last executing test programs: 3m5.27282994s ago: executing program 0 (id=159): mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\b\xb0\x7f0\f\x87\xcaaPr\x9d\xd1\xe5\xc80S\x1dd\x884>\x02\xc7\x94\xa1\x14\xd3BG\xe5a\xac\xfe-!\xdfH\"\xd3\xc3\xd59\x88\xca8\x8d\x0f$\xcd\xe6\xfd\xffD\x1e\xf2\x85\x98\xb5\xaf[s\xdf!\xbdy\x9e\xe2\x17h{\x96\xd8\xb7G&t\xe8\x1f\xf8\x91V\xdc\xees\x9bf\xf9z\xa8z\xb7[\xa3\xb0\xc9\xa7L\xcd\xdf\xef\xa4\x97|\xc6\xedRE\x96\xb6\xf3\xa9b\xc9(\x8d\x88\xcc\xfc\xb7oyx\td\xfel0\x1e\x8e\x03\aK\x96\xe7\x14\x83e\xb2\x19\xd1x\xfb\xf1\xb2<\xd3\x1d\x8dx\xbe\xb1.\xfc9\x94\x8f\xbb\x84Qu:\x9f\rp\x1f\x86hT\x0f\nC\f,\xffe\x00\xdc\xf7\xe2g3>\x94O\xfd\x81\xd8\xe1*\x93n\'\x99\xe9\\\x8f\xa7Zj)\xdd\xb7\xc0\xa8+\xd3\xba\x17L\x93\xaciNG5*\xc9\x11\xde\v', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x2, {{}, 0x1}}, 0x18) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000140)={0x3, {0x1, 0x7, 0x10, 0x1, 0x1000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x20000, 0x9, 0x2, 0x200, &(0x7f00000004c0)="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"}) 3m5.221945241s ago: executing program 0 (id=162): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xfffff000, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 3m5.081111367s ago: executing program 0 (id=164): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="4dff000013001118680907070000000f0000ff3f04000000170a0017000000fd040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 3m5.018964957s ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808002805200102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.018345823s ago: executing program 0 (id=168): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./upper\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x1}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x180014, r0, 0x3ea7d000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000740)={0x1, 0x7fff}, 0x8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x20008044) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000280), 0x30) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76e2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) write(r3, &(0x7f00000001c0)='10', 0x2) kexec_load(0xf5, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/devices.allow\x00', 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000940)=[{&(0x7f0000000980)=""/156, 0x9c}], 0x1, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./work\x00', 0x1ff) 3m4.881808927s ago: executing program 0 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7fff, r3}, 0x38) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 2m49.628427425s ago: executing program 32 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7fff, r3}, 0x38) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 1m6.880037685s ago: executing program 4 (id=2438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x80000000, 0x7, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x6, 0xfffffffffffffffc, 0x7, 0x3, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.730517559s ago: executing program 4 (id=2441): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a46000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f31000000001400000011000100000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 1m6.729745096s ago: executing program 4 (id=2442): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0xfffffffe, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000200e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m6.481506191s ago: executing program 4 (id=2443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) mount$bind(&(0x7f0000000100)='./dev/mapper/control\x00', &(0x7f0000000140)='./dev/mapper/control\x00', &(0x7f0000000180), 0x1000, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000000)="04000000000000") 1m6.481304058s ago: executing program 4 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000007000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) 1m6.345312846s ago: executing program 4 (id=2451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.212484739s ago: executing program 33 (id=2451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 605.21528ms ago: executing program 2 (id=3744): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1d00000004000000080000000000000001000000000000000200"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 601.762166ms ago: executing program 3 (id=3745): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000080)={0x0, 0xe703, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x9e95752ad8da5319}, 0x800) 539.071684ms ago: executing program 1 (id=3746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) clock_nanosleep(0x8, 0x1, &(0x7f0000000140), 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x80000) bind$x25(r4, &(0x7f00000000c0), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x1, 0x26ae407c, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000001c0)='+]+#\x00') r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 537.187088ms ago: executing program 2 (id=3747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000007000)=ANY=[], 0xfce) 535.165137ms ago: executing program 1 (id=3748): socket$netlink(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f00000006c0)=0x1e, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) setreuid(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'wlan1\x00', 0x7b11}) r2 = socket(0x400000000010, 0x2, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="300000001c000100040000000000000700000000", @ANYRES32=r6, @ANYBLOB="8000f2040a000200aaaaaaaaaa1b00000600050001000000"], 0x30}, 0x1, 0x1000000}, 0x0) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x54, r8, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x200000c, 0x100010, r9, 0x0) write(r9, &(0x7f0000000e80)="9d0f923f6b7acb9466da9e9eeebf2a05abc851fab989d27d48d5ca7d279e0cf4c26ca64bebd08450e7278952a6d474ddfb8fc26c601085099777f7e8", 0x3c) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) write(r9, &(0x7f0000000ec0)='100', 0x3) syz_open_dev$usbmon(&(0x7f0000000f00), 0x400, 0x800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="9b0f2bbd7000ffdbdf25010000000700000004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 479.339112ms ago: executing program 3 (id=3749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000480)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000008000000000000fbffffff852000007842030095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 475.16954ms ago: executing program 5 (id=3750): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x9, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9000000}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 446.763955ms ago: executing program 3 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3}) r4 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000940)) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000380)={0x18, r3, 0x1000, 0x1004000}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x8, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000100)={@local, 0x200}) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x20041) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f00000003c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000640)=0xfd8) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) sendmsg$inet6(r8, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000c80)="f0", 0x1}], 0x1}, 0x40054) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) (async) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, &(0x7f0000000840)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x4, 0x6, 0xe, 0xcde300000000002, 0xfffffffffffffff9, 0x8, 0xb, 0x1, 0x400002, 0x3, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000cf54b82afd41c00100"/25, @ANYRES32=r11, @ANYBLOB="00000000000000000a0001000242ac1100020000"], 0x2c}}, 0x0) 361.848718ms ago: executing program 1 (id=3752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000480)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000008000000000000fbffffff85200000b73a030095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (fail_nth: 7) 360.994069ms ago: executing program 2 (id=3753): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x1f2, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@tcp={0x9, 0x6, "71e211", 0x16a, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x2e, 0x18, '\x00', [@generic={0xfa, 0x5d, "e02eeae460e786e0c150836adfc0f12dce8ee19afd22ec04b81e17536a3ce73188faaf212ce9541536bcdc30cb4ebaf9e359e56b3bcc9a1a21a868b83a183615aa1e65b8efecf6a8189ac16e03b0c61b5d6ebaa26b8c6f7d1ab2266249"}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x49, 0x2, [0xffffffffffffffff, 0x4, 0x6a35, 0x1, 0x9, 0x86, 0x5, 0x5]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}, @hopopts={0x8, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xb, 0x4, [0x3489]}}]}, @routing={0xff, 0x2, 0x1, 0x3, 0x0, [@mcast2]}, @routing={0x6c, 0x0, 0x1, 0x5, 0xf4ff}, @srh={0x67, 0x4, 0x4, 0x2, 0x1, 0x40, 0x8eb, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0x0, 0x400, 0x0, 0x2, {[@mptcp=@generic={0x80, 0x7, "90b258e811"}, @timestamp={0x8, 0x26, 0x0, 0x4}, @exp_smc={0xfe, 0x6}]}}, {"e5e49bbb1edf"}}}}, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x5, 0x30, 0x68, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @local, {[@lsrr={0x83, 0x0, 0xd3, [@local, @local, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @local, @remote, @local]}]}}, {{0x4e23, 0x4621, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}}}]}}}}}}, 0x0) 360.690925ms ago: executing program 5 (id=3754): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f00000000c0)=""/169, 0xa9, 0x3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) (async) r2 = syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x20e41) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) (async) r3 = io_uring_setup(0x39a1, &(0x7f0000000280)={0x0, 0x96e0, 0x2303, 0x3, 0xa3}) r4 = syz_ublk_setup_io_uring(0x3c45, &(0x7f0000000300)={0x0, 0x2d30, 0x80000, 0x1, 0x5c, 0x0, r3}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x10c, 0x0, 0x0, 0x1000, 0x7fff, 0x0, 0x0, 0x36}}}, &(0x7f0000000500)) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000540)={0x0}) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000600)=@ublk_get_dev_info_sqe={0x2e, 0x1, 0x0, r8, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {r9, 0xffff, 0x40, &(0x7f00000005c0)=@ublk_ctrl_dev_info_new=@any_dev={0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0}}}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r11, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$BSG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000700)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STATS_GET(r12, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2b8, r13, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0x270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/autofs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(^[\x01\\$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#\x00\xec%][+\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '{+#{/\'\'\x87/#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'}\\[@-$\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "d3593923b62301d85198a7d9e755f3f13d7617d8ff6ae1d16e1b82ac2095a97d5966c7ef5217006c854dd581f8cd6ba60ff85c396c24c211f26f870f98d5823c422c3bd5b4d0c621e5c4"}, @ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "0d133d84552ab978c2b058fdfaa8b6b7f68cf6819f7511257405ae280cf7d97243a13e4cec6305d3e1c30d8ce9883bf18a08d248a7e4ef8902c8607dc78d9307966f694f1d42cc939519b332176b013a4827ae9d3ebe88b8f2"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[/\xc2\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1df}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "a9510fed57021c6c7f6f05b87ab794d8a49be289a3c7a34eaf1c"}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) (async) sendmsg$alg(r12, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="e20c4242bcd4a6f3c9316ad399174ee9044b4f2e17a075c8e6c8a824b2f4b6468c9dc0ffa74f45fd065b9c550a80e1826304", 0x32}, {&(0x7f0000000b80)="37d75d89849d54ad5666195b18937873ddd886cc65ae25e7611613cbef309cbc725dac54f5ec99f2f755b89569f2adef1fa931cb64acae18256c758ffb6e7cc93374bf10f57df6c0684c6e0ce03ab20ee9ecdf857d869d337d4f3ecfaffd9a995b5ea3cea5cf0f29c4b632ceaee45027d42fca9298eb9f32900176cc05c447546bbe554a9bb09b63d4872f9fe56f4fd087128f6861f2e7dc56e9970a6a983b9d268af14976f7e7a68c74245f064f78d990d786d3d01a422e701a70ac1db0e79272544bc533e315f34f6b2e0206bd2d6ae7db0af4e29780439c26aef6f0992ccbf8c631fc9c7a12b788a051b165c916bbaba80b37", 0xf4}], 0x2, &(0x7f0000000cc0)=[@iv={0xa0, 0x117, 0x2, 0x88, "4c6040d0d76aa9898d24b5f9da149238d4d330bb998f2e860b0791caf620e2e786ef763e4582645215e38f2adbb9c464959861c8f8857532e8337b14a076ede5398352b634db3f8dba3db12dd02cc1852e5928597cae519a3bb5e6da9bf754f2ca0ee78e88f47af73afb4ba3a05213702f5c36e5bb7447b0c1ac17f74c7e8c6672d012c3d9fb1d4e"}, @iv={0x70, 0x117, 0x2, 0x59, "54a02de3a6567013d7109370c15d22ecd4ea2a4c6a785f4ca0e21a40504dcd03bbfdb25cc62d906bf6324f6d9af79ca27bbac687c27c2fc9d931b767ad58997398ca7235219d88d3dc72278e55280c0d7fb7309da17b1c5908"}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9a, "2b58e838093799b83d7a7a15005330724166f623f7dcd7092b95336b3ba22553ce68157a4cff4c298b75bfe2c6ef9a323720ce909069f4a3c90156812a569b71614aee15ca9332b9fa1a29581c474d62c3f308ad69e1e78fdf98fb3d19b0db9fc6952c3472d644515e84203c9415da0737510e43e832698c4eb486ae23c0533a88f25d6e4de3a2600265cd00c3a0a9718b0268263c1f8dd3a12e"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0xc001}, 0x810) (async) r15 = openat2(r12, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x26c340, 0x89, 0x15}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r15, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x140c, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40009) (async) r16 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r16, 0x8922, &(0x7f00000010c0)={'pimreg1\x00', 0x50}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001100)={'syztnl0\x00', r14, 0x7800, 0x788f, 0xfff, 0x6, {{0x26, 0x4, 0x1, 0x3, 0x98, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0xf, 0x7d, [@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local]}, @ssrr={0x89, 0x23, 0xf0, [@broadcast, @rand_addr=0x64010101, @empty, @rand_addr=0x64010101, @empty, @broadcast, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x36, 0x1, [{0x6, 0x8, "fe65e85126ec"}, {0x6, 0x2}, {0x6, 0x8, "2dc71d545479"}, {0x6, 0xc, "9ce30d9ef07cbc2e1b75"}, {0x0, 0x6, "fb1cebfa"}, {0x0, 0xc, "b52d375792246cbeea88"}]}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x8, [0x9, 0x1, 0x5, 0x3]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@arena={0x21, 0x0, 0x0, 0x31, 0x400, r15, 0x8, '\x00', r17, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) (async) getsockopt$CAN_RAW_FD_FRAMES(r12, 0x65, 0x5, &(0x7f0000001280), &(0x7f00000012c0)=0x4) syz_pidfd_open(r10, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) getsockopt$sock_linger(r16, 0x1, 0xd, &(0x7f0000001300), &(0x7f0000001340)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000001440), &(0x7f0000001480)=0xc) 360.583258ms ago: executing program 1 (id=3755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xda7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x80000000, 0x7, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x6, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 286.648654ms ago: executing program 2 (id=3756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xda7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x80000000, 0x7, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x6, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 285.227315ms ago: executing program 5 (id=3757): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1, 0x0, 0x18}, 0x0) 254.571726ms ago: executing program 3 (id=3758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xda7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x80000000, 0x7, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x6, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 189.930682ms ago: executing program 1 (id=3759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000480)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000008000000000000fbffffff852000007842030095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 188.734449ms ago: executing program 1 (id=3760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x161140, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000340)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x70}}, 0x0) 187.81225ms ago: executing program 5 (id=3767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000b00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e41fe8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 99.049006ms ago: executing program 5 (id=3761): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x50) 98.876498ms ago: executing program 5 (id=3762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000007000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344], 0xfce) 75.757183ms ago: executing program 2 (id=3763): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a003f000000028002002d1f", 0x2e}], 0x1}, 0x0) 69.18905ms ago: executing program 3 (id=3764): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x2c010000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x84, 0x2}], 0x10}}], 0x2, 0xc88c4) 133.833µs ago: executing program 2 (id=3765): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) r1 = dup(r0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0xfffffe38) (async, rerun: 64) timer_create(0x3, 0x0, &(0x7f0000001480)) 0s ago: executing program 3 (id=3766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000028000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) kernel console output (not intermixed with test programs): T18111] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 231.293657][T18111] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 231.293666][T18111] One or more global auth toks could not properly register; rc = [-22] [ 231.293693][T18111] Error validating options; rc = [-22] [ 231.401472][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 231.458701][T18133] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 231.511360][T18149] tipc: Enabling of bearer rejected, failed to enable media [ 231.529122][T18153] gfs2: error -5 reading superblock [ 232.082948][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 232.321073][T13612] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 232.476967][T18204] FAULT_INJECTION: forcing a failure. [ 232.476967][T18204] name failslab, interval 1, probability 0, space 0, times 0 [ 232.476990][T18204] CPU: 3 UID: 0 PID: 18204 Comm: syz.5.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.477005][T18204] Tainted: [L]=SOFTLOCKUP [ 232.477009][T18204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.477016][T18204] Call Trace: [ 232.477020][T18204] [ 232.477024][T18204] dump_stack_lvl+0x100/0x190 [ 232.477045][T18204] should_fail_ex.cold+0x5/0xa [ 232.477061][T18204] should_failslab+0xc2/0x120 [ 232.477077][T18204] __kmalloc_node_noprof+0xff/0x870 [ 232.477090][T18204] ? __get_vm_area_node+0x1ff/0x350 [ 232.477104][T18204] ? __get_vm_area_node+0x22b/0x350 [ 232.477117][T18204] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 232.477135][T18204] __vmalloc_node_range_noprof+0x424/0x1440 [ 232.477151][T18204] ? __lock_acquire+0x5c0/0x1f40 [ 232.477169][T18204] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.477184][T18204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.477199][T18204] ? __lock_acquire+0x5c0/0x1f40 [ 232.477214][T18204] ? avc_has_perm_noaudit+0x145/0x470 [ 232.477229][T18204] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.477239][T18204] __vmalloc_node_noprof+0xad/0xf0 [ 232.477254][T18204] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.477266][T18204] __vmalloc_noprof+0xa3/0x120 [ 232.477281][T18204] ? __pfx___vmalloc_noprof+0x10/0x10 [ 232.477299][T18204] ? __fget_files+0x21f/0x3d0 [ 232.477316][T18204] bpf_prog_alloc_no_stats+0x59/0x690 [ 232.477328][T18204] bpf_prog_alloc+0x3b/0x200 [ 232.477340][T18204] bpf_prog_load+0x1178/0x2ba0 [ 232.477353][T18204] ? avc_has_perm_noaudit+0x11e/0x470 [ 232.477370][T18204] ? __pfx_bpf_prog_load+0x10/0x10 [ 232.477395][T18204] __sys_bpf+0x146f/0x4b60 [ 232.477413][T18204] ? __pfx___sys_bpf+0x10/0x10 [ 232.477428][T18204] ? find_held_lock+0x2b/0x80 [ 232.477438][T18204] ? get_pid_task+0xfc/0x250 [ 232.477453][T18204] ? get_pid_task+0xfc/0x250 [ 232.477495][T18204] ? find_held_lock+0x2b/0x80 [ 232.477511][T18204] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.477522][T18204] ? find_held_lock+0x2b/0x80 [ 232.477532][T18204] ? ksys_write+0x190/0x250 [ 232.477545][T18204] ? ksys_write+0x190/0x250 [ 232.477557][T18204] ? lock_acquire+0x1d1/0x380 [ 232.477579][T18204] ? fput+0x7c/0x100 [ 232.477595][T18204] ? ksys_write+0x1ac/0x250 [ 232.477609][T18204] ? __x64_sys_bpf+0xce/0x140 [ 232.477624][T18204] __x64_sys_bpf+0xce/0x140 [ 232.477639][T18204] ? do_syscall_64+0xae/0x790 [ 232.477655][T18204] do_syscall_64+0x123/0x790 [ 232.477670][T18204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.477682][T18204] RIP: 0033:0x7f093c99f559 [ 232.477692][T18204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.477702][T18204] RSP: 002b:00007f093d81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.477713][T18204] RAX: ffffffffffffffda RBX: 00007f093cc25fa0 RCX: 00007f093c99f559 [ 232.477721][T18204] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 232.477727][T18204] RBP: 00007f093d81b090 R08: 0000000000000000 R09: 0000000000000000 [ 232.477738][T18204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.477744][T18204] R13: 00007f093cc26038 R14: 00007f093cc25fa0 R15: 00007ffe4f167438 [ 232.477758][T18204] [ 232.480611][T13612] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 232.483880][T13612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.483909][T13612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.483941][T13612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.486117][T13612] usb 6-1: config 0 descriptor?? [ 232.489495][T18195] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 232.689481][T18217] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 232.689591][T18217] SELinux: failed to load policy [ 232.809970][T18236] netlink: 'syz.3.3569': attribute type 10 has an invalid length. [ 232.880230][T18240] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 232.887586][T18240] batman_adv: batadv0: Adding interface: gretap1 [ 232.887603][T18240] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.888112][T18240] batman_adv: batadv0: Interface activated: gretap1 [ 232.893440][T18240] syzkaller0: entered promiscuous mode [ 232.893460][T18240] syzkaller0: entered allmulticast mode [ 232.898911][T13612] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 232.898998][T13612] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 232.905388][T13612] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0009/input/input19 [ 232.929298][T13612] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 233.070838][T13614] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 233.091118][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.091478][T18174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.099503][T11628] usb 6-1: USB disconnect, device number 21 [ 233.216060][T18257] __nla_validate_parse: 2 callbacks suppressed [ 233.216079][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.216247][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.216402][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.216554][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.216783][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.216983][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.217133][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.217278][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.217417][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.217571][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3574'. [ 233.225402][T13614] usb 10-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.225437][T13614] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 233.231499][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.231522][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.231540][T13614] usb 10-1: config 0 has no interface number 0 [ 233.231572][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.231593][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.233167][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.233188][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.233205][T13614] usb 10-1: config 0 has no interface number 0 [ 233.233235][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.233258][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.234628][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.234648][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.234664][T13614] usb 10-1: config 0 has no interface number 0 [ 233.234694][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.234716][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.235885][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.235905][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.235922][T13614] usb 10-1: config 0 has no interface number 0 [ 233.235962][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.235983][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.236936][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.236955][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.236972][T13614] usb 10-1: config 0 has no interface number 0 [ 233.237003][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.237024][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.242053][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.242074][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.242091][T13614] usb 10-1: config 0 has no interface number 0 [ 233.242122][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.242144][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.243063][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.243107][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.243125][T13614] usb 10-1: config 0 has no interface number 0 [ 233.243158][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.243179][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.248465][T13614] usb 10-1: config 0 has an invalid interface number: 250 but max is 8 [ 233.248485][T13614] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.248503][T13614] usb 10-1: config 0 has no interface number 0 [ 233.248531][T13614] usb 10-1: config 0 interface 250 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.248553][T13614] usb 10-1: config 0 interface 250 has no altsetting 0 [ 233.252307][T13614] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.252327][T13614] usb 10-1: Product: syz [ 233.252346][T13614] usb 10-1: Manufacturer: syz [ 233.252360][T13614] usb 10-1: SerialNumber: syz [ 233.257408][T13614] usb 10-1: config 0 descriptor?? [ 233.267171][T13614] yurex 10-1:0.250: USB YUREX device now attached to Yurex #0 [ 233.472269][T11628] usb 10-1: USB disconnect, device number 7 [ 233.475834][T11628] yurex 10-1:0.250: USB YUREX #0 now disconnected [ 233.522738][T18275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.590724][ T5799] Bluetooth: hci3: command 0x0405 tx timeout [ 233.666730][T18285] xt_nfacct: accounting object `syz0' does not exist [ 233.953080][T18300] ima: policy update completed [ 233.973460][T18304] netlink: 'syz.2.3585': attribute type 7 has an invalid length. [ 234.016224][T18310] openvswitch: netlink: Key type 12336 is out of range max 32 [ 234.098821][T18325] input: syz0 as /devices/virtual/input/input20 [ 234.393513][T18365] Cannot find map_set index 135 as target [ 234.440033][T18372] xt_HMARK: spi-set and port-set can't be combined [ 234.477947][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 234.477959][ T42] audit: type=1400 audit(1792976377.597:2378): avc: denied { read } for pid=18378 comm="syz.1.3611" path="socket:[70293]" dev="sockfs" ino=70293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 234.478022][ T42] audit: type=1400 audit(1792976377.597:2379): avc: denied { read } for pid=18378 comm="syz.1.3611" path="socket:[70293]" dev="sockfs" ino=70293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 234.486751][T18384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.493106][T18384] team0: No ports can be present during mode change [ 234.499600][ T6041] tipc: Resetting bearer [ 234.695789][ T42] audit: type=1400 audit(1792976377.817:2380): avc: denied { create } for pid=18400 comm="syz.2.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 234.738055][T18403] FAULT_INJECTION: forcing a failure. [ 234.738055][T18403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.738077][T18403] CPU: 1 UID: 0 PID: 18403 Comm: syz.2.3618 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.738092][T18403] Tainted: [L]=SOFTLOCKUP [ 234.738096][T18403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.738103][T18403] Call Trace: [ 234.738107][T18403] [ 234.738112][T18403] dump_stack_lvl+0x100/0x190 [ 234.738171][T18403] should_fail_ex.cold+0x5/0xa [ 234.738201][T18403] _copy_from_user+0x2e/0xd0 [ 234.738221][T18403] __sys_bpf+0x2f5/0x4b60 [ 234.738248][T18403] ? __pfx___sys_bpf+0x10/0x10 [ 234.738262][T18403] ? find_held_lock+0x2b/0x80 [ 234.738273][T18403] ? get_pid_task+0xfc/0x250 [ 234.738289][T18403] ? get_pid_task+0xfc/0x250 [ 234.738308][T18403] ? find_held_lock+0x2b/0x80 [ 234.738321][T18403] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.738333][T18403] ? find_held_lock+0x2b/0x80 [ 234.738344][T18403] ? ksys_write+0x190/0x250 [ 234.738370][T18403] ? ksys_write+0x190/0x250 [ 234.738382][T18403] ? lock_acquire+0x1d1/0x380 [ 234.738404][T18403] ? fput+0x7c/0x100 [ 234.738420][T18403] ? ksys_write+0x1ac/0x250 [ 234.738435][T18403] ? __x64_sys_bpf+0xce/0x140 [ 234.738449][T18403] __x64_sys_bpf+0xce/0x140 [ 234.738464][T18403] ? do_syscall_64+0xae/0x790 [ 234.738491][T18403] do_syscall_64+0x123/0x790 [ 234.738507][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.738519][T18403] RIP: 0033:0x7fdf1f39f559 [ 234.738528][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.738539][T18403] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.738554][T18403] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 234.738561][T18403] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 234.738568][T18403] RBP: 00007fdf202c8090 R08: 0000000000000000 R09: 0000000000000000 [ 234.738574][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.738581][T18403] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 234.738595][T18403] [ 234.844166][T18415] Invalid argument reading file caps for ./file0 [ 234.947613][T18435] FAULT_INJECTION: forcing a failure. [ 234.947613][T18435] name failslab, interval 1, probability 0, space 0, times 0 [ 234.947646][T18435] CPU: 1 UID: 0 PID: 18435 Comm: syz.2.3628 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.947674][T18435] Tainted: [L]=SOFTLOCKUP [ 234.947680][T18435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.947698][T18435] Call Trace: [ 234.947706][T18435] [ 234.947715][T18435] dump_stack_lvl+0x100/0x190 [ 234.947750][T18435] should_fail_ex.cold+0x5/0xa [ 234.947778][T18435] should_failslab+0xc2/0x120 [ 234.947806][T18435] __kvmalloc_node_noprof+0x113/0x9b0 [ 234.947835][T18435] ? kvm_recalculate_apic_map+0x225/0x1500 [ 234.947867][T18435] kvm_recalculate_apic_map+0x225/0x1500 [ 234.947897][T18435] ? __pfx_vmx_set_virtual_apic_mode+0x10/0x10 [ 234.947945][T18435] ? __pfx_kvm_recalculate_apic_map+0x10/0x10 [ 234.947971][T18435] ? __kvm_apic_set_base+0x20d/0xa40 [ 234.948001][T18435] kvm_apic_set_base+0x1a4/0x200 [ 234.948031][T18435] __set_sregs_common.constprop.0+0x53b/0x1bc0 [ 234.948060][T18435] ? __pfx___set_sregs_common.constprop.0+0x10/0x10 [ 234.948083][T18435] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 234.948113][T18435] __set_sregs+0x7e/0x260 [ 234.948132][T18435] ? __pfx___set_sregs+0x10/0x10 [ 234.948160][T18435] kvm_run_sync_regs_from_user+0x1cd/0x340 [ 234.948184][T18435] ? __pfx_kvm_run_sync_regs_from_user+0x10/0x10 [ 234.948231][T18435] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 