last executing test programs: 8.924218329s ago: executing program 1 (id=373): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd", 0xa2}], 0x1}}], 0x1, 0x2090) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) sendmsg$inet_sctp(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x193}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 8.384664398s ago: executing program 2 (id=382): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$update(0x2, r2, &(0x7f00000001c0)="923853cf", 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x73}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xd0003, 0x0, {[0x401, 0x1f8, 0x86, 0xffffffffefffff15, 0x7, 0x4, 0x0, 0x1297b]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) 8.38451303s ago: executing program 3 (id=383): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x8004) 8.329327262s ago: executing program 3 (id=384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) (fail_nth: 7) 8.243446511s ago: executing program 2 (id=385): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f864d2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000a80)=0x10000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) 8.242446371s ago: executing program 2 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 7) 8.183072887s ago: executing program 3 (id=387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x5}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000180)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x2f}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x400000000000000, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x4, 0xfffffffffffffffc}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7c, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}}, 0x844) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x202400, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) dup2(r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x41042}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) 8.182758039s ago: executing program 2 (id=388): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d11242c6163636573733d75736572"]) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(r2, r2, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x40a, 0x2b7906, 0x10003}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r6, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) 7.984270719s ago: executing program 1 (id=389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) 7.983919154s ago: executing program 2 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 7.983695318s ago: executing program 1 (id=391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fd02000000020000", 0x1c) r2 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x1, 0xc82) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x9, 0x0, '\x00', {0x0, @bt={0x68, 0x8000, 0x0, 0x2, 0x2, 0x2, 0x3d3e9ad0, 0x8, 0xdeaf4eb, 0x11e4, 0x6, 0x800, 0xff, 0x14a, 0x11, 0x11, {0x10, 0xa}, 0x5, 0x9}}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x1, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r3, 0xa, &(0x7f0000000100)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000040)=0xa00, 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) 7.802043432s ago: executing program 1 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x1000000}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 7.714014487s ago: executing program 1 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xeb, 0x0, 0x804}}}, 0x7) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687d", 0xa}], 0x1}, 0x4004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.590120584s ago: executing program 2 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1500000000000100020000000000010000000000000073b0fb0c00002000000000000000000000000001000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x4433, 0x4}, {0x401, 0x8}, @const={0x0, {0xfbff, 0xc, 0x1005, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), 0xffffffffffffffff) sched_yield() ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000240)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002c9d7000fddbdf250b0000000c0005800700010069620000"], 0x20}, 0x1, 0x0, 0x0, 0x4040054}, 0x400c0c4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x240408d3}, 0x804) 7.447758421s ago: executing program 32 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1500000000000100020000000000010000000000000073b0fb0c00002000000000000000000000000001000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x4433, 0x4}, {0x401, 0x8}, @const={0x0, {0xfbff, 0xc, 0x1005, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), 0xffffffffffffffff) sched_yield() ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000240)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002c9d7000fddbdf250b0000000c0005800700010069620000"], 0x20}, 0x1, 0x0, 0x0, 0x4040054}, 0x400c0c4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x240408d3}, 0x804) 7.387905491s ago: executing program 0 (id=396): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0xc400}}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.313000979s ago: executing program 0 (id=397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd", 0xa2}], 0x1}}], 0x1, 0x2090) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) sendmsg$inet_sctp(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x193}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 7.211636928s ago: executing program 0 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) listns(&(0x7f0000000000)={0x20, 0x0, 0x1, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB="2c0078d0140968707d1d5f4d4a468b11f8a8c03a1b69f0b4e8e9c25816ad17b49f7d34b126f6a13c8be01b6a342f7e7aa6e72a421c44008b12c1086dbfd6e2125bfdc09236746c4f3380ab8efd9682f222a893c19b370a89c447451c7ec71674f5318d75a6c4d2dc10c5ba0c7ef4478ecea650029c1a95c6e467e6ff7c166ec83e25bbc24717b664adc5b47512d97c1656c573b76ce13ecf6f92cfdccc9153e22d71887827ecb09be85ec9fa3935e07fd16bdf1d804542a39080624352b1992ef93f070002b3f9dea19c717174b27c2f34d5cb621d669257c4052b63f9eb44d485d455891c6684b8b6b8700836784d77a9d308c61698634a3252afc72154497dcc0e089a5c20d0d748"]) 7.211233566s ago: executing program 3 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x28}}, 0x4040800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.103660553s ago: executing program 0 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x6600, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 6.713963989s ago: executing program 3 (id=401): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800010000ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = fanotify_init(0xf00, 0x0) r4 = fanotify_init(0x10, 0x101000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000008, r5, 0x0) fanotify_mark(r3, 0x7e, 0x800103a, r5, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @local}, 0x14) 6.71377212s ago: executing program 0 (id=402): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a600b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 6.652906879s ago: executing program 0 (id=403): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000002140)=0x1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) read$msr(r5, &(0x7f0000032680)=""/102391, 0x18ff7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r4}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00000000002e35039b0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44000) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000002180)="c9", 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) dup2(r10, r10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100003040000000000", @ANYRES32=0x0, @ANYBLOB="2012000020610700"], 0x20}, 0x1, 0xba01}, 0x4000010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000040)=0x9778) 6.652607918s ago: executing program 3 (id=404): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030000070581"], 0x0) unshare(0x64000600) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@ipmr_newroute={0x1c, 0x18, 0x2, 0x70bd2c, 0x25dfdbfd, {0x80, 0x80, 0x20, 0xd, 0x0, 0x2, 0xc8, 0x9, 0x2b00}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0xacc2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) 0s ago: executing program 1 (id=405): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc2", 0xbd}], 0x1}}], 0x1, 0x2090) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) sendmsg$inet_sctp(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x193}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) kernel console output (not intermixed with test programs): ? get_pid_task+0x106/0x250 [ 65.209540][ T6484] ? find_held_lock+0x2b/0x80 [ 65.209578][ T6484] __sys_sendmsg+0x160/0x210 [ 65.209598][ T6484] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.209631][ T6484] do_syscall_64+0x123/0x790 [ 65.209655][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.209672][ T6484] RIP: 0033:0x7fdee6b9e159 [ 65.209687][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.209703][ T6484] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.209720][ T6484] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 65.209731][ T6484] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 65.209741][ T6484] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 65.209750][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.209779][ T6484] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 65.209804][ T6484] [ 65.344457][ T66] Bluetooth: hci2: command tx timeout [ 65.404936][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 65.413755][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.424178][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.436192][ T6493] bond1: entered promiscuous mode [ 65.462018][ T6493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.529807][ T6510] ip_tables: iptables: counters copy to user failed while replacing table [ 65.615613][ T6520] FAULT_INJECTION: forcing a failure. [ 65.615613][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 65.615641][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.3.208 Not tainted syzkaller #0 PREEMPT(full) [ 65.615659][ T6520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.615669][ T6520] Call Trace: [ 65.615676][ T6520] [ 65.615683][ T6520] dump_stack_lvl+0x100/0x190 [ 65.615712][ T6520] should_fail_ex.cold+0x5/0xa [ 65.615733][ T6520] ? __netlink_lookup+0x652/0x900 [ 65.615755][ T6520] should_failslab+0xc2/0x120 [ 65.615779][ T6520] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.615800][ T6520] ? skb_clone+0x190/0x400 [ 65.615828][ T6520] skb_clone+0x190/0x400 [ 65.615850][ T6520] netlink_deliver_tap+0xaed/0xcc0 [ 65.615875][ T6520] netlink_unicast+0x62b/0x850 [ 65.615895][ T6520] ? __pfx_netlink_unicast+0x10/0x10 [ 65.615921][ T6520] netlink_sendmsg+0x8b0/0xda0 [ 65.615943][ T6520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.615965][ T6520] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.615988][ T6520] ____sys_sendmsg+0xa4d/0xbe0 [ 65.616013][ T6520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.616035][ T6520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.616068][ T6520] ? lock_acquire+0x1d1/0x380 [ 65.616089][ T6520] ? get_pid_task+0x2a/0x250 [ 65.616114][ T6520] ___sys_sendmsg+0x190/0x1e0 [ 65.616142][ T6520] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.616168][ T6520] ? get_pid_task+0x106/0x250 [ 65.616199][ T6520] ? find_held_lock+0x2b/0x80 [ 65.616238][ T6520] __sys_sendmsg+0x160/0x210 [ 65.616261][ T6520] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.616297][ T6520] do_syscall_64+0x123/0x790 [ 65.616323][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.616341][ T6520] RIP: 0033:0x7fdee6b9e159 [ 65.616357][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.616373][ T6520] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.616393][ T6520] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 65.616405][ T6520] RDX: 0000000000000800 RSI: 0000200000000480 RDI: 0000000000000003 [ 65.616416][ T6520] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 65.616427][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.616437][ T6520] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 65.616461][ T6520] [ 65.722066][ T6533] lo: entered promiscuous mode [ 65.723153][ T6533] bond0: entered promiscuous mode [ 65.723699][ T6533] dummy0: entered promiscuous mode [ 65.724001][ T6533] eql: entered promiscuous mode [ 65.724152][ T6533] ifb0: entered promiscuous mode [ 65.726034][ T6533] ifb1: entered promiscuous mode [ 65.729628][ T6533] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 65.739427][ T6533] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 65.742167][ T6533] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 65.742527][ T6533] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 65.743112][ T6533] hwsim0: entered promiscuous mode [ 65.743671][ T6533] ieee802154 phy0 wpan0: entered promiscuous mode [ 65.743825][ T6533] ieee802154 phy1 wpan1: entered promiscuous mode [ 65.744008][ T6533] teql0: entered promiscuous mode [ 65.744021][ T6533] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 65.753355][ T6532] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 65.778948][ T6538] loop5: detected capacity change from 0 to 7 [ 65.781435][ T6538] Dev loop5: unable to read RDB block 7 [ 65.781451][ T6538] loop5: AHDI p1 p2 [ 65.781460][ T6538] loop5: partition table partially beyond EOD, truncated [ 65.781546][ T6538] loop5: p1 start 1818582900 is beyond EOD, truncated [ 65.889747][ T6547] ip_tables: iptables: counters copy to user failed while replacing table [ 66.090851][ T1347] usb 5-1: USB disconnect, device number 6 [ 66.811187][ T6571] FAULT_INJECTION: forcing a failure. [ 66.811187][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 66.811206][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.2.223 Not tainted syzkaller #0 PREEMPT(full) [ 66.811219][ T6571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.811225][ T6571] Call Trace: [ 66.811229][ T6571] [ 66.811234][ T6571] dump_stack_lvl+0x100/0x190 [ 66.811253][ T6571] should_fail_ex.cold+0x5/0xa [ 66.811270][ T6571] should_failslab+0xc2/0x120 [ 66.811302][ T6571] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.811320][ T6571] ? usbdev_ioctl+0x1a7/0x3a90 [ 66.811332][ T6571] ? proc_do_submiturb+0x1d49/0x3820 [ 66.811347][ T6571] proc_do_submiturb+0x1d49/0x3820 [ 66.811368][ T6571] usbdev_ioctl+0x2ae7/0x3a90 [ 66.811382][ T6571] ? __pfx_usbdev_ioctl+0x10/0x10 [ 66.811397][ T6571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.811411][ T6571] ? do_vfs_ioctl+0x226/0x13e0 [ 66.811423][ T6571] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.811433][ T6571] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 66.811449][ T6571] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.811464][ T6571] ? __fget_files+0x34/0x3d0 [ 66.811483][ T6571] ? selinux_file_ioctl+0x13b/0x290 [ 66.811495][ T6571] ? selinux_file_ioctl+0xb6/0x290 [ 66.811508][ T6571] ? __pfx_usbdev_ioctl+0x10/0x10 [ 66.811520][ T6571] __x64_sys_ioctl+0x18e/0x210 [ 66.811532][ T6571] do_syscall_64+0x123/0x790 [ 66.811549][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.811561][ T6571] RIP: 0033:0x7f3d6ef9e159 [ 66.811571][ T6571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.811582][ T6571] RSP: 002b:00007f3d6fe38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.811593][ T6571] RAX: ffffffffffffffda RBX: 00007f3d6f225fa0 RCX: 00007f3d6ef9e159 [ 66.811600][ T6571] RDX: 0000200000000080 RSI: 000000008038550a RDI: 0000000000000003 [ 66.811607][ T6571] RBP: 00007f3d6fe38090 R08: 0000000000000000 R09: 0000000000000000 [ 66.811613][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.811620][ T6571] R13: 00007f3d6f226038 R14: 00007f3d6f225fa0 R15: 00007ffc448b0e28 [ 66.811633][ T6571] [ 66.848092][ T6574] ip_tables: iptables: counters copy to user failed while replacing table [ 66.922052][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 66.923032][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 67.045419][ T6585] FAULT_INJECTION: forcing a failure. [ 67.045419][ T6585] name failslab, interval 1, probability 0, space 0, times 0 [ 67.045447][ T6585] CPU: 3 UID: 0 PID: 6585 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(full) [ 67.045464][ T6585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.045473][ T6585] Call Trace: [ 67.045479][ T6585] [ 67.045484][ T6585] dump_stack_lvl+0x100/0x190 [ 67.045511][ T6585] should_fail_ex.cold+0x5/0xa [ 67.045533][ T6585] should_failslab+0xc2/0x120 [ 67.045553][ T6585] __kmalloc_node_noprof+0xff/0x880 [ 67.045569][ T6585] ? __get_vm_area_node+0x1ff/0x350 [ 67.045587][ T6585] ? __get_vm_area_node+0x22b/0x350 [ 67.045605][ T6585] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 67.045629][ T6585] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 67.045656][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.045678][ T6585] ? find_held_lock+0x2b/0x80 [ 67.045699][ T6585] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.045719][ T6585] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 67.045745][ T6585] ? avc_has_perm_noaudit+0x145/0x3b0 [ 67.045766][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.045784][ T6585] __vmalloc_node_noprof+0xad/0xf0 [ 67.045804][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.045824][ T6585] __vmalloc_noprof+0xa3/0x120 [ 67.045844][ T6585] ? __pfx___vmalloc_noprof+0x10/0x10 [ 67.045865][ T6585] ? rcu_is_watching+0x13/0xc0 [ 67.045885][ T6585] ? cap_capable+0x107/0x430 [ 67.045909][ T6585] bpf_prog_alloc_no_stats+0x59/0x690 [ 67.045927][ T6585] ? security_capable+0x80/0x260 [ 67.045951][ T6585] bpf_prog_alloc+0x3b/0x200 [ 67.045968][ T6585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.045987][ T6585] bpf_prog_load+0x49e/0x2a80 [ 67.046011][ T6585] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.046047][ T6585] __sys_bpf+0x1f46/0x4a30 [ 67.046067][ T6585] ? __pfx___sys_bpf+0x10/0x10 [ 67.046081][ T6585] ? find_held_lock+0x2b/0x80 [ 67.046101][ T6585] ? get_pid_task+0xfc/0x250 [ 67.046121][ T6585] ? get_pid_task+0xfc/0x250 [ 67.046147][ T6585] ? find_held_lock+0x2b/0x80 [ 67.046171][ T6585] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.046193][ T6585] ? find_held_lock+0x2b/0x80 [ 67.046212][ T6585] ? ksys_write+0x190/0x250 [ 67.046233][ T6585] ? ksys_write+0x190/0x250 [ 67.046248][ T6585] ? lock_acquire+0x1d1/0x380 [ 67.046276][ T6585] ? fput+0x7c/0x100 [ 67.046294][ T6585] ? ksys_write+0x1ac/0x250 [ 67.046311][ T6585] ? __x64_sys_bpf+0xce/0x140 [ 67.046325][ T6585] __x64_sys_bpf+0xce/0x140 [ 67.046340][ T6585] ? do_syscall_64+0xae/0x790 [ 67.046361][ T6585] do_syscall_64+0x123/0x790 [ 67.046383][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.046398][ T6585] RIP: 0033:0x7f845479e159 [ 67.046411][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.046425][ T6585] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.046441][ T6585] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 67.046451][ T6585] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000005 [ 67.046460][ T6585] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 67.046469][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.046477][ T6585] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 67.046497][ T6585] [ 67.046504][ T6585] syz.0.227: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 67.046610][ T6585] CPU: 3 UID: 0 PID: 6585 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(full) [ 67.046628][ T6585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.046637][ T6585] Call Trace: [ 67.046642][ T6585] [ 67.046647][ T6585] dump_stack_lvl+0x100/0x190 [ 67.046671][ T6585] warn_alloc.cold+0x9e/0xb2 [ 67.046688][ T6585] ? __pfx_warn_alloc+0x10/0x10 [ 67.046712][ T6585] ? dump_stack_lvl+0x17c/0x190 [ 67.046735][ T6585] ? rcu_is_watching+0x13/0xc0 [ 67.046757][ T6585] ? __kasan_kmalloc+0x8a/0xb0 [ 67.046776][ T6585] ? __kmalloc_node_noprof+0x360/0x880 [ 67.046791][ T6585] ? __get_vm_area_node+0x1ff/0x350 [ 67.046809][ T6585] ? __get_vm_area_node+0x22b/0x350 [ 67.046827][ T6585] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 67.046853][ T6585] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 67.046881][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.046904][ T6585] ? find_held_lock+0x2b/0x80 [ 67.046925][ T6585] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.046946][ T6585] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 67.046971][ T6585] ? avc_has_perm_noaudit+0x145/0x3b0 [ 67.046994][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.047013][ T6585] __vmalloc_node_noprof+0xad/0xf0 [ 67.047033][ T6585] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.047055][ T6585] __vmalloc_noprof+0xa3/0x120 [ 67.047076][ T6585] ? __pfx___vmalloc_noprof+0x10/0x10 [ 67.047098][ T6585] ? rcu_is_watching+0x13/0xc0 [ 67.047118][ T6585] ? cap_capable+0x107/0x430 [ 67.047143][ T6585] bpf_prog_alloc_no_stats+0x59/0x690 [ 67.047161][ T6585] ? security_capable+0x80/0x260 [ 67.047187][ T6585] bpf_prog_alloc+0x3b/0x200 [ 67.047204][ T6585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.047230][ T6585] bpf_prog_load+0x49e/0x2a80 [ 67.047256][ T6585] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.047294][ T6585] __sys_bpf+0x1f46/0x4a30 [ 67.047315][ T6585] ? __pfx___sys_bpf+0x10/0x10 [ 67.047330][ T6585] ? find_held_lock+0x2b/0x80 [ 67.047351][ T6585] ? get_pid_task+0xfc/0x250 [ 67.047371][ T6585] ? get_pid_task+0xfc/0x250 [ 67.047398][ T6585] ? find_held_lock+0x2b/0x80 [ 67.047424][ T6585] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.047447][ T6585] ? find_held_lock+0x2b/0x80 [ 67.047468][ T6585] ? ksys_write+0x190/0x250 [ 67.047482][ T6585] ? ksys_write+0x190/0x250 [ 67.047498][ T6585] ? lock_acquire+0x1d1/0x380 [ 67.047528][ T6585] ? fput+0x7c/0x100 [ 67.047547][ T6585] ? ksys_write+0x1ac/0x250 [ 67.047565][ T6585] ? __x64_sys_bpf+0xce/0x140 [ 67.047580][ T6585] __x64_sys_bpf+0xce/0x140 [ 67.047596][ T6585] ? do_syscall_64+0xae/0x790 [ 67.047618][ T6585] do_syscall_64+0x123/0x790 [ 67.047640][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.047656][ T6585] RIP: 0033:0x7f845479e159 [ 67.047668][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.047682][ T6585] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.047696][ T6585] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 67.047706][ T6585] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000005 [ 67.047716][ T6585] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 67.047726][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.047736][ T6585] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 67.047757][ T6585] [ 67.047762][ T6585] Mem-Info: [ 67.047769][ T6585] active_anon:8546 inactive_anon:0 isolated_anon:0 [ 67.047769][ T6585] active_file:0 inactive_file:59157 isolated_file:0 [ 67.047769][ T6585] unevictable:1000 dirty:1998 writeback:0 [ 67.047769][ T6585] slab_reclaimable:11757 slab_unreclaimable:70297 [ 67.047769][ T6585] mapped:25021 shmem:1556 pagetables:1154 [ 67.047769][ T6585] sec_pagetables:294 bounce:0 [ 67.047769][ T6585] kernel_misc_reclaimable:0 [ 67.047769][ T6585] free:456694 free_pcp:11555 free_cma:0 [ 67.047807][ T6585] Node 0 active_anon:34184kB inactive_anon:0kB active_file:0kB inactive_file:236428kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100084kB dirty:7988kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13600kB pagetables:4424kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.047848][ T6585] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.047886][ T6585] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.047929][ T6585] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 67.047955][ T6585] Node 0 DMA32 free:172524kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34184kB inactive_anon:0kB active_file:0kB inactive_file:236428kB unevictable:2000kB writepending:7988kB zspages:0kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:45376kB local_pcp:12680kB free_cma:0kB [ 67.047998][ T6585] lowmem_reserve[]: 0 0 0 0 0 [ 67.048023][ T6585] Node 1 Normal free:1638892kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:832kB local_pcp:0kB free_cma:0kB [ 67.048066][ T6585] lowmem_reserve[]: 0 0 0 0 0 [ 67.048090][ T6585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.048177][ T6585] Node 0 DMA32: 298*4kB (UME) 154*8kB (UME) 43*16kB (UME) 24*32kB (UME) 5*64kB (UM) 14*128kB (UME) 15*256kB (ME) 6*512kB (ME) 6*1024kB (UME) 3*2048kB (ME) 36*4096kB (UM) = 172648kB [ 67.048302][ T6585] Node 1 Normal: 3*4kB (U) 6*8kB (UM) 9*16kB (UM) 15*32kB (UM) 3*64kB (UM) 5*128kB (UM) 0*256kB 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 398*4096kB (UM) = 1638892kB [ 67.048415][ T6585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.048427][ T6585] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.048439][ T6585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.048451][ T6585] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.048462][ T6585] 60709 total pagecache pages [ 67.048468][ T6585] 0 pages in swap cache [ 67.048473][ T6585] Free swap = 124996kB [ 67.048478][ T6585] Total swap = 124996kB [ 67.048484][ T6585] 1048443 pages RAM [ 67.048489][ T6585] 0 pages HighMem/MovableOnly [ 67.048494][ T6585] 285812 pages reserved [ 67.048499][ T6585] 0 pages cma reserved [ 67.101351][ T6587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.426416][ T66] Bluetooth: hci2: command tx timeout [ 67.504472][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.644486][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.665058][ T35] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 67.665999][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.666036][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.666055][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 67.667753][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.667768][ T35] usb 8-1: Product: syz [ 67.667778][ T35] usb 8-1: Manufacturer: syz [ 67.667787][ T35] usb 8-1: SerialNumber: syz [ 67.671481][ T35] usbtmc 8-1:1.0: bulk endpoints not found [ 67.717865][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 67.719199][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'. [ 67.719221][ T6599] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 67.719481][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.233'. [ 67.769805][ T6601] ip_tables: iptables: counters copy to user failed while replacing table [ 67.796056][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 67.796965][ T5837] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 67.798955][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 67.798979][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.798997][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.799016][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.801064][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.801081][ T5837] usb 6-1: Product: syz [ 67.801092][ T5837] usb 6-1: Manufacturer: syz [ 67.801103][ T5837] usb 6-1: SerialNumber: syz [ 67.804695][ T5837] usb 6-1: config 0 descriptor?? [ 67.808088][ T6597] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.817496][ T5837] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 67.823608][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 67.863819][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 67.864025][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 67.864044][ T6605] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 67.864057][ T6605] UDF-fs: Scanning with blocksize 512 failed [ 67.866163][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 67.866277][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 67.866295][ T6605] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 67.866307][ T6605] UDF-fs: Scanning with blocksize 1024 failed [ 67.866838][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 67.866926][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 67.866943][ T6605] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 67.866955][ T6605] UDF-fs: Scanning with blocksize 2048 failed [ 67.867348][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 67.867427][ T6605] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 67.867445][ T6605] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 67.867457][ T6605] UDF-fs: Scanning with blocksize 4096 failed [ 67.867465][ T6605] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 67.911427][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 67.936039][ T6593] lo speed is unknown, defaulting to 1000 [ 67.953457][ T6608] netlink: 108 bytes leftover after parsing attributes in process `syz.2.237'. [ 68.013741][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 68.018864][ T35] usb 6-1: USB disconnect, device number 4 [ 68.018942][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 68.078451][ T6610] FAULT_INJECTION: forcing a failure. [ 68.078451][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 68.078480][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 68.078500][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.078511][ T6610] Call Trace: [ 68.078518][ T6610] [ 68.078525][ T6610] dump_stack_lvl+0x100/0x190 [ 68.078558][ T6610] should_fail_ex.cold+0x5/0xa [ 68.078617][ T6610] should_failslab+0xc2/0x120 [ 68.078643][ T6610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.078663][ T6610] ? __local_bh_enable_ip+0xa5/0x120 [ 68.078687][ T6610] ? vm_area_dup+0x27/0x9d0 [ 68.078734][ T6610] vm_area_dup+0x27/0x9d0 [ 68.078762][ T6610] __split_vma+0x19c/0x1de0 [ 68.078794][ T6610] ? __pfx___split_vma+0x10/0x10 [ 68.078819][ T6610] ? __lock_acquire+0x5c0/0x1f40 [ 68.078852][ T6610] vms_gather_munmap_vmas+0x1d2/0x1720 [ 68.078886][ T6610] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 68.078912][ T6610] ? mtree_range_walk+0x72b/0xb70 [ 68.078946][ T6610] ? mas_walk+0x260/0x310 [ 68.078974][ T6610] __mmap_region+0x4cc/0x32e0 [ 68.079003][ T6610] ? is_bpf_text_address+0x94/0x1a0 [ 68.079029][ T6610] ? kernel_text_address+0x8d/0x100 [ 68.079056][ T6610] ? __pfx___mmap_region+0x10/0x10 [ 68.079083][ T6610] ? unwind_get_return_address+0x59/0xa0 [ 68.079110][ T6610] ? arch_stack_walk+0xa6/0xf0 [ 68.079146][ T6610] ? __pfx_stack_trace_save+0x10/0x10 [ 68.079167][ T6610] ? stack_depot_save_flags+0x27/0x9f0 [ 68.079190][ T6610] ? __lock_acquire+0x5c0/0x1f40 [ 68.079212][ T6610] ? kasan_save_stack+0x3f/0x50 [ 68.079232][ T6610] ? kasan_save_stack+0x30/0x50 [ 68.079250][ T6610] ? kasan_save_track+0x14/0x30 [ 68.079269][ T6610] ? kasan_save_free_info+0x3b/0x70 [ 68.079294][ T6610] ? __kasan_slab_free+0x5f/0x80 [ 68.079385][ T6610] mmap_region+0x5a8/0x6d0 [ 68.079406][ T6610] ? __pfx_mmap_region+0x10/0x10 [ 68.079425][ T6610] ? shmem_mapping+0xd/0x50 [ 68.079444][ T6610] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 68.079469][ T6610] ? bpf_lsm_mmap_addr+0x9/0x30 [ 68.079492][ T6610] ? security_mmap_addr+0x71/0x1e0 [ 68.079514][ T6610] ? __get_unmapped_area+0x255/0x3e0 [ 68.079539][ T6610] do_mmap+0x12c7/0x1c30 [ 68.079567][ T6610] ? lock_acquire+0x1d1/0x380 [ 68.079586][ T6610] ? __pfx_do_mmap+0x10/0x10 [ 68.079608][ T6610] ? __pfx___might_resched+0x10/0x10 [ 68.079628][ T6610] ? ima_file_mmap+0x1bb/0x1e0 [ 68.079653][ T6610] ? __pfx_down_write_killable+0x10/0x10 [ 68.079680][ T6610] ? find_held_lock+0x2b/0x80 [ 68.079714][ T6610] vm_mmap_pgoff+0x28d/0x470 [ 68.079739][ T6610] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 68.079757][ T6610] ? __fget_files+0x215/0x3d0 [ 68.079784][ T6610] ? __fget_files+0x21f/0x3d0 [ 68.079811][ T6610] ksys_mmap_pgoff+0x3cb/0x610 [ 68.079835][ T6610] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 68.079853][ T6610] ? fput+0x7c/0x100 [ 68.079875][ T6610] ? ksys_write+0x1ac/0x250 [ 68.079892][ T6610] ? __pfx_ksys_write+0x10/0x10 [ 68.079911][ T6610] __x64_sys_mmap+0x125/0x190 [ 68.079935][ T6610] do_syscall_64+0x123/0x790 [ 68.079961][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.079979][ T6610] RIP: 0033:0x7f845479e159 [ 68.079994][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.080012][ T6610] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.080031][ T6610] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 68.080044][ T6610] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000190000 [ 68.080056][ T6610] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 68.080068][ T6610] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 68.080080][ T6610] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 68.080106][ T6610] [ 68.138352][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.138550][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.291205][ T6619] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 68.292558][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 68.292572][ T43] audit: type=1400 audit(68.179:453): avc: denied { search } for pid=6618 comm="syz.0.240" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.292659][ T43] audit: type=1400 audit(68.179:454): avc: denied { search } for pid=6618 comm="syz.0.240" name="options" dev="tracefs" ino=6188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.292696][ T43] audit: type=1400 audit(68.179:455): avc: denied { write } for pid=6618 comm="syz.0.240" name="context-info" dev="tracefs" ino=6203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.292727][ T43] audit: type=1400 audit(68.179:456): avc: denied { open } for pid=6618 comm="syz.0.240" path="/65/debug/tracing/options/context-info" dev="tracefs" ino=6203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.390794][ T6627] ip_tables: iptables: counters copy to user failed while replacing table [ 68.455572][ T6636] FAULT_INJECTION: forcing a failure. [ 68.455572][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 68.455599][ T6636] CPU: 2 UID: 0 PID: 