last executing test programs: 5.469235423s ago: executing program 2 (id=702): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.268254868s ago: executing program 2 (id=703): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 4.796488106s ago: executing program 2 (id=704): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(0x0, 0xee00, 0xee00) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) 3.890955446s ago: executing program 2 (id=710): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af25, &(0x7f0000000080)=0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000d00000000000000020000000000000000000000000000000010000000000000010000000000000000000000000000000000000000000007000000000000000000000009020000000000000000000009000000000b0000000000000a02000000000067a1457ec4dbaae5ccdec7145042a34ced770d0c608e25db5bb42c4403242ee496a4c4e7abbc3d67b2c492be6d403bb747852b44a445d16598fec2a854a9e5c64ded65232f46d1"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000e40)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000d522200001000000cc4b1000ffffffff7f55feff04000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x66, 0x33, 0x30, 0x64, 0x30, 0x31, 0x30, 0x30, 0x30, 0x38, 0x61, 0x30, 0x25, 0x34, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r2) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f0000000340)='keyring\x00', &(0x7f0000000640)={'syz', 0x1}, r3) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x2, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0xd61, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x4, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x80008, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x58c, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x13, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0x80000000, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x2, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x1, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000000c0)=0xe4) r7 = getpgrp(0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') pread64(r8, &(0x7f0000001400)=""/4108, 0x100c, 0x7) r9 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x207, &(0x7f00000005c0)={&(0x7f0000000240)=""/35, 0x23}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) syz_pidfd_open(r7, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r10) sendmsg$nl_generic(r5, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000001040)=ANY=[@ANYBLOB="602800003e00000228bd7000ffdbdf252a000000390009800c00530008000000000000000c00c3000000000000000000040020800c00520010000000000000000400270021d37c4f106d4d076b00000008002b00e000000262017680040011807c009721aee59d5daf77769be16bbda5667ac0f0aa407942fe1f6daa1c4ca4a0fe2689175a6a211d1e071ee464ca3e368e746b8bb306bc3b93b518779c784bbb412ec29dc7ec15f115e096d5982c7a44ad91dc6e8dd5ffe36afc49cfa40dd94ed27b8f3f6b91fe8026b1cdc8a5d2b2b5601a538d8d7d8f0b3efa537680b128903b3d7d2e84c792c127485f8b3ca5087db1566e1a26fdbb9bbb914a7c55c07680636438b87204005e000800208092bb2a7eaab4ed6dccc5a7046f017bc186061dbfe86674c8859e3e176914ff3859ce45622401c41a26d9062f494bddc48805a0c38774fa59d19d8d720eab4281e00353bb4bdca8d6f2d785cc3a5a455e129aa04438033ccd1380dfcfa4b576e71748e25eee16b7e7f1c8b93eea1ee520d89c6d09a159c4e53bab3ae54d148cb1322df23b064d56df08b74961ff96e477d43a067fab97459cf5fca8b1dcce130e1cf7bde27d553b7be11d74e40f00008226f980cc258c8008000800", @ANYRES32=r6, @ANYBLOB="ef00001400", @ANYRES32=r7, @ANYBLOB="e239704af39815d1f9040035800400b2800400a08004004f8004008f800800cb00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB='\b\x00`\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="189d6c3c20747d90b39a00fb6d3528efc59f460228d906f3b5a95bd0ebbca39d1604bee7db51030c8ce40ae0dff41bf71e81066125e7cb4643f11035e8a5211734b70b5c544f5c17cd7f7dc01f3b9ca331cdb8ac68f3e7946082c25b8290a3e3da046ccbe4041284c281d293afa201eb6232cdec33fadf9c1d33d1ff0400f48000000c00e900f80d00000000000014001400ff010000000000000000000000000001"], 0x2860}, 0x1, 0x0, 0x0, 0x20000891}, 0x40080) 3.601553126s ago: executing program 3 (id=717): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 3.02110681s ago: executing program 3 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xe, &(0x7f0000002040)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}}) pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x4023}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x404c010}, 0x26040888) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002", 0x36) 2.480633897s ago: executing program 1 (id=721): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.110825182s ago: executing program 1 (id=724): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.745358181s ago: executing program 3 (id=725): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(0x0, 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe80000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=.27.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 1.744985286s ago: executing program 1 (id=726): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.226564626s ago: executing program 0 (id=727): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 1.160882958s ago: executing program 3 (id=728): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x6, 0xe, 0x10001, 0x80000001, 0xff, 0x3, 0x800, 0x8, 0x100}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x10, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="270000000300000000000000000000000100000000000000ffff"], 0x27) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40028a123e39dfd77a457fd8d3b16f1a3f9083096dce64936524a589dbe9ca09a818759abf407c566130595295ad8f381db2984ddbed46c27cfcba058c1ad086b711404b37ec7710cb5e6f05dd91043f691ebf2096eeb9d29e0be643e676e1d9acfc3de8196fb3631d676634c5d42634349973875ff4596e973369dcb0ad0a3316e4bf7bb82f404aa422901cfe50f31b612f18c0e2e6f1028621ab3c804ed62892615a5b35c01164e70bf9499756"], 0x48, 0xfffffffffffffff8) keyctl$revoke(0x3, r5) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f0000001340)={&(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x159}], 0x1, 0xfffffffffffffff3, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x5}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400f9ff04080102000000000000000003000000050003003a0000000600024089140000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 835.930141ms ago: executing program 2 (id=729): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(0x0, 0xee00, 0xee00) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) 835.017965ms ago: executing program 1 (id=730): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xffffffff, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 501.552569ms ago: executing program 0 (id=731): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r1, r2, &(0x7f0000000340)={0x0, 0xfb7e, 0x40000, 0x2, 0x321, 0x0, r0}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb6d, 0x200, 0x1, 0x3de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x279, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x0, 0x80000, r4}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000140)={0x18, r6, 0x7f, 0x2000000000000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f0000000480)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, 0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0xc080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x5af3, 0x6, 0x8, 0x16, 0xa, 0xe, 0x3, 0x331799a0, {0xd, 0xe9, 0x40, 0x7a, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x8, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) 501.364574ms ago: executing program 0 (id=732): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b0040000000000000e3ffffff"], 0x18}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) 250.885657ms ago: executing program 3 (id=733): r0 = socket(0x1, 0x5, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800006) syz_open_dev$sg(&(0x7f00000000c0), 0xffffffff, 0x20000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getpid() ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1000000, &(0x7f0000000680)="6f47aa478b"}) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2005, 0x17, 0x1004003}, 0x10) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000040)={0x80002017}) 250.530542ms ago: executing program 0 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x2}) dup3(r0, r0, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffe0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1, 0x2000000}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='100000', 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000efff00000000dbf03da799b7e7c600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r9, 0xffffffffffffffff, 0x2c}, 0x20) write(r8, &(0x7f0000000280)='0', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4936, 0xc2, 0x1, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r10}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 181.705756ms ago: executing program 3 (id=735): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 80.264331ms ago: executing program 0 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f10000000000000000c00020001000000150000000c000c800600"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 79.632192ms ago: executing program 0 (id=737): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) userfaultfd(0x80001) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) 967.05µs ago: executing program 1 (id=738): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x7f00, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 442.505µs ago: executing program 1 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002", 0x36) (fail_nth: 5) 0s ago: executing program 2 (id=740): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(0x0, 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe8000000000000000000000000000aa0000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200cd0, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=.27.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') kernel console output (not intermixed with test programs): 4][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.308963][ T6222] FAULT_INJECTION: forcing a failure. [ 78.308963][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.314199][ T6222] CPU: 3 UID: 0 PID: 6222 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 78.314215][ T6222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.314222][ T6222] Call Trace: [ 78.314227][ T6222] [ 78.314233][ T6222] dump_stack_lvl+0x100/0x190 [ 78.314253][ T6222] should_fail_ex.cold+0x5/0xa [ 78.314267][ T6222] _copy_to_user+0x32/0xd0 [ 78.314292][ T6222] simple_read_from_buffer+0xcb/0x170 [ 78.314313][ T6222] proc_fail_nth_read+0x1af/0x230 [ 78.314331][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.314348][ T6222] ? rw_verify_area+0xce/0x6d0 [ 78.314365][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.314376][ T6222] vfs_read+0x1e4/0xb40 [ 78.314388][ T6222] ? __pfx_vfs_read+0x10/0x10 [ 78.314398][ T6222] ? find_held_lock+0x2b/0x80 [ 78.314415][ T6222] ? __fget_files+0x215/0x3d0 [ 78.314430][ T6222] ? __fget_files+0x21f/0x3d0 [ 78.314445][ T6222] ksys_read+0x12a/0x250 [ 78.314456][ T6222] ? __pfx_ksys_read+0x10/0x10 [ 78.314470][ T6222] do_int80_emulation+0x166/0x650 [ 78.314485][ T6222] asm_int80_emulation+0x1a/0x20 [ 78.314496][ T6222] RIP: 0023:0xf71374eb [ 78.314507][ T6222] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 78.314517][ T6222] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.314527][ T6222] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 78.314534][ T6222] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 78.314539][ T6222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.314545][ T6222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.314551][ T6222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.314563][ T6222] [ 78.396759][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 78.398720][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 78.401869][ T24] usb 8-1: config 0 has no interfaces? [ 78.405292][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.408529][ T24] usb 8-1: Product: syz [ 78.410042][ T24] usb 8-1: Manufacturer: syz [ 78.411771][ T24] usb 8-1: SerialNumber: syz [ 78.418392][ T24] usb 8-1: config 0 descriptor?? [ 78.660150][ T24] usb 8-1: USB disconnect, device number 4 [ 78.916184][ T6225] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 78.934054][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.98'. [ 79.617968][ T5735] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 79.620708][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 79.626659][ T6249] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 79.996730][ T5086] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.123383][ T5840] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.189572][ T5086] usb 5-1: Using ep0 maxpacket: 16 [ 80.203602][ T5086] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.237781][ T5086] usb 5-1: config 0 has no interfaces? [ 80.309549][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.313694][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 80.316690][ T5086] usb 5-1: Product: syz [ 80.318508][ T5086] usb 5-1: Manufacturer: syz [ 80.326707][ T5086] usb 5-1: SerialNumber: syz [ 80.365534][ T5086] usb 5-1: config 0 descriptor?? [ 80.401948][ T5840] usb 8-1: unable to get BOS descriptor or descriptor too short [ 80.410007][ T5840] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 80.466479][ T5840] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.483310][ T5840] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.566190][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.574397][ T5840] usb 8-1: Product: syz [ 80.580907][ T5840] usb 8-1: Manufacturer: syz [ 80.586226][ T5840] usb 8-1: SerialNumber: syz [ 80.589576][ T5086] usb 5-1: USB disconnect, device number 3 [ 80.831566][ T6267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.108'. [ 81.057153][ T5739] Bluetooth: hci2: command 0x0419 tx timeout [ 81.064650][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 81.074571][ T5840] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 81.093693][ T5840] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 81.379281][ T1485] cfg80211: failed to load regulatory.db [ 81.754644][ T5840] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.770989][ T5840] usb 8-1: USB disconnect, device number 5 [ 81.882532][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.688832][ T6289] FAULT_INJECTION: forcing a failure. [ 82.688832][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 82.692883][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 82.692898][ T6289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.692905][ T6289] Call Trace: [ 82.692910][ T6289] [ 82.692915][ T6289] dump_stack_lvl+0x100/0x190 [ 82.692935][ T6289] should_fail_ex.cold+0x5/0xa [ 82.692950][ T6289] should_failslab+0xc2/0x120 [ 82.692972][ T6289] kmem_cache_alloc_noprof+0x91/0x6a0 [ 82.692988][ T6289] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 82.693008][ T6289] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 82.693025][ T6289] ? trace_contention_end+0x126/0x160 [ 82.693040][ T6289] idr_get_free+0x52e/0xa00 [ 82.693061][ T6289] idr_alloc_u32+0x1ac/0x320 [ 82.693075][ T6289] ? __pfx_idr_alloc_u32+0x10/0x10 [ 82.693087][ T6289] ? tcf_idr_check_alloc+0x598/0x7a0 [ 82.693116][ T6289] ? tcf_idr_check_alloc+0x598/0x7a0 [ 82.693131][ T6289] tcf_idr_check_alloc+0x136/0x7a0 [ 82.693142][ T6289] ? find_held_lock+0x2b/0x80 [ 82.693157][ T6289] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 82.693168][ T6289] ? __nla_parse+0x40/0x60 [ 82.693188][ T6289] tcf_mirred_init+0x1fa/0xee0 [ 82.693204][ T6289] ? __pfx_tcf_mirred_init+0x10/0x10 [ 82.693222][ T6289] ? __asan_memcpy+0x3c/0x60 [ 82.693235][ T6289] tcf_action_init_1+0x466/0x6c0 [ 82.693248][ T6289] ? __pfx_tcf_action_init_1+0x10/0x10 [ 82.693257][ T6289] ? tc_action_load_ops+0x1f5/0x3e0 [ 82.693275][ T6289] ? __nla_parse+0x40/0x60 [ 82.693291][ T6289] tcf_action_init+0x43f/0xa60 [ 82.693307][ T6289] ? __pfx_tcf_action_init+0x10/0x10 [ 82.693327][ T6289] ? __kernel_text_address+0xd/0x30 [ 82.693340][ T6289] ? unwind_get_return_address+0x59/0xa0 [ 82.693363][ T6289] ? arch_stack_walk+0xa6/0xf0 [ 82.693390][ T6289] ? kfree_skbmem+0x19a/0x210 [ 82.693404][ T6289] ? kasan_save_stack+0x3f/0x50 [ 82.693426][ T6289] ? kasan_save_stack+0x30/0x50 [ 82.693439][ T6289] ? kasan_save_track+0x14/0x30 [ 82.693451][ T6289] ? kasan_save_free_info+0x3b/0x70 [ 82.693462][ T6289] ? __kasan_slab_free+0x5f/0x80 [ 82.693475][ T6289] ? kmem_cache_free+0x127/0x6b0 [ 82.693486][ T6289] ? kfree_skbmem+0x19a/0x210 [ 82.693498][ T6289] ? consume_skb+0xd1/0x110 [ 82.693509][ T6289] ? nlmon_xmit+0xa5/0xe0 [ 82.693568][ T6289] tcf_action_add+0xed/0x5c0 [ 82.693581][ T6289] ? __pfx_tcf_action_add+0x10/0x10 [ 82.693611][ T6289] ? __nla_parse+0x40/0x60 [ 82.693634][ T6289] tc_ctl_action+0x2e3/0x470 [ 82.693646][ T6289] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.693661][ T6289] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.693673][ T6289] rtnetlink_rcv_msg+0x3c9/0xe90 [ 82.693687][ T6289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.693703][ T6289] ? ref_tracker_free+0x37e/0x6c0 [ 82.693718][ T6289] netlink_rcv_skb+0x159/0x420 [ 82.693736][ T6289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.693749][ T6289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.693769][ T6289] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.693786][ T6289] netlink_unicast+0x585/0x850 [ 82.693803][ T6289] ? __pfx_netlink_unicast+0x10/0x10 [ 82.693823][ T6289] netlink_sendmsg+0x8b0/0xda0 [ 82.693840][ T6289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.693857][ T6289] ? apparmor_socket_sendmsg+0x15b/0x270 [ 82.693872][ T6289] ____sys_sendmsg+0xa4d/0xbe0 [ 82.693885][ T6289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.693901][ T6289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.693921][ T6289] ___sys_sendmsg+0x190/0x1e0 [ 82.693936][ T6289] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.693956][ T6289] ? find_held_lock+0x2b/0x80 [ 82.693980][ T6289] __sys_sendmsg+0x160/0x210 [ 82.693992][ T6289] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.694006][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 82.694021][ T6289] __do_fast_syscall_32+0x13a/0x8b0 [ 82.694032][ T6289] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.694044][ T6289] do_fast_syscall_32+0x32/0x70 [ 82.694056][ T6289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.694070][ T6289] RIP: 0023:0xf7fa7fec [ 82.694086][ T6289] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 82.694090][ T6289] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 82.694101][ T6289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 82.694108][ T6289] RDX: 000000002000a804 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.694114][ T6289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.694119][ T6289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.694125][ T6289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.694141][ T6289] [ 82.903711][ T6292] Bluetooth: MGMT ver 1.23 [ 82.906673][ T6292] Bluetooth: hci0: unsupported parameter 255 [ 82.909456][ T6292] Bluetooth: hci0: unsupported parameter 255 [ 83.536695][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 83.541983][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 83.774291][ T6301] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 84.247921][ T6300] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 85.115924][ T6320] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 86.028129][ T6328] Bluetooth: hci0: unsupported parameter 255 [ 86.031468][ T6328] Bluetooth: hci0: unsupported parameter 255 [ 88.419377][ T6361] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 89.051594][ T6366] Bluetooth: hci0: unsupported parameter 255 [ 89.059183][ T6366] Bluetooth: hci0: unsupported parameter 255 [ 90.113577][ T5739] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 90.115575][ T5739] Bluetooth: hci0: command 0x206a tx timeout [ 90.742809][ T6387] FAULT_INJECTION: forcing a failure. [ 90.742809][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 90.756392][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(full) [ 90.756432][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.756443][ T6387] Call Trace: [ 90.756451][ T6387] [ 90.756458][ T6387] dump_stack_lvl+0x100/0x190 [ 90.756485][ T6387] should_fail_ex.cold+0x5/0xa [ 90.756505][ T6387] should_failslab+0xc2/0x120 [ 90.756540][ T6387] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 90.756565][ T6387] ? shmem_alloc_inode+0x25/0x50 [ 90.756602][ T6387] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 90.756623][ T6387] shmem_alloc_inode+0x25/0x50 [ 90.756642][ T6387] alloc_inode+0x68/0x250 [ 90.756665][ T6387] new_inode+0x22/0x1c0 [ 90.756687][ T6387] shmem_get_inode+0x1e3/0xf70 [ 90.756711][ T6387] ? __pfx_shmem_get_inode+0x10/0x10 [ 90.756734][ T6387] ? make_vfsgid+0xf1/0x140 [ 90.756776][ T6387] shmem_mknod+0x217/0x480 [ 90.756799][ T6387] ? __pfx_shmem_mknod+0x10/0x10 [ 90.756825][ T6387] vfs_mknod+0x3a5/0x7f0 [ 90.756851][ T6387] filename_mknodat+0x5aa/0x7f0 [ 90.756873][ T6387] ? __pfx_filename_mknodat+0x10/0x10 [ 90.756890][ T6387] ? strncpy_from_user+0x19d/0x2d0 [ 90.756911][ T6387] ? do_getname+0x191/0x390 [ 90.756932][ T6387] __ia32_sys_mknod+0x8e/0xc0 [ 90.756950][ T6387] __do_fast_syscall_32+0x13a/0x8b0 [ 90.756968][ T6387] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.756985][ T6387] do_fast_syscall_32+0x32/0x70 [ 90.757001][ T6387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.757021][ T6387] RIP: 0023:0xf7fa7fec [ 90.757043][ T6387] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 90.757052][ T6387] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000000e [ 90.757070][ T6387] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000001000 [ 90.757079][ T6387] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 90.757088][ T6387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.757097][ T6387] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.757106][ T6387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.757127][ T6387] [ 91.163357][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 91.184417][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 92.638564][ T6413] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 93.031770][ T6423] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 93.555820][ T6432] FAULT_INJECTION: forcing a failure. [ 93.555820][ T6432] name failslab, interval 1, probability 0, space 0, times 0 [ 93.560841][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.1.154 Not tainted syzkaller #0 PREEMPT(full) [ 93.560857][ T6432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.560863][ T6432] Call Trace: [ 93.560867][ T6432] [ 93.560872][ T6432] dump_stack_lvl+0x100/0x190 [ 93.560893][ T6432] should_fail_ex.cold+0x5/0xa [ 93.560907][ T6432] should_failslab+0xc2/0x120 [ 93.560924][ T6432] kmem_cache_alloc_noprof+0x91/0x6a0 [ 93.560940][ T6432] ? __anon_vma_prepare+0x344/0x5e0 [ 93.560955][ T6432] __anon_vma_prepare+0x344/0x5e0 [ 93.560965][ T6432] ? __pfx___pte_alloc+0x10/0x10 [ 93.560982][ T6432] __vmf_anon_prepare+0x11f/0x250 [ 93.560999][ T6432] do_anonymous_page+0x51b/0x2080 [ 93.561014][ T6432] __handle_mm_fault+0x1d2c/0x2a00 [ 93.561028][ T6432] ? mt_find+0x45e/0x8e0 [ 93.561042][ T6432] ? __pfx___handle_mm_fault+0x10/0x10 [ 93.561053][ T6432] ? __pfx_mt_find+0x10/0x10 [ 93.561072][ T6432] ? find_vma+0xbf/0x140 [ 93.561085][ T6432] ? __pfx_find_vma+0x10/0x10 [ 93.561101][ T6432] handle_mm_fault+0x37b/0xa30 [ 93.561115][ T6432] do_user_addr_fault+0x745/0x12f0 [ 93.561136][ T6432] exc_page_fault+0x6f/0xd0 [ 93.561147][ T6432] asm_exc_page_fault+0x26/0x30 [ 93.561158][ T6432] RIP: 0010:__put_user_4+0xd/0x30 [ 93.561169][ T6432] Code: 66 89 01 31 c9 0f 01 ca e9 80 ea 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 57 ea 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 93.561179][ T6432] RSP: 0018:ffffc9000439fdf0 EFLAGS: 00050206 [ 93.561188][ T6432] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000080000000 [ 93.561195][ T6432] RDX: ffff888022f34b00 RSI: ffffffff825e5591 RDI: ffffffff8c613680 [ 93.561201][ T6432] RBP: 1ffff92000873fc2 R08: 0000000000000001 R09: 00000000000001d4 [ 93.561207][ T6432] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000004 [ 93.561212][ T6432] R13: 0000000000000005 R14: 0000000000000001 R15: dffffc0000000000 [ 93.561223][ T6432] ? __might_fault+0x111/0x140 [ 93.561238][ T6432] __sys_socketpair+0x120/0x5b0 [ 93.561257][ T6432] ? __pfx___sys_socketpair+0x10/0x10 [ 93.561274][ T6432] ? ksys_write+0x1ac/0x250 [ 93.561288][ T6432] __ia32_sys_socketpair+0x95/0x100 [ 93.561302][ T6432] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.561313][ T6432] __do_fast_syscall_32+0x13a/0x8b0 [ 93.561324][ T6432] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.561336][ T6432] do_fast_syscall_32+0x32/0x70 [ 93.561348][ T6432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.561362][ T6432] RIP: 0023:0xf703efec [ 93.561375][ T6432] Code: Unable to access opcode bytes at 0xf703efc2. [ 93.561380][ T6432] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 93.561389][ T6432] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 93.561395][ T6432] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 93.561400][ T6432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.561406][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.561412][ T6432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.561424][ T6432] [ 94.323473][ T6449] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 95.035843][ T6462] hpfs: hpfs_map_sector(): read error [ 95.307656][ T6464] XFS (nullb0): Invalid superblock magic number [ 95.695983][ T42] audit: type=1400 audit(1787273284.754:12): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6474 comm="syz.3.163" name="p" offset=53 [ 95.837197][ T42] audit: type=1400 audit(1787273284.944:13): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6470 comm="syz.1.164" name="p" offset=53 [ 96.899317][ T5739] Bluetooth: hci2: command 0x0419 tx timeout [ 96.901523][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 98.981256][ T6504] netlink: 'syz.3.170': attribute type 10 has an invalid length. [ 99.684979][ T6518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.696680][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 99.856669][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 99.864924][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.872765][ T9] usb 8-1: config 0 has no interfaces? [ 99.878967][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.883868][ T9] usb 8-1: Product: syz [ 99.885686][ T9] usb 8-1: Manufacturer: syz [ 99.889243][ T9] usb 8-1: SerialNumber: syz [ 99.893552][ T9] usb 8-1: config 0 descriptor?? [ 100.031413][ T42] audit: type=1400 audit(1787273289.304:14): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6520 comm="syz.2.175" name="p" offset=53 [ 100.098831][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 100.101159][ T64] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 100.549067][ T58] usb 8-1: USB disconnect, device number 6 [ 100.586859][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 100.851310][ T6536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.998420][ T6536] md: could not open device unknown-block(1,0). [ 101.279251][ T6544] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.428942][ T6547] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 101.599517][ T6553] ip6gretap0: entered promiscuous mode [ 102.206991][ T42] audit: type=1400 audit(1787273291.454:15): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6563 comm="syz.3.186" name="p" offset=53 [ 103.135053][ T6569] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 103.383140][ T6582] FAULT_INJECTION: forcing a failure. [ 103.383140][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 103.389869][ T6582] CPU: 2 UID: 0 PID: 6582 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 103.389896][ T6582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.389906][ T6582] Call Trace: [ 103.389912][ T6582] [ 103.389920][ T6582] dump_stack_lvl+0x100/0x190 [ 103.389953][ T6582] should_fail_ex.cold+0x5/0xa [ 103.389977][ T6582] should_failslab+0xc2/0x120 [ 103.390002][ T6582] __kmalloc_noprof+0xfc/0x820 [ 103.390026][ T6582] ? tomoyo_encode2+0xfb/0x3c0 [ 103.390074][ T6582] tomoyo_encode2+0xfb/0x3c0 [ 103.390101][ T6582] tomoyo_encode+0x29/0x50 [ 103.390123][ T6582] tomoyo_realpath_from_path+0x18c/0x690 [ 103.390153][ T6582] tomoyo_path_number_perm+0x23c/0x580 [ 103.390186][ T6582] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.390208][ T6582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.390230][ T6582] ? get_pid_task+0x106/0x250 [ 103.390278][ T6582] ? find_held_lock+0x2b/0x80 [ 103.390306][ T6582] ? __fget_files+0x215/0x3d0 [ 103.390325][ T6582] ? hook_file_ioctl_common+0x140/0x440 [ 103.390346][ T6582] ? __fget_files+0x215/0x3d0 [ 103.390368][ T6582] ? __fget_files+0x21f/0x3d0 [ 103.390388][ T6582] security_file_ioctl_compat+0xd3/0x230 [ 103.390412][ T6582] __ia32_compat_sys_ioctl+0xc2/0x360 [ 103.390444][ T6582] __do_fast_syscall_32+0x13a/0x8b0 [ 103.390466][ T6582] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.390483][ T6582] do_fast_syscall_32+0x32/0x70 [ 103.390503][ T6582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.390526][ T6582] RIP: 0023:0xf7fa7fec [ 103.390549][ T6582] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 103.390556][ T6582] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 103.390574][ T6582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af03 [ 103.390585][ T6582] RDX: 00000000800016c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.390595][ T6582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.390605][ T6582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.390613][ T6582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.390637][ T6582] [ 103.390655][ T6582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.516652][ T5086] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 103.666969][ T5086] usb 8-1: Using ep0 maxpacket: 16 [ 103.672331][ T5086] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.685904][ T5086] usb 8-1: config 0 has no interfaces? [ 103.693404][ T5086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.696990][ T5739] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 103.702654][ T5086] usb 8-1: Product: syz [ 103.704392][ T5086] usb 8-1: Manufacturer: syz [ 103.706405][ T6589] bond0: (slave veth0): Error: Device can not be enslaved while up [ 103.706914][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 103.719475][ T5086] usb 8-1: SerialNumber: syz [ 103.734376][ T5086] usb 8-1: config 0 descriptor?? [ 104.346487][ T58] usb 8-1: USB disconnect, device number 7 [ 104.350032][ T42] audit: type=1400 audit(1787273293.624:16): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6603 comm="syz.1.198" name="p" offset=53 [ 105.218276][ T6607] FAULT_INJECTION: forcing a failure. [ 105.218276][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.223801][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 105.223826][ T6607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.223837][ T6607] Call Trace: [ 105.223844][ T6607] [ 105.223852][ T6607] dump_stack_lvl+0x100/0x190 [ 105.223898][ T6607] should_fail_ex.cold+0x5/0xa [ 105.223920][ T6607] _copy_from_iter+0x1f4/0x1690 [ 105.223956][ T6607] ? __asan_memset+0x23/0x50 [ 105.223978][ T6607] ? __pfx__copy_from_iter+0x10/0x10 [ 105.223997][ T6607] ? __pfx___alloc_skb+0x10/0x10 [ 105.224026][ T6607] netlink_sendmsg+0x808/0xda0 [ 105.224058][ T6607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.224087][ T6607] ? apparmor_socket_sendmsg+0x15b/0x270 [ 105.224110][ T6607] ____sys_sendmsg+0xa4d/0xbe0 [ 105.224133][ T6607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.224160][ T6607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.224194][ T6607] ___sys_sendmsg+0x190/0x1e0 [ 105.224219][ T6607] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.224253][ T6607] ? find_held_lock+0x2b/0x80 [ 105.224296][ T6607] __sys_sendmsg+0x160/0x210 [ 105.224315][ T6607] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.224339][ T6607] ? __pfx_ksys_write+0x10/0x10 [ 105.224364][ T6607] __do_fast_syscall_32+0x13a/0x8b0 [ 105.224401][ T6607] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.224420][ T6607] do_fast_syscall_32+0x32/0x70 [ 105.224438][ T6607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.224460][ T6607] RIP: 0023:0xf703efec [ 105.224481][ T6607] Code: Unable to access opcode bytes at 0xf703efc2. [ 105.224488][ T6607] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 105.224505][ T6607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 105.224516][ T6607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.224525][ T6607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.224534][ T6607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.224544][ T6607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.224566][ T6607] [ 105.344558][ T6609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.201'. [ 105.356429][ T6609] syzkaller1: entered promiscuous mode [ 105.358842][ T6609] syzkaller1: entered allmulticast mode [ 105.434328][ T6617] mmap: syz.3.204 (6617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.535885][ T6624] FAULT_INJECTION: forcing a failure. [ 105.535885][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 105.541048][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT(full) [ 105.541072][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.541082][ T6624] Call Trace: [ 105.541089][ T6624] [ 105.541096][ T6624] dump_stack_lvl+0x100/0x190 [ 105.541126][ T6624] should_fail_ex.cold+0x5/0xa [ 105.541152][ T6624] should_failslab+0xc2/0x120 [ 105.541178][ T6624] __kmalloc_noprof+0xfc/0x820 [ 105.541198][ T6624] ? rcu_is_watching+0x13/0xc0 [ 105.541222][ T6624] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 105.541272][ T6624] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 105.541305][ T6624] genl_family_rcv_msg_doit+0xc7/0x300 [ 105.541332][ T6624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 105.541357][ T6624] ? genl_get_cmd+0x3e7/0x760 [ 105.541387][ T6624] ? bpf_lsm_capable+0x9/0x10 [ 105.541423][ T6624] ? security_capable+0x80/0x260 [ 105.541443][ T6624] ? ns_capable+0xd2/0xf0 [ 105.541466][ T6624] genl_rcv_msg+0x560/0x800 [ 105.541485][ T6624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.541501][ T6624] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 105.541539][ T6624] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 105.541572][ T6624] ? __pfx_nl80211_post_doit+0x10/0x10 [ 105.541597][ T6624] netlink_rcv_skb+0x159/0x420 [ 105.541621][ T6624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.541637][ T6624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.541669][ T6624] ? netlink_deliver_tap+0x1ae/0xcc0 [ 105.541695][ T6624] genl_rcv+0x28/0x40 [ 105.541718][ T6624] netlink_unicast+0x585/0x850 [ 105.541745][ T6624] ? __pfx_netlink_unicast+0x10/0x10 [ 105.541774][ T6624] netlink_sendmsg+0x8b0/0xda0 [ 105.541802][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.541828][ T6624] ? apparmor_socket_sendmsg+0x15b/0x270 [ 105.541850][ T6624] ____sys_sendmsg+0xa4d/0xbe0 [ 105.541871][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.541896][ T6624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.541927][ T6624] ___sys_sendmsg+0x190/0x1e0 [ 105.541950][ T6624] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.541981][ T6624] ? find_held_lock+0x2b/0x80 [ 105.542018][ T6624] __sys_sendmsg+0x160/0x210 [ 105.542034][ T6624] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.542057][ T6624] ? __pfx_ksys_write+0x10/0x10 [ 105.542080][ T6624] __do_fast_syscall_32+0x13a/0x8b0 [ 105.542098][ T6624] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.542116][ T6624] do_fast_syscall_32+0x32/0x70 [ 105.542135][ T6624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.542161][ T6624] RIP: 0023:0xf7fa7fec [ 105.542182][ T6624] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 105.542190][ T6624] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 105.542207][ T6624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 105.542217][ T6624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.542226][ T6624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.542235][ T6624] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.542245][ T6624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.542265][ T6624] [ 105.847267][ T42] audit: type=1400 audit(1787273295.124:17): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6631 comm="syz.3.207" name="p" offset=53 [ 105.866708][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 105.866721][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 105.866788][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 105.869110][ T5739] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 106.782337][ T42] audit: type=1400 audit(1787273296.054:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6641 comm="syz.2.216" name="p" offset=53 [ 107.889925][ T6646] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 108.719797][ T6658] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 108.833271][ T42] audit: type=1326 audit(1787273298.104:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.873571][ T42] audit: type=1326 audit(1787273298.114:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.909606][ T42] audit: type=1326 audit(1787273298.114:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.920623][ T42] audit: type=1326 audit(1787273298.114:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.932141][ T42] audit: type=1326 audit(1787273298.114:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.943777][ T42] audit: type=1326 audit(1787273298.114:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 108.952553][ T42] audit: type=1326 audit(1787273298.114:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33fec code=0x7ffc0000 [ 109.213973][ T6671] netlink: Invalid conntrack timeout [ 109.216266][ T6671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.622188][ T6677] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 111.423999][ T6695] block nbd1: NBD_DISCONNECT [ 111.924728][ T42] audit: type=1400 audit(1787273301.194:26): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6705 comm="syz.2.229" name="p" offset=53 [ 113.287142][ T6123] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 113.446641][ T6123] usb 7-1: Using ep0 maxpacket: 16 [ 113.464846][ T6123] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.487778][ T6123] usb 7-1: config 0 has no interfaces? [ 113.565088][ T6123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.584391][ T6123] usb 7-1: Product: syz [ 113.595901][ T6123] usb 7-1: Manufacturer: syz [ 113.607156][ T6123] usb 7-1: SerialNumber: syz [ 113.700506][ T6123] usb 7-1: config 0 descriptor?? [ 114.030104][ T58] usb 7-1: USB disconnect, device number 2 [ 114.100948][ T6732] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.227849][ T6736] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 114.490248][ T6123] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.637484][ T6123] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 114.641874][ T6123] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 114.645599][ T6123] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 114.649909][ T6123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.660016][ T6123] usb 5-1: USB2VGA dongle found at address 4 [ 114.676825][ T6123] usb 5-1: Allocated 8 output buffers [ 116.026677][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 116.108262][ T5741] Bluetooth: hci3: command 0x206a tx timeout [ 116.873310][ T6751] hpfs: hpfs_map_sector(): read error [ 117.337058][ T6757] XFS (nullb0): Invalid superblock magic number [ 119.185122][ T6782] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 119.581173][ T6780] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 120.186695][ T6264] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 120.369753][ T6264] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 120.377317][ T6264] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 120.391101][ T6264] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 120.403627][ T6264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.419425][ T6264] usb 8-1: USB2VGA dongle found at address 8 [ 120.449638][ T6264] usb 8-1: Allocated 8 output buffers [ 121.955045][ T5739] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 121.960454][ T5739] Bluetooth: hci3: command 0x206a tx timeout [ 122.024379][ T6811] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 122.090819][ T42] audit: type=1400 audit(1787273311.364:27): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6806 comm="syz.3.258" name="p" offset=53 [ 125.000396][ T6843] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.763755][ T6844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.885824][ T6844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.987784][ T6844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.087836][ T5818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.116662][ T5780] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.119421][ T5780] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.136636][ T5780] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.455726][ T6850] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 126.889408][ T6858] block nbd3: NBD_DISCONNECT [ 127.523521][ T6856] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 127.535862][ T6855] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 127.984934][ T6871] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 128.305207][ T42] audit: type=1400 audit(1787273317.574:28): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6879 comm="syz.3.280" name="p" offset=53 [ 128.538394][ T42] audit: type=1400 audit(1787273317.804:29): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6872 comm="syz.2.278" name="p" offset=53 [ 129.306705][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 129.456922][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 129.461664][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.466259][ T9] usb 7-1: config 0 has no interfaces? [ 129.471652][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.475523][ T9] usb 7-1: Product: syz [ 129.478054][ T9] usb 7-1: Manufacturer: syz [ 129.480231][ T9] usb 7-1: SerialNumber: syz [ 129.484545][ T9] usb 7-1: config 0 descriptor?? [ 129.537009][ T5739] Bluetooth: hci3: command 0x206a tx timeout [ 129.541282][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 129.548524][ T6893] block nbd3: NBD_DISCONNECT [ 130.040832][ T5819] usb 7-1: USB disconnect, device number 3 [ 131.696973][ T5739] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 131.699202][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 131.977230][ T6916] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 132.187941][ T42] audit: type=1400 audit(1787273321.464:30): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6911 comm="syz.1.291" name="p" offset=53 [ 132.498897][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.535857][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.056861][ T5810] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 133.152940][ T6936] netlink: 'syz.3.297': attribute type 10 has an invalid length. [ 133.207980][ T5810] usb 7-1: Using ep0 maxpacket: 16 [ 133.214037][ T5810] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.221671][ T5810] usb 7-1: config 0 has no interfaces? [ 133.229595][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.236621][ T5810] usb 7-1: Product: syz [ 133.237944][ T5810] usb 7-1: Manufacturer: syz [ 133.242095][ T5810] usb 7-1: SerialNumber: syz [ 133.247078][ T5810] usb 7-1: config 0 descriptor?? [ 133.733478][ T6941] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.799007][ T5810] usb 7-1: USB disconnect, device number 4 [ 133.994696][ T6942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.073697][ T6942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.093128][ T42] audit: type=1400 audit(1787273323.364:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6943 comm="syz.0.301" name="p" offset=53 [ 134.182409][ T6942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.371963][ T42] audit: type=1400 audit(1787273323.644:32): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6946 comm="syz.1.302" name="p" offset=53 [ 134.666657][ T5741] Bluetooth: hci2: command 0x0419 tx timeout [ 134.666681][ T5739] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 134.776685][ T5780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.779742][ T5780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.796741][ T5780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.808104][ T5780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.904995][ T6952] FAULT_INJECTION: forcing a failure. [ 134.904995][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 134.909907][ T6952] CPU: 3 UID: 0 PID: 6952 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(full) [ 134.909933][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.909944][ T6952] Call Trace: [ 134.909952][ T6952] [ 134.909958][ T6952] dump_stack_lvl+0x100/0x190 [ 134.909993][ T6952] should_fail_ex.cold+0x5/0xa [ 134.910017][ T6952] should_failslab+0xc2/0x120 [ 134.910047][ T6952] __kmalloc_cache_noprof+0x91/0x6b0 [ 134.910068][ T6952] ? allocate_file_region_entries+0x15d/0x630 [ 134.910093][ T6952] ? allocate_file_region_entries+0x15d/0x630 [ 134.910116][ T6952] ? allocate_file_region_entries+0x1a0/0x630 [ 134.910146][ T6952] allocate_file_region_entries+0x1a0/0x630 [ 134.910174][ T6952] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 134.910208][ T6952] region_chg+0x85/0x140 [ 134.910234][ T6952] __vma_reservation_common+0x376/0x720 [ 134.910258][ T6952] ? __pfx___vma_reservation_common+0x10/0x10 [ 134.910282][ T6952] ? filemap_get_entry+0x22d/0x450 [ 134.910304][ T6952] ? filemap_get_entry+0x22d/0x450 [ 134.910328][ T6952] alloc_hugetlb_folio+0x6fd/0x1490 [ 134.910362][ T6952] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 134.910397][ T6952] ? __filemap_get_folio_mpol+0x369/0x1320 [ 134.910422][ T6952] hugetlb_no_page+0xfbb/0x1b00 [ 134.910449][ T6952] hugetlb_fault+0x5e5/0x1410 [ 134.910472][ T6952] ? __pfx_hugetlb_fault+0x10/0x10 [ 134.910501][ T6952] ? __pfx___up_read+0x10/0x10 [ 134.910526][ T6952] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 134.910554][ T6952] handle_mm_fault+0x5ff/0xa30 [ 134.910583][ T6952] __get_user_pages+0x1178/0x32a0 [ 134.910617][ T6952] ? __pfx___get_user_pages+0x10/0x10 [ 134.910650][ T6952] populate_vma_page_range+0x267/0x3f0 [ 134.910677][ T6952] ? __pfx_populate_vma_page_range+0x10/0x10 [ 134.910701][ T6952] ? __pfx_find_vma_intersection+0x10/0x10 [ 134.910728][ T6952] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 134.910753][ T6952] __mm_populate+0x107/0x3a0 [ 134.910778][ T6952] ? __pfx___mm_populate+0x10/0x10 [ 134.910807][ T6952] ? up_write+0x2dc/0x5b0 [ 134.910830][ T6952] do_mlock+0x3f0/0x7f0 [ 134.910846][ T6952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.910873][ T6952] ? __pfx_do_mlock+0x10/0x10 [ 134.910895][ T6952] ? fput+0x7c/0x100 [ 134.910919][ T6952] ? ksys_write+0x1ac/0x250 [ 134.910933][ T6952] ? __pfx_ksys_write+0x10/0x10 [ 134.910952][ T6952] __ia32_sys_mlock+0x57/0x80 [ 134.910973][ T6952] __do_fast_syscall_32+0x13a/0x8b0 [ 134.910993][ T6952] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.911009][ T6952] do_fast_syscall_32+0x32/0x70 [ 134.911029][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.911053][ T6952] RIP: 0023:0xf7f33fec [ 134.911075][ T6952] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 134.911083][ T6952] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 134.911100][ T6952] RAX: ffffffffffffffda RBX: 00000000807fe000 RCX: 0000000000800000 [ 134.911111][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.911121][ T6952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.911130][ T6952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.911141][ T6952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.911165][ T6952] [ 135.421844][ T6972] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 135.490501][ T6976] jffs2: notice: (6976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.638101][ T42] audit: type=1400 audit(1787273324.914:33): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6959 comm="syz.0.308" name="p" offset=53 [ 135.642213][ T6979] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 135.651247][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.313'. [ 135.734129][ T6984] FAULT_INJECTION: forcing a failure. [ 135.734129][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.738843][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT(full) [ 135.738881][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.738889][ T6984] Call Trace: [ 135.738894][ T6984] [ 135.738899][ T6984] dump_stack_lvl+0x100/0x190 [ 135.738921][ T6984] should_fail_ex.cold+0x5/0xa [ 135.738935][ T6984] _copy_to_user+0x32/0xd0 [ 135.738951][ T6984] simple_read_from_buffer+0xcb/0x170 [ 135.738966][ T6984] proc_fail_nth_read+0x1af/0x230 [ 135.738980][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.738992][ T6984] ? rw_verify_area+0xce/0x6d0 [ 135.739009][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.739020][ T6984] vfs_read+0x1e4/0xb40 [ 135.739032][ T6984] ? __pfx_vfs_read+0x10/0x10 [ 135.739041][ T6984] ? find_held_lock+0x2b/0x80 [ 135.739061][ T6984] ? __fget_files+0x215/0x3d0 [ 135.739076][ T6984] ? __fget_files+0x21f/0x3d0 [ 135.739091][ T6984] ksys_read+0x12a/0x250 [ 135.739101][ T6984] ? __pfx_ksys_read+0x10/0x10 [ 135.739116][ T6984] do_int80_emulation+0x166/0x650 [ 135.739131][ T6984] asm_int80_emulation+0x1a/0x20 [ 135.739143][ T6984] RIP: 0023:0xf71374eb [ 135.739153][ T6984] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 135.739162][ T6984] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.739173][ T6984] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53f65d0 [ 135.739180][ T6984] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 135.739185][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.739191][ T6984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.739197][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.739211][ T6984] [ 135.950067][ T6986] jffs2: notice: (6986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.146089][ T42] audit: type=1400 audit(1787273325.414:34): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6990 comm="syz.2.318" name="p" offset=53 [ 136.593897][ T7001] Zero length message leads to an empty skb [ 136.832986][ T7011] jffs2: notice: (7011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.853264][ T7011] FAULT_INJECTION: forcing a failure. [ 136.853264][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 136.862970][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) [ 136.862999][ T7011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.863011][ T7011] Call Trace: [ 136.863018][ T7011] [ 136.863027][ T7011] dump_stack_lvl+0x100/0x190 [ 136.863060][ T7011] should_fail_ex.cold+0x5/0xa [ 136.863085][ T7011] should_failslab+0xc2/0x120 [ 136.863113][ T7011] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.863137][ T7011] ? copy_folio_from_iter_atomic+0x153/0x2000 [ 136.863161][ T7011] ? jffs2_write_end+0x1fd/0xea0 [ 136.863263][ T7011] jffs2_write_end+0x1fd/0xea0 [ 136.863283][ T7011] ? __pfx_jffs2_write_begin+0x10/0x10 [ 136.863307][ T7011] ? __pfx_jffs2_write_end+0x10/0x10 [ 136.863328][ T7011] ? inode_to_bdi+0x9e/0x160 [ 136.863353][ T7011] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 136.863385][ T7011] generic_perform_write+0x513/0xa40 [ 136.863422][ T7011] ? __pfx_generic_perform_write+0x10/0x10 [ 136.863452][ T7011] ? mnt_put_write_access_file+0x4e/0x100 [ 136.863475][ T7011] ? file_update_time_flags+0x38c/0x520 [ 136.863503][ T7011] __generic_file_write_iter+0x1f7/0x240 [ 136.863527][ T7011] generic_file_write_iter+0xe1/0x390 [ 136.863553][ T7011] iter_file_splice_write+0x830/0x10b0 [ 136.863592][ T7011] ? __pfx_iter_file_splice_write+0x10/0x10 [ 136.863619][ T7011] ? __pfx_copy_splice_read+0x10/0x10 [ 136.863654][ T7011] ? __pfx_iter_file_splice_write+0x10/0x10 [ 136.863680][ T7011] direct_splice_actor+0x192/0x690 [ 136.863704][ T7011] splice_direct_to_actor+0x345/0xa30 [ 136.863730][ T7011] ? __pfx_direct_splice_actor+0x10/0x10 [ 136.863757][ T7011] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 136.863788][ T7011] do_splice_direct+0x174/0x240 [ 136.863811][ T7011] ? __pfx_do_splice_direct+0x10/0x10 [ 136.863835][ T7011] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 136.863861][ T7011] ? rw_verify_area+0xce/0x6d0 [ 136.863890][ T7011] do_sendfile+0xadc/0xe20 [ 136.863913][ T7011] ? __pfx_do_sendfile+0x10/0x10 [ 136.863938][ T7011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.863960][ T7011] ? __fget_files+0x21f/0x3d0 [ 136.863985][ T7011] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 136.864006][ T7011] ? fput+0x7c/0x100 [ 136.864028][ T7011] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 136.864051][ T7011] ? ksys_write+0x1ac/0x250 [ 136.864069][ T7011] ? __pfx_ksys_write+0x10/0x10 [ 136.864091][ T7011] __do_fast_syscall_32+0x13a/0x8b0 [ 136.864111][ T7011] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.864131][ T7011] do_fast_syscall_32+0x32/0x70 [ 136.864147][ T7011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.864183][ T7011] RIP: 0023:0xf7fa7fec [ 136.864208][ T7011] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 136.864215][ T7011] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 136.864234][ T7011] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 136.864245][ T7011] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 0000000000000000 [ 136.864256][ T7011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.864265][ T7011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.864275][ T7011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.864298][ T7011] [ 137.136944][ T64] Bluetooth: hci3: command 0x206a tx timeout [ 137.137654][ T5739] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 138.096741][ T5741] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 138.107593][ T5741] Bluetooth: hci2: command 0x0419 tx timeout [ 138.332622][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 138.542462][ T42] audit: type=1400 audit(1787273327.814:35): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7025 comm="syz.1.327" name="p" offset=53 [ 138.719340][ T7029] tmpfs: Bad value for 'nr_inodes' [ 140.094254][ T7044] jffs2: notice: (7044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.757164][ T7051] jffs2: notice: (7051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.774052][ T7051] FAULT_INJECTION: forcing a failure. [ 140.774052][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 140.780028][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 140.780044][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.780051][ T7051] Call Trace: [ 140.780056][ T7051] [ 140.780061][ T7051] dump_stack_lvl+0x100/0x190 [ 140.780083][ T7051] should_fail_ex.cold+0x5/0xa [ 140.780097][ T7051] should_failslab+0xc2/0x120 [ 140.780114][ T7051] __kmalloc_noprof+0xfc/0x820 [ 140.780128][ T7051] ? rcu_is_watching+0x13/0xc0 [ 140.780146][ T7051] ? tomoyo_realpath_from_path+0xb6/0x690 [ 140.780167][ T7051] tomoyo_realpath_from_path+0xb6/0x690 [ 140.780185][ T7051] tomoyo_path_number_perm+0x23c/0x580 [ 140.780201][ T7051] ? tomoyo_path_number_perm+0x22e/0x580 [ 140.780213][ T7051] ? print_kernel_ident+0x10/0x40 [ 140.780230][ T7051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.780248][ T7051] ? __lock_acquire+0x4c5/0x1ec0 [ 140.780268][ T7051] ? current_check_access_path+0x269/0x430 [ 140.780285][ T7051] ? __pfx_current_check_access_path+0x10/0x10 [ 140.780301][ T7051] ? d_alloc_parallel+0x9f6/0x14c0 [ 140.780322][ T7051] tomoyo_path_mknod+0x164/0x190 [ 140.780333][ T7051] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 140.780344][ T7051] ? __d_lookup+0x25c/0x4a0 [ 140.780359][ T7051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.780393][ T7051] security_path_mknod+0x161/0x300 [ 140.780418][ T7051] may_o_create+0x30/0x3a0 [ 140.780436][ T7051] lookup_open+0xe35/0x1990 [ 140.780458][ T7051] path_openat+0xa2c/0x2440 [ 140.780472][ T7051] ? __pfx_path_openat+0x10/0x10 [ 140.780489][ T7051] do_file_open+0x20e/0x430 [ 140.780505][ T7051] ? __pfx_do_file_open+0x10/0x10 [ 140.780527][ T7051] ? _raw_spin_unlock+0x28/0x50 [ 140.780544][ T7051] ? alloc_fd+0x471/0x7a0 [ 140.780560][ T7051] do_sys_openat2+0x10f/0x1e0 [ 140.780577][ T7051] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.780593][ T7051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.780608][ T7051] __ia32_compat_sys_openat+0x12d/0x210 [ 140.780624][ T7051] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 140.780639][ T7051] ? fput+0x7c/0x100 [ 140.780652][ T7051] ? ksys_write+0x1ac/0x250 [ 140.780662][ T7051] ? __pfx_ksys_write+0x10/0x10 [ 140.780676][ T7051] __do_fast_syscall_32+0x13a/0x8b0 [ 140.780688][ T7051] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.780700][ T7051] do_fast_syscall_32+0x32/0x70 [ 140.780712][ T7051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.780726][ T7051] RIP: 0023:0xf7f33fec [ 140.780742][ T7051] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 140.780747][ T7051] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 140.780757][ T7051] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 140.780764][ T7051] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 140.780770][ T7051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.780776][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.780781][ T7051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.780795][ T7051] [ 140.780800][ T7051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.858959][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 141.865575][ T7064] batadv0: entered promiscuous mode [ 141.871074][ T7064] macsec2: entered promiscuous mode [ 141.872945][ T7064] macsec2: entered allmulticast mode [ 141.874682][ T7064] batadv0: entered allmulticast mode [ 141.877326][ T7064] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 141.881693][ T7064] batadv0: left allmulticast mode [ 141.883472][ T7064] batadv0: left promiscuous mode [ 142.491430][ T7069] jffs2: notice: (7069) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.502332][ T7069] FAULT_INJECTION: forcing a failure. [ 142.502332][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 142.513645][ T7069] CPU: 3 UID: 0 PID: 7069 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 142.513672][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.513684][ T7069] Call Trace: [ 142.513692][ T7069] [ 142.513700][ T7069] dump_stack_lvl+0x100/0x190 [ 142.513733][ T7069] should_fail_ex.cold+0x5/0xa [ 142.513758][ T7069] should_failslab+0xc2/0x120 [ 142.513787][ T7069] __kmalloc_noprof+0xfc/0x820 [ 142.513807][ T7069] ? rcu_is_watching+0x13/0xc0 [ 142.513836][ T7069] ? tomoyo_realpath_from_path+0xb6/0x690 [ 142.513870][ T7069] tomoyo_realpath_from_path+0xb6/0x690 [ 142.513903][ T7069] tomoyo_path_number_perm+0x23c/0x580 [ 142.513925][ T7069] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.513946][ T7069] ? print_kernel_ident+0x10/0x40 [ 142.513974][ T7069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.514003][ T7069] ? __lock_acquire+0x4c5/0x1ec0 [ 142.514037][ T7069] ? current_check_access_path+0x269/0x430 [ 142.514067][ T7069] ? __pfx_current_check_access_path+0x10/0x10 [ 142.514094][ T7069] ? d_alloc_parallel+0x9f6/0x14c0 [ 142.514130][ T7069] tomoyo_path_mknod+0x164/0x190 [ 142.514165][ T7069] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 142.514184][ T7069] ? __d_lookup+0x25c/0x4a0 [ 142.514210][ T7069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.514237][ T7069] security_path_mknod+0x161/0x300 [ 142.514264][ T7069] may_o_create+0x30/0x3a0 [ 142.514295][ T7069] lookup_open+0xe35/0x1990 [ 142.514331][ T7069] path_openat+0xa2c/0x2440 [ 142.514358][ T7069] ? __pfx_path_openat+0x10/0x10 [ 142.514388][ T7069] do_file_open+0x20e/0x430 [ 142.514412][ T7069] ? __pfx_do_file_open+0x10/0x10 [ 142.514452][ T7069] ? _raw_spin_unlock+0x28/0x50 [ 142.514479][ T7069] ? alloc_fd+0x471/0x7a0 [ 142.514508][ T7069] do_sys_openat2+0x10f/0x1e0 [ 142.514533][ T7069] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.514568][ T7069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.514595][ T7069] __ia32_compat_sys_openat+0x12d/0x210 [ 142.514622][ T7069] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 142.514648][ T7069] ? fput+0x7c/0x100 [ 142.514670][ T7069] ? ksys_write+0x1ac/0x250 [ 142.514689][ T7069] ? __pfx_ksys_write+0x10/0x10 [ 142.514714][ T7069] __do_fast_syscall_32+0x13a/0x8b0 [ 142.514735][ T7069] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.514757][ T7069] do_fast_syscall_32+0x32/0x70 [ 142.514778][ T7069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.514802][ T7069] RIP: 0023:0xf7fa7fec [ 142.514827][ T7069] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 142.514835][ T7069] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 142.514853][ T7069] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 142.514864][ T7069] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 142.514874][ T7069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.514884][ T7069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.514894][ T7069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.514918][ T7069] [ 142.515779][ T7069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.844588][ T42] audit: type=1400 audit(1787273332.094:36): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7071 comm="syz.2.339" name="p" offset=53 [ 143.730424][ T7077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 143.920999][ T7084] block nbd0: NBD_DISCONNECT [ 143.969302][ T7083] netlink: 'syz.2.341': attribute type 10 has an invalid length. [ 145.295478][ T7095] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 145.706704][ T5739] Bluetooth: hci3: command 0x206a tx timeout [ 145.707707][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 145.996613][ T42] audit: type=1326 audit(1787273335.264:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.046477][ T42] audit: type=1326 audit(1787273335.264:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.053482][ T42] audit: type=1326 audit(1787273335.274:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71774eb code=0x7ffc0000 [ 146.061859][ T42] audit: type=1326 audit(1787273335.274:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.068710][ T42] audit: type=1326 audit(1787273335.274:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.075293][ T42] audit: type=1326 audit(1787273335.274:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.082240][ T42] audit: type=1326 audit(1787273335.274:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.089103][ T42] audit: type=1326 audit(1787273335.274:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.096111][ T42] audit: type=1326 audit(1787273335.274:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf703efec code=0x7ffc0000 [ 146.462913][ T7123] block nbd1: NBD_DISCONNECT [ 147.886768][ T7136] jffs2: notice: (7136) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.004850][ T7139] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 148.077372][ T7141] jffs2: notice: (7141) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.245723][ T7146] jffs2: notice: (7146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.390047][ T7151] Console: switching to colour dummy device 80x25 [ 148.472480][ T7151] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 148.494864][ T7151] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 148.498481][ T7151] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 148.500809][ T7151] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 148.503563][ T7151] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 148.512462][ T7151] pci 0000:00:01.0: Adding to iommu group 1 [ 148.517178][ T7151] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 148.519351][ T7151] pci 0000:00:01.0: vgaarb: bridge control possible [ 148.521454][ T7151] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 148.529158][ T7151] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 148.531817][ T7151] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 148.535318][ T7151] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 148.544061][ T7151] [drm] Found bochs VGA, ID 0xb0c5. [ 148.545667][ T7151] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 148.558655][ T7151] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 