234.948260][T18435] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 234.948294][T18435] kvm_arch_vcpu_ioctl_run+0x4a5/0x1de0 [ 234.948325][T18435] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 234.948349][T18435] ? lock_acquire+0x1d1/0x380 [ 234.948375][T18435] ? do_raw_write_lock+0x11e/0x260 [ 234.948402][T18435] ? find_held_lock+0x2b/0x80 [ 234.948418][T18435] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 234.948444][T18435] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 234.948475][T18435] kvm_vcpu_ioctl+0x735/0x17b0 [ 234.948504][T18435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.948530][T18435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.948559][T18435] ? do_vfs_ioctl+0x226/0x13e0 [ 234.948584][T18435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.948605][T18435] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 234.948638][T18435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 234.948670][T18435] ? __fget_files+0x34/0x3d0 [ 234.948712][T18435] ? selinux_file_ioctl+0x1e0/0x290 [ 234.948740][T18435] ? selinux_file_ioctl+0x1e7/0x290 [ 234.948769][T18435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.948797][T18435] __x64_sys_ioctl+0x18e/0x210 [ 234.948822][T18435] do_syscall_64+0x123/0x790 [ 234.948850][T18435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.948872][T18435] RIP: 0033:0x7fdf1f39f559 [ 234.948889][T18435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.948905][T18435] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.948925][T18435] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 234.948939][T18435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 234.948951][T18435] RBP: 00007fdf202c8090 R08: 0000000000000000 R09: 0000000000000000 [ 234.948963][T18435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.948973][T18435] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 234.948999][T18435] [ 234.963612][ T42] audit: type=1400 audit(1792976378.077:2381): avc: denied { mount } for pid=18432 comm="syz.5.3627" name="/" dev="ramfs" ino=69545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 235.084165][T18445] FAULT_INJECTION: forcing a failure. [ 235.084165][T18445] name failslab, interval 1, probability 0, space 0, times 0 [ 235.084189][T18445] CPU: 3 UID: 0 PID: 18445 Comm: syz.2.3632 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.084205][T18445] Tainted: [L]=SOFTLOCKUP [ 235.084210][T18445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.084223][T18445] Call Trace: [ 235.084227][T18445] [ 235.084233][T18445] dump_stack_lvl+0x100/0x190 [ 235.084283][T18445] should_fail_ex.cold+0x5/0xa [ 235.084303][T18445] should_failslab+0xc2/0x120 [ 235.084333][T18445] __kmalloc_cache_noprof+0x91/0x6d0 [ 235.084348][T18445] ? bpf_prog_stream_init+0x121/0x390 [ 235.084366][T18445] bpf_prog_stream_init+0x121/0x390 [ 235.084382][T18445] bpf_prog_load+0xa97/0x2ba0 [ 235.084397][T18445] ? avc_has_perm_noaudit+0x11e/0x470 [ 235.084414][T18445] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.084444][T18445] __sys_bpf+0x146f/0x4b60 [ 235.084464][T18445] ? __pfx___sys_bpf+0x10/0x10 [ 235.084479][T18445] ? find_held_lock+0x2b/0x80 [ 235.084490][T18445] ? futex_wake+0x4ea/0x5e0 [ 235.084515][T18445] ? rcu_read_lock_any_held+0x6a/0x90 [ 235.084527][T18445] ? find_held_lock+0x2b/0x80 [ 235.084537][T18445] ? ksys_write+0x190/0x250 [ 235.084550][T18445] ? ksys_write+0x190/0x250 [ 235.084572][T18445] ? __x64_sys_futex+0x34f/0x4d0 [ 235.084583][T18445] ? __x64_sys_futex+0x358/0x4d0 [ 235.084594][T18445] ? fput+0x7c/0x100 [ 235.084610][T18445] ? __pfx___x64_sys_futex+0x10/0x10 [ 235.084621][T18445] ? ksys_write+0x1ac/0x250 [ 235.084636][T18445] ? __x64_sys_bpf+0xce/0x140 [ 235.084650][T18445] __x64_sys_bpf+0xce/0x140 [ 235.084665][T18445] ? do_syscall_64+0xae/0x790 [ 235.084681][T18445] do_syscall_64+0x123/0x790 [ 235.084697][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.084709][T18445] RIP: 0033:0x7fdf1f39f559 [ 235.084720][T18445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.084731][T18445] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.084743][T18445] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 235.084750][T18445] RDX: 0000000000000042 RSI: 0000200000000380 RDI: 0000000000000005 [ 235.084757][T18445] RBP: 00007fdf1f436b20 R08: 0000000000000000 R09: 0000000000000000 [ 235.084763][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.084769][T18445] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 235.084784][T18445] [ 235.115882][T18447] FAULT_INJECTION: forcing a failure. [ 235.115882][T18447] name failslab, interval 1, probability 0, space 0, times 0 [ 235.115937][T18447] CPU: 1 UID: 0 PID: 18447 Comm: syz.3.3633 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.115956][T18447] Tainted: [L]=SOFTLOCKUP [ 235.115960][T18447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.115967][T18447] Call Trace: [ 235.115972][T18447] [ 235.115978][T18447] dump_stack_lvl+0x100/0x190 [ 235.115998][T18447] should_fail_ex.cold+0x5/0xa [ 235.116017][T18447] should_failslab+0xc2/0x120 [ 235.116034][T18447] __kmalloc_cache_node_noprof+0x94/0x710 [ 235.116049][T18447] ? kasan_save_track+0x14/0x30 [ 235.116063][T18447] ? __get_vm_area_node+0x124/0x350 [ 235.116081][T18447] __get_vm_area_node+0x124/0x350 [ 235.116097][T18447] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 235.116114][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116135][T18447] ? find_check_entry.isra.0+0x576/0xa00 [ 235.116154][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116173][T18447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.116191][T18447] ? kasan_quarantine_put+0x104/0x240 [ 235.116209][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116224][T18447] __vmalloc_node_noprof+0xad/0xf0 [ 235.116241][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116257][T18447] xt_counters_alloc+0x4c/0x70 [ 235.116272][T18447] __do_replace+0x97/0x990 [ 235.116303][T18447] ? __pfx___do_replace+0x10/0x10 [ 235.116324][T18447] do_ip6t_set_ctl+0xa5f/0xd00 [ 235.116339][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.116353][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.116368][T18447] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 235.116383][T18447] ? __mutex_unlock_slowpath+0x35d/0x930 [ 235.116401][T18447] ? futex_wait+0x11e/0x370 [ 235.116415][T18447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.116436][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.116450][T18447] nf_setsockopt+0x8d/0xf0 [ 235.116464][T18447] ipv6_setsockopt+0x135/0x170 [ 235.116480][T18447] tcp_setsockopt+0xa7/0x100 [ 235.116494][T18447] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 235.116507][T18447] do_sock_setsockopt+0xf3/0x1d0 [ 235.116520][T18447] __sys_setsockopt+0x195/0x220 [ 235.116538][T18447] __x64_sys_setsockopt+0xbd/0x160 [ 235.116553][T18447] ? do_syscall_64+0xae/0x790 [ 235.116567][T18447] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.116581][T18447] do_syscall_64+0x123/0x790 [ 235.116596][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.116608][T18447] RIP: 0033:0x7f032f19f559 [ 235.116619][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.116629][T18447] RSP: 002b:00007f03300a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.116640][T18447] RAX: ffffffffffffffda RBX: 00007f032f425fa0 RCX: 00007f032f19f559 [ 235.116647][T18447] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 235.116653][T18447] RBP: 00007f032f236b20 R08: 00000000000003a8 R09: 0000000000000000 [ 235.116660][T18447] R10: 0000200000001ac0 R11: 0000000000000246 R12: 0000000000000000 [ 235.116667][T18447] R13: 00007f032f426038 R14: 00007f032f425fa0 R15: 00007fff1a80b378 [ 235.116682][T18447] [ 235.116702][T18447] warn_alloc: 2 callbacks suppressed [ 235.116710][T18447] syz.3.3633: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.116759][T18447] CPU: 1 UID: 0 PID: 18447 Comm: syz.3.3633 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.116774][T18447] Tainted: [L]=SOFTLOCKUP [ 235.116778][T18447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.116784][T18447] Call Trace: [ 235.116788][T18447] [ 235.116792][T18447] dump_stack_lvl+0x100/0x190 [ 235.116811][T18447] warn_alloc.cold+0x9e/0xb2 [ 235.116833][T18447] ? __pfx_warn_alloc+0x10/0x10 [ 235.116844][T18447] ? __kasan_kmalloc+0x8a/0xb0 [ 235.116863][T18447] ? __get_vm_area_node+0x22b/0x350 [ 235.116882][T18447] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 235.116912][T18447] ? find_check_entry.isra.0+0x576/0xa00 [ 235.116932][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116950][T18447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.116965][T18447] ? kasan_quarantine_put+0x104/0x240 [ 235.116982][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.116997][T18447] __vmalloc_node_noprof+0xad/0xf0 [ 235.117013][T18447] ? xt_counters_alloc+0x4c/0x70 [ 235.117029][T18447] xt_counters_alloc+0x4c/0x70 [ 235.117044][T18447] __do_replace+0x97/0x990 [ 235.117061][T18447] ? __pfx___do_replace+0x10/0x10 [ 235.117079][T18447] do_ip6t_set_ctl+0xa5f/0xd00 [ 235.117093][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.117105][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.117119][T18447] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 235.117146][T18447] ? __mutex_unlock_slowpath+0x35d/0x930 [ 235.117163][T18447] ? futex_wait+0x11e/0x370 [ 235.117177][T18447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.117199][T18447] ? nf_sockopt_find.isra.0+0x222/0x290 [ 235.117214][T18447] nf_setsockopt+0x8d/0xf0 [ 235.117229][T18447] ipv6_setsockopt+0x135/0x170 [ 235.117245][T18447] tcp_setsockopt+0xa7/0x100 [ 235.117257][T18447] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 235.117271][T18447] do_sock_setsockopt+0xf3/0x1d0 [ 235.117284][T18447] __sys_setsockopt+0x195/0x220 [ 235.117302][T18447] __x64_sys_setsockopt+0xbd/0x160 [ 235.117317][T18447] ? do_syscall_64+0xae/0x790 [ 235.117330][T18447] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.117345][T18447] do_syscall_64+0x123/0x790 [ 235.117360][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.117371][T18447] RIP: 0033:0x7f032f19f559 [ 235.117380][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.117390][T18447] RSP: 002b:00007f03300a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.117400][T18447] RAX: ffffffffffffffda RBX: 00007f032f425fa0 RCX: 00007f032f19f559 [ 235.117407][T18447] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 235.117414][T18447] RBP: 00007f032f236b20 R08: 00000000000003a8 R09: 0000000000000000 [ 235.117420][T18447] R10: 0000200000001ac0 R11: 0000000000000246 R12: 0000000000000000 [ 235.117426][T18447] R13: 00007f032f426038 R14: 00007f032f425fa0 R15: 00007fff1a80b378 [ 235.117440][T18447] [ 235.125013][T18447] Mem-Info: [ 235.125022][T18447] active_anon:21694 inactive_anon:16683 isolated_anon:0 [ 235.125022][T18447] active_file:4415 inactive_file:32064 isolated_file:0 [ 235.125022][T18447] unevictable:1000 dirty:172 writeback:0 [ 235.125022][T18447] slab_reclaimable:10991 slab_unreclaimable:97496 [ 235.125022][T18447] mapped:29140 shmem:20925 pagetables:1982 [ 235.125022][T18447] sec_pagetables:307 bounce:0 [ 235.125022][T18447] kernel_misc_reclaimable:0 [ 235.125022][T18447] free:333954 free_pcp:4864 free_cma:0 [ 235.125051][T18447] Node 0 active_anon:81980kB inactive_anon:66732kB active_file:16356kB inactive_file:127864kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104272kB dirty:688kB writeback:0kB shmem:77776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18016kB pagetables:7080kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.125081][T18447] Node 1 active_anon:4796kB inactive_anon:0kB active_file:1304kB inactive_file:392kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:5924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:544kB pagetables:848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.125109][T18447] Node 0 DMA free:5240kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:896kB inactive_anon:2224kB active_file:0kB inactive_file:2368kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:72kB free_cma:0kB [ 235.125145][T18447] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 235.125163][T18447] Node 0 DMA32 free:78624kB boost:8192kB min:35260kB low:42024kB high:48788kB reserved_highatomic:0kB free_highatomic:0kB active_anon:81084kB inactive_anon:64508kB active_file:16356kB inactive_file:125496kB unevictable:2000kB writepending:688kB zspages:0kB present:2080628kB managed:1231436kB mlocked:0kB bounce:0kB free_pcp:3380kB local_pcp:792kB free_cma:0kB [ 235.125196][T18447] lowmem_reserve[]: 0 0 0 0 0 [ 235.125215][T18447] Node 1 Normal free:1251952kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4796kB inactive_anon:0kB active_file:1304kB inactive_file:392kB unevictable:2000kB writepending:0kB zspages:1712kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:15852kB local_pcp:4952kB free_cma:0kB [ 235.125246][T18447] lowmem_reserve[]: 0 0 0 0 0 [ 235.125264][T18447] Node 0 DMA: 18*4kB (UM) 42*8kB (UM) 32*16kB (UM) 35*32kB (UM) 16*64kB (UM) 9*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 5240kB [ 235.125337][T18447] Node 0 DMA32: 1558*4kB (UME) 1006*8kB (UME) 383*16kB (UME) 935*32kB (UME) 235*64kB (UME) 49*128kB (UME) 8*256kB (UME) 2*512kB (UM) 0*1024kB 2*2048kB (U) 0*4096kB = 78808kB [ 235.125410][T18447] Node 1 Normal: 4*4kB (UME) 45*8kB (UM) 81*16kB (UME) 1044*32kB (UME) 703*64kB (UME) 311*128kB (UME) 75*256kB (UME) 21*512kB (UM) 16*1024kB (UM) 10*2048kB (UME) 260*4096kB (UM) = 1251656kB [ 235.125501][T18447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.125511][T18447] Node 0 hugepages_total=32 hugepages_free=32 hugepages_surp=0 hugepages_size=2048kB [ 235.125567][T18447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.125577][T18447] Node 1 hugepages_total=106 hugepages_free=106 hugepages_surp=0 hugepages_size=2048kB [ 235.125587][T18447] 57403 total pagecache pages [ 235.125591][T18447] 3 pages in swap cache [ 235.125595][T18447] Free swap = 122556kB [ 235.125600][T18447] Total swap = 124996kB [ 235.125605][T18447] 1048443 pages RAM [ 235.125609][T18447] 0 pages HighMem/MovableOnly [ 235.125613][T18447] 291274 pages reserved [ 235.125617][T18447] 0 pages cma reserved [ 235.233403][T18461] ip_tables: iptables: counters copy to user failed while replacing table [ 235.287891][T18463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.289065][T18463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.534025][T18486] FAULT_INJECTION: forcing a failure. [ 235.534025][T18486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.534048][T18486] CPU: 2 UID: 0 PID: 18486 Comm: syz.3.3650 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.534063][T18486] Tainted: [L]=SOFTLOCKUP [ 235.534068][T18486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.534074][T18486] Call Trace: [ 235.534079][T18486] [ 235.534084][T18486] dump_stack_lvl+0x100/0x190 [ 235.534103][T18486] should_fail_ex.cold+0x5/0xa [ 235.534117][T18486] ? prepare_alloc_pages+0x16d/0x5b0 [ 235.534134][T18486] should_fail_alloc_page+0xeb/0x140 [ 235.534150][T18486] prepare_alloc_pages+0x1f0/0x5b0 [ 235.534165][T18486] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.534181][T18486] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 235.534194][T18486] ? unwind_get_return_address+0x59/0xa0 [ 235.534212][T18486] ? arch_stack_walk+0xa6/0xf0 [ 235.534231][T18486] ? stack_trace_save+0x8e/0xc0 [ 235.534247][T18486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.534265][T18486] ? __lock_acquire+0x5c0/0x1f40 [ 235.534284][T18486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.534301][T18486] ? policy_nodemask+0xed/0x4f0 [ 235.534317][T18486] alloc_pages_mpol+0x201/0x560 [ 235.534333][T18486] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.534352][T18486] alloc_pages_noprof+0x1a/0x160 [ 235.534363][T18486] pgd_alloc+0x4d/0x630 [ 235.534372][T18486] ? mutex_init_lockdep+0xf1/0x120 [ 235.534388][T18486] mm_init+0x6a3/0xeb0 [ 235.534400][T18486] copy_process+0x79e9/0x84c0 [ 235.534428][T18486] ? __pfx_copy_process+0x10/0x10 [ 235.534450][T18486] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 235.534497][T18486] kernel_clone+0x176/0x9d0 [ 235.534523][T18486] ? __pfx_kernel_clone+0x10/0x10 [ 235.534552][T18486] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 235.534576][T18486] __do_sys_clone+0xd9/0x120 [ 235.534612][T18486] ? __pfx___do_sys_clone+0x10/0x10 [ 235.534646][T18486] do_syscall_64+0x123/0x790 [ 235.534671][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.534692][T18486] RIP: 0033:0x7f032f19f559 [ 235.534722][T18486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.534747][T18486] RSP: 002b:00007f03300a2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 235.534767][T18486] RAX: ffffffffffffffda RBX: 00007f032f425fa0 RCX: 00007f032f19f559 [ 235.534780][T18486] RDX: 0000000000000000 RSI: 000000000000fd90 RDI: 0000000002000211 [ 235.534792][T18486] RBP: 00007f032f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 235.534804][T18486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.534815][T18486] R13: 00007f032f426038 R14: 00007f032f425fa0 R15: 00007fff1a80b378 [ 235.534841][T18486] [ 235.659597][ T42] audit: type=1400 audit(1792976378.777:2382): avc: denied { setopt } for pid=18507 comm="syz.1.