6636 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) [ 68.455612][ T6636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.455619][ T6636] Call Trace: [ 68.455624][ T6636] [ 68.455629][ T6636] dump_stack_lvl+0x100/0x190 [ 68.455649][ T6636] should_fail_ex.cold+0x5/0xa [ 68.455667][ T6636] should_failslab+0xc2/0x120 [ 68.455681][ T6636] __kmalloc_noprof+0xfc/0x840 [ 68.455694][ T6636] ? hash_netportnet_create+0x382/0x1420 [ 68.455712][ T6636] hash_netportnet_create+0x382/0x1420 [ 68.455729][ T6636] ? __nla_parse+0x40/0x60 [ 68.455746][ T6636] ? __pfx_hash_netportnet_create+0x10/0x10 [ 68.455762][ T6636] ip_set_create+0x6c4/0x1510 [ 68.455776][ T6636] ? __pfx_ip_set_create+0x10/0x10 [ 68.455796][ T6636] ? find_held_lock+0x2b/0x80 [ 68.455817][ T6636] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 68.455837][ T6636] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 68.455854][ T6636] ? __lock_acquire+0x5c0/0x1f40 [ 68.455878][ T6636] ? avc_has_perm_noaudit+0x145/0x3b0 [ 68.455898][ T6636] netlink_rcv_skb+0x159/0x420 [ 68.455910][ T6636] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 68.455927][ T6636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.455945][ T6636] ? ns_capable+0xd2/0xf0 [ 68.455958][ T6636] nfnetlink_rcv+0x1b3/0x440 [ 68.455973][ T6636] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.455988][ T6636] ? netlink_deliver_tap+0x1ae/0xcc0 [ 68.456002][ T6636] netlink_unicast+0x585/0x850 [ 68.456016][ T6636] ? __pfx_netlink_unicast+0x10/0x10 [ 68.456032][ T6636] netlink_sendmsg+0x8b0/0xda0 [ 68.456047][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.456061][ T6636] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.456075][ T6636] ____sys_sendmsg+0xa4d/0xbe0 [ 68.456091][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.456104][ T6636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.456125][ T6636] ? lock_acquire+0x1d1/0x380 [ 68.456137][ T6636] ? get_pid_task+0x2a/0x250 [ 68.456153][ T6636] ___sys_sendmsg+0x190/0x1e0 [ 68.456171][ T6636] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.456189][ T6636] ? get_pid_task+0x106/0x250 [ 68.456210][ T6636] ? find_held_lock+0x2b/0x80 [ 68.456234][ T6636] __sys_sendmsg+0x160/0x210 [ 68.456248][ T6636] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.456269][ T6636] do_syscall_64+0x123/0x790 [ 68.456287][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.456299][ T6636] RIP: 0033:0x7f845479e159 [ 68.456308][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.456318][ T6636] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.456330][ T6636] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 68.456337][ T6636] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 68.456344][ T6636] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 68.456350][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.456357][ T6636] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 68.456371][ T6636] [ 68.578792][ T43] audit: type=1400 audit(68.469:457): avc: denied { nlmsg_read } for pid=6641 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.578818][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.249'. [ 68.646595][ T6647] FAULT_INJECTION: forcing a failure. [ 68.646595][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 68.646621][ T6647] CPU: 3 UID: 0 PID: 6647 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(full) [ 68.646638][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.646645][ T6647] Call Trace: [ 68.646649][ T6647] [ 68.646654][ T6647] dump_stack_lvl+0x100/0x190 [ 68.646673][ T6647] should_fail_ex.cold+0x5/0xa [ 68.646690][ T6647] should_failslab+0xc2/0x120 [ 68.646705][ T6647] __kmalloc_noprof+0xfc/0x840 [ 68.646717][ T6647] ? hash_netport_create+0x382/0x1360 [ 68.646736][ T6647] hash_netport_create+0x382/0x1360 [ 68.646753][ T6647] ? __nla_parse+0x40/0x60 [ 68.646770][ T6647] ? __pfx_hash_netport_create+0x10/0x10 [ 68.646787][ T6647] ip_set_create+0x6c4/0x1510 [ 68.646801][ T6647] ? __pfx_ip_set_create+0x10/0x10 [ 68.646820][ T6647] ? find_held_lock+0x2b/0x80 [ 68.646840][ T6647] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 68.646861][ T6647] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 68.646878][ T6647] ? __lock_acquire+0x5c0/0x1f40 [ 68.646902][ T6647] ? avc_has_perm_noaudit+0x145/0x3b0 [ 68.646921][ T6647] netlink_rcv_skb+0x159/0x420 [ 68.646934][ T6647] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 68.646951][ T6647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.646969][ T6647] ? ns_capable+0xd2/0xf0 [ 68.646982][ T6647] nfnetlink_rcv+0x1b3/0x440 [ 68.646997][ T6647] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.647014][ T6647] ? netlink_deliver_tap+0x1ae/0xcc0 [ 68.647029][ T6647] netlink_unicast+0x585/0x850 [ 68.647043][ T6647] ? __pfx_netlink_unicast+0x10/0x10 [ 68.647059][ T6647] netlink_sendmsg+0x8b0/0xda0 [ 68.647073][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.647087][ T6647] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.647101][ T6647] ____sys_sendmsg+0xa4d/0xbe0 [ 68.647116][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.647134][ T6647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.647154][ T6647] ? lock_acquire+0x1d1/0x380 [ 68.647165][ T6647] ? get_pid_task+0x2a/0x250 [ 68.647181][ T6647] ___sys_sendmsg+0x190/0x1e0 [ 68.647199][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.647217][ T6647] ? get_pid_task+0x106/0x250 [ 68.647237][ T6647] ? find_held_lock+0x2b/0x80 [ 68.647260][ T6647] __sys_sendmsg+0x160/0x210 [ 68.647274][ T6647] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.647295][ T6647] do_syscall_64+0x123/0x790 [ 68.647312][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.647324][ T6647] RIP: 0033:0x7f3412b9e159 [ 68.647333][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.647344][ T6647] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.647356][ T6647] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 68.647363][ T6647] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 68.647370][ T6647] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 68.647376][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.647383][ T6647] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 68.647397][ T6647] [ 68.683107][ T6649] ip6gretap0: entered promiscuous mode [ 68.754126][ T6651] ip_tables: iptables: counters copy to user failed while replacing table [ 68.769859][ T9] usb 8-1: USB disconnect, device number 6 [ 68.814354][ T43] audit: type=1400 audit(68.699:458): avc: denied { write } for pid=6654 comm="syz.3.255" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.857660][ T6653] syzkaller0: entered promiscuous mode [ 68.857681][ T6653] syzkaller0: entered allmulticast mode [ 69.151157][ T43] audit: type=1400 audit(69.039:459): avc: denied { append } for pid=6668 comm="syz.1.261" name="demux0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.191723][ T6673] FAULT_INJECTION: forcing a failure. [ 69.191723][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 69.191755][ T6673] CPU: 2 UID: 0 PID: 6673 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 69.191773][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.191794][ T6673] Call Trace: [ 69.191800][ T6673] [ 69.191807][ T6673] dump_stack_lvl+0x100/0x190 [ 69.191837][ T6673] should_fail_ex.cold+0x5/0xa [ 69.191865][ T6673] should_failslab+0xc2/0x120 [ 69.191889][ T6673] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.191911][ T6673] ? sk_prot_alloc+0x60/0x2a0 [ 69.191942][ T6673] sk_prot_alloc+0x60/0x2a0 [ 69.191970][ T6673] sk_clone+0x7b/0x16f0 [ 69.191996][ T6673] sctp_clone_sock+0x34/0x1970 [ 69.192026][ T6673] ? mark_held_locks+0x40/0x70 [ 69.192047][ T6673] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.192074][ T6673] sctp_accept+0x5e1/0x770 [ 69.192091][ T6673] ? percpu_counter_add_batch+0xb9/0x230 [ 69.192118][ T6673] ? __pfx_sctp_accept+0x10/0x10 [ 69.192134][ T6673] ? do_raw_spin_lock+0x128/0x260 [ 69.192156][ T6673] ? find_held_lock+0x2b/0x80 [ 69.192181][ T6673] ? __pfx_autoremove_wake_function+0x10/0x10 [ 69.192214][ T6673] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.192241][ T6673] inet_accept+0xc7/0x180 [ 69.192271][ T6673] do_accept+0x340/0x530 [ 69.192291][ T6673] ? __pfx_do_accept+0x10/0x10 [ 69.192327][ T6673] __sys_accept4+0x108/0x200 [ 69.192347][ T6673] ? __pfx___sys_accept4+0x10/0x10 [ 69.192367][ T6673] ? __pfx_ksys_write+0x10/0x10 [ 69.192390][ T6673] __x64_sys_accept4+0x96/0x100 [ 69.192409][ T6673] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.192435][ T6673] do_syscall_64+0x123/0x790 [ 69.192462][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.192481][ T6673] RIP: 0033:0x7f3412b9e159 [ 69.192497][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.192515][ T6673] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 69.192535][ T6673] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 69.192548][ T6673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 69.192559][ T6673] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.192571][ T6673] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 69.192582][ T6673] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 69.192608][ T6673] [ 69.250325][ T6677] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 69.259897][ T43] audit: type=1400 audit(69.149:460): avc: denied { checkpoint_restore } for pid=6676 comm="syz.1.265" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.314595][ T6682] kvm: kvm [6681]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 69.337973][ T6677] bond0: entered promiscuous mode [ 69.337993][ T6677] bond_slave_0: entered promiscuous mode [ 69.338111][ T6677] bond_slave_1: entered promiscuous mode [ 69.439842][ T43] audit: type=1400 audit(69.329:461): avc: denied { create } for pid=6689 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.440553][ T43] audit: type=1400 audit(69.329:462): avc: denied { bind } for pid=6689 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.455763][ T5811] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 69.514469][ T66] Bluetooth: hci2: command tx timeout [ 69.615296][ T5811] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 69.616706][ T5811] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.616729][ T5811] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.616741][ T5811] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.618283][ T6701] FAULT_INJECTION: forcing a failure. [ 69.618283][ T6701] name failslab, interval 1, probability 0, space 0, times 0 [ 69.618434][ T6701] CPU: 2 UID: 0 PID: 6701 Comm: syz.0.270 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.618450][ T6701] Tainted: [L]=SOFTLOCKUP [ 69.618455][ T6701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.618461][ T6701] Call Trace: [ 69.618465][ T6701] [ 69.618482][ T6701] dump_stack_lvl+0x100/0x190 [ 69.618502][ T6701] should_fail_ex.cold+0x5/0xa [ 69.618518][ T6701] should_failslab+0xc2/0x120 [ 69.618533][ T6701] __kmalloc_noprof+0xfc/0x840 [ 69.618544][ T6701] ? rcu_is_watching+0x13/0xc0 [ 69.618582][ T6701] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.618601][ T6701] tomoyo_realpath_from_path+0xb6/0x690 [ 69.618618][ T6701] tomoyo_path_number_perm+0x23c/0x580 [ 69.618629][ T6701] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.618647][ T6701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.618664][ T6701] ? __lock_acquire+0x5c0/0x1f40 [ 69.618683][ T6701] ? __fget_files+0x34/0x3d0 [ 69.618697][ T6701] ? find_held_lock+0x2b/0x80 [ 69.618712][ T6701] ? hook_file_ioctl_common+0x140/0x440 [ 69.618730][ T6701] ? __fget_files+0x21f/0x3d0 [ 69.618746][ T6701] security_file_ioctl+0xd3/0x230 [ 69.618759][ T6701] __x64_sys_ioctl+0xb7/0x210 [ 69.618772][ T6701] do_syscall_64+0x123/0x790 [ 69.618789][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.618800][ T6701] RIP: 0033:0x7f845479e159 [ 69.618810][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.618821][ T6701] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.618834][ T6701] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 69.618841][ T6701] RDX: 0000200000000540 RSI: 00000000c0d05605 RDI: 000000000000000a [ 69.618847][ T6701] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 69.618854][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.618860][ T6701] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 69.618874][ T6701] [ 69.618921][ T6701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.619083][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.619095][ T5811] usb 8-1: Product: syz [ 69.619102][ T5811] usb 8-1: Manufacturer: syz [ 69.619109][ T5811] usb 8-1: SerialNumber: syz [ 69.625130][ T5811] usbtmc 8-1:1.0: bulk endpoints not found [ 69.723001][ T6704] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 69.841916][ T6675] lo speed is unknown, defaulting to 1000 [ 70.009334][ T6714] FAULT_INJECTION: forcing a failure. [ 70.009334][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 70.009365][ T6714] CPU: 3 UID: 0 PID: 6714 Comm: syz.0.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.009389][ T6714] Tainted: [L]=SOFTLOCKUP [ 70.009396][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.009407][ T6714] Call Trace: [ 70.009413][ T6714] [ 70.009420][ T6714] dump_stack_lvl+0x100/0x190 [ 70.009444][ T6714] should_fail_ex.cold+0x5/0xa [ 70.009461][ T6714] should_failslab+0xc2/0x120 [ 70.009475][ T6714] __kmalloc_noprof+0xfc/0x840 [ 70.009487][ T6714] ? lsm_blob_alloc+0x68/0x90 [ 70.009506][ T6714] lsm_blob_alloc+0x68/0x90 [ 70.009521][ T6714] security_bpf_map_create+0x31/0x2d0 [ 70.009535][ T6714] map_create+0x143a/0x30d0 [ 70.009618][ T6714] ? find_held_lock+0x2b/0x80 [ 70.009642][ T6714] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 70.009660][ T6714] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 70.009680][ T6714] ? __pfx_map_create+0x10/0x10 [ 70.009697][ T6714] ? avc_has_perm+0x135/0x1e0 [ 70.009712][ T6714] ? __pfx_avc_has_perm+0x10/0x10 [ 70.009726][ T6714] ? __might_fault+0xc5/0x140 [ 70.009745][ T6714] ? __might_fault+0xc5/0x140 [ 70.009764][ T6714] ? selinux_bpf+0xfb/0x150 [ 70.009782][ T6714] __sys_bpf+0x12a0/0x4a30 [ 70.009797][ T6714] ? __pfx___sys_bpf+0x10/0x10 [ 70.009807][ T6714] ? find_held_lock+0x2b/0x80 [ 70.009822][ T6714] ? get_pid_task+0xfc/0x250 [ 70.009838][ T6714] ? get_pid_task+0xfc/0x250 [ 70.009857][ T6714] ? find_held_lock+0x2b/0x80 [ 70.009875][ T6714] ? rcu_read_lock_any_held+0x6a/0x90 [ 70.009895][ T6714] ? find_held_lock+0x2b/0x80 [ 70.009909][ T6714] ? ksys_write+0x190/0x250 [ 70.009921][ T6714] ? ksys_write+0x190/0x250 [ 70.009932][ T6714] ? lock_acquire+0x1d1/0x380 [ 70.009952][ T6714] ? fput+0x7c/0x100 [ 70.009966][ T6714] ? ksys_write+0x1ac/0x250 [ 70.009978][ T6714] ? __x64_sys_bpf+0xce/0x140 [ 70.009989][ T6714] __x64_sys_bpf+0xce/0x140 [ 70.010000][ T6714] ? do_syscall_64+0xae/0x790 [ 70.010017][ T6714] do_syscall_64+0x123/0x790 [ 70.010033][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.010045][ T6714] RIP: 0033:0x7f845479e159 [ 70.010058][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.010069][ T6714] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.010092][ T6714] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 70.010099][ T6714] RDX: 0000000000000048 RSI: 0000200000000740 RDI: 0000000000000000 [ 70.010106][ T6714] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 70.010112][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.010119][ T6714] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 70.010133][ T6714] [ 70.122959][ T6725] FAULT_INJECTION: forcing a failure. [ 70.122959][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 70.122979][ T6725] CPU: 3 UID: 0 PID: 6725 Comm: syz.1.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.122994][ T6725] Tainted: [L]=SOFTLOCKUP [ 70.122998][ T6725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.123005][ T6725] Call Trace: [ 70.123009][ T6725] [ 70.123013][ T6725] dump_stack_lvl+0x100/0x190 [ 70.123034][ T6725] should_fail_ex.cold+0x5/0xa [ 70.123051][ T6725] should_failslab+0xc2/0x120 [ 70.123065][ T6725] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 70.123078][ T6725] ? __alloc_skb+0x140/0x710 [ 70.123094][ T6725] __alloc_skb+0x140/0x710 [ 70.123108][ T6725] ? __alloc_skb+0x5b7/0x710 [ 70.123120][ T6725] ? __pfx___alloc_skb+0x10/0x10 [ 70.123134][ T6725] ? lock_acquire+0x1d1/0x380 [ 70.123148][ T6725] xfrm_alloc_compat+0x780/0x1200 [ 70.123164][ T6725] ? xfrm_get_translator+0xeb/0x290 [ 70.123179][ T6725] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 70.123195][ T6725] xfrm_send_acquire+0x855/0xd00 [ 70.123212][ T6725] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 70.123225][ T6725] ? km_query+0x38/0x260 [ 70.123239][ T6725] ? lockdep_init_map_type+0x5c/0x250 [ 70.123254][ T6725] km_query+0xb4/0x260 [ 70.123267][ T6725] xfrm_state_find+0x3f87/0x92e0 [ 70.123285][ T6725] ? __lock_acquire+0x5c0/0x1f40 [ 70.123300][ T6725] ? lockdep_count_backward_deps+0x1b2/0x200 [ 70.123312][ T6725] ? __pfx_xfrm_state_find+0x10/0x10 [ 70.123331][ T6725] ? lock_acquire+0x1d1/0x380 [ 70.123342][ T6725] ? is_bpf_text_address+0x25/0x1a0 [ 70.123359][ T6725] ? is_bpf_text_address+0x8a/0x1a0 [ 70.123374][ T6725] ? bpf_ksym_find+0x128/0x1c0 [ 70.123393][ T6725] xfrm_resolve_and_create_bundle+0x49e/0x3500 [ 70.123420][ T6725] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 70.123437][ T6725] ? __ip_dev_find+0xa3/0x5b0 [ 70.123452][ T6725] ? lock_acquire+0x1d1/0x380 [ 70.123466][ T6725] ? xfrm_sk_policy_lookup+0x91/0x770 [ 70.123484][ T6725] ? xfrm_sk_policy_lookup+0x4ed/0x770 [ 70.123509][ T6725] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 70.123521][ T6725] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 70.123532][ T6725] ? xfrm_expand_policies.constprop.0+0x250/0x660 [ 70.123551][ T6725] xfrm_lookup_with_ifid+0x29b/0x1ce0 [ 70.123570][ T6725] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 70.123589][ T6725] ? ip_route_output_key_hash+0x14c/0x2b0 [ 70.123606][ T6725] ? ip_route_output_key_hash+0x14c/0x2b0 [ 70.123622][ T6725] xfrm_lookup_route+0x3b/0x200 [ 70.123639][ T6725] ip_route_output_flow+0x11e/0x150 [ 70.123652][ T6725] __ip4_datagram_connect+0x8bf/0x1480 [ 70.123674][ T6725] __ip6_datagram_connect+0xc6c/0x1500 [ 70.123689][ T6725] ? lock_acquire+0x1d1/0x380 [ 70.123703][ T6725] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 70.123722][ T6725] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 70.123737][ T6725] ip6_datagram_connect_v6_only+0x73/0xa0 [ 70.123753][ T6725] inet_dgram_connect+0x143/0x200 [ 70.123769][ T6725] __sys_connect_file+0x146/0x1a0 [ 70.123784][ T6725] __sys_connect+0x141/0x170 [ 70.123795][ T6725] ? __pfx___sys_connect+0x10/0x10 [ 70.123806][ T6725] ? __fget_files+0x21f/0x3d0 [ 70.123825][ T6725] ? __pfx_ksys_write+0x10/0x10 [ 70.123839][ T6725] __x64_sys_connect+0x72/0xb0 [ 70.123850][ T6725] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.123865][ T6725] do_syscall_64+0x123/0x790 [ 70.123882][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.123894][ T6725] RIP: 0033:0x7f3412b9e159 [ 70.123904][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.123915][ T6725] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 70.123926][ T6725] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 70.123933][ T6725] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 70.123939][ T6725] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 70.123946][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.123952][ T6725] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 70.123967][ T6725] [ 70.154504][ T6722] __nla_validate_parse: 1 callbacks suppressed [ 70.154520][ T6722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.278'. [ 70.394904][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 70.394926][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 70.481673][ T6756] FAULT_INJECTION: forcing a failure. [ 70.481673][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 70.481706][ T6756] CPU: 3 UID: 0 PID: 6756 Comm: syz.1.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.481732][ T6756] Tainted: [L]=SOFTLOCKUP [ 70.481739][ T6756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.481750][ T6756] Call Trace: [ 70.481757][ T6756] [ 70.481764][ T6756] dump_stack_lvl+0x100/0x190 [ 70.481796][ T6756] should_fail_ex.cold+0x5/0xa [ 70.481823][ T6756] should_failslab+0xc2/0x120 [ 70.481848][ T6756] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 70.481870][ T6756] ? __alloc_skb+0x5b7/0x710 [ 70.481891][ T6756] ? __alloc_skb+0x140/0x710 [ 70.481916][ T6756] __alloc_skb+0x140/0x710 [ 70.481936][ T6756] ? __alloc_skb+0x5b7/0x710 [ 70.481957][ T6756] ? __pfx___alloc_skb+0x10/0x10 [ 70.481985][ T6756] netlink_alloc_large_skb+0x69/0x150 [ 70.482010][ T6756] netlink_sendmsg+0x680/0xda0 [ 70.482035][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.482059][ T6756] ? selinux_socket_sendmsg+0x198/0x2f0 [ 70.482084][ T6756] ____sys_sendmsg+0xa4d/0xbe0 [ 70.482111][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.482133][ T6756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.482166][ T6756] ? lock_acquire+0x1d1/0x380 [ 70.482187][ T6756] ? get_pid_task+0x2a/0x250 [ 70.482215][ T6756] ___sys_sendmsg+0x190/0x1e0 [ 70.482263][ T6756] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.482295][ T6756] ? get_pid_task+0x106/0x250 [ 70.482331][ T6756] ? find_held_lock+0x2b/0x80 [ 70.482374][ T6756] __sys_sendmsg+0x160/0x210 [ 70.482398][ T6756] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.482435][ T6756] do_syscall_64+0x123/0x790 [ 70.482464][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.482484][ T6756] RIP: 0033:0x7f3412b9e159 [ 70.482500][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.482517][ T6756] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.482537][ T6756] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 70.482550][ T6756] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 70.482583][ T6756] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 70.482595][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.482607][ T6756] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 70.482632][ T6756] [ 70.550488][ T6760] bridge0: port 3(ipvlan2) entered blocking state [ 70.550605][ T6760] bridge0: port 3(ipvlan2) entered disabled state [ 70.550709][ T6760] ipvlan2: entered allmulticast mode [ 70.550724][ T6760] bridge0: entered allmulticast mode [ 70.556382][ T6760] ipvlan2: left allmulticast mode [ 70.556396][ T6760] bridge0: left