.491459][ C3] ? lock_acquire+0x1d1/0x380 [ 121.492934][ C3] ? __pfx_do_mmap+0x10/0x10 [ 121.494407][ C3] ? __pfx___might_resched+0x10/0x10 [ 121.496070][ C3] ? ima_file_mmap+0x1b1/0x1e0 [ 121.497567][ C3] ? __pfx_down_write_killable+0x10/0x10 [ 121.499322][ C3] vm_mmap_pgoff+0x283/0x490 [ 121.500769][ C3] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 121.502374][ C3] ? __fget_files+0x215/0x3d0 [ 121.503854][ C3] ? __fget_files+0x21f/0x3d0 [ 121.505335][ C3] ksys_mmap_pgoff+0x3cb/0x610 [ 121.506868][ C3] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 121.508449][ C3] ? xfd_validate_state+0x129/0x190 [ 121.510044][ C3] __x64_sys_mmap+0x125/0x190 [ 121.511476][ C3] do_syscall_64+0x123/0x790 [ 121.512890][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.514721][ C3] RIP: 0033:0x7f6cdd77f242 [ 121.516130][ C3] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 121.521963][ C3] RSP: 002b:00007fffeed30ca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 121.524523][ C3] RAX: ffffffffffffffda RBX: 00007f6cdd44e000 RCX: 00007f6cdd77f242 [ 121.526960][ C3] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 00007f6cdd44e000 [ 121.529325][ C3] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000002000 [ 121.531830][ C3] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffeed30cf8 [ 121.534285][ C3] R13: 00007f6cdd4560c0 R14: 00007fffeed310e0 R15: 00000ffffdda6198 [ 121.536729][ C3] [ 121.538286][ C3] Kernel Offset: disabled [ 121.539637][ C3] Rebooting in 86400 seconds..