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.662816][ T42] audit: type=1400 audit(1792976378.787:2383): avc: denied { write } for pid=18507 comm="syz.1.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.664106][ T42] audit: type=1400 audit(1792976378.787:2384): avc: denied { read } for pid=18507 comm="syz.1.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.701617][T18515] FAULT_INJECTION: forcing a failure. [ 235.701617][T18515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.701639][T18515] CPU: 3 UID: 0 PID: 18515 Comm: syz.2.3659 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.701655][T18515] Tainted: [L]=SOFTLOCKUP [ 235.701659][T18515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.701665][T18515] Call Trace: [ 235.701670][T18515] [ 235.701675][T18515] dump_stack_lvl+0x100/0x190 [ 235.701695][T18515] should_fail_ex.cold+0x5/0xa [ 235.701712][T18515] _copy_to_user+0x32/0xd0 [ 235.701731][T18515] simple_read_from_buffer+0xcb/0x170 [ 235.701749][T18515] proc_fail_nth_read+0x1af/0x230 [ 235.701767][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.701785][T18515] ? rw_verify_area+0xce/0x6d0 [ 235.701797][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.701813][T18515] vfs_read+0x1e4/0xb40 [ 235.701827][T18515] ? lock_acquire+0x1d1/0x380 [ 235.701840][T18515] ? __fget_files+0x34/0x3d0 [ 235.701856][T18515] ? __pfx_vfs_read+0x10/0x10 [ 235.701868][T18515] ? find_held_lock+0x2b/0x80 [ 235.701878][T18515] ? __fget_files+0x215/0x3d0 [ 235.701896][T18515] ? __fget_files+0x21f/0x3d0 [ 235.701916][T18515] ksys_read+0x12a/0x250 [ 235.701929][T18515] ? __pfx_ksys_read+0x10/0x10 [ 235.701946][T18515] do_syscall_64+0x123/0x790 [ 235.701963][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.701975][T18515] RIP: 0033:0x7fdf1f35fd8e [ 235.701984][T18515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.701995][T18515] RSP: 002b:00007fdf202c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.702006][T18515] RAX: ffffffffffffffda RBX: 00007fdf202c86c0 RCX: 00007fdf1f35fd8e [ 235.702013][T18515] RDX: 000000000000000f RSI: 00007fdf202c80a0 RDI: 0000000000000006 [ 235.702020][T18515] RBP: 00007fdf202c8090 R08: 0000000000000000 R09: 0000000000000000 [ 235.702027][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.702033][T18515] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 235.702047][T18515] [ 235.714820][ T42] audit: type=1400 audit(1792976378.827:2385): avc: denied { mount } for pid=18517 comm="syz.5.3660" name="/" dev="pstore" ino=2705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 235.795917][T18523] FAULT_INJECTION: forcing a failure. [ 235.795917][T18523] name fail_futex, interval 1, probability 0, space 0, times 0 [ 235.795934][T18523] CPU: 2 UID: 0 PID: 18523 Comm: syz.2.3661 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.795950][T18523] Tainted: [L]=SOFTLOCKUP [ 235.795954][T18523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.795961][T18523] Call Trace: [ 235.795966][T18523] [ 235.795971][T18523] dump_stack_lvl+0x100/0x190 [ 235.795991][T18523] should_fail_ex.cold+0x5/0xa [ 235.796008][T18523] get_futex_key+0x1c9/0x13e0 [ 235.796029][T18523] ? __pfx_get_futex_key+0x10/0x10 [ 235.796047][T18523] ? ___sys_sendmsg+0x127/0x1e0 [ 235.796063][T18523] futex_wake+0xf4/0x5e0 [ 235.796075][T18523] ? futex_wait+0x11e/0x370 [ 235.796107][T18523] ? __pfx_futex_wake+0x10/0x10 [ 235.796124][T18523] ? find_held_lock+0x2b/0x80 [ 235.796139][T18523] do_futex+0x2b2/0x440 [ 235.796152][T18523] ? __pfx_do_futex+0x10/0x10 [ 235.796165][T18523] ? fput+0x7c/0x100 [ 235.796184][T18523] __x64_sys_futex+0x34f/0x4d0 [ 235.796198][T18523] ? __pfx___x64_sys_futex+0x10/0x10 [ 235.796216][T18523] do_syscall_64+0x123/0x790 [ 235.796233][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.796248][T18523] RIP: 0033:0x7fdf1f39f559 [ 235.796258][T18523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.796270][T18523] RSP: 002b:00007fdf202c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.796282][T18523] RAX: ffffffffffffffda RBX: 00007fdf1f625fa8 RCX: 00007fdf1f39f559 [ 235.796290][T18523] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf1f625fac [ 235.796297][T18523] RBP: 00007fdf1f625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 235.796303][T18523] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000 [ 235.796311][T18523] R13: 00007fdf1f626038 R14: 00007ffffdc999b0 R15: 00007ffffdc99a98 [ 235.796328][T18523] [ 235.947014][T18527] bond17: entered allmulticast mode [ 235.947039][T18527] bridge12: entered allmulticast mode [ 235.947335][T18527] lapb40: entered allmulticast mode [ 235.947582][T18527] lapb41: entered allmulticast mode [ 235.947781][T18527] mac80211_hwsim hwsim31 wlan8: entered allmulticast mode [ 235.947939][T18527] lapb42: entered allmulticast mode [ 235.948026][T18527] mac80211_hwsim hwsim25 pim6reg0: entered allmulticast mode [ 235.948120][T18527] mac80211_hwsim hwsim25 wlan9: entered allmulticast mode [ 235.948274][T18527] lapb43: entered allmulticast mode [ 235.948362][T18527] bond18: entered allmulticast mode [ 235.948371][T18527] bridge13: entered allmulticast mode [ 235.948601][T18527] lapb44: entered allmulticast mode [ 235.949486][T18527] lapb45: entered allmulticast mode [ 235.949705][T18527] bond19: entered allmulticast mode [ 235.949714][T18527] bridge14: entered allmulticast mode [ 235.950039][T18527] lapb46: entered allmulticast mode [ 235.953761][T18527] lapb47: entered allmulticast mode [ 235.954032][T18527] mac80211_hwsim hwsim35 wlan10: entered allmulticast mode [ 235.954220][T18527] lapb48: entered allmulticast mode [ 235.954343][T18527] bond20: entered allmulticast mode [ 235.954352][T18527] bridge15: entered allmulticast mode [ 235.954629][T18527] lapb49: entered allmulticast mode [ 235.954897][T18527] lapb50: entered allmulticast mode [ 235.971323][T11628] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 236.007525][ T5794] Bluetooth: hci4: unexpected event for opcode 0x080c [ 236.131423][T11628] usb 10-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 236.132204][T11628] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.133852][T11628] usb 10-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 236.133865][T11628] usb 10-1: Product: syz [ 236.133872][T11628] usb 10-1: Manufacturer: syz [ 236.133880][T11628] usb 10-1: SerialNumber: syz [ 236.143893][T11628] keyspan 10-1:1.0: Keyspan 1 port adapter converter detected [ 236.143989][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 236.144537][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 236.144571][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 236.144604][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 236.144637][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 236.144667][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 236.144697][T11628] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 236.146340][T11628] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 236.357494][T11628] usb 10-1: USB disconnect, device number 8 [ 236.369976][T11628] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 236.370475][T11628] keyspan 10-1:1.0: device disconnected [ 236.402067][ T42] audit: type=1400 audit(1792976379.527:2386): avc: denied { write } for pid=18535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.412539][T18539] ip_tables: iptables: counters copy to user failed while replacing table [ 236.484587][ T42] audit: type=1400 audit(1792976379.607:2387): avc: denied { write } for pid=18542 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.512615][T18544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=18544 comm=syz.3.3667 [ 236.517404][T18544] FAULT_INJECTION: forcing a failure. [ 236.517404][T18544] name failslab, interval 1, probability 0, space 0, times 0 [ 236.517425][T18544] CPU: 2 UID: 0 PID: 18544 Comm: syz.3.3667 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.517440][T18544] Tainted: [L]=SOFTLOCKUP [ 236.517444][T18544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.517451][T18544] Call Trace: [ 236.517455][T18544] [ 236.517460][T18544] dump_stack_lvl+0x100/0x190 [ 236.517481][T18544] should_fail_ex.cold+0x5/0xa [ 236.517499][T18544] should_failslab+0xc2/0x120 [ 236.517516][T18544] kmem_cache_alloc_noprof+0x92/0x6a0 [ 236.517531][T18544] ? dev_queue_xmit_nit+0x38/0xa80 [ 236.517542][T18544] ? skb_clone+0x187/0x3f0 [ 236.517560][T18544] skb_clone+0x187/0x3f0 [ 236.517577][T18544] dev_queue_xmit_nit+0x255/0xa80 [ 236.517592][T18544] dev_hard_start_xmit+0x2f5/0x760 [ 236.517609][T18544] __dev_queue_xmit+0x1c2f/0x4a50 [ 236.517629][T18544] ? __pfx___dev_queue_xmit+0x10/0x10 [ 236.517650][T18544] ? rcu_is_watching+0x13/0xc0 [ 236.517666][T18544] ? __skb_clone+0x5c7/0x7c0 [ 236.517684][T18544] netlink_deliver_tap+0x9b8/0xb50 [ 236.517704][T18544] netlink_unicast+0x708/0x950 [ 236.517716][T18544] ? __pfx_netlink_unicast+0x10/0x10 [ 236.517730][T18544] netlink_sendmsg+0x9ac/0x10c0 [ 236.517743][T18544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.517756][T18544] ? selinux_socket_sendmsg+0x198/0x2f0 [ 236.517774][T18544] ? __sys_sendto+0x492/0x4e0 [ 236.517788][T18544] __sys_sendto+0x492/0x4e0 [ 236.517801][T18544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.517812][T18544] ? __pfx___sys_sendto+0x10/0x10 [ 236.517830][T18544] ? fd_install+0x223/0x580 [ 236.517851][T18544] ? __pfx___sys_socket+0x10/0x10 [ 236.517867][T18544] __x64_sys_sendto+0xe0/0x1c0 [ 236.517881][T18544] ? do_syscall_64+0xae/0x790 [ 236.517896][T18544] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.517910][T18544] do_syscall_64+0x123/0x790 [ 236.517926][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.517938][T18544] RIP: 0033:0x7f032f15fd8e [ 236.517947][T18544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.517958][T18544] RSP: 002b:00007f03300a1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 236.517969][T18544] RAX: ffffffffffffffda RBX: 00007f03300a36c0 RCX: 00007f032f15fd8e [ 236.517977][T18544] RDX: 0000000000000020 RSI: 00007f03300a2000 RDI: 0000000000000010 [ 236.517984][T18544] RBP: 0000000000000000 R08: 00007f03300a1f04 R09: 000000000000000c [ 236.517992][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 236.517999][T18544] R13: 00007f03300a1f58 R14: 00007f03300a2000 R15: 0000000000000000 [ 236.518014][T18544] [ 236.591142][T18553] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 236.621884][T18553] bond21: entered promiscuous mode [ 236.641371][T18553] 8021q: adding VLAN 0 to HW filter on device bond21 [ 236.666662][T18555] bond21: (slave bridge16): making interface the new active one [ 236.666686][T18555] bridge16: entered promiscuous mode [ 236.668474][T18555] bond21: (slave bridge16): Enslaving as an active interface with an up link [ 236.977163][T18576] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 236.979799][T18576] team0: Device xfrm0 is of different type [ 236.992465][T18576] tipc: Enabling of bearer rejected, already enabled [ 237.319312][T18609] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 237.319483][T18609] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.319751][T18609] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.423958][T18618] FAULT_INJECTION: forcing a failure. [ 237.423958][T18618] name failslab, interval 1, probability 0, space 0, times 0 [ 237.423981][T18618] CPU: 0 UID: 0 PID: 18618 Comm: syz.2.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.423997][T18618] Tainted: [L]=SOFTLOCKUP [ 237.424001][T18618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.424009][T18618] Call Trace: [ 237.424013][T18618] [ 237.424018][T18618] dump_stack_lvl+0x100/0x190 [ 237.424037][T18618] should_fail_ex.cold+0x5/0xa [ 237.424053][T18618] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 237.424078][T18618] should_failslab+0xc2/0x120 [ 237.424095][T18618] __kmalloc_cache_noprof+0x91/0x6d0 [ 237.424108][T18618] ? batadv_tvlv_handler_register+0x10d/0x530 [ 237.424128][T18618] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 237.424142][T18618] batadv_tvlv_handler_register+0x10d/0x530 [ 237.424158][T18618] ? __pfx_batadv_iv_init_sel_class+0x10/0x10 [ 237.424172][T18618] batadv_gw_init+0x92/0x100 [ 237.424186][T18618] batadv_mesh_init+0x5b6/0x8f0 [ 237.424202][T18618] batadv_meshif_init_late+0xb26/0xe60 [ 237.424219][T18618] ? __kasan_kmalloc+0xaa/0xb0 [ 237.424232][T18618] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 237.424248][T18618] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 237.424259][T18618] ? register_netdevice+0x507/0x26b0 [ 237.424274][T18618] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 237.424289][T18618] register_netdevice+0x680/0x26b0 [ 237.424302][T18618] ? alloc_netdev_mqs+0x11a7/0x1540 [ 237.424319][T18618] ? __pfx_register_netdevice+0x10/0x10 [ 237.424333][T18618] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 237.424350][T18618] batadv_meshif_newlink+0x8f/0xc0 [ 237.424366][T18618] rtnl_newlink+0x1697/0x2620 [ 237.424383][T18618] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.424393][T18618] ? avc_has_perm_noaudit+0x56/0x470 [ 237.424407][T18618] ? find_held_lock+0x2b/0x80 [ 237.424418][T18618] ? avc_has_perm_noaudit+0x11e/0x470 [ 237.424430][T18618] ? avc_has_perm_noaudit+0x11e/0x470 [ 237.424455][T18618] ? lock_acquire+0x1d1/0x380 [ 237.424468][T18618] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 237.424480][T18618] ? find_held_lock+0x2b/0x80 [ 237.424490][T18618] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.424501][T18618] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.424512][T18618] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.424541][T18618] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.424556][T18618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.424571][T18618] ? __lock_acquire+0x5c0/0x1f40 [ 237.424589][T18618] netlink_rcv_skb+0x159/0x420 [ 237.424601][T18618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.424620][T18618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.424641][T18618] ? netlink_deliver_tap+0x1ae/0xb50 [ 237.424662][T18618] netlink_unicast+0x668/0x950 [ 237.424675][T18618] ? __pfx_netlink_unicast+0x10/0x10 [ 237.424691][T18618] netlink_sendmsg+0x9ac/0x10c0 [ 237.424704][T18618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.424717][T18618] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.424734][T18618] ? ____sys_sendmsg+0xa99/0xc30 [ 237.424745][T18618] ____sys_sendmsg+0xa99/0xc30 [ 237.424757][T18618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.424768][T18618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.424787][T18618] ___sys_sendmsg+0x190/0x1e0 [ 237.424801][T18618] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.424814][T18618] ? rb_commit+0x129/0x9d0 [ 237.424831][T18618] ? find_held_lock+0x2b/0x80 [ 237.424850][T18618] __sys_sendmsg+0x160/0x210 [ 237.424866][T18618] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.424890][T18618] do_syscall_64+0x123/0x790 [ 237.424906][T18618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.424918][T18618] RIP: 0033:0x7fdf1f39f559 [ 