allmulticast mode [ 70.622193][ T6766] syzkaller0: entered promiscuous mode [ 70.622216][ T6766] syzkaller0: entered allmulticast mode [ 70.644496][ T5833] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.646215][ T5833] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.646240][ T5833] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.646258][ T5833] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.682412][ T6769] net_ratelimit: 3 callbacks suppressed [ 70.682433][ T6769] ip_tables: iptables: counters copy to user failed while replacing table [ 71.166402][ T6742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.430835][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.430887][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474423][ T5811] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 71.561569][ T6771] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.584488][ T66] Bluetooth: hci2: command tx timeout [ 71.625384][ T5811] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.626536][ T5811] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.626586][ T5811] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.626617][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.631130][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.634380][ T5811] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.784530][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.936417][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.937945][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.937971][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.938003][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.941352][ T6778] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 71.944180][ T9] usb 7-1: USB disconnect, device number 6 [ 71.954525][ T5811] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 71.992270][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.094458][ T5811] usb 5-1: device descriptor read/64, error -71 [ 72.199041][ T6784] FAULT_INJECTION: forcing a failure. [ 72.199041][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 72.200061][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.1.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.200090][ T6784] Tainted: [L]=SOFTLOCKUP [ 72.200097][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.200109][ T6784] Call Trace: [ 72.200116][ T6784] [ 72.200125][ T6784] dump_stack_lvl+0x100/0x190 [ 72.200158][ T6784] should_fail_ex.cold+0x5/0xa [ 72.200186][ T6784] should_failslab+0xc2/0x120 [ 72.200211][ T6784] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.200239][ T6784] ? snd_seq_port_use_ptr+0x3c/0x300 [ 72.200262][ T6784] ? snd_seq_port_connect+0x61/0x540 [ 72.200290][ T6784] snd_seq_port_connect+0x61/0x540 [ 72.200315][ T6784] ? check_subscription_permission.isra.0+0x146/0x240 [ 72.200343][ T6784] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 72.200371][ T6784] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 72.200398][ T6784] ? lock_acquire+0x1d1/0x380 [ 72.200418][ T6784] ? clientptr+0x20/0x190 [ 72.200439][ T6784] ? find_held_lock+0x2b/0x80 [ 72.200464][ T6784] ? clientptr+0x80/0x190 [ 72.200489][ T6784] call_seq_client_ctl+0xa3/0x130 [ 72.200514][ T6784] snd_seq_kernel_client_ctl+0x35/0x50 [ 72.200539][ T6784] snd_seq_oss_midi_open+0x587/0x680 [ 72.200569][ T6784] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 72.200597][ T6784] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 72.200623][ T6784] ? __mutex_lock+0x26c/0x1bd0 [ 72.200649][ T6784] ? odev_release+0x44/0x70 [ 72.200675][ T6784] snd_seq_oss_synth_reset+0x439/0x890 [ 72.200707][ T6784] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 72.200736][ T6784] ? __pfx___fsnotify_parent+0x10/0x10 [ 72.200773][ T6784] ? __pfx_odev_release+0x10/0x10 [ 72.200797][ T6784] snd_seq_oss_reset+0x73/0x290 [ 72.200822][ T6784] ? __pfx_odev_release+0x10/0x10 [ 72.200846][ T6784] snd_seq_oss_release+0x7c/0x180 [ 72.200871][ T6784] ? __pfx_odev_release+0x10/0x10 [ 72.200892][ T6784] odev_release+0x4c/0x70 [ 72.200913][ T6784] __fput+0x3ff/0xb50 [ 72.200945][ T6784] fput_close_sync+0x118/0x250 [ 72.200972][ T6784] ? __pfx_fput_close_sync+0x10/0x10 [ 72.201006][ T6784] __x64_sys_close+0x8b/0x120 [ 72.201033][ T6784] do_syscall_64+0x123/0x790 [ 72.201061][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.201081][ T6784] RIP: 0033:0x7f3412b9e159 [ 72.201096][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.201114][ T6784] RSP: 002b:00007f3413993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.201135][ T6784] RAX: ffffffffffffffda RBX: 00007f3412e26090 RCX: 00007f3412b9e159 [ 72.201148][ T6784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 72.201159][ T6784] RBP: 00007f3413993090 R08: 0000000000000000 R09: 0000000000000000 [ 72.201170][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.201181][ T6784] R13: 00007f3412e26128 R14: 00007f3412e26090 R15: 00007ffcb1af26b8 [ 72.201207][ T6784] [ 72.231574][ T9] usb 8-1: USB disconnect, device number 7 [ 72.353097][ T850] usb 6-1: USB disconnect, device number 5 [ 72.474403][ T5811] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 72.481789][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 72.481807][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 72.541573][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 72.541593][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 72.575940][ T5833] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.575979][ T5833] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.576008][ T5833] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.576036][ T5833] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.596866][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 72.596910][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.304'. [ 72.608784][ T6798] ceph: Path missing in source [ 72.614485][ T5811] usb 5-1: device descriptor read/64, error -71 [ 72.658005][ T6800] ip_tables: iptables: counters copy to user failed while replacing table [ 72.734950][ T5811] usb usb5-port1: attempt power cycle [ 72.773793][ T6805] input: syz0 as /devices/virtual/input/input13 [ 72.883181][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 72.883540][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 72.887405][ T6814] tipc: Started in network mode [ 72.887422][ T6814] tipc: Node identity 2000004, cluster identity 4711 [ 72.887432][ T6814] tipc: Node number set to 33554436 [ 73.043891][ T6819] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 73.084406][ T5811] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 73.084545][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.104905][ T5811] usb 5-1: device descriptor read/8, error -71 [ 73.135670][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 73.135772][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 73.235116][ T9] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 73.236247][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.236318][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.236335][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.237936][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.237948][ T9] usb 7-1: Product: syz [ 73.237959][ T9] usb 7-1: Manufacturer: syz [ 73.237971][ T9] usb 7-1: SerialNumber: syz [ 73.245902][ T9] usbtmc 7-1:1.0: bulk endpoints not found [ 73.344546][ T5811] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 73.364991][ T5811] usb 5-1: device descriptor read/8, error -71 [ 73.463365][ T6807] lo speed is unknown, defaulting to 1000 [ 73.474652][ T5811] usb usb5-port1: unable to enumerate USB device [ 73.654915][ T9] libceph: connect (1)[c::]:6789 error -101 [ 73.655082][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 73.664578][ T66] Bluetooth: hci2: command tx timeout [ 73.683396][ T6809] ceph: No mds server is up or the cluster is laggy [ 73.916867][ T6830] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 73.922153][ T6832] ip_tables: iptables: counters copy to user failed while replacing table [ 73.940790][ T6830] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 74.014750][ T6837] netlink: 144 bytes leftover after parsing attributes in process `syz.3.317'. [ 74.022180][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 74.022197][ T43] audit: type=1400 audit(73.909:479): avc: denied { write } for pid=6835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.091379][ T43] audit: type=1400 audit(73.979:480): avc: denied { write } for pid=6841 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.231334][ T43] audit: type=1400 audit(74.119:481): avc: denied { write } for pid=6846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.288173][ T43] audit: type=1400 audit(74.179:482): avc: denied { write } for pid=6853 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.394268][ T43] audit: type=1400 audit(74.279:483): avc: denied { write } for pid=6856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.443929][ T43] audit: type=1400 audit(74.329:484): avc: denied { write } for pid=6859 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.570881][ T43] audit: type=1400 audit(74.459:485): avc: denied { write } for pid=6866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.644889][ T43] audit: type=1400 audit(74.539:486): avc: denied { write } for pid=6872 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.812467][ T6883] FAULT_INJECTION: forcing a failure. [ 74.812467][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 74.812488][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.1.