148.674701][ T7151] Console: switching to colour frame buffer device 160x50 [ 148.703074][ T7151] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 148.746668][ T6220] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 148.896718][ T6220] usb 7-1: Using ep0 maxpacket: 16 [ 148.900091][ T6220] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 148.903982][ T6220] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 148.908899][ T6220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.912464][ T6220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.915625][ T6220] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 148.921688][ T6220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.932708][ T6220] usb 7-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8a000) [ 149.331813][ T7162] block nbd1: NBD_DISCONNECT [ 149.353912][ T6220] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0002/input/input44 [ 149.366052][ T6220] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0002/input/input45 [ 149.450644][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 149.453078][ T1124] ata1: failed to read log page 10h (errno=-5) [ 149.457107][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 149.460894][ T1124] ata1.00: irq_stat 0x41000000 [ 149.462838][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 149.465823][ T1124] ata1.00: cmd 60/50:f0:6e:46:01/04:00:00:00:00/40 tag 30 ncq dma 565248 in [ 149.465823][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 149.468467][ T6220] kye 0003:0458:5013.0002: input,hiddev3,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 149.472526][ T1124] ata1.00: status: { DRDY } [ 149.477606][ T1124] ata1.00: error: { ABRT } [ 149.483745][ T1124] ata1.00: configured for UDMA/100 [ 149.486301][ T1124] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 149.490126][ T1124] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 149.492714][ T1124] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 149.495365][ T1124] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 46 6e 00 04 50 00 [ 149.500617][ T1124] I/O error, dev sda, sector 83566 op 0x0:(READ) flags 0x80700 phys_seg 130 prio class 2 [ 149.503895][ T1124] ata1: EH complete [ 149.542611][ T7149] FAULT_INJECTION: forcing a failure. [ 149.542611][ T7149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.558382][ T7149] CPU: 3 UID: 0 PID: 7149 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(full) [ 149.558400][ T7149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.558413][ T7149] Call Trace: [ 149.558429][ T7149] [ 149.558434][ T7149] dump_stack_lvl+0x100/0x190 [ 149.558598][ T7149] should_fail_ex.cold+0x5/0xa [ 149.558643][ T7149] _copy_to_user+0x32/0xd0 [ 149.558702][ T7149] simple_read_from_buffer+0xcb/0x170 [ 149.558742][ T7149] proc_fail_nth_read+0x1af/0x230 [ 149.558761][ T7149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.558773][ T7149] ? rw_verify_area+0xce/0x6d0 [ 149.558810][ T7149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.558821][ T7149] vfs_read+0x1e4/0xb40 [ 149.558833][ T7149] ? __pfx_vfs_read+0x10/0x10 [ 149.558843][ T7149] ? find_held_lock+0x2b/0x80 [ 149.558877][ T7149] ? __fget_files+0x215/0x3d0 [ 149.558893][ T7149] ? __fget_files+0x21f/0x3d0 [ 149.558908][ T7149] ksys_read+0x12a/0x250 [ 149.558918][ T7149] ? __pfx_ksys_read+0x10/0x10 [ 149.558933][ T7149] do_int80_emulation+0x166/0x650 [ 149.559017][ T7149] asm_int80_emulation+0x1a/0x20 [ 149.559030][ T7149] RIP: 0023:0xf71a74eb [ 149.559046][ T7149] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 149.559056][ T7149] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 149.559073][ T7149] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54665d0 [ 149.559080][ T7149] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 149.559086][ T7149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.559091][ T7149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.559097][ T7149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.559110][ T7149] [ 149.631789][ T34] usb 7-1: USB disconnect, device number 5 [ 149.716670][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 149.747337][ T7170] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 150.604182][ T7180] FAULT_INJECTION: forcing a failure. [ 150.604182][ T7180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.608718][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 150.608745][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.608752][ T7180] Call Trace: [ 150.608757][ T7180] [ 150.608762][ T7180] dump_stack_lvl+0x100/0x190 [ 150.608783][ T7180] should_fail_ex.cold+0x5/0xa [ 150.608797][ T7180] strncpy_from_user+0x3b/0x2d0 [ 150.608842][ T7180] do_getname+0x78/0x390 [ 150.608860][ T7180] user_path_at+0x26/0x60 [ 150.608872][ T7180] __ia32_sys_mount+0x1fb/0x310 [ 150.608887][ T7180] ? __pfx___ia32_sys_mount+0x10/0x10 [ 150.608901][ T7180] ? ksys_write+0x1ac/0x250 [ 150.608912][ T7180] ? __pfx_ksys_write+0x10/0x10 [ 150.608931][ T7180] __do_fast_syscall_32+0x13a/0x8b0 [ 150.608944][ T7180] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.608956][ T7180] do_fast_syscall_32+0x32/0x70 [ 150.608968][ T7180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.608983][ T7180] RIP: 0023:0xf703efec [ 150.608998][ T7180] Code: Unable to access opcode bytes at 0xf703efc2. [ 150.609002][ T7180] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 150.609013][ T7180] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 150.609020][ T7180] RDX: 0000000080000b80 RSI: 0000000000000008 RDI: 0000000080000000 [ 150.609026][ T7180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.609032][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.609038][ T7180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.609067][ T7180] [ 151.132608][ T7185] jffs2: notice: (7185) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.164809][ T7185] FAULT_INJECTION: forcing a failure. [ 151.164809][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 151.169065][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.3.372 Not tainted syzkaller #0 PREEMPT(full) [ 151.169080][ T7185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.169087][ T7185] Call Trace: [ 151.169091][ T7185] [ 151.169096][ T7185] dump_stack_lvl+0x100/0x190 [ 151.169116][ T7185] should_fail_ex.cold+0x5/0xa [ 151.169130][ T7185] should_failslab+0xc2/0x120 [ 151.169158][ T7185] kmem_cache_alloc_noprof+0x91/0x6a0 [ 151.169181][ T7185] ? copy_folio_from_iter_atomic+0x153/0x2000 [ 151.169201][ T7185] ? jffs2_write_end+0x1fd/0xea0 [ 151.169248][ T7185] jffs2_write_end+0x1fd/0xea0 [ 151.169260][ T7185] ? __pfx_jffs2_write_begin+0x10/0x10 [ 151.169274][ T7185] ? __pfx_jffs2_write_end+0x10/0x10 [ 151.169286][ T7185] ? inode_to_bdi+0x9e/0x160 [ 151.169309][ T7185] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 151.169327][ T7185] generic_perform_write+0x513/0xa40 [ 151.169358][ T7185] ? __pfx_generic_perform_write+0x10/0x10 [ 151.169375][ T7185] ? mnt_put_write_access_file+0x4e/0x100 [ 151.169389][ T7185] ? file_update_time_flags+0x38c/0x520 [ 151.169407][ T7185] __generic_file_write_iter+0x1f7/0x240 [ 151.169421][ T7185] generic_file_write_iter+0xe1/0x390 [ 151.169436][ T7185] iter_file_splice_write+0x830/0x10b0 [ 151.169457][ T7185] ? __pfx_iter_file_splice_write+0x10/0x10 [ 151.169473][ T7185] ? __pfx_copy_splice_read+0x10/0x10 [ 151.169497][ T7185] ? __pfx_iter_file_splice_write+0x10/0x10 [ 151.169512][ T7185] direct_splice_actor+0x192/0x690 [ 151.169526][ T7185] splice_direct_to_actor+0x345/0xa30 [ 151.169540][ T7185] ? __pfx_direct_splice_actor+0x10/0x10 [ 151.169556][ T7185] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 151.169573][ T7185] do_splice_direct+0x174/0x240 [ 151.169586][ T7185] ? __pfx_do_splice_direct+0x10/0x10 [ 151.169600][ T7185] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 151.169614][ T7185] ? rw_verify_area+0xce/0x6d0 [ 151.169633][ T7185] do_sendfile+0xadc/0xe20 [ 151.169646][ T7185] ? __pfx_do_sendfile+0x10/0x10 [ 151.169656][ T7185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.169670][ T7185] ? __fget_files+0x21f/0x3d0 [ 151.169684][ T7185] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 151.169697][ T7185] ? fput+0x7c/0x100 [ 151.169709][ T7185] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 151.169722][ T7185] ? ksys_write+0x1ac/0x250 [ 151.169733][ T7185] ? __pfx_ksys_write+0x10/0x10 [ 151.169746][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 151.169758][ T7185] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.169770][ T7185] do_fast_syscall_32+0x32/0x70 [ 151.169782][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.169797][ T7185] RIP: 0023:0xf7f22fec [ 151.169811][ T7185] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 151.169816][ T7185] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 151.169827][ T7185] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 151.169833][ T7185] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 0000000000000000 [ 151.169839][ T7185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.169845][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.169851][ T7185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.169864][ T7185] [ 151.554836][ T7196] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 151.643097][ T7202] block nbd3: NBD_DISCONNECT [ 151.856828][ T5739] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 151.858898][ T5739] Bluetooth: hci2: command 0x0419 tx timeout [ 152.083739][ T7216] kAFS: No cell specified [ 152.088629][ T7216] MTD: Couldn't look up './dev/mtdblock0': -2 [ 152.145100][ T7218] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 152.150604][ T7218] overlayfs: missing 'lowerdir' [ 152.214009][ T7220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.325432][ T7223] FAULT_INJECTION: forcing a failure. [ 152.325432][ T7223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.331350][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.2.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.331372][ T7223] Tainted: [L]=SOFTLOCKUP [ 152.331376][ T7223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.331383][ T7223] Call Trace: [ 152.331388][ T7223] [ 152.331393][ T7223] dump_stack_lvl+0x100/0x190 [ 152.331416][ T7223] should_fail_ex.cold+0x5/0xa [ 152.331428][ T7223] ? prepare_alloc_pages+0x16d/0x5f0 [ 152.331448][ T7223] should_fail_alloc_page+0xeb/0x140 [ 152.331467][ T7223] prepare_alloc_pages+0x1f0/0x5f0 [ 152.331491][ T7223] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 152.331509][ T7223] ? find_held_lock+0x2b/0x80 [ 152.331527][ T7223] ? is_bpf_text_address+0x8a/0x1a0 [ 152.331558][ T7223] ? is_bpf_text_address+0x8a/0x1a0 [ 152.331571][ T7223] ? bpf_ksym_find+0x124/0x1c0 [ 152.331587][ T7223] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 152.331617][ T7223] ? is_bpf_text_address+0x94/0x1a0 [ 152.331629][ T7223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.331643][ T7223] ? __kernel_text_address+0xd/0x30 [ 152.331663][ T7223] ? unwind_get_return_address+0x59/0xa0 [ 152.331683][ T7223] ? arch_stack_walk+0xa6/0xf0 [ 152.331718][ T7223] ? __pfx_stack_trace_save+0x10/0x10 [ 152.331736][ T7223] ? stack_depot_save_flags+0x27/0x9f0 [ 152.331753][ T7223] ? __lock_acquire+0x4c5/0x1ec0 [ 152.331766][ T7223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.331787][ T7223] ? policy_nodemask+0xed/0x4f0 [ 152.331806][ T7223] alloc_pages_mpol+0x1fb/0x540 [ 152.331824][ T7223] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.331839][ T7223] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.331859][ T7223] alloc_pages_noprof+0x1a/0x160 [ 152.331887][ T7223] get_free_pages_noprof+0x10/0xb0 [ 152.331902][ T7223] __kasan_populate_vmalloc+0xa0/0x210 [ 152.331920][ T7223] alloc_vmap_area+0x95d/0x2bb0 [ 152.331941][ T7223] ? kasan_save_track+0x14/0x30 [ 152.331956][ T7223] ? __kasan_kmalloc+0xaa/0xb0 [ 152.331970][ T7223] ? __pfx_alloc_vmap_area+0x10/0x10 [ 152.331988][ T7223] ? __get_vm_area_node+0x124/0x350 [ 152.332008][ T7223] __get_vm_area_node+0x1ed/0x350 [ 152.332027][ T7223] __vmalloc_node_range_noprof+0x228/0x1630 [ 152.332045][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.332062][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.332077][ T7223] ? __memcg_slab_post_alloc_hook+0x74c/0x1160 [ 152.332097][ T7223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.332118][ T7223] ? trace_kmem_cache_alloc+0xdd/0x100 [ 152.332138][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.332148][ T7223] __vmalloc_node_noprof+0xad/0xf0 [ 152.332165][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.332178][ T7223] copy_process+0x803/0x8370 [ 152.332209][ T7223] ? __pfx_copy_process+0x10/0x10 [ 152.332224][ T7223] ? __kasan_kmalloc+0xaa/0xb0 [ 152.332240][ T7223] ? lockdep_init_map_type+0x5c/0x250 [ 152.332254][ T7223] ? lockdep_init_map_type+0x5c/0x250 [ 152.332268][ T7223] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 152.332289][ T7223] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 152.332311][ T7223] vhost_task_create+0x1db/0x370 [ 152.332322][ T7223] ? __pfx_vhost_task_create+0x10/0x10 [ 152.332333][ T7223] ? register_lock_class+0x3f/0x7b0 [ 152.332350][ T7223] ? __pfx_vhost_task_fn+0x10/0x10 [ 152.332363][ T7223] ? __pfx___mutex_lock+0x10/0x10 [ 152.332381][ T7223] kvm_mmu_post_init_vm+0x1b3/0x360 [ 152.332399][ T7223] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 152.332424][ T7223] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 152.332447][ T7223] kvm_vcpu_ioctl+0x730/0x1700 [ 152.332461][ T7223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.332474][ T7223] ? tomoyo_path_number_perm+0x188/0x580 [ 152.332511][ T7223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.332526][ T7223] ? get_pid_task+0x106/0x250 [ 152.332546][ T7223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.332559][ T7223] ? do_vfs_ioctl+0x226/0x13e0 [ 152.332578][ T7223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.332602][ T7223] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 152.332615][ T7223] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 152.332628][ T7223] ? __fget_files+0x21f/0x3d0 [ 152.332643][ T7223] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 152.332656][ T7223] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 152.332675][ T7223] __do_fast_syscall_32+0x13a/0x8b0 [ 152.332688][ T7223] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.332700][ T7223] do_fast_syscall_32+0x32/0x70 [ 152.332712][ T7223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.332725][ T7223] RIP: 0023:0xf7fa7fec [ 152.332741][ T7223] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 152.332747][ T7223] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 152.332758][ T7223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 152.332764][ T7223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.332770][ T7223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.332776][ T7223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.332782][ T7223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.332795][ T7223] [ 152.333648][ T7223] syz.2.384: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.497856][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.2.