237.424929][T18618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.424939][T18618] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.424950][T18618] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 237.424957][T18618] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000006 [ 237.424964][T18618] RBP: 00007fdf1f436b20 R08: 0000000000000000 R09: 0000000000000000 [ 237.424970][T18618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.424976][T18618] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 237.424991][T18618] [ 237.429710][T18618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 237.513666][T18627] SET target dimension over the limit! [ 237.585509][T18633] bond2: option mode: unable to set because the bond device has slaves [ 237.595009][T18633] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 237.679524][ T5799] Bluetooth: hci2: unexpected cc 0x206e length: 9 > 3 [ 237.846747][T18641] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 237.846785][T18641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 237.847160][T18641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 238.103181][T18648] CIFS: Attempting to mount //127.0.0.1/share [ 238.103755][T18648] CIFS: VFS: Error connecting to socket. Aborting operation. [ 238.103812][T18648] CIFS: VFS: cifs_mount failed w/return code = -101 [ 238.298881][T18660] loop5: detected capacity change from 0 to 7 [ 238.301622][T18660] Dev loop5: unable to read RDB block 7 [ 238.301643][T18660] loop5: AHDI p2 p3 [ 238.301653][T18660] loop5: partition table partially beyond EOD, truncated [ 238.301809][T18660] loop5: p2 start 1768910368 is beyond EOD, truncated [ 238.448204][T18669] netlink: 'syz.1.3703': attribute type 5 has an invalid length. [ 238.592563][T18673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 238.592581][T18673] overlayfs: conflicting options: userxattr,redirect_dir=on [ 238.696178][T18688] gadgetfs: bound to dummy_udc driver [ 238.755960][T18694] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 238.755998][T18694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 238.756017][T18694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 238.844298][T18696] __nla_validate_parse: 35 callbacks suppressed [ 238.844320][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3716'. [ 238.901396][T18696] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 238.901424][T18696] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 239.020740][ T5799] Bluetooth: hci0: command 0x1003 tx timeout [ 239.020870][ T5794] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.180744][T11628] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 239.185143][T18717] FAULT_INJECTION: forcing a failure. [ 239.185143][T18717] name failslab, interval 1, probability 0, space 0, times 0 [ 239.185164][T18717] CPU: 2 UID: 0 PID: 18717 Comm: syz.3.3721 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.185179][T18717] Tainted: [L]=SOFTLOCKUP [ 239.185183][T18717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.185189][T18717] Call Trace: [ 239.185194][T18717] [ 239.185199][T18717] dump_stack_lvl+0x100/0x190 [ 239.185219][T18717] should_fail_ex.cold+0x5/0xa [ 239.185235][T18717] should_failslab+0xc2/0x120 [ 239.185251][T18717] __kmalloc_noprof+0xfc/0x840 [ 239.185264][T18717] ? __pfx_dynamic_dname+0x10/0x10 [ 239.185278][T18717] ? tomoyo_encode2+0xfb/0x3c0 [ 239.185292][T18717] tomoyo_encode2+0xfb/0x3c0 [ 239.185305][T18717] tomoyo_encode+0x29/0x50 [ 239.185316][T18717] tomoyo_realpath_from_path+0x18c/0x690 [ 239.185331][T18717] tomoyo_path_number_perm+0x23c/0x580 [ 239.185346][T18717] ? tomoyo_path_number_perm+0x22e/0x580 [ 239.185363][T18717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.185384][T18717] ? __lock_acquire+0x5c0/0x1f40 [ 239.185405][T18717] ? __fget_files+0x34/0x3d0 [ 239.185421][T18717] ? find_held_lock+0x2b/0x80 [ 239.185431][T18717] ? hook_file_ioctl_common+0x140/0x440 [ 239.185448][T18717] ? __fget_files+0x21f/0x3d0 [ 239.185465][T18717] security_file_ioctl+0xd3/0x230 [ 239.185483][T18717] __x64_sys_ioctl+0xb7/0x210 [ 239.185498][T18717] do_syscall_64+0x123/0x790 [ 239.185518][T18717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.185530][T18717] RIP: 0033:0x7f032f19f559 [ 239.185539][T18717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.185550][T18717] RSP: 002b:00007f03300a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.185561][T18717] RAX: ffffffffffffffda RBX: 00007f032f425fa0 RCX: 00007f032f19f559 [ 239.185568][T18717] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 239.185575][T18717] RBP: 00007f03300a3090 R08: 0000000000000000 R09: 0000000000000000 [ 239.185583][T18717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.185591][T18717] R13: 00007f032f426038 R14: 00007f032f425fa0 R15: 00007fff1a80b378 [ 239.185615][T18717] [ 239.185625][T18717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.306785][T18726] gadgetfs: bound to dummy_udc driver [ 239.353295][T11628] usb 6-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 239.354295][T11628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.354321][T11628] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.357191][T11628] usb 6-1: string descriptor 0 read error: -22 [ 239.357300][T11628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.367361][T11628] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 239.367496][T11628] etas_es58x 6-1:1.0: could not retrieve the product info string [ 239.533726][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 239.533740][ T42] audit: type=1400 audit(1792976382.657:2411): avc: denied { write } for pid=18733 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.561894][ T5502] etas_es58x 6-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 239.562067][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.562269][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.562480][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.562664][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.562862][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.562911][ T5502] etas_es58x 6-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 239.594171][T18704] etas_es58x 6-1:1.0: es58x_set_realtime_diff_ns: Previous request to set timestamp has not completed yet [ 239.594263][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.594466][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.594659][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.594859][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.595083][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 239.595198][T18704] etas_es58x 6-1:1.0 can0: es58x_open: Could not open the network device: -EBUSY [ 239.596109][ T854] usb 6-1: USB disconnect, device number 22 [ 239.597166][ T854] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 239.658436][ T42] audit: type=1400 audit(1792976382.777:2412): avc: denied { write } for pid=18736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.695504][T18745] FAULT_INJECTION: forcing a failure. [ 239.695504][T18745] name failslab, interval 1, probability 0, space 0, times 0 [ 239.695527][T18745] CPU: 0 UID: 0 PID: 18745 Comm: syz.2.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.695542][T18745] Tainted: [L]=SOFTLOCKUP [ 239.695546][T18745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.695553][T18745] Call Trace: [ 239.695557][T18745] [ 239.695563][T18745] dump_stack_lvl+0x100/0x190 [ 239.695586][T18745] should_fail_ex.cold+0x5/0xa [ 239.695604][T18745] should_failslab+0xc2/0x120 [ 239.695620][T18745] __kmalloc_cache_noprof+0x91/0x6d0 [ 239.695632][T18745] ? nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 239.695648][T18745] nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 239.695660][T18745] ? nft_chain_lookup+0x58d/0xa60 [ 239.695676][T18745] ? nft_chain_lookup+0x59c/0xa60 [ 239.695690][T18745] ? __kasan_kmalloc+0xaa/0xb0 [ 239.695703][T18745] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 239.695716][T18745] ? __pfx_nft_chain_lookup+0x10/0x10 [ 239.695729][T18745] ? __lock_acquire+0x5c0/0x1f40 [ 239.695753][T18745] ? nla_strcmp+0xff/0x130 [ 239.695776][T18745] ? nft_table_lookup.part.0+0x1e3/0x230 [ 239.695790][T18745] nf_tables_newchain+0x1824/0x2a50 [ 239.695801][T18745] ? net_generic+0xba/0x2a0 [ 239.695820][T18745] ? __pfx_nf_tables_newchain+0x10/0x10 [ 239.695832][T18745] ? __pfx___nla_validate_parse+0x10/0x10 [ 239.695844][T18745] ? lock_acquire+0x1d1/0x380 [ 239.695857][T18745] ? net_generic+0x25/0x2a0 [ 239.695873][T18745] ? __nla_parse+0x40/0x60 [ 239.695899][T18745] nfnetlink_rcv_batch+0x1410/0x2880 [ 239.695923][T18745] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 239.695936][T18745] ? stack_trace_save+0x8e/0xc0 [ 239.695952][T18745] ? lock_acquire+0x1d1/0x380 [ 239.695964][T18745] ? avc_has_perm_noaudit+0x56/0x470 [ 239.695983][T18745] ? avc_has_perm_noaudit+0x145/0x470 [ 239.696009][T18745] ? __nla_parse+0x40/0x60 [ 239.696022][T18745] nfnetlink_rcv+0x3bd/0x440 [ 239.696036][T18745] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.696054][T18745] netlink_unicast+0x668/0x950 [ 239.696067][T18745] ? __pfx_netlink_unicast+0x10/0x10 [ 239.696086][T18745] netlink_sendmsg+0x9ac/0x10c0 [ 239.696099][T18745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.696113][T18745] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.696130][T18745] ? ____sys_sendmsg+0xa99/0xc30 [ 239.696142][T18745] ____sys_sendmsg+0xa99/0xc30 [ 239.696153][T18745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.696165][T18745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.696181][T18745] ? lock_acquire+0x1d1/0x380 [ 239.696194][T18745] ? get_pid_task+0x2a/0x250 [ 239.696211][T18745] ___sys_sendmsg+0x190/0x1e0 [ 239.696225][T18745] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.696238][T18745] ? get_pid_task+0x106/0x250 [ 239.696258][T18745] ? find_held_lock+0x2b/0x80 [ 239.696278][T18745] __sys_sendmsg+0x160/0x210 [ 239.696294][T18745] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.696318][T18745] do_syscall_64+0x123/0x790 [ 239.696335][T18745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.696347][T18745] RIP: 0033:0x7fdf1f39f559 [ 239.696357][T18745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.696368][T18745] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.696379][T18745] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 239.696386][T18745] RDX: 0000000004040850 RSI: 0000200000000180 RDI: 0000000000000006 [ 239.696392][T18745] RBP: 00007fdf202c8090 R08: 0000000000000000 R09: 0000000000000000 [ 239.696399][T18745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.696405][T18745] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 239.696420][T18745] [ 239.732658][ T42] audit: type=1400 audit(1792976382.857:2413): avc: denied { module_load } for pid=18747 comm="syz.5.3729" path="/367/bus" dev="tmpfs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 239.733249][T18748] Invalid ELF header magic: != ELF [ 239.733431][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'. [ 239.733441][T18750] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3730'. [ 239.740449][ T42] audit: type=1400 audit(1792976382.857:2414): avc: denied { write } for pid=18746 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.845629][ T42] audit: type=1400 audit(1792976382.967:2415): avc: denied { write } for pid=18754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.901566][ T42] audit: type=1400 audit(1792976383.027:2416): avc: denied { write } for pid=18759 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.005553][ T42] audit: type=1400 audit(1792976383.127:2417): avc: denied { write } for pid=18766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.029931][T18773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=18773 comm=syz.5.3737 [ 240.039286][T18773] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3737'. [ 240.045480][T18773] FAULT_INJECTION: forcing a failure. [ 240.045480][T18773] name failslab, interval 1, probability 0, space 0, times 0 [ 240.045509][T18773] CPU: 0 UID: 0 PID: 18773 Comm: syz.5.3737 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.045534][T18773] Tainted: [L]=SOFTLOCKUP [ 240.045541][T18773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.045553][T18773] Call Trace: [ 240.045559][T18773] [ 240.045567][T18773] dump_stack_lvl+0x100/0x190 [ 240.045597][T18773] should_fail_ex.cold+0x5/0xa [ 240.045625][T18773] should_failslab+0xc2/0x120 [ 240.045651][T18773] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.045674][T18773] ? dev_queue_xmit_nit+0x38/0xa80 [ 240.045691][T18773] ? skb_clone+0x187/0x3f0 [ 240.045722][T18773] skb_clone+0x187/0x3f0 [ 240.045749][T18773] dev_queue_xmit_nit+0x255/0xa80 [ 240.045775][T18773] dev_hard_start_xmit+0x2f5/0x760 [ 240.045812][T18773] __dev_queue_xmit+0x1c2f/0x4a50 [ 240.045848][T18773] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.045887][T18773] ? rcu_is_watching+0x13/0xc0 [ 240.045915][T18773] ? __skb_clone+0x5c7/0x7c0 [ 240.045945][T18773] netlink_deliver_tap+0x9b8/0xb50 [ 240.045996][T18773] netlink_unicast+0x708/0x950 [ 240.046019][T18773] ? __pfx_netlink_unicast+0x10/0x10 [ 240.046047][T18773] netlink_sendmsg+0x9ac/0x10c0 [ 240.046071][T18773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.046097][T18773] ? selinux_socket_sendmsg+0x198/0x2f0 [ 240.046128][T18773] ? __sys_sendto+0x492/0x4e0 [ 240.046152][T18773] __sys_sendto+0x492/0x4e0 [ 240.046173][T18773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.046193][T18773] ? __pfx___sys_sendto+0x10/0x10 [ 240.046223][T18773] ? fd_install+0x223/0x580 [ 240.046259][T18773] ? __pfx___sys_socket+0x10/0x10 [ 240.046287][T18773] __x64_sys_sendto+0xe0/0x1c0 [ 240.046310][T18773] ? do_syscall_64+0xae/0x790 [ 240.046334][T18773] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.046359][T18773] do_syscall_64+0x123/0x790 [ 240.046384][T18773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.046404][T18773] RIP: 0033:0x7f093c95fd8e [ 240.046421][T18773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.046436][T18773] RSP: 002b:00007f093d819e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 240.046457][T18773] RAX: ffffffffffffffda RBX: 00007f093d81b6c0 RCX: 00007f093c95fd8e [ 240.046468][T18773] RDX: 0000000000000020 RSI: 00007f093d81a000 RDI: 0000000000000010 [ 240.046481][T18773] RBP: 0000000000000000 R08: 00007f093d819f04 R09: 000000000000000c [ 240.046491][T18773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 240.046501][T18773] R13: 00007f093d819f58 R14: 00007f093d81a000 R15: 0000000000000000 [ 240.046527][T18773] [ 240.068691][ T42] audit: type=1400 audit(1792976383.187:2418): avc: denied { write } for pid=18775 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.153967][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0a39 instead [ 240.153984][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xe28e instead [ 240.153993][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe657 instead [ 240.154002][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x0a4e instead [ 240.154011][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xe6d3 instead [ 240.154020][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7559 instead [ 240.154028][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x19a6 instead [ 240.154037][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x6dc4 instead [ 240.154046][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x2785 instead [ 240.154055][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x25fa instead [ 240.154064][T18780] jffs2: Further such events for this erase block will not be printed [ 240.154344][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x409f instead [ 240.154355][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xc7bf instead [ 240.154364][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xbf96 instead [ 240.154373][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x87ac instead [ 240.154382][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xf082 instead [ 240.154390][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x0358 instead [ 240.154398][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa70d instead [ 240.154406][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x890a instead [ 240.154415][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xee4e instead [ 240.154423][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xb199 instead [ 240.154464][T18780] jffs2: Further such events for this erase block will not be printed [ 240.154701][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x1cbf instead [ 240.154711][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x9d07 instead [ 240.154720][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x1bcd instead [ 240.154729][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x6a8e instead [ 240.154737][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x7692 instead [ 240.154745][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xf898 instead [ 240.154754][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xdc06 instead [ 240.154762][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x6c67 instead [ 240.154770][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x063f instead [ 240.154779][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x2466 instead [ 240.154786][T18780] jffs2: Further such events for this erase block will not be printed [ 240.155060][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xba2b instead [ 240.155072][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0956 instead [ 240.155081][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xf8fe instead [ 240.155090][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xcbe0 instead [ 240.155099][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x183f instead [ 240.155108][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x60d3 instead [ 240.155117][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x43db instead [ 240.155126][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xddb1 instead [ 240.155135][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x35c8 instead [ 240.155144][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x7db4 instead [ 240.155152][T18780] jffs2: Further such events for this erase block will not be printed [ 240.155388][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x30ef instead [ 240.155397][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x8b1d instead [ 240.155406][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xcdfb instead [ 240.155415][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xb9af instead [ 240.155423][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xd810 instead [ 240.155431][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xcedd instead [ 240.155439][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6efb instead [ 240.155447][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x9ec3 instead [ 240.155455][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x962a instead [ 240.155464][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x715e instead [ 240.155471][T18780] jffs2: Further such events for this erase block will not be printed [ 240.155691][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x70a6 instead [ 240.155699][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x307a instead [ 240.155707][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xd8e3 instead [ 240.155715][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x86ce instead [ 240.156445][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x9462 instead [ 240.156457][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xa582 instead [ 240.160588][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9945 instead [ 240.160601][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xdeb9 instead [ 240.160609][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x6d03 instead [ 240.160618][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x0852 instead [ 240.160627][T18780] jffs2: Further such events for this erase block will not be printed [ 240.160869][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x5a22 instead [ 240.160879][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xf81e instead [ 240.160887][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xac05 instead [ 240.160896][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x45b8 instead [ 240.160944][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xd63d instead [ 240.160954][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xf72c instead [ 240.160962][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x51b6 instead [ 240.160970][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x077d instead [ 240.160978][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x3d5a instead [ 240.160987][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x70bb instead [ 240.160996][T18780] jffs2: Further such events for this erase block will not be printed [ 240.161225][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x092d instead [ 240.161234][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x04db instead [ 240.161242][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x902b instead [ 240.161256][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x23be instead [ 240.161265][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x162e instead [ 240.161274][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x2729 instead [ 240.161283][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x7091 instead [ 240.161292][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xc705 instead [ 240.161301][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xdb7f instead [ 240.161310][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x0ceb instead [ 240.161319][T18780] jffs2: Further such events for this erase block will not be printed [ 240.161550][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x8365 instead [ 240.161558][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x75ca instead [ 240.161602][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x9de0 instead [ 240.161612][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x2169 instead [ 240.161620][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xd6cb instead [ 240.161628][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x4f76 instead [ 240.161636][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1c7f instead [ 240.161645][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x7b43 instead [ 240.161654][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xc994 instead [ 240.161662][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x6765 instead [ 240.161671][T18780] jffs2: Further such events for this erase block will not be printed [ 240.161896][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x97b0 instead [ 240.161943][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x4fff instead [ 240.161953][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x102b instead [ 240.161962][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xa1ed instead [ 240.161971][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x7767 instead [ 240.161979][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xebae instead [ 240.161988][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5539 instead [ 240.161996][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x7164 instead [ 240.162005][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xf902 instead [ 240.162013][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x2fa3 instead [ 240.162021][T18780] jffs2: Further such events for this erase block will not be printed [ 240.162245][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9334 instead [ 240.162259][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x1b7c instead [ 240.162267][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x0f1c instead [ 240.162276][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xebf2 instead [ 240.162285][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x7627 instead [ 240.162294][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xbebd instead [ 240.162303][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xef8c instead [ 240.162311][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xe4e4 instead [ 240.162320][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xcb55 instead [ 240.162329][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xa561 instead [ 240.162337][T18780] jffs2: Further such events for this erase block will not be printed [ 240.162561][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x70cb instead [ 240.162571][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0844 instead [ 240.162580][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x27fe instead [ 240.162588][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x5c68 instead [ 240.162596][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xb8af instead [ 240.162604][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x3769 instead [ 240.162612][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xce3d instead [ 240.162620][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x0fd8 instead [ 240.162628][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x85a9 instead [ 240.162637][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xc489 instead [ 240.162644][T18780] jffs2: Further such events for this erase block will not be printed [ 240.172166][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xc3ab instead [ 240.172180][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xf8ea instead [ 240.172188][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xee69 instead [ 240.172197][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x04ce instead [ 240.172205][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc091 instead [ 240.172213][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x5146 instead [ 240.172221][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5b2d instead [ 240.172229][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x18cd instead [ 240.172237][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x8747 instead [ 240.172245][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x7bbd instead [ 240.172257][T18780] jffs2: Further such events for this erase block will not be printed [ 240.172488][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x92cc instead [ 240.172498][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xf4a9 instead [ 240.172507][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xc7b3 instead [ 240.172515][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x979a instead [ 240.172523][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xf1a1 instead [ 240.172531][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x1467 instead [ 240.172539][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc33a instead [ 240.172547][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x680f instead [ 240.172555][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x8a1b instead [ 240.172563][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x0428 instead [ 240.172571][T18780] jffs2: Further such events for this erase block will not be printed [ 240.172797][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xe5d0 instead [ 240.172806][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x9008 instead [ 240.172814][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x2426 instead [ 240.172823][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x76ef instead [ 240.172831][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x42cd instead [ 240.172839][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x51a6 instead [ 240.172847][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1d88 instead [ 240.172855][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x6f88 instead [ 240.172863][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x2ba7 instead [ 240.172872][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x7f0e instead [ 240.172879][T18780] jffs2: Further such events for this erase block will not be printed [ 240.173127][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xc732 instead [ 240.173137][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x07f3 instead [ 240.173145][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xb786 instead [ 240.173153][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x47cb instead [ 240.173161][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x3524 instead [ 240.173169][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xa9fb instead [ 240.173177][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3b76 instead [ 240.173185][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x1ff3 instead [ 240.173193][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x76a8 instead [ 240.173202][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x20fa instead [ 240.173209][T18780] jffs2: Further such events for this erase block will not be printed [ 240.173426][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xb255 instead [ 240.173434][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x7945 instead [ 240.173442][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x2e3f instead [ 240.173450][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x0197 instead [ 240.173458][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xddce instead [ 240.173467][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x7322 instead [ 240.173475][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd298 instead [ 240.173483][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xe201 instead [ 240.173491][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xb4ca instead [ 240.173499][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x7281 instead [ 240.173507][T18780] jffs2: Further such events for this erase block will not be printed [ 240.173719][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x7c3e instead [ 240.173727][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x2bdd instead [ 240.173735][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x6b9d instead [ 240.173744][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x4860 instead [ 240.173752][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x66b3 instead [ 240.173760][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xa7c3 instead [ 240.173768][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3431 instead [ 240.173776][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x5fb5 instead [ 240.173784][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xe62d instead [ 240.173792][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xf327 instead [ 240.173800][T18780] jffs2: Further such events for this erase block will not be printed [ 240.174040][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xad27 instead [ 240.174050][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xbe27 instead [ 240.174059][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x3439 instead [ 240.174067][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xdd8f instead [ 240.174075][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xe282 instead [ 240.174083][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xdb12 instead [ 240.174091][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4a0e instead [ 240.174099][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xdbf8 instead [ 240.174107][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xbf84 instead [ 240.174115][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xee41 instead [ 240.174123][T18780] jffs2: Further such events for this erase block will not be printed [ 240.178779][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x32ef instead [ 240.178792][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xf5e8 instead [ 240.178800][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xb08c instead [ 240.178809][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xcd45 instead [ 240.178817][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x664d instead [ 240.178825][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xdf97 instead [ 240.178833][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xed56 instead [ 240.178842][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x960d instead [ 