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.497883][ T7223] Tainted: [L]=SOFTLOCKUP [ 152.497889][ T7223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.497899][ T7223] Call Trace: [ 152.497905][ T7223] [ 152.497913][ T7223] dump_stack_lvl+0x100/0x190 [ 152.497943][ T7223] warn_alloc.cold+0x94/0xa8 [ 152.497976][ T7223] ? __pfx_warn_alloc+0x10/0x10 [ 152.497994][ T7223] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.498013][ T7223] ? __get_vm_area_node+0x2f0/0x350 [ 152.498042][ T7223] ? __get_vm_area_node+0x22b/0x350 [ 152.498071][ T7223] __vmalloc_node_range_noprof+0xccd/0x1630 [ 152.498105][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.498126][ T7223] ? __memcg_slab_post_alloc_hook+0x74c/0x1160 [ 152.498153][ T7223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.498188][ T7223] ? trace_kmem_cache_alloc+0xdd/0x100 [ 152.498214][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.498230][ T7223] __vmalloc_node_noprof+0xad/0xf0 [ 152.498253][ T7223] ? vhost_task_create+0x1db/0x370 [ 152.498271][ T7223] copy_process+0x803/0x8370 [ 152.498307][ T7223] ? __pfx_copy_process+0x10/0x10 [ 152.498328][ T7223] ? __kasan_kmalloc+0xaa/0xb0 [ 152.498349][ T7223] ? lockdep_init_map_type+0x5c/0x250 [ 152.498367][ T7223] ? lockdep_init_map_type+0x5c/0x250 [ 152.498386][ T7223] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 152.498408][ T7223] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 152.498438][ T7223] vhost_task_create+0x1db/0x370 [ 152.498458][ T7223] ? __pfx_vhost_task_create+0x10/0x10 [ 152.498474][ T7223] ? register_lock_class+0x3f/0x7b0 [ 152.498507][ T7223] ? __pfx_vhost_task_fn+0x10/0x10 [ 152.498528][ T7223] ? __pfx___mutex_lock+0x10/0x10 [ 152.498556][ T7223] kvm_mmu_post_init_vm+0x1b3/0x360 [ 152.498584][ T7223] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 152.498610][ T7223] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 152.498636][ T7223] kvm_vcpu_ioctl+0x730/0x1700 [ 152.498657][ T7223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 152.498676][ T7223] ? tomoyo_path_number_perm+0x188/0x580 [ 152.498700][ T7223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.498723][ T7223] ? get_pid_task+0x106/0x250 [ 152.498753][ T7223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.498774][ T7223] ? do_vfs_ioctl+0x226/0x13e0 [ 152.498801][ T7223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.498837][ T7223] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 152.498853][ T7223] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 152.498872][ T7223] ? __fget_files+0x21f/0x3d0 [ 152.498898][ T7223] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 152.498920][ T7223] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 152.498950][ T7223] __do_fast_syscall_32+0x13a/0x8b0 [ 152.498971][ T7223] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.498992][ T7223] do_fast_syscall_32+0x32/0x70 [ 152.499010][ T7223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.499034][ T7223] RIP: 0023:0xf7fa7fec [ 152.499058][ T7223] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 152.499067][ T7223] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 152.499085][ T7223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 152.499096][ T7223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.499106][ T7223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.499116][ T7223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.499127][ T7223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.499175][ T7223] [ 152.499196][ T7223] Mem-Info: [ 152.622866][ T7223] active_anon:5826 inactive_anon:292 isolated_anon:0 [ 152.622866][ T7223] active_file:86 inactive_file:63053 isolated_file:0 [ 152.622866][ T7223] unevictable:1000 dirty:200 writeback:0 [ 152.622866][ T7223] slab_reclaimable:9892 slab_unreclaimable:51831 [ 152.622866][ T7223] mapped:24052 shmem:1514 pagetables:1169 [ 152.622866][ T7223] sec_pagetables:297 bounce:0 [ 152.622866][ T7223] kernel_misc_reclaimable:0 [ 152.622866][ T7223] free:27669 free_pcp:14270 free_cma:0 [ 152.640233][ T7223] Node 0 active_anon:16kB inactive_anon:12kB active_file:12kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1800kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.650511][ T7223] Node 1 active_anon:23388kB inactive_anon:1156kB active_file:332kB inactive_file:252120kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:96368kB dirty:796kB writeback:0kB shmem:6056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5248kB pagetables:2776kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.666033][ T7223] Node 0 DMA free:2092kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:52kB free_cma:0kB [ 152.681294][ T7223] lowmem_reserve[]: 0 279 279 279 279 [ 153.059183][ T7223] Node 0 DMA32 free:18196kB boost:4096kB min:16744kB low:19904kB high:23064kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:12kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:285924kB mlocked:0kB bounce:0kB free_pcp:11004kB local_pcp:2828kB free_cma:0kB [ 153.657002][ T7223] lowmem_reserve[]: 0 0 0 0 0 [ 153.658590][ T7223] Node 1 DMA32 free:86696kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23520kB inactive_anon:1156kB active_file:332kB inactive_file:252120kB unevictable:4000kB writepending:848kB zspages:1968kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:47400kB local_pcp:11244kB free_cma:0kB [ 153.673048][ T7223] lowmem_reserve[]: 0 0 0 0 0 [ 153.674812][ T7223] Node 0 DMA: 15*4kB (UM) 10*8kB (UM) 2*16kB (M) 10*32kB (UM) 5*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 153.685131][ T7223] Node 0 DMA32: 235*4kB (UME) 71*8kB (UME) 37*16kB (UME) 35*32kB (UM) 34*64kB (UME) 24*128kB (UME) 10*256kB (UM) 12*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 18196kB [ 153.693901][ T7223] Node 1 DMA32: 100*4kB (UM) 265*8kB (UME) 259*16kB (UM) 164*32kB (UME) 60*64kB (UME) 99*128kB (UME) 50*256kB (UME) 21*512kB (UME) 14*1024kB (UM) 6*2048kB (ME) 2*4096kB (M) = 86792kB [ 153.720713][ T7223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.723587][ T7223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.731800][ T7223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.734804][ T7223] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 153.741801][ T7223] 65037 total pagecache pages [ 153.744059][ T7223] 387 pages in swap cache [ 153.745479][ T7223] Free swap = 119852kB [ 153.752721][ T7223] Total swap = 124996kB [ 153.754134][ T7223] 524155 pages RAM [ 153.755370][ T7223] 0 pages HighMem/MovableOnly [ 153.761502][ T7223] 211781 pages reserved [ 153.763588][ T7223] 0 pages cma reserved [ 155.094762][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 155.094777][ T42] audit: type=1326 audit(1787273344.364:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.105382][ T42] audit: type=1326 audit(1787273344.374:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.113100][ T42] audit: type=1326 audit(1787273344.384:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.121741][ T42] audit: type=1326 audit(1787273344.384:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.131896][ T42] audit: type=1326 audit(1787273344.384:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.142953][ T42] audit: type=1326 audit(1787273344.384:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.151992][ T42] audit: type=1326 audit(1787273344.384:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.159422][ T42] audit: type=1326 audit(1787273344.384:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.166614][ T42] audit: type=1326 audit(1787273344.394:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.173898][ T42] audit: type=1326 audit(1787273344.394:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 155.199126][ T7242] netlink: 72 bytes leftover after parsing attributes in process `syz.1.389'. [ 156.170669][ T7254] binder: 7253:7254 unknown command 0 [ 156.172470][ T7254] binder: 7253:7254 ioctl c0306201 80000000 returned -22 [ 156.200479][ T7256] FAULT_INJECTION: forcing a failure. [ 156.200479][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 156.204482][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.395 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.204500][ T7256] Tainted: [L]=SOFTLOCKUP [ 156.204510][ T7256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.204518][ T7256] Call Trace: [ 156.204522][ T7256] [ 156.204527][ T7256] dump_stack_lvl+0x100/0x190 [ 156.204560][ T7256] should_fail_ex.cold+0x5/0xa [ 156.204574][ T7256] should_failslab+0xc2/0x120 [ 156.204591][ T7256] __kmalloc_cache_noprof+0x91/0x6b0 [ 156.204618][ T7256] ? rtnl_newlink+0x139/0x2620 [ 156.204717][ T7256] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.204730][ T7256] rtnl_newlink+0x139/0x2620 [ 156.204746][ T7256] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.204759][ T7256] ? rcu_is_watching+0x13/0xc0 [ 156.204777][ T7256] ? kasan_quarantine_put+0x104/0x240 [ 156.204790][ T7256] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.204808][ T7256] ? __lock_acquire+0x4c5/0x1ec0 [ 156.204822][ T7256] ? find_held_lock+0x2b/0x80 [ 156.204842][ T7256] ? find_held_lock+0x2b/0x80 [ 156.204857][ T7256] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 156.204868][ T7256] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 156.204881][ T7256] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.204893][ T7256] rtnetlink_rcv_msg+0x95e/0xe90 [ 156.204906][ T7256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.204922][ T7256] ? ref_tracker_free+0x37e/0x6c0 [ 156.204939][ T7256] netlink_rcv_skb+0x159/0x420 [ 156.204979][ T7256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.204992][ T7256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.205012][ T7256] ? netlink_deliver_tap+0x1ae/0xcc0 [ 156.205029][ T7256] netlink_unicast+0x585/0x850 [ 156.205047][ T7256] ? __pfx_netlink_unicast+0x10/0x10 [ 156.205068][ T7256] netlink_sendmsg+0x8b0/0xda0 [ 156.205086][ T7256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.205104][ T7256] ? apparmor_socket_sendmsg+0x15b/0x270 [ 156.205128][ T7256] ____sys_sendmsg+0xa4d/0xbe0 [ 156.205150][ T7256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.205166][ T7256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.205185][ T7256] ___sys_sendmsg+0x190/0x1e0 [ 156.205201][ T7256] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.205221][ T7256] ? find_held_lock+0x2b/0x80 [ 156.205244][ T7256] __sys_sendmsg+0x160/0x210 [ 156.205256][ T7256] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.205270][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 156.205285][ T7256] __do_fast_syscall_32+0x13a/0x8b0 [ 156.205297][ T7256] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.205309][ T7256] do_fast_syscall_32+0x32/0x70 [ 156.205321][ T7256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.205335][ T7256] RIP: 0023:0xf7f33fec [ 156.205351][ T7256] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 156.205356][ T7256] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 156.205367][ T7256] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 156.205373][ T7256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.205379][ T7256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.205385][ T7256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.205392][ T7256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.205404][ T7256] [ 158.587948][ T7278] syzkaller0: entered promiscuous mode [ 158.589760][ T7278] syzkaller0: entered allmulticast mode [ 158.861548][ T7287] FAULT_INJECTION: forcing a failure. [ 158.861548][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.872209][ T7287] CPU: 2 UID: 0 PID: 7287 Comm: syz.0.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.872229][ T7287] Tainted: [L]=SOFTLOCKUP [ 158.872234][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.872241][ T7287] Call Trace: [ 158.872246][ T7287] [ 158.872251][ T7287] dump_stack_lvl+0x100/0x190 [ 158.872275][ T7287] should_fail_ex.cold+0x5/0xa [ 158.872289][ T7287] _copy_from_user+0x2e/0xd0 [ 158.872303][ T7287] __sys_bpf+0x2f5/0x4a30 [ 158.872338][ T7287] ? __pfx___sys_bpf+0x10/0x10 [ 158.872354][ T7287] ? find_held_lock+0x2b/0x80 [ 158.872370][ T7287] ? get_pid_task+0xfc/0x250 [ 158.872386][ T7287] ? get_pid_task+0xfc/0x250 [ 158.872405][ T7287] ? proc_fail_nth_write+0x9f/0x220 [ 158.872417][ T7287] ? find_held_lock+0x2b/0x80 [ 158.872435][ T7287] ? rcu_read_lock_any_held+0x6a/0x90 [ 158.872453][ T7287] ? find_held_lock+0x2b/0x80 [ 158.872468][ T7287] ? ksys_write+0x190/0x250 [ 158.872479][ T7287] ? ksys_write+0x190/0x250 [ 158.872578][ T7287] ? fput+0x7c/0x100 [ 158.872595][ T7287] ? __ia32_sys_bpf+0xcc/0x170 [ 158.872609][ T7287] __ia32_sys_bpf+0xcc/0x170 [ 158.872625][ T7287] ? __do_fast_syscall_32+0xb3/0x8b0 [ 158.872641][ T7287] __do_fast_syscall_32+0x13a/0x8b0 [ 158.872652][ T7287] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.872664][ T7287] do_fast_syscall_32+0x32/0x70 [ 158.872676][ T7287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.872691][ T7287] RIP: 0023:0xf7f33fec [ 158.872706][ T7287] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 158.872711][ T7287] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 158.872722][ T7287] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 158.872729][ T7287] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.872735][ T7287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.872741][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.872747][ T7287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.872760][ T7287] [ 159.010502][ T5739] Bluetooth: hci3: hcon ffff88804cb8c000 sent 0 < count 6 [ 159.304044][ T7296] jffs2: notice: (7296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.434017][ T7299] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 159.534225][ T7304] netlink: 'syz.2.410': attribute type 29 has an invalid length. [ 159.599479][ T5780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.605241][ T5780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.613967][ T5780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.617912][ T5780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.998886][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 160.054958][ T7316] Console: switching to colour dummy device 80x25 [ 160.265015][ T7327] batman_adv: batadv0: Adding interface: veth0 [ 160.268676][ T7327] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.276419][ T7327] batman_adv: batadv0: Interface activated: veth0 [ 160.288990][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 161.136724][ T5739] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 161.136859][ T5741] Bluetooth: hci3: command 0x206a tx timeout [ 161.495769][ T7347] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 161.542139][ T7343] netlink: 76 bytes leftover after parsing attributes in process `syz.1.429'. [ 162.488332][ T7354] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 162.729759][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 162.729808][ T42] audit: type=1400 audit(1787273352.004:94): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7360 comm="syz.2.435" name="p" offset=53 [ 163.689904][ T42] audit: type=1400 audit(1787273352.964:95): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7374 comm="syz.2.441" name="p" offset=53 [ 164.037813][ T42] audit: type=1400 audit(1787273353.314:96): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7381 comm="syz.2.444" name="p" offset=53 [ 164.051122][ T7378] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 164.135044][ T7386] kvm: kvm [7385]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001d) [ 164.600686][ T7398] lo speed is unknown, defaulting to 1000 [ 164.602297][ T7397] syz.3.447 uses obsolete (PF_INET,SOCK_PACKET) [ 164.602661][ T7398] lo speed is unknown, defaulting to 1000 [ 164.610989][ T7398] lo speed is unknown, defaulting to 1000 [ 164.613598][ T7398] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 164.619139][ T7398] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 164.619166][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 164.625114][ T7398] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 164.634188][ T7398] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.641537][ T7398] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.657990][ T7394] ucma_write: process 323 (syz.1.450) changed security contexts after opening file descriptor, this is not allowed. [ 164.664409][ T7398] lo speed is unknown, defaulting to 1000 [ 164.668038][ T7398] lo speed is unknown, defaulting to 1000 [ 164.670668][ T7398] lo speed is unknown, defaulting to 1000 [ 164.673206][ T7398] lo speed is unknown, defaulting to 1000 [ 164.675675][ T7398] lo speed is unknown, defaulting to 1000 [ 165.330523][ T5741] Bluetooth: hci3: link tx timeout [ 165.750515][ T5741] Bluetooth: hci3: link tx timeout [ 166.260263][ T5741] Bluetooth: hci3: link tx timeout [ 166.718360][ T7421] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 167.576311][ T5741] Bluetooth: hci3: link tx timeout [ 167.604804][ T5741] Bluetooth: hci3: link tx timeout [ 167.628200][ T5741] Bluetooth: hci3: link tx timeout [ 167.694495][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 167.751568][ T7430] FAULT_INJECTION: forcing a failure. [ 167.751568][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 167.758927][ T7430] CPU: 3 UID: 0 PID: 7430 Comm: syz.3.456 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.758946][ T7430] Tainted: [L]=SOFTLOCKUP [ 167.758950][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.758957][ T7430] Call Trace: [ 167.758973][ T7430] [ 167.758979][ T7430] dump_stack_lvl+0x100/0x190 [ 167.759013][ T7430] should_fail_ex.cold+0x5/0xa [ 167.759028][ T7430] should_failslab+0xc2/0x120 [ 167.759045][ T7430] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 167.759061][ T7430] ? __alloc_skb+0x140/0x710 [ 167.759075][ T7430] __alloc_skb+0x140/0x710 [ 167.759104][ T7430] ? __alloc_skb+0x5b7/0x710 [ 167.759114][ T7430] ? __pfx___alloc_skb+0x10/0x10 [ 167.759125][ T7430] ? __mutex_lock+0x26c/0x1bc0 [ 167.759140][ T7430] netlink_dump+0x194/0xd00 [ 167.759157][ T7430] ? __pfx___mutex_lock+0x10/0x10 [ 167.759168][ T7430] ? __pfx_netlink_dump+0x10/0x10 [ 167.759191][ T7430] __netlink_dump_start+0x6d6/0x990 [ 167.759208][ T7430] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 167.759245][ T7430] xfrm_user_rcv_msg+0x801/0xd00 [ 167.759268][ T7430] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 167.759285][ T7430] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 167.759301][ T7430] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 167.759333][ T7430] ? rcu_is_watching+0x13/0xc0 [ 167.759349][ T7430] ? trace_contention_end+0x126/0x160 [ 167.759364][ T7430] ? __mutex_lock+0x26c/0x1bc0 [ 167.759376][ T7430] netlink_rcv_skb+0x159/0x420 [ 167.759393][ T7430] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 167.759410][ T7430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.759435][ T7430] xfrm_netlink_rcv+0x71/0x90 [ 167.759450][ T7430] netlink_unicast+0x585/0x850 [ 167.759468][ T7430] ? __pfx_netlink_unicast+0x10/0x10 [ 167.759488][ T7430] netlink_sendmsg+0x8b0/0xda0 [ 167.759505][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.759530][ T7430] ? apparmor_socket_sendmsg+0x15b/0x270 [ 167.759545][ T7430] ____sys_sendmsg+0xa4d/0xbe0 [ 167.759559][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.759576][ T7430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.759596][ T7430] ___sys_sendmsg+0x190/0x1e0 [ 167.759611][ T7430] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.759632][ T7430] ? find_held_lock+0x2b/0x80 [ 167.759656][ T7430] __sys_sendmsg+0x160/0x210 [ 167.759668][ T7430] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.759683][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 167.759697][ T7430] __do_fast_syscall_32+0x13a/0x8b0 [ 167.759709][ T7430] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.759721][ T7430] do_fast_syscall_32+0x32/0x70 [ 167.759734][ T7430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.759748][ T7430] RIP: 0023:0xf7f22fec [ 167.759763][ T7430] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 167.759768][ T7430] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 167.759779][ T7430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 167.759786][ T7430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.759792][ T7430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.759797][ T7430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.759804][ T7430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.759817][ T7430] [ 167.765562][ T5741] Bluetooth: hci3: link tx timeout [ 168.000882][ T6194] smbdirect: ib_dev[syz0] removed [ 168.012412][ T9] lo speed is unknown, defaulting to 1000 [ 168.014642][ T9] infiniband syz0: ib_query_port failed (-19) [ 168.061862][ T7437] block nbd3: NBD_DISCONNECT [ 168.688270][ T7445] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 168.800769][ T42] audit: type=1400 audit(1787273358.074:97): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7446 comm="syz.1.470" name="p" offset=53 [ 169.446194][ T7459] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 169.522334][ T7469] xt_time: unknown flags 0xf4 [ 169.561214][ T7469] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.616081][ T7469] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.682616][ T7469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.779930][ T7469] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.926667][ T5780] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.931595][ T5780] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.936461][ T5780] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.946681][ T5780] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.319709][ T5735] Bluetooth: hci3: link tx timeout [ 170.421413][ T5745] Bluetooth: hci0: command tx timeout [ 170.423900][ T5739] Bluetooth: hci2: command 0x0419 tx timeout [ 170.426717][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 171.191156][ T7494] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 171.323506][ T7496] lo speed is unknown, defaulting to 1000 [ 171.350964][ T7496] lo speed is unknown, defaulting to 1000 [ 171.355743][ T7496] lo speed is unknown, defaulting to 1000 [ 171.358319][ T7496] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.366420][ T7496] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.372034][ T7496] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.383366][ T64] Bluetooth: hci3: link tx timeout [ 171.386250][ T7496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 171.419552][ T7496] lo speed is unknown, defaulting to 1000 [ 171.426083][ T7496] lo speed is unknown, defaulting to 1000 [ 171.439663][ T7496] lo speed is unknown, defaulting to 1000 [ 171.444911][ T7496] lo speed is unknown, defaulting to 1000 [ 171.451004][ T7496] lo speed is unknown, defaulting to 1000 [ 171.770415][ T64] Bluetooth: hci3: link tx timeout [ 172.377035][ T64] Bluetooth: hci3: link tx timeout [ 172.541255][ T7514] tc action pedit offset must be on 32 bit boundaries [ 172.807759][ T7520] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 172.871605][ T42] audit: type=1400 audit(1787273362.144:98): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7518 comm="syz.2.484" name="p" offset=53 [ 173.051652][ T7525] program syz.0.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.081537][ T7525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.296705][ T5741] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 173.299421][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 173.525402][ T7539] syzkaller0: entered promiscuous mode [ 173.528887][ T7539] syzkaller0: entered allmulticast mode [ 173.540779][ T7539] FAULT_INJECTION: forcing a failure. [ 173.540779][ T7539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.555309][ T7539] CPU: 1 UID: 0 PID: 7539 Comm: syz.3.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.555330][ T7539] Tainted: [L]=SOFTLOCKUP [ 173.555334][ T7539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.555341][ T7539] Call Trace: [ 173.555358][ T7539] [ 173.555363][ T7539] dump_stack_lvl+0x100/0x190 [ 173.555385][ T7539] should_fail_ex.cold+0x5/0xa [ 173.555399][ T7539] _copy_from_user+0x2e/0xd0 [ 173.555412][ T7539] get_compat_msghdr+0xb3/0x480 [ 173.555440][ T7539] ? __pfx_get_compat_msghdr+0x10/0x10 [ 173.555459][ T7539] ___sys_sendmsg+0x1b6/0x1e0 [ 173.555476][ T7539] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.555496][ T7539] ? find_held_lock+0x2b/0x80 [ 173.555522][ T7539] __sys_sendmsg+0x160/0x210 [ 173.555534][ T7539] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.555548][ T7539] ? __pfx_ksys_write+0x10/0x10 [ 173.555563][ T7539] __do_fast_syscall_32+0x13a/0x8b0 [ 173.555577][ T7539] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.555589][ T7539] do_fast_syscall_32+0x32/0x70 [ 173.555601][ T7539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.555616][ T7539] RIP: 0023:0xf7f22fec [ 173.555630][ T7539] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 173.555636][ T7539] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 173.555647][ T7539] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000200 [ 173.555653][ T7539] RDX: 000000002000600d RSI: 0000000000000000 RDI: 0000000000000000 [ 173.555659][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.555665][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.555672][ T7539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.555684][ T7539] [ 173.777734][ T850] usb 6-1: Failed to early initialize device [ 173.788733][ T850] usb 6-1: USB disconnect, device number 4 [ 174.018682][ T64] Bluetooth: hci3: link tx timeout [ 174.184577][ T42] audit: type=1400 audit(1787273363.434:99): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7550 comm="syz.3.497" name="p" offset=48 [ 174.364541][ T7554] syzkaller0: entered promiscuous mode [ 174.366439][ T7554] syzkaller0: entered allmulticast mode [ 175.348476][ T42] audit: type=1400 audit(1787273363.864:100): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7562 comm="syz.3.500" name="p" offset=53 [ 175.427578][ T7567] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 175.430959][ T7567] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.816044][ T64] Bluetooth: hci3: link tx timeout [ 176.045443][ T64] Bluetooth: hci3: link tx timeout [ 176.494613][ T7599] block nbd0: NBD_DISCONNECT [ 177.069454][ T42] audit: type=1400 audit(1787273366.344:101): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7608 comm="syz.2.516" name="unknown" offset=16 [ 177.139508][ T42] audit: type=1400 audit(1787273366.414:102): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7612 comm="syz.2.518" name="unknown" offset=16 [ 177.186644][ T7615] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 177.427416][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 177.475729][ T42] audit: type=1400 audit(1787273366.744:103): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7616 comm="syz.3.520" name="p" offset=53 [ 177.587602][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.597345][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.602100][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.606198][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.610349][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.619785][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.626410][ T9] usb 7-1: Product: syz [ 177.628440][ T9] usb 7-1: Manufacturer: syz [ 177.638911][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 177.641180][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 177.645995][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 177.649021][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 177.867255][ T64] Bluetooth: hci3: link tx timeout [ 177.902958][ T9] usb 7-1: USB disconnect, device number 6 [ 178.045433][ T64] Bluetooth: hci3: link tx timeout [ 178.707845][ T42] audit: type=1400 audit(1787273367.964:104): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7640 comm="syz.3.527" name="p" offset=53 [ 179.725416][ T7653] block nbd1: NBD_DISCONNECT [ 179.825712][ T64] Bluetooth: hci3: link tx timeout [ 180.610379][ T42] audit: type=1400 audit(1787273369.884:105): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7667 comm="syz.3.538" name="p" offset=53 [ 181.076707][ T850] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 181.091453][ T7688] overlayfs: failed to resolve './bus': -2 [ 181.237234][ T850] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 181.241130][ T850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 181.244309][ T850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 181.248053][ T850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.267204][ T850] usb 7-1: USB2VGA dongle found at address 7 [ 181.271385][ T850] usb 7-1: Allocated 8 output buffers [ 181.278470][ T7698] block nbd3: NBD_DISCONNECT [ 181.466492][ T7679] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 181.942064][ T42] audit: type=1400 audit(1787273371.214:106): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7704 comm="syz.0.554" name="p" offset=53 [ 183.218732][ T7715] overlayfs: failed to resolve './bus': -2 [ 183.934765][ T7729] lo speed is unknown, defaulting to 1000 [ 184.150558][ T7738] syzkaller0: entered promiscuous mode [ 184.152509][ T7738] syzkaller0: entered allmulticast mode [ 184.284598][ T7744] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 184.442306][ T7746] FAULT_INJECTION: forcing a failure. [ 184.442306][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 184.446158][ T7746] CPU: 3 UID: 0 PID: 7746 Comm: syz.3.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.446176][ T7746] Tainted: [L]=SOFTLOCKUP [ 184.446180][ T7746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.446186][ T7746] Call Trace: [ 184.446192][ T7746] [ 184.446197][ T7746] dump_stack_lvl+0x100/0x190 [ 184.446217][ T7746] should_fail_ex.cold+0x5/0xa [ 184.446232][ T7746] should_failslab+0xc2/0x120 [ 184.446249][ T7746] kmem_cache_alloc_noprof+0x91/0x6a0 [ 184.446265][ T7746] ? alloc_empty_file+0x5b/0x1c0 [ 184.446282][ T7746] alloc_empty_file+0x5b/0x1c0 [ 184.446301][ T7746] path_openat+0xdb/0x2440 [ 184.446317][ T7746] ? __pfx_path_openat+0x10/0x10 [ 184.446333][ T7746] do_file_open+0x20e/0x430 [ 184.446347][ T7746] ? __pfx_do_file_open+0x10/0x10 [ 184.446368][ T7746] ? alloc_fd+0x471/0x7a0 [ 184.446382][ T7746] ? do_getname+0x191/0x390 [ 184.446398][ T7746] do_sys_openat2+0x10f/0x1e0 [ 184.446414][ T7746] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.446430][ T7746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.446443][ T7746] ? __fget_files+0x21f/0x3d0 [ 184.446456][ T7746] __ia32_compat_sys_open+0xfe/0x1c0 [ 184.446472][ T7746] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 184.446487][ T7746] ? fput+0x7c/0x100 [ 184.446499][ T7746] ? ksys_write+0x1ac/0x250 [ 184.446510][ T7746] ? __pfx_ksys_write+0x10/0x10 [ 184.446535][ T7746] __do_fast_syscall_32+0x13a/0x8b0 [ 184.446550][ T7746] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.446561][ T7746] do_fast_syscall_32+0x32/0x70 [ 184.446574][ T7746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.446588][ T7746] RIP: 0023:0xf7f22fec [ 184.446602][ T7746] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 184.446607][ T7746] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 184.446618][ T7746] RAX: ffffffffffffffda RBX: 00000000800004c0 RCX: 0000000000000241 [ 184.446625][ T7746] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 184.446630][ T7746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.446637][ T7746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.446642][ T7746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.446655][ T7746] [ 184.675826][ T7749] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 185.163241][ T7772] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 185.478997][ T7778] lo speed is unknown, defaulting to 1000 [ 185.825681][ T42] audit: type=1400 audit(1787273375.094:107): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7789 comm="syz.3.589" name="p" offset=53 [ 186.817904][ T7796] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 186.826818][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 186.827082][ T5741] Bluetooth: hci3: command 0x206a tx timeout [ 186.830598][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 186.881767][ T7800] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 188.340080][ T42] audit: type=1400 audit(1787273377.614:108): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7820 comm="syz.2.601" name="p" offset=53 [ 188.624024][ T7832] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 188.698146][ T7834] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 188.896731][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 188.901067][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 188.992892][ T7839] lo speed is unknown, defaulting to 1000 [ 189.956116][ T7867] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 190.265985][ T7870] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 190.817030][ T64] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 190.819494][ T5735] Bluetooth: hci0: command 0x206a tx timeout [ 190.986753][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 190.989639][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 191.609170][ T7892] lo speed is unknown, defaulting to 1000 [ 192.045706][ T42] audit: type=1400 audit(1787273381.314:109): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7898 comm="syz.3.632" name="p" offset=53 [ 192.561133][ T7912] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 192.888741][ T7911] netlink: 'syz.0.633': attribute type 10 has an invalid length. [ 193.066686][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 193.068578][ T5741] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 193.495478][ T5840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 193.584503][ T7927] lo speed is unknown, defaulting to 1000 [ 193.769348][ T5735] Bluetooth: hci3: link tx timeout [ 193.977103][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.996935][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.256718][ T64] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 194.256744][ T5735] Bluetooth: hci0: command 0x206a tx timeout [ 194.259881][ T5840] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 194.264876][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 194.274309][ T5840] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 194.277823][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.294706][ T5840] usb 6-1: USB2VGA dongle found at address 5 [ 194.326448][ T5840] usb 6-1: Allocated 8 output buffers [ 194.433030][ T7943] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 194.512853][ T7918] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 194.899210][ T7947] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 195.136651][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 195.699617][ T42] audit: type=1400 audit(1787273384.974:110): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7962 comm="syz.2.655" name="p" offset=53 [ 195.776843][ T5741] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 195.777099][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 196.462911][ T7972] lo speed is unknown, defaulting to 1000 [ 196.937649][ T7982] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 197.296674][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 197.298699][ T5735] Bluetooth: hci3: command 0x206a tx timeout [ 198.161121][ T7998] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 199.329911][ T8015] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 199.466656][ T5735] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 199.467546][ T64] Bluetooth: hci3: command 0x206a tx timeout [ 200.121389][ T8029] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 200.496135][ T8033] lo speed is unknown, defaulting to 1000 [ 201.193052][ T8047] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 201.616676][ T5741] Bluetooth: hci0: command 0x206a tx timeout [ 201.616685][ T64] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 201.703955][ T42] audit: type=1400 audit(1787273390.974:111): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8050 comm="syz.2.681" name="p" offset=53 [ 203.129572][ T8067] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 203.696701][ T5735] Bluetooth: hci0: command 0x206a tx timeout [ 203.696826][ T64] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 204.302275][ T8087] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 205.373372][ T8099] lo speed is unknown, defaulting to 1000 [ 205.776810][ T5741] Bluetooth: hci0: command 0x206a tx timeout [ 205.777909][ T64] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 206.199443][ T8116] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 206.688634][ T8120] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 207.306627][ T5741] Bluetooth: hci2: command 0x0419 tx timeout [ 207.308642][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 207.898095][ T8142] lo speed is unknown, defaulting to 1000 [ 208.087219][ T42] audit: type=1400 audit(1787273397.284:112): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8144 comm="syz.3.719" name="p" offset=53 [ 208.841503][ T8155] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 208.896728][ T5741] Bluetooth: hci1: command 0x0419 tx timeout [ 208.897751][ T64] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 209.289311][ T8163] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 210.470975][ T8180] binder: 8179:8180 ioctl c0306201 80000180 returned -14 [ 210.562238][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 210.636751][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 210.656621][ T64] Bluetooth: hci0: command 0x206a tx timeout [ 210.656869][ T5735] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 210.763981][ T8201] FAULT_INJECTION: forcing a failure. [ 210.763981][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 210.769529][ T8201] CPU: 2 UID: 0 PID: 8201 Comm: syz.1.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.769548][ T8201] Tainted: [L]=SOFTLOCKUP [ 210.769552][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.769560][ T8201] Call Trace: [ 210.769564][ T8201] [ 210.769568][ T8201] dump_stack_lvl+0x100/0x190 [ 210.769589][ T8201] should_fail_ex.cold+0x5/0xa [ 210.769603][ T8201] should_failslab+0xc2/0x120 [ 210.769620][ T8201] __kmalloc_noprof+0xfc/0x820 [ 210.769634][ T8201] ? kasan_save_track+0x14/0x30 [ 210.769648][ T8201] ? aa_str_alloc+0x4a/0xb0 [ 210.769663][ T8201] aa_str_alloc+0x4a/0xb0 [ 210.769673][ T8201] aa_policy_init+0x1cd/0x240 [ 210.769685][ T8201] aa_alloc_profile+0xd1/0x520 [ 210.769700][ T8201] unpack_profile+0x3ed/0x4510 [ 210.769715][ T8201] ? is_bpf_text_address+0x8a/0x1a0 [ 210.769728][ T8201] ? bpf_ksym_find+0x124/0x1c0 [ 210.769744][ T8201] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.769778][ T8201] ? is_bpf_text_address+0x94/0x1a0 [ 210.769790][ T8201] ? kernel_text_address+0x8d/0x100 [ 210.769803][ T8201] ? __pfx_unpack_profile+0x10/0x10 [ 210.769818][ T8201] ? arch_stack_walk+0xa6/0xf0 [ 210.769841][ T8201] ? stack_trace_save+0x8e/0xc0 [ 210.769851][ T8201] ? __pfx_stack_trace_save+0x10/0x10 [ 210.769872][ T8201] ? aa_unpack_str+0xae/0x2b0 [ 210.769888][ T8201] aa_unpack+0x39e/0x1240 [ 210.769907][ T8201] ? __pfx_aa_unpack+0x10/0x10 [ 210.769926][ T8201] ? __lock_acquire+0x4c5/0x1ec0 [ 210.769942][ T8201] aa_replace_profiles+0x176/0x31c0 [ 210.769960][ T8201] ? __might_fault+0xc5/0x140 [ 210.769973][ T8201] ? __might_fault+0xc5/0x140 [ 210.769984][ T8201] ? __pfx_aa_replace_profiles+0x10/0x10 [ 210.770001][ T8201] ? _copy_from_user+0x59/0xd0 [ 210.770017][ T8201] policy_update+0x20b/0x340 [ 210.770033][ T8201] profile_load+0xaa/0x1a0 [ 210.770049][ T8201] vfs_write+0x2aa/0x1050 [ 210.770061][ T8201] ? __pfx_profile_load+0x10/0x10 [ 210.770076][ T8201] ? __pfx_vfs_write+0x10/0x10 [ 210.770086][ T8201] ? find_held_lock+0x2b/0x80 [ 210.770102][ T8201] ? __fget_files+0x215/0x3d0 [ 210.770117][ T8201] ? __fget_files+0x21f/0x3d0 [ 210.770132][ T8201] ksys_write+0x12a/0x250 [ 210.770143][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 210.770153][ T8201] ? ksys_write+0x1ac/0x250 [ 210.770168][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 210.770182][ T8201] __do_fast_syscall_32+0x13a/0x8b0 [ 210.770196][ T8201] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.770208][ T8201] do_fast_syscall_32+0x32/0x70 [ 210.770219][ T8201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.770234][ T8201] RIP: 0023:0xf703efec [ 210.770247][ T8201] Code: Unable to access opcode bytes at 0xf703efc2. [ 210.770252][ T8201] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 210.770263][ T8201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 210.770271][ T8201] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.770277][ T8201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.770282][ T8201] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.770288][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.770302][ T8201] [ 210.770541][ T8201] ------------[ cut here ]------------ [ 210.873448][ T8201] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 210.873462][ T8201] WARNING: security/apparmor/lib.c:509 at aa_policy_destroy+0x78/0x1f0, CPU#2: syz.1.739/8201 [ 210.881051][ T8201] Modules linked in: [ 210.883441][ T8201] CPU: 2 UID: 0 PID: 8201 Comm: syz.1.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.886772][ T8201] Tainted: [L]=SOFTLOCKUP [ 210.888122][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.891305][ T8201] RIP: 0010:aa_policy_destroy+0x7f/0x1f0 [ 210.893053][ T8201] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc [ 210.898992][ T8201] RSP: 0018:ffffc900045ff678 EFLAGS: 00010293 [ 210.900915][ T8201] RAX: 0000000000000000 RBX: ffff8880600f8400 RCX: 0000000000000000 [ 210.903352][ T8201] RDX: ffff888026268000 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0 [ 210.905761][ T8201] RBP: ffff8880600f8420 R08: 0000000000000005 R09: 0000000000000000 [ 210.906653][ T6123] usb 5-1: Failed to early initialize device [ 210.908215][ T8201] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 210.912590][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0 [ 210.915069][ T8201] FS: 0000000000000000(0000) GS:ffff888096bbd000(0063) knlGS:00000000f542db40 [ 210.917870][ T8201] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 210.919906][ T8201] CR2: 00000000f703f000 CR3: 000000007442e000 CR4: 0000000000352ef0 [ 210.922350][ T8201] Call Trace: [ 210.923411][ T8201] [ 210.924350][ T8201] aa_free_profile+0x82/0xca0 [ 210.925796][ T8201] ? aa_str_alloc+0x90/0xb0 [ 210.927270][ T8201] aa_alloc_profile+0x3ae/0x520 [ 210.928763][ T8201] unpack_profile+0x3ed/0x4510 [ 210.930259][ T8201] ? is_bpf_text_address+0x8a/0x1a0 [ 210.931902][ T8201] ? bpf_ksym_find+0x124/0x1c0 [ 210.933494][ T8201] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.935377][ T8201] ? is_bpf_text_address+0x94/0x1a0 [ 210.937033][ T8201] ? kernel_text_address+0x8d/0x100 [ 210.938622][ T8201] ? __pfx_unpack_profile+0x10/0x10 [ 210.940243][ T8201] ? arch_stack_walk+0xa6/0xf0 [ 210.941731][ T8201] ? stack_trace_save+0x8e/0xc0 [ 210.943234][ T8201] ? __pfx_stack_trace_save+0x10/0x10 [ 210.944907][ T8201] ? aa_unpack_str+0xae/0x2b0 [ 210.946365][ T8201] aa_unpack+0x39e/0x1240 [ 210.947790][ T8201] ? __pfx_aa_unpack+0x10/0x10 [ 210.949532][ T8201] ? __lock_acquire+0x4c5/0x1ec0 [ 210.951076][ T8201] aa_replace_profiles+0x176/0x31c0 [ 210.952665][ T8201] ? __might_fault+0xc5/0x140 [ 210.954105][ T8201] ? __might_fault+0xc5/0x140 [ 210.955525][ T8201] ? __pfx_aa_replace_profiles+0x10/0x10 [ 210.957600][ T8201] ? _copy_from_user+0x59/0xd0 [ 210.959089][ T8201] policy_update+0x20b/0x340 [ 210.960525][ T8201] profile_load+0xaa/0x1a0 [ 210.961924][ T8201] vfs_write+0x2aa/0x1050 [ 210.963277][ T8201] ? __pfx_profile_load+0x10/0x10 [ 210.964823][ T8201] ? __pfx_vfs_write+0x10/0x10 [ 210.966305][ T8201] ? find_held_lock+0x2b/0x80 [ 210.967918][ T8201] ? __fget_files+0x215/0x3d0 [ 210.969509][ T8201] ? __fget_files+0x21f/0x3d0 [ 210.971283][ T8201] ksys_write+0x12a/0x250 [ 210.972956][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 210.974802][ T8201] ? ksys_write+0x1ac/0x250 [ 210.976260][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 210.977831][ T8201] __do_fast_syscall_32+0x13a/0x8b0 [ 210.979431][ T8201] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.981028][ T8201] do_fast_syscall_32+0x32/0x70 [ 210.982523][ T8201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.984474][ T8201] RIP: 0023:0xf703efec [ 210.985790][ T8201] Code: Unable to access opcode bytes at 0xf703efc2. [ 210.987954][ T8201] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 210.990507][ T8201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 210.992921][ T8201] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.995403][ T8201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.998487][ T8201] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.001462][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.003986][ T8201] [ 211.004990][ T8201] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.007303][ T8201] CPU: 2 UID: 0 PID: 8201 Comm: syz.1.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.010747][ T8201] Tainted: [L]=SOFTLOCKUP [ 211.012127][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.015270][ T8201] Call Trace: [ 211.016340][ T8201] [ 211.017290][ T8201] dump_stack_lvl+0x100/0x190 [ 211.018788][ T8201] vpanic+0x553/0x970 [ 211.020066][ T8201] ? __pfx_vpanic+0x10/0x10 [ 211.021555][ T8201] panic+0xd1/0xe0 [ 211.022752][ T8201] ? __pfx_panic+0x10/0x10 [ 211.024185][ T8201] check_panic_on_warn.cold+0x19/0x34 [ 211.025879][ T8201] ? aa_policy_destroy+0x78/0x1f0 [ 211.027479][ T8201] __warn.cold+0x191/0x318 [ 211.028933][ T8201] __report_bug+0x30f/0x440 [ 211.030375][ T8201] ? aa_policy_destroy+0x78/0x1f0 [ 211.031996][ T8201] ? __pfx___report_bug+0x10/0x10 [ 211.033585][ T8201] ? irqentry_exit+0x24d/0xa10 [ 211.035114][ T8201] report_bug_entry+0xe2/0x290 [ 211.036630][ T8201] ? aa_policy_destroy+0x7f/0x1f0 [ 211.038220][ T8201] handle_bug+0x1cd/0x2a0 [ 211.039600][ T8201] exc_invalid_op+0x17/0x50 [ 211.041073][ T8201] asm_exc_invalid_op+0x1a/0x20 [ 211.042615][ T8201] RIP: 0010:aa_policy_destroy+0x7f/0x1f0 [ 211.044405][ T8201] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc [ 211.050350][ T8201] RSP: 0018:ffffc900045ff678 EFLAGS: 00010293 [ 211.052278][ T8201] RAX: 0000000000000000 RBX: ffff8880600f8400 RCX: 0000000000000000 [ 211.054734][ T8201] RDX: ffff888026268000 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0 [ 211.057204][ T8201] RBP: ffff8880600f8420 R08: 0000000000000005 R09: 0000000000000000 [ 211.059659][ T8201] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 211.062127][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0 [ 211.064621][ T8201] ? aa_policy_destroy+0x71/0x1f0 [ 211.066210][ T8201] aa_free_profile+0x82/0xca0 [ 211.067706][ T8201] ? aa_str_alloc+0x90/0xb0 [ 211.069151][ T8201] aa_alloc_profile+0x3ae/0x520 [ 211.070703][ T8201] unpack_profile+0x3ed/0x4510 [ 211.072234][ T8201] ? is_bpf_text_address+0x8a/0x1a0 [ 211.073874][ T8201] ? bpf_ksym_find+0x124/0x1c0 [ 211.075409][ T8201] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.077351][ T8201] ? is_bpf_text_address+0x94/0x1a0 [ 211.078988][ T8201] ? kernel_text_address+0x8d/0x100 [ 211.080648][ T8201] ? __pfx_unpack_profile+0x10/0x10 [ 211.082291][ T8201] ? arch_stack_walk+0xa6/0xf0 [ 211.083824][ T8201] ? stack_trace_save+0x8e/0xc0 [ 211.085360][ T8201] ? __pfx_stack_trace_save+0x10/0x10 [ 211.087065][ T8201] ? aa_unpack_str+0xae/0x2b0 [ 211.088558][ T8201] aa_unpack+0x39e/0x1240 [ 211.089943][ T8201] ? __pfx_aa_unpack+0x10/0x10 [ 211.091523][ T8201] ? __lock_acquire+0x4c5/0x1ec0 [ 211.093092][ T8201] aa_replace_profiles+0x176/0x31c0 [ 211.094740][ T8201] ? __might_fault+0xc5/0x140 [ 211.096242][ T8201] ? __might_fault+0xc5/0x140 [ 211.097725][ T8201] ? __pfx_aa_replace_profiles+0x10/0x10 [ 211.099494][ T8201] ? _copy_from_user+0x59/0xd0 [ 211.101044][ T8201] policy_update+0x20b/0x340 [ 211.102515][ T8201] profile_load+0xaa/0x1a0 [ 211.104003][ T8201] vfs_write+0x2aa/0x1050 [ 211.105373][ T8201] ? __pfx_profile_load+0x10/0x10 [ 211.106972][ T8201] ? __pfx_vfs_write+0x10/0x10 [ 211.108486][ T8201] ? find_held_lock+0x2b/0x80 [ 211.109993][ T8201] ? __fget_files+0x215/0x3d0 [ 211.111521][ T8201] ? __fget_files+0x21f/0x3d0 [ 211.113004][ T8201] ksys_write+0x12a/0x250 [ 211.114371][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 211.115910][ T8201] ? ksys_write+0x1ac/0x250 [ 211.117346][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 211.118877][ T8201] __do_fast_syscall_32+0x13a/0x8b0 [ 211.120534][ T8201] ? lockdep_hardirqs_on+0x7d/0x110 [ 211.122167][ T8201] do_fast_syscall_32+0x32/0x70 [ 211.123702][ T8201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.125666][ T8201] RIP: 0023:0xf703efec [ 211.126964][ T8201] Code: Unable to access opcode bytes at 0xf703efc2. [ 211.129180][ T8201] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 211.132431][ T8201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 211.135254][ T8201] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.137710][ T8201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.140170][ T8201] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.142640][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.145056][ T8201] [ 211.146621][ T8201] Kernel Offset: disabled [ 211.147995][ T8201] Rebooting in 86400 seconds..