240.178850][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe87b instead [ 240.178858][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x9672 instead [ 240.178866][T18780] jffs2: Further such events for this erase block will not be printed [ 240.179175][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4742 instead [ 240.179191][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x6919 instead [ 240.179200][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xb74a instead [ 240.179208][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x6362 instead [ 240.179216][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xbf38 instead [ 240.179224][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x0536 instead [ 240.179232][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1d93 instead [ 240.179241][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xdf8c instead [ 240.179253][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xc81c instead [ 240.179262][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x5aab instead [ 240.179270][T18780] jffs2: Further such events for this erase block will not be printed [ 240.179484][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xa80b instead [ 240.179493][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xd451 instead [ 240.179501][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x8388 instead [ 240.179510][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xc1bc instead [ 240.179518][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xecd4 instead [ 240.179526][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x9ede instead [ 240.179535][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9072 instead [ 240.179543][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xf7cd instead [ 240.179551][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x843f instead [ 240.179560][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x532f instead [ 240.179567][T18780] jffs2: Further such events for this erase block will not be printed [ 240.179817][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xc8b7 instead [ 240.179828][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x6de5 instead [ 240.179836][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x11b5 instead [ 240.179844][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x5fde instead [ 240.179852][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x23c3 instead [ 240.179861][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x7ef0 instead [ 240.179869][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc3f6 instead [ 240.179877][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x693e instead [ 240.179885][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xf002 instead [ 240.179894][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x5b93 instead [ 240.179939][T18780] jffs2: Further such events for this erase block will not be printed [ 240.180159][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x0546 instead [ 240.180168][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x7ffc instead [ 240.180176][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x25d1 instead [ 240.180184][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x28b3 instead [ 240.180192][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xdf4f instead [ 240.180201][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xa26f instead [ 240.180209][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x7329 instead [ 240.180217][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0xcabe instead [ 240.180225][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xbad4 instead [ 240.180234][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x9414 instead [ 240.180242][T18780] jffs2: Further such events for this erase block will not be printed [ 240.180480][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x0f0d instead [ 240.180491][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x71b4 instead [ 240.180499][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xbaad instead [ 240.180507][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xcb62 instead [ 240.180515][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xae57 instead [ 240.180523][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xb24e instead [ 240.191145][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xb422 instead [ 240.191165][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xb4bd instead [ 240.191180][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xdceb instead [ 240.191194][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x0bff instead [ 240.191208][T18780] jffs2: Further such events for this erase block will not be printed [ 240.191481][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x7a31 instead [ 240.191492][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xbdc1 instead [ 240.191500][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xe099 instead [ 240.191508][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x7c03 instead [ 240.191517][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x2545 instead [ 240.191525][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xb943 instead [ 240.191533][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x240a instead [ 240.191541][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x2364 instead [ 240.191549][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x54d8 instead [ 240.191557][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xe478 instead [ 240.191565][T18780] jffs2: Further such events for this erase block will not be printed [ 240.191780][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xca02 instead [ 240.191788][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x2179 instead [ 240.191796][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x2479 instead [ 240.191804][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x27a1 instead [ 240.191812][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x19d5 instead [ 240.191820][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x0184 instead [ 240.191829][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa546 instead [ 240.191837][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x88f0 instead [ 240.191845][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xef1d instead [ 240.191853][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x64d4 instead [ 240.191861][T18780] jffs2: Further such events for this erase block will not be printed [ 240.192108][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x8d31 instead [ 240.192118][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x6214 instead [ 240.192126][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x2828 instead [ 240.192134][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xe312 instead [ 240.192142][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xc60c instead [ 240.192150][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x621d instead [ 240.192159][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x594d instead [ 240.192167][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xcae6 instead [ 240.192175][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x44cb instead [ 240.192183][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x9c31 instead [ 240.192191][T18780] jffs2: Further such events for this erase block will not be printed [ 240.192407][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xf36f instead [ 240.192416][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xcdb6 instead [ 240.192423][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xbfda instead [ 240.192432][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x8ba5 instead [ 240.192440][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x6161 instead [ 240.192448][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x6c23 instead [ 240.192456][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x70c4 instead [ 240.192464][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x5073 instead [ 240.192472][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x70e8 instead [ 240.192480][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xc16b instead [ 240.192488][T18780] jffs2: Further such events for this erase block will not be printed [ 240.192715][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x0fda instead [ 240.192724][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x8ff5 instead [ 240.192732][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x4b8a instead [ 240.192740][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x2103 instead [ 240.192748][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x89a7 instead [ 240.192756][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xcb98 instead [ 240.192764][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc602 instead [ 240.192773][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x5fd0 instead [ 240.192781][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x13d2 instead [ 240.192789][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x841d instead [ 240.192797][T18780] jffs2: Further such events for this erase block will not be printed [ 240.193040][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x0280 instead [ 240.193050][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0420 instead [ 240.193059][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xfdbe instead [ 240.193067][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xde0c instead [ 240.193075][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xaa26 instead [ 240.193083][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x1627 instead [ 240.193091][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xeaf0 instead [ 240.193099][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x177b instead [ 240.193107][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xc68b instead [ 240.193115][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x2930 instead [ 240.193124][T18780] jffs2: Further such events for this erase block will not be printed [ 240.193340][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x0631 instead [ 240.193348][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0c28 instead [ 240.193356][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xf2b4 instead [ 240.193364][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x0735 instead [ 240.193373][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x7b4e instead [ 240.193381][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x09dc instead [ 240.193389][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf5fa instead [ 240.203194][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x7967 instead [ 240.203206][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x3428 instead [ 240.203215][T18780] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xf780 instead [ 240.203223][T18780] jffs2: Further such events for this erase block will not be printed [ 240.203436][T18780] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 240.203441][T18780] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 240.390155][T18800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=18800 comm=syz.1.3748 [ 240.398349][T18800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3748'. [ 240.403468][T18800] FAULT_INJECTION: forcing a failure. [ 240.403468][T18800] name failslab, interval 1, probability 0, space 0, times 0 [ 240.403492][T18800] CPU: 0 UID: 0 PID: 18800 Comm: syz.1.3748 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.403507][T18800] Tainted: [L]=SOFTLOCKUP [ 240.403511][T18800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.403517][T18800] Call Trace: [ 240.403522][T18800] [ 240.403527][T18800] dump_stack_lvl+0x100/0x190 [ 240.403548][T18800] should_fail_ex.cold+0x5/0xa [ 240.403565][T18800] should_failslab+0xc2/0x120 [ 240.403581][T18800] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.403594][T18800] ? dev_queue_xmit_nit+0x38/0xa80 [ 240.403605][T18800] ? skb_clone+0x187/0x3f0 [ 240.403629][T18800] skb_clone+0x187/0x3f0 [ 240.403647][T18800] dev_queue_xmit_nit+0x255/0xa80 [ 240.403663][T18800] dev_hard_start_xmit+0x2f5/0x760 [ 240.403681][T18800] __dev_queue_xmit+0x1c2f/0x4a50 [ 240.403703][T18800] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.403727][T18800] ? rcu_is_watching+0x13/0xc0 [ 240.403743][T18800] ? __skb_clone+0x5c7/0x7c0 [ 240.403760][T18800] netlink_deliver_tap+0x9b8/0xb50 [ 240.403780][T18800] netlink_unicast+0x708/0x950 [ 240.403792][T18800] ? __pfx_netlink_unicast+0x10/0x10 [ 240.403824][T18800] netlink_sendmsg+0x9ac/0x10c0 [ 240.403840][T18800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.403855][T18800] ? selinux_socket_sendmsg+0x198/0x2f0 [ 240.403873][T18800] ? __sys_sendto+0x492/0x4e0 [ 240.403888][T18800] __sys_sendto+0x492/0x4e0 [ 240.403903][T18800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.403914][T18800] ? __pfx___sys_sendto+0x10/0x10 [ 240.403933][T18800] ? fd_install+0x223/0x580 [ 240.403954][T18800] ? __pfx___sys_socket+0x10/0x10 [ 240.403970][T18800] __x64_sys_sendto+0xe0/0x1c0 [ 240.403985][T18800] ? do_syscall_64+0xae/0x790 [ 240.404000][T18800] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.404014][T18800] do_syscall_64+0x123/0x790 [ 240.404029][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.404041][T18800] RIP: 0033:0x7f3fed95fd8e [ 240.404050][T18800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.404061][T18800] RSP: 002b:00007f3fee824e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 240.404072][T18800] RAX: ffffffffffffffda RBX: 00007f3fee8266c0 RCX: 00007f3fed95fd8e [ 240.404079][T18800] RDX: 0000000000000020 RSI: 00007f3fee825000 RDI: 0000000000000010 [ 240.404086][T18800] RBP: 0000000000000000 R08: 00007f3fee824f04 R09: 000000000000000c [ 240.404094][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 240.404102][T18800] R13: 00007f3fee824f58 R14: 00007f3fee825000 R15: 0000000000000000 [ 240.404117][T18800] [ 240.465347][T18809] FAULT_INJECTION: forcing a failure. [ 240.465347][T18809] name failslab, interval 1, probability 0, space 0, times 0 [ 240.465394][T18809] CPU: 1 UID: 0 PID: 18809 Comm: syz.1.3752 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.465420][T18809] Tainted: [L]=SOFTLOCKUP [ 240.465427][T18809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.465438][T18809] Call Trace: [ 240.465445][T18809] [ 240.465453][T18809] dump_stack_lvl+0x100/0x190 [ 240.465487][T18809] should_fail_ex.cold+0x5/0xa [ 240.465516][T18809] should_failslab+0xc2/0x120 [ 240.465542][T18809] __kmalloc_node_noprof+0xff/0x870 [ 240.465564][T18809] ? __get_vm_area_node+0x1ff/0x350 [ 240.465589][T18809] ? __get_vm_area_node+0x22b/0x350 [ 240.465612][T18809] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 240.465644][T18809] __vmalloc_node_range_noprof+0x424/0x1440 [ 240.465669][T18809] ? __lock_acquire+0x5c0/0x1f40 [ 240.465698][T18809] ? process_measurement+0x2ec/0x2350 [ 240.465721][T18809] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.465746][T18809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.465772][T18809] ? __lock_acquire+0x5c0/0x1f40 [ 240.465799][T18809] ? avc_has_perm_noaudit+0x145/0x470 [ 240.465824][T18809] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.465843][T18809] __vmalloc_node_noprof+0xad/0xf0 [ 240.465870][T18809] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.465907][T18810] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 240.465892][T18809] __vmalloc_noprof+0xa3/0x120 [ 240.465940][T18809] ? __pfx___vmalloc_noprof+0x10/0x10 [ 240.465967][T18809] ? __fget_files+0x21f/0x3d0 [ 240.465993][T18809] bpf_prog_alloc_no_stats+0x59/0x690 [ 240.466014][T18809] bpf_prog_alloc+0x3b/0x200 [ 240.466032][T18809] bpf_prog_load+0x1178/0x2ba0 [ 240.466055][T18809] ? avc_has_perm_noaudit+0x11e/0x470 [ 240.466082][T18809] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.466128][T18809] __sys_bpf+0x146f/0x4b60 [ 240.466159][T18809] ? __pfx___sys_bpf+0x10/0x10 [ 240.466184][T18809] ? find_held_lock+0x2b/0x80 [ 240.466200][T18809] ? get_pid_task+0xfc/0x250 [ 240.466225][T18809] ? get_pid_task+0xfc/0x250 [ 240.466263][T18809] ? find_held_lock+0x2b/0x80 [ 240.466286][T18809] ? rcu_read_lock_any_held+0x6a/0x90 [ 240.466305][T18809] ? find_held_lock+0x2b/0x80 [ 240.466322][T18809] ? ksys_write+0x190/0x250 [ 240.466343][T18809] ? ksys_write+0x190/0x250 [ 240.466364][T18809] ? lock_acquire+0x1d1/0x380 [ 240.466403][T18809] ? fput+0x7c/0x100 [ 240.466429][T18809] ? ksys_write+0x1ac/0x250 [ 240.466454][T18809] ? __x64_sys_bpf+0xce/0x140 [ 240.466477][T18809] __x64_sys_bpf+0xce/0x140 [ 240.466502][T18809] ? do_syscall_64+0xae/0x790 [ 240.466528][T18809] do_syscall_64+0x123/0x790 [ 240.466554][T18809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.466573][T18809] RIP: 0033:0x7f3fed99f559 [ 240.466589][T18809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.466606][T18809] RSP: 002b:00007f3fee826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.466625][T18809] RAX: ffffffffffffffda RBX: 00007f3fedc25fa0 RCX: 00007f3fed99f559 [ 240.466637][T18809] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 240.466648][T18809] RBP: 00007f3fee826090 R08: 0000000000000000 R09: 0000000000000000 [ 240.466659][T18809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.466670][T18809] R13: 00007f3fedc26038 R14: 00007f3fedc25fa0 R15: 00007ffe6d1f2e38 [ 240.466696][T18809] [ 240.477891][T18810] netlink: 'syz.3.3751': attribute type 20 has an invalid length. [ 240.481615][T18814] sctp: sctp_init_sock: sk:ffff88803757b780 [ 240.481799][T18810] sctp: sctp_setsockopt: sk:ffff88803757b780, optname:133 [ 240.481852][T18811] sctp: sctp_do_bind: sk:ffff88803757b780, new addr:::, port:0, new port:0, len:28 [ 240.481869][T18811] sctp: sctp_get_port_local: begins, snum:0 [ 240.481963][T18811] sctp: Created asoc ffff888048934000 [ 240.482340][T18811] sctp: sctp_assoc_add_peer: association:ffff888048934000 addr:172.20.20.170:20004 state:65535 [ 240.482365][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482476][T18811] sctp: no route [ 240.482482][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482491][T18811] sctp: no route [ 240.482496][T18811] sctp: sctp_assoc_set_pmtu: asoc:ffff888048934000, pmtu:1500, frag_point:1432 [ 240.482506][T18811] sctp: sctp_packet_init: packet:ffff8880274acb08 transport:ffff8880274ac800 [ 240.482529][T18811] sctp: sctp_do_sm[pre-fn]: ep:ffff888054ee1800, EVENT_T_PRIMITIVE, PRIMITIVE_ASSOCIATE, asoc:ffff888048934000[STATE_CLOSED], sctp_sf_do_prm_asoc [ 240.482582][T18811] sctp: sctp_do_sm[post-fn]: asoc:ffff888048934000, status:DISPOSITION_CONSUME [ 240.482591][T18811] sctp: sctp_cmd_new_state: asoc:ffff888048934000[STATE_COOKIE_WAIT] [ 240.482603][T18811] sctp: sctp_outq_tail: outq:ffff8880489347e0, chunk:ffff88805f5f5680[INIT] [ 240.482614][T18811] sctp: sctp_packet_config: packet:ffff8880274acb08 vtag:0x0 [ 240.482622][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482705][T18811] sctp: no route [ 240.482710][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482720][T18811] sctp: no route [ 240.482725][T18811] sctp: sctp_assoc_set_pmtu: asoc:ffff888048934000, pmtu:1500, frag_point:1432 [ 240.482735][T18811] sctp: sctp_packet_init: packet:ffffc900047ef290 transport:ffff8880274ac800 [ 240.482743][T18811] sctp: sctp_packet_config: packet:ffffc900047ef290 vtag:0x0 [ 240.482752][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482834][T18811] sctp: no route [ 240.482839][T18811] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 240.482848][T18811] sctp: no route [ 240.482853][T18811] sctp: sctp_assoc_set_pmtu: asoc:ffff888048934000, pmtu:1500, frag_point:1432 [ 240.482862][T18811] sctp: sctp_packet_append_chunk: packet:ffffc900047ef290 chunk:ffff88805f5f5680 [ 240.482872][T18811] sctp: sctp_packet_transmit: packet:ffffc900047ef290 [ 240.482957][T18811] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888048934000[STATE_CLOSED] [ 240.482968][T18811] sctp: sctp_sendmsg_to_asoc: we associated primitively [ 240.482998][T18811] sctp: sctp_do_sm[pre-fn]: ep:ffff888054ee1800, EVENT_T_PRIMITIVE, PRIMITIVE_SEND, asoc:ffff888048934000[STATE_COOKIE_WAIT], sctp_sf_do_prm_send [ 240.483011][T18811] sctp: sctp_do_sm[post-fn]: asoc:ffff888048934000, status:DISPOSITION_CONSUME [ 240.483019][T18811] sctp: sctp_outq_tail: outq:ffff8880489347e0, chunk:ffff88805f5f5400[DATA] [ 240.483028][T18811] sctp: sctp_outq_tail: outqueueing: outq:ffff8880489347e0, chunk:ffff88805f5f5400[DATA]) [ 240.483058][T18811] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888048934000[STATE_CLOSED] [ 240.483068][T18811] sctp: sctp_sendmsg_to_asoc: we sent primitively [ 240.483074][T18811] sctp: sctp_wait_for_connect: asoc:ffff888048934000, timeo:0 [ 240.489019][T18811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21711 sclass=netlink_route_socket pid=18811 comm=syz.3.3751 [ 240.508406][ T42] audit: type=1400 audit(1792976383.627:2419): avc: denied { getopt } for pid=18817 comm="syz.5.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.568523][T18807] sctp: sctp_close: sk:ffff88803757b780, timeout:0 [ 240.568542][T18807] sctp: sctp_do_sm[pre-fn]: ep:ffff888054ee1800, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff888048934000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 240.568557][T18807] sctp: sctp_do_sm[post-fn]: asoc:ffff888048934000, status:DISPOSITION_DELETE_TCB [ 240.568570][T18807] sctp: sctp_cmd_new_state: asoc:ffff888048934000[STATE_CLOSED] [ 240.568669][T18807] sctp: sctp_packet_free: packet:ffff8880274acb08 [ 240.568691][T18807] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 240.568703][T18807] sctp: sctp_destroy_sock: sk:ffff88803757b780 [ 240.661644][T18828] FAULT_INJECTION: forcing a failure. [ 240.661644][T18828] name failslab, interval 1, probability 0, space 0, times 0 [ 240.661674][T18828] CPU: 0 UID: 0 PID: 18828 Comm: syz.2.3756 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.661698][T18828] Tainted: [L]=SOFTLOCKUP [ 240.661712][T18828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.661723][T18828] Call Trace: [ 240.661730][T18828] [ 240.661738][T18828] dump_stack_lvl+0x100/0x190 [ 240.661768][T18828] should_fail_ex.cold+0x5/0xa [ 240.661795][T18828] should_failslab+0xc2/0x120 [ 240.661820][T18828] __kmalloc_noprof+0xfc/0x840 [ 240.661840][T18828] ? rcu_is_watching+0x13/0xc0 [ 240.661858][T18828] ? tomoyo_realpath_from_path+0xb6/0x690 [ 240.661884][T18828] tomoyo_realpath_from_path+0xb6/0x690 [ 240.661910][T18828] tomoyo_path_number_perm+0x23c/0x580 [ 240.661934][T18828] ? tomoyo_path_number_perm+0x22e/0x580 [ 240.661961][T18828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.662012][T18828] ? __lock_acquire+0x5c0/0x1f40 [ 240.662048][T18828] ? __fget_files+0x34/0x3d0 [ 240.662076][T18828] ? find_held_lock+0x2b/0x80 [ 240.662093][T18828] ? hook_file_ioctl_common+0x140/0x440 [ 240.662121][T18828] ? __fget_files+0x21f/0x3d0 [ 240.662152][T18828] security_file_ioctl+0xd3/0x230 [ 240.662181][T18828] __x64_sys_ioctl+0xb7/0x210 [ 240.662206][T18828] do_syscall_64+0x123/0x790 [ 240.662234][T18828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.662252][T18828] RIP: 0033:0x7fdf1f39f559 [ 240.662269][T18828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.662285][T18828] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.662328][T18828] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 240.662341][T18828] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 240.662353][T18828] RBP: 00007fdf202c8090 R08: 0000000000000000 R09: 0000000000000000 [ 240.662363][T18828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.662374][T18828] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 240.662402][T18828] [ 240.662442][T18828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.695850][T18841] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3767'. [ 240.695865][T18841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.720289][T18839] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 240.798952][T18847] tipc: Enabling of bearer rejected, failed to enable media [ 240.799758][T18849] netlink: 'syz.2.3763': attribute type 10 has an invalid length. [ 240.825134][T18851] sctp: sctp_init_sock: sk:ffff88803757ca00 [ 240.826669][T18851] sctp: sctp_do_bind: sk:ffff88803757ca00, new addr:::, port:0, new port:0, len:28 [ 240.826702][T18851] sctp: sctp_get_port_local: begins, snum:0 [ 240.826797][T18851] sctp: Created asoc ffff888035d70000 [ 240.829523][T18851] sctp: sctp_assoc_add_peer: association:ffff888035d70000 addr:[fe80::11]:0 state:65535 [ 240.829571][T18851] sctp: sctp_v6_get_dst: dst=fe80:0000:0000:0000:0000:0000:0000:0011 [ 240.829718][T18851] sctp: rt6_dst:fe80:0000:0000:0000:0000:0000:0000:0000/120 rt6_src:fe80:0000:0000:0000:0000:0000:0000:0014 [ 240.829742][T18851] sctp: sctp_v6_get_saddr: asoc:ffff888035d70000 dst:ffff888038dda640 [ 240.829757][T18851] sctp: sctp_v6_get_dst: dst=fe80:0000:0000:0000:0000:0000:0000:0011 [ 240.829771][T18851] sctp: src=fe80:0000:0000:0000:0000:0000:0000:0014 - [ 240.829810][T18851] sctp: rt6_dst:fe80:0000:0000:0000:0000:0000:0000:0000/120 rt6_src:fe80:0000:0000:0000:0000:0000:0000:0014 [ 240.829832][T18851] sctp: sctp_assoc_set_pmtu: asoc:ffff888035d70000, pmtu:1448, frag_point:1380 [ 240.829849][T18851] sctp: sctp_packet_init: packet:ffff88805a504b08 transport:ffff88805a504800 [ 240.829887][T18851] sctp: sctp_do_sm[pre-fn]: ep:ffff888036f5a400, EVENT_T_PRIMITIVE, PRIMITIVE_ASSOCIATE, asoc:ffff888035d70000[STATE_CLOSED], sctp_sf_do_prm_asoc [ 240.830090][T18851] sctp: sctp_do_sm[post-fn]: asoc:ffff888035d70000, status:DISPOSITION_CONSUME [ 240.830108][T18851] sctp: sctp_cmd_new_state: asoc:ffff888035d70000[STATE_COOKIE_WAIT] [ 240.830134][T18851] sctp: sctp_outq_tail: outq:ffff888035d707e0, chunk:ffff88805f5f5540[INIT] [ 240.830155][T18851] sctp: sctp_packet_config: packet:ffff88805a504b08 vtag:0x0 [ 240.830174][T18851] sctp: sctp_packet_init: packet:ffffc9000401f160 transport:ffff88805a504800 [ 240.830191][T18851] sctp: sctp_packet_config: packet:ffffc9000401f160 vtag:0x0 [ 240.830207][T18851] sctp: sctp_packet_append_chunk: packet:ffffc9000401f160 chunk:ffff88805f5f5540 [ 240.830225][T18851] sctp: sctp_packet_transmit: packet:ffffc9000401f160 [ 240.830271][T18851] sctp: *** Chunk:ffff88805f5f5540[INIT] No TSN 0x0, length:2724, chunk->skb->len:2724, rtt_in_progress:0 [ 240.830336][T18851] sctp: ***sctp_transmit_packet*** skb->len:2736 [ 240.830349][T18851] sctp: sctp_v6_xmit: skb:ffff888053878dc0, len:2736, src:fe80:0000:0000:0000:0000:0000:0000:0014 dst:fe80:0000:0000:0000:0000:0000:0000:0011 [ 240.830501][T18851] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888035d70000[STATE_CLOSED] [ 240.830519][T18851] sctp: sctp_sendmsg_to_asoc: we associated primitively [ 240.830688][T18851] sctp: sctp_do_sm[pre-fn]: ep:ffff888036f5a400, EVENT_T_PRIMITIVE, PRIMITIVE_SEND, asoc:ffff888035d70000[STATE_COOKIE_WAIT], sctp_sf_do_prm_send [ 240.830714][T18851] sctp: sctp_do_sm[post-fn]: asoc:ffff888035d70000, status:DISPOSITION_CONSUME [ 240.830727][T18851] sctp: sctp_outq_tail: outq:ffff888035d707e0, chunk:ffff88805f5f52c0[DATA] [ 240.830742][T18851] sctp: sctp_outq_tail: outqueueing: outq:ffff888035d707e0, chunk:ffff88805f5f52c0[DATA]) [ 240.830758][T18851] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888035d70000[STATE_CLOSED] [ 240.830771][T18851] sctp: sctp_sendmsg_to_asoc: we sent primitively [ 240.830780][T18851] sctp: sctp_wait_for_connect: asoc:ffff888035d70000, timeo:0 [ 240.830802][T18851] sctp: sctp_sendmsg_parse: msghdr parse err:ffffffea [ 240.832219][T18850] sctp: sctp_close: sk:ffff88803757ca00, timeout:0 [ 240.832238][T18850] sctp: sctp_do_sm[pre-fn]: ep:ffff888036f5a400, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff888035d70000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 240.832254][T18850] sctp: sctp_do_sm[post-fn]: asoc:ffff888035d70000, status:DISPOSITION_DELETE_TCB [ 240.832266][T18850] sctp: sctp_cmd_new_state: asoc:ffff888035d70000[STATE_CLOSED] [ 240.832414][T18850] sctp: sctp_packet_free: packet:ffff88805a504b08 [ 240.832445][T18850] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 240.832458][T18850] sctp: sctp_destroy_sock: sk:ffff88803757ca00 [ 240.865214][T18853] [ 241.941571][T18853] ============================================ [ 241.944078][T18853] WARNING: possible recursive locking detected [ 241.946589][T18853] syzkaller #0 Tainted: G L [ 241.949207][T18853] -------------------------------------------- [ 241.951705][T18853] syz.2.3765/18853 is trying to acquire lock: [ 241.954076][T18853] ffff88802a1ecce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 241.958158][T18853] [ 241.958158][T18853] but task is already holding lock: [ 241.960941][T18853] ffff88802a1ecce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 241.964959][T18853] [ 241.964959][T18853] other info that might help us debug this: [ 241.968171][T18853] Possible unsafe locking scenario: [ 241.968171][T18853] [ 241.971218][T18853] CPU0 [ 241.972609][T18853] ---- [ 241.974006][T18853] lock(&sb->s_type->i_mutex_key#9); [ 241.976233][T18853] lock(&sb->s_type->i_mutex_key#9); [ 241.978383][T18853] [ 241.978383][T18853] *** DEADLOCK *** [ 241.978383][T18853] [ 241.981606][T18853] May be due to missing lock nesting notation [ 241.981606][T18853] [ 241.984915][T18853] locks held by syz.2.3765/18853: 1, last CPU#0: [ 241.987498][T18853] #0: ffff88802a1ecce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 241.991775][T18853] [ 241.991775][T18853] stack backtrace: [ 241.994138][T18853] CPU: 0 UID: 0 PID: 18853 Comm: syz.2.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.998471][T18853] Tainted: [L]=SOFTLOCKUP [ 242.000209][T18853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.004167][T18853] Call Trace: [ 242.005551][T18853] [ 242.006750][T18853] dump_stack_lvl+0x100/0x190 [ 242.008691][T18853] print_deadlock_bug.cold+0xbd/0xca [ 242.010810][T18853] __lock_acquire+0x13f4/0x1f40 [ 242.012800][T18853] lock_acquire+0x1d1/0x380 [ 242.014639][T18853] ? blkdev_write_iter+0xd12/0x11d0 [ 242.016411][T18853] ? __pfx___might_resched+0x10/0x10 [ 242.017999][T18853] down_read+0x94/0x4c0 [ 242.019260][T18853] ? blkdev_write_iter+0xd12/0x11d0 [ 242.020831][T18853] ? __pfx_down_read+0x10/0x10 [ 242.022280][T18853] ? filemap_check_errors+0xa9/0x150 [ 242.023920][T18853] blkdev_write_iter+0xd12/0x11d0 [ 242.025454][T18853] vfs_write+0x6af/0x1050 [ 242.026788][T18853] ? __pfx_blkdev_write_iter+0x10/0x10 [ 242.028430][T18853] ? __pfx_vfs_write+0x10/0x10 [ 242.029879][T18853] ? find_held_lock+0x2b/0x80 [ 242.031325][T18853] ksys_write+0x12a/0x250 [ 242.032622][T18853] ? __pfx_ksys_write+0x10/0x10 [ 242.034086][T18853] do_syscall_64+0x123/0x790 [ 242.035489][T18853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.037261][T18853] RIP: 0033:0x7fdf1f39f559 [ 242.038603][T18853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.044190][T18853] RSP: 002b:00007fdf202c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.046644][T18853] RAX: ffffffffffffffda RBX: 00007fdf1f625fa0 RCX: 00007fdf1f39f559 [ 242.049001][T18853] RDX: 00000000fffffe38 RSI: 0000200000000440 RDI: 0000000000000004 [ 242.051361][T18853] RBP: 00007fdf1f436b20 R08: 0000000000000000 R09: 0000000000000000 [ 242.053708][T18853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.056053][T18853] R13: 00007fdf1f626038 R14: 00007fdf1f625fa0 R15: 00007ffffdc99a98 [ 242.058418][T18853] [ 245.341045][ T6041] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.546963][ T42] audit: type=1400 audit(1792976390.667:2420): avc: denied { write } for pid=18874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.580426][ T42] audit: type=1400 audit(1792976390.697:2421): avc: denied { write } for pid=18877 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.525635][ T42] audit: type=1400 audit(1792976391.647:2422): avc: denied { write } for pid=18880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.564125][ T42] audit: type=1400 audit(1792976391.687:2423): avc: denied { write } for pid=18883 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.857170][ T42] audit: type=1400 audit(1792976391.977:2424): avc: denied { write } for pid=18887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.882793][ T42] audit: type=1400 audit(1792976392.007:2425): avc: denied { write } for pid=18890 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1