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.812503][ T6883] Tainted: [L]=SOFTLOCKUP [ 74.812507][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.812514][ T6883] Call Trace: [ 74.812518][ T6883] [ 74.812522][ T6883] dump_stack_lvl+0x100/0x190 [ 74.812542][ T6883] should_fail_ex.cold+0x5/0xa [ 74.812558][ T6883] should_failslab+0xc2/0x120 [ 74.812573][ T6883] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 74.812586][ T6883] ? copy_process+0x6a2/0x8370 [ 74.812601][ T6883] copy_process+0x6a2/0x8370 [ 74.812621][ T6883] ? __pfx_copy_process+0x10/0x10 [ 74.812634][ T6883] ? kasan_save_track+0x14/0x30 [ 74.812646][ T6883] ? __kasan_kmalloc+0xaa/0xb0 [ 74.812659][ T6883] ? lockdep_init_map_type+0x5c/0x250 [ 74.812672][ T6883] ? lockdep_init_map_type+0x5c/0x250 [ 74.812685][ T6883] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 74.812704][ T6883] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 74.812719][ T6883] vhost_task_create+0x1db/0x370 [ 74.812737][ T6883] ? __pfx_vhost_task_create+0x10/0x10 [ 74.812759][ T6883] ? __pfx_vhost_task_fn+0x10/0x10 [ 74.812784][ T6883] ? register_lock_class+0x3f/0x7b0 [ 74.812800][ T6883] ? rcu_is_watching+0x13/0xc0 [ 74.812822][ T6883] ? trace_contention_end+0x126/0x160 [ 74.812847][ T6883] kvm_mmu_post_init_vm+0x1b3/0x360 [ 74.812866][ T6883] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 74.812881][ T6883] ? __pfx___mutex_lock+0x10/0x10 [ 74.812896][ T6883] ? kasan_quarantine_put+0x104/0x240 [ 74.812909][ T6883] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 74.812923][ T6883] ? lock_acquire+0x1d1/0x380 [ 74.812935][ T6883] ? do_raw_write_lock+0x11e/0x260 [ 74.812949][ T6883] ? find_held_lock+0x2b/0x80 [ 74.812964][ T6883] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 74.812979][ T6883] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 74.812997][ T6883] kvm_vcpu_ioctl+0x730/0x1700 [ 74.813014][ T6883] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.813030][ T6883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.813044][ T6883] ? do_vfs_ioctl+0x226/0x13e0 [ 74.813056][ T6883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.813066][ T6883] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 74.813082][ T6883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.813097][ T6883] ? __fget_files+0x34/0x3d0 [ 74.813116][ T6883] ? selinux_file_ioctl+0x13b/0x290 [ 74.813127][ T6883] ? selinux_file_ioctl+0xb6/0x290 [ 74.813140][ T6883] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.813157][ T6883] __x64_sys_ioctl+0x18e/0x210 [ 74.813169][ T6883] do_syscall_64+0x123/0x790 [ 74.813186][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.813197][ T6883] RIP: 0033:0x7f3412b9e159 [ 74.813207][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.813217][ T6883] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.813229][ T6883] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 74.813236][ T6883] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.813243][ T6883] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 74.813249][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.813256][ T6883] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 74.813274][ T6883] [ 74.848923][ T6888] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.922698][ T6890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2597 sclass=netlink_route_socket pid=6890 comm=syz.1.331 [ 74.956425][ T43] audit: type=1400 audit(74.849:487): avc: denied { connect } for pid=6893 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.960081][ T6890] kAFS: bad VL server IP address [ 74.962361][ T6890] nbd: must specify a device to reconfigure [ 75.090506][ T6900] FAULT_INJECTION: forcing a failure. [ 75.090506][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.090668][ T6900] CPU: 3 UID: 0 PID: 6900 Comm: syz.3.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.090689][ T6900] Tainted: [L]=SOFTLOCKUP [ 75.090693][ T6900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.090701][ T6900] Call Trace: [ 75.090705][ T6900] [ 75.090711][ T6900] dump_stack_lvl+0x100/0x190 [ 75.090734][ T6900] should_fail_ex.cold+0x5/0xa [ 75.090751][ T6900] _copy_from_iter+0x1f4/0x1690 [ 75.090768][ T6900] ? __pfx__copy_from_iter+0x10/0x10 [ 75.090779][ T6900] ? _copy_from_iter+0x270/0x1690 [ 75.090794][ T6900] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 75.090809][ T6900] skb_copy_datagram_from_iter+0x11f/0x720 [ 75.090825][ T6900] ? _kstrtoull+0x144/0x200 [ 75.090839][ T6900] ? iov_iter_advance+0xac/0x6d0 [ 75.090849][ T6900] ? __pfx__kstrtoull+0x10/0x10 [ 75.090865][ T6900] tun_get_user+0x1866/0x3cc0 [ 75.090884][ T6900] ? __lock_acquire+0x5c0/0x1f40 [ 75.090896][ T6900] ? __pfx_tun_get_user+0x10/0x10 [ 75.090911][ T6900] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 75.090934][ T6900] ? find_held_lock+0x2b/0x80 [ 75.090950][ T6900] ? tun_get+0x191/0x370 [ 75.090961][ T6900] ? tun_get+0x191/0x370 [ 75.090975][ T6900] tun_chr_write_iter+0xdc/0x200 [ 75.090989][ T6900] vfs_write+0x6af/0x1050 [ 75.091002][ T6900] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 75.091016][ T6900] ? __pfx_vfs_write+0x10/0x10 [ 75.091026][ T6900] ? find_held_lock+0x2b/0x80 [ 75.091050][ T6900] ksys_write+0x12a/0x250 [ 75.091061][ T6900] ? __pfx_ksys_write+0x10/0x10 [ 75.091076][ T6900] do_syscall_64+0x123/0x790 [ 75.091093][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.091106][ T6900] RIP: 0033:0x7fdee6b9e159 [ 75.091116][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.091127][ T6900] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.091139][ T6900] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 75.091160][ T6900] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 0000000000000003 [ 75.091167][ T6900] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 75.091174][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.091180][ T6900] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 75.091194][ T6900] [ 75.273222][ T6906] ip_tables: iptables: counters copy to user failed while replacing table [ 75.484083][ T6911] FAULT_INJECTION: forcing a failure. [ 75.484083][ T6911] name failslab, interval 1, probability 0, space 0, times 0 [ 75.484116][ T6911] CPU: 0 UID: 0 PID: 6911 Comm: syz.3.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.484142][ T6911] Tainted: [L]=SOFTLOCKUP [ 75.484148][ T6911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.484159][ T6911] Call Trace: [ 75.484165][ T6911] [ 75.484173][ T6911] dump_stack_lvl+0x100/0x190 [ 75.484204][ T6911] should_fail_ex.cold+0x5/0xa [ 75.484231][ T6911] should_failslab+0xc2/0x120 [ 75.484254][ T6911] __kmalloc_noprof+0xfc/0x840 [ 75.484274][ T6911] ? ethnl_default_doit+0x1d0/0x1520 [ 75.484316][ T6911] ethnl_default_doit+0x1d0/0x1520 [ 75.484339][ T6911] ? __pfx_ethnl_default_doit+0x10/0x10 [ 75.484359][ T6911] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 75.484383][ T6911] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 75.484412][ T6911] genl_family_rcv_msg_doit+0x214/0x300 [ 75.484437][ T6911] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.484460][ T6911] ? genl_get_cmd+0x3e7/0x760 [ 75.484488][ T6911] ? __dev_queue_xmit+0xa33/0x4970 [ 75.484507][ T6911] ? __radix_tree_lookup+0x217/0x2b0 [ 75.484535][ T6911] genl_rcv_msg+0x560/0x800 [ 75.484561][ T6911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.484583][ T6911] ? __lock_acquire+0x5c0/0x1f40 [ 75.484603][ T6911] ? __pfx_ethnl_default_doit+0x10/0x10 [ 75.484630][ T6911] netlink_rcv_skb+0x159/0x420 [ 75.484650][ T6911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.484674][ T6911] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.484704][ T6911] ? netlink_deliver_tap+0x1ae/0xcc0 [ 75.484728][ T6911] genl_rcv+0x28/0x40 [ 75.484747][ T6911] netlink_unicast+0x585/0x850 [ 75.484772][ T6911] ? __pfx_netlink_unicast+0x10/0x10 [ 75.484791][ T6911] ? __pfx_sock_has_perm+0x10/0x10 [ 75.484825][ T6911] netlink_sendmsg+0x8b0/0xda0 [ 75.484849][ T6911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.484873][ T6911] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.484897][ T6911] ____sys_sendmsg+0xa4d/0xbe0 [ 75.484922][ T6911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.484945][ T6911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.484976][ T6911] ? lock_acquire+0x1d1/0x380 [ 75.484995][ T6911] ? get_pid_task+0x2a/0x250 [ 75.485022][ T6911] ___sys_sendmsg+0x190/0x1e0 [ 75.485050][ T6911] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.485083][ T6911] ? get_pid_task+0x106/0x250 [ 75.485115][ T6911] ? find_held_lock+0x2b/0x80 [ 75.485156][ T6911] __sys_sendmsg+0x160/0x210 [ 75.485178][ T6911] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.485215][ T6911] do_syscall_64+0x123/0x790 [ 75.485243][ T6911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.485262][ T6911] RIP: 0033:0x7fdee6b9e159 [ 75.485278][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.485295][ T6911] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.485315][ T6911] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 75.485327][ T6911] RDX: 0000000000004800 RSI: 00002000000005c0 RDI: 0000000000000003 [ 75.485338][ T6911] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 75.485350][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.485361][ T6911] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 75.485387][ T6911] [ 75.557564][ T6914] jffs2: notice: (6914) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.572545][ T6914] team0 (unregistering): Port device team_slave_0 removed [ 75.575008][ T6914] team0 (unregistering): Port device team_slave_1 removed [ 75.730638][ T6920] tipc: Trying to set illegal importance in message [ 75.741255][ T43] audit: type=1400 audit(75.629:488): avc: denied { mount } for pid=6919 comm="syz.1.340" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.741836][ T6920] ======================================================= [ 75.741836][ T6920] WARNING: The mand mount option has been deprecated and [ 75.741836][ T6920] and is ignored by this kernel. Remove the mand [ 75.741836][ T6920] option from the mount to silence this warning. [ 75.741836][ T6920] ======================================================= [ 75.754160][ T66] Bluetooth: hci2: command tx timeout [ 75.803111][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 75.803131][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 75.803154][ T6923] netlink: 'syz.3.341': attribute type 6 has an invalid length. [ 75.817380][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.817416][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.821913][ T58] usb 7-1: USB disconnect, device number 7 [ 75.834818][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.834856][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.850131][ T6927] FAULT_INJECTION: forcing a failure. [ 75.850131][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 75.850161][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.0.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.850186][ T6927] Tainted: [L]=SOFTLOCKUP [ 75.850193][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.850203][ T6927] Call Trace: [ 75.850210][ T6927] [ 75.850217][ T6927] dump_stack_lvl+0x100/0x190 [ 75.850248][ T6927] should_fail_ex.cold+0x5/0xa [ 75.850275][ T6927] should_failslab+0xc2/0x120 [ 75.850321][ T6927] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 75.850342][ T6927] ? __alloc_skb+0x5b7/0x710 [ 75.850363][ T6927] ? __alloc_skb+0x140/0x710 [ 75.850386][ T6927] __alloc_skb+0x140/0x710 [ 75.850405][ T6927] ? __alloc_skb+0x5b7/0x710 [ 75.850425][ T6927] ? __pfx___alloc_skb+0x10/0x10 [ 75.850452][ T6927] netlink_alloc_large_skb+0x69/0x150 [ 75.850476][ T6927] netlink_sendmsg+0x680/0xda0 [ 75.850500][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.850522][ T6927] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.850573][ T6927] ____sys_sendmsg+0xa4d/0xbe0 [ 75.850599][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.850621][ T6927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.850660][ T6927] ? lock_acquire+0x1d1/0x380 [ 75.850678][ T6927] ? get_pid_task+0x2a/0x250 [ 75.850705][ T6927] ___sys_sendmsg+0x190/0x1e0 [ 75.850734][ T6927] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.850760][ T6927] ? get_pid_task+0x106/0x250 [ 75.850792][ T6927] ? find_held_lock+0x2b/0x80 [ 75.850831][ T6927] __sys_sendmsg+0x160/0x210 [ 75.850853][ T6927] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.850888][ T6927] do_syscall_64+0x123/0x790 [ 75.850915][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.850934][ T6927] RIP: 0033:0x7f845479e159 [ 75.850950][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.850966][ T6927] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.850984][ T6927] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 75.850996][ T6927] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 75.851007][ T6927] RBP: 00007f84555df090 R08: 0000000000000000 R09: 0000000000000000 [ 75.851018][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.851029][ T6927] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 75.851054][ T6927] [ 75.922201][ T6933] ip_tables: iptables: counters copy to user failed while replacing table [ 75.980178][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 76.007557][ T6946] xt_hashlimit: size too large, truncated to 1048576 [ 76.105406][ T6937] lo speed is unknown, defaulting to 1000 [ 76.260684][ T6967] xt_hashlimit: size too large, truncated to 1048576 [ 76.491468][ T6989] ip_tables: iptables: counters copy to user failed while replacing table [ 76.567556][ T25] cfg80211: failed to load regulatory.db [ 76.644435][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 76.646876][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.745930][ T7004] binder: 7002:7004 ioctl c0306201 200000000080 returned -14 [ 76.753152][ T7010] xt_hashlimit: size too large, truncated to 1048576 [ 76.792239][ T7004] kvm: MONITOR instruction emulated as NOP! [ 76.805775][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.807167][ T9] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 76.807382][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.807401][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.807415][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.807448][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.809864][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.810734][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.810755][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.811035][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.811051][ T10] usb 8-1: Product: syz [ 76.811062][ T10] usb 8-1: Manufacturer: syz [ 76.815650][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.815668][ T9] usb 5-1: Product: syz [ 76.815679][ T9] usb 5-1: Manufacturer: syz [ 76.815690][ T9] usb 5-1: SerialNumber: syz [ 76.838327][ T9] usbtmc 5-1:1.0: bulk endpoints not found [ 76.846139][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 76.846155][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 76.850730][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 76.850745][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 76.907006][ T7016] FAULT_INJECTION: forcing a failure. [ 76.907006][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 76.907037][ T7016] CPU: 3 UID: 0 PID: 7016 Comm: syz.2.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.907062][ T7016] Tainted: [L]=SOFTLOCKUP [ 76.907069][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.907079][ T7016] Call Trace: [ 76.907086][ T7016] [ 76.907093][ T7016] dump_stack_lvl+0x100/0x190 [ 76.907125][ T7016] should_fail_ex.cold+0x5/0xa [ 76.907150][ T7016] should_failslab+0xc2/0x120 [ 76.907174][ T7016] __kmalloc_noprof+0xfc/0x840 [ 76.907194][ T7016] ? hash_netport4_add+0x1552/0x3200 [ 76.907225][ T7016] hash_netport4_add+0x1552/0x3200 [ 76.907257][ T7016] ? __pfx___nla_validate_parse+0x10/0x10 [ 76.907294][ T7016] ? __nla_parse+0x40/0x60 [ 76.907324][ T7016] ? ip_set_get_extensions+0xf0/0xb70 [ 76.907352][ T7016] ? __pfx_hash_netport4_add+0x10/0x10 [ 76.907376][ T7016] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 76.907402][ T7016] ? lock_acquire+0x1d1/0x380 [ 76.907423][ T7016] ? ip_set_range_to_cidr+0xaf/0x110 [ 76.907445][ T7016] hash_netport4_uadt+0xa08/0x1340 [ 76.907472][ T7016] ? __pfx_hash_netport4_add+0x10/0x10 [ 76.907497][ T7016] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 76.907517][ T7016] ? unwind_next_frame+0xbd/0x2090 [ 76.907552][ T7016] ? find_held_lock+0x2b/0x80 [ 76.907576][ T7016] ? is_bpf_text_address+0x8a/0x1a0 [ 76.907600][ T7016] ? is_bpf_text_address+0x8a/0x1a0 [ 76.907643][ T7016] call_ad.isra.0+0x171/0x950 [ 76.907676][ T7016] ? __pfx_call_ad.isra.0+0x10/0x10 [ 76.907701][ T7016] ? __pfx___nla_validate_parse+0x10/0x10 [ 76.907738][ T7016] ? __nla_parse+0x40/0x60 [ 76.907767][ T7016] ip_set_ad.isra.0+0x3f1/0x8b0 [ 76.907800][ T7016] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 76.907826][ T7016] ? trace_contention_end+0x126/0x160 [ 76.907867][ T7016] ? find_held_lock+0x2b/0x80 [ 76.907897][ T7016] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 76.907932][ T7016] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 76.907959][ T7016] ? __lock_acquire+0x5c0/0x1f40 [ 76.908001][ T7016] ? avc_has_perm_noaudit+0x145/0x3b0 [ 76.908036][ T7016] netlink_rcv_skb+0x159/0x420 [ 76.908057][ T7016] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 76.908084][ T7016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.908115][ T7016] ? ns_capable+0xd2/0xf0 [ 76.908136][ T7016] nfnetlink_rcv+0x1b3/0x440 [ 76.908162][ T7016] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 76.908186][ T7016] ? netlink_deliver_tap+0x1ae/0xcc0 [ 76.908210][ T7016] netlink_unicast+0x585/0x850 [ 76.908244][ T7016] ? __pfx_netlink_unicast+0x10/0x10 [ 76.908271][ T7016] netlink_sendmsg+0x8b0/0xda0 [ 76.908297][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.908321][ T7016] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.908346][ T7016] ____sys_sendmsg+0xa4d/0xbe0 [ 76.908371][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.908393][ T7016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.908425][ T7016] ? lock_acquire+0x1d1/0x380 [ 76.908443][ T7016] ? get_pid_task+0x2a/0x250 [ 76.908470][ T7016] ___sys_sendmsg+0x190/0x1e0 [ 76.908499][ T7016] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.908527][ T7016] ? get_pid_task+0x106/0x250 [ 76.908561][ T7016] ? find_held_lock+0x2b/0x80 [ 76.908601][ T7016] __sys_sendmsg+0x160/0x210 [ 76.908625][ T7016] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.908661][ T7016] do_syscall_64+0x123/0x790 [ 76.908689][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.908707][ T7016] RIP: 0033:0x7f3d6ef9e159 [ 76.908722][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.908740][ T7016] RSP: 002b:00007f3d6fe38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.908760][ T7016] RAX: ffffffffffffffda RBX: 00007f3d6f225fa0 RCX: 00007f3d6ef9e159 [ 76.908772][ T7016] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 76.908784][ T7016] RBP: 00007f3d6fe38090 R08: 0000000000000000 R09: 0000000000000000 [ 76.908795][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.908806][ T7016] R13: 00007f3d6f226038 R14: 00007f3d6f225fa0 R15: 00007ffc448b0e28 [ 76.908831][ T7016] [ 76.968978][ T7020] No buffer was provided with the request [ 77.040751][ T10] usb 8-1: USB disconnect, device number 8 [ 77.116462][ T6978] lo speed is unknown, defaulting to 1000 [ 77.578939][ T7056] FAULT_INJECTION: forcing a failure. [ 77.578939][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.578973][ T7056] CPU: 3 UID: 0 PID: 7056 Comm: syz.3.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.579000][ T7056] Tainted: [L]=SOFTLOCKUP [ 77.579007][ T7056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.579018][ T7056] Call Trace: [ 77.579025][ T7056] [ 77.579033][ T7056] dump_stack_lvl+0x100/0x190 [ 77.579065][ T7056] should_fail_ex.cold+0x5/0xa [ 77.579092][ T7056] _copy_to_user+0x32/0xd0 [ 77.579115][ T7056] simple_read_from_buffer+0xcb/0x170 [ 77.579142][ T7056] proc_fail_nth_read+0x1af/0x230 [ 77.579166][ T7056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.579191][ T7056] ? rw_verify_area+0xce/0x6d0 [ 77.579218][ T7056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.579242][ T7056] vfs_read+0x1e4/0xb40 [ 77.579260][ T7056] ? lock_acquire+0x1d1/0x380 [ 77.579286][ T7056] ? __fget_files+0x34/0x3d0 [ 77.579309][ T7056] ? __pfx_vfs_read+0x10/0x10 [ 77.579325][ T7056] ? find_held_lock+0x2b/0x80 [ 77.579351][ T7056] ? __fget_files+0x215/0x3d0 [ 77.579379][ T7056] ? __fget_files+0x21f/0x3d0 [ 77.579410][ T7056] ksys_read+0x12a/0x250 [ 77.579428][ T7056] ? __pfx_ksys_read+0x10/0x10 [ 77.579455][ T7056] do_syscall_64+0x123/0x790 [ 77.579484][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.579504][ T7056] RIP: 0033:0x7fdee6b5e98e [ 77.579519][ T7056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.579538][ T7056] RSP: 002b:00007fdee7a06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.579557][ T7056] RAX: ffffffffffffffda RBX: 00007fdee7a076c0 RCX: 00007fdee6b5e98e [ 77.579569][ T7056] RDX: 000000000000000f RSI: 00007fdee7a070a0 RDI: 0000000000000005 [ 77.579581][ T7056] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 77.579591][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.579602][ T7056] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 77.579629][ T7056] [ 77.639055][ T7060] ip_tables: iptables: counters copy to user failed while replacing table [ 77.685706][ T7063] FAULT_INJECTION: forcing a failure. [ 77.685706][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 77.685728][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.3.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.685743][ T7063] Tainted: [L]=SOFTLOCKUP [ 77.685747][ T7063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.685754][ T7063] Call Trace: [ 77.685758][ T7063] [ 77.685762][ T7063] dump_stack_lvl+0x100/0x190 [ 77.685783][ T7063] should_fail_ex.cold+0x5/0xa [ 77.685799][ T7063] should_failslab+0xc2/0x120 [ 77.685814][ T7063] __kmalloc_noprof+0xfc/0x840 [ 77.685826][ T7063] ? hash_netport_create+0x382/0x1360 [ 77.685845][ T7063] hash_netport_create+0x382/0x1360 [ 77.685863][ T7063] ? __nla_parse+0x40/0x60 [ 77.685880][ T7063] ? __pfx_hash_netport_create+0x10/0x10 [ 77.685897][ T7063] ip_set_create+0x6c4/0x1510 [ 77.685911][ T7063] ? __pfx_ip_set_create+0x10/0x10 [ 77.685948][ T7063] ? find_held_lock+0x2b/0x80 [ 77.685971][ T7063] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 77.685992][ T7063] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 77.686009][ T7063] ? __lock_acquire+0x5c0/0x1f40 [ 77.686034][ T7063] ? avc_has_perm_noaudit+0x145/0x3b0 [ 77.686054][ T7063] netlink_rcv_skb+0x159/0x420 [ 77.686067][ T7063] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 77.686084][ T7063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.686103][ T7063] ? ns_capable+0xd2/0xf0 [ 77.686120][ T7063] nfnetlink_rcv+0x1b3/0x440 [ 77.686135][ T7063] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 77.686150][ T7063] ? netlink_deliver_tap+0x1ae/0xcc0 [ 77.686165][ T7063] netlink_unicast+0x585/0x850 [ 77.686179][ T7063] ? __pfx_netlink_unicast+0x10/0x10 [ 77.686195][ T7063] netlink_sendmsg+0x8b0/0xda0 [ 77.686210][ T7063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.686224][ T7063] ? selinux_socket_sendmsg+0x198/0x2f0 [ 77.686238][ T7063] ____sys_sendmsg+0xa4d/0xbe0 [ 77.686254][ T7063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.686268][ T7063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.686288][ T7063] ? lock_acquire+0x1d1/0x380 [ 77.686299][ T7063] ? get_pid_task+0x2a/0x250 [ 77.686316][ T7063] ___sys_sendmsg+0x190/0x1e0 [ 77.686334][ T7063] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.686355][ T7063] ? get_pid_task+0x106/0x250 [ 77.686385][ T7063] ? find_held_lock+0x2b/0x80 [ 77.686424][ T7063] __sys_sendmsg+0x160/0x210 [ 77.686447][ T7063] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.686483][ T7063] do_syscall_64+0x123/0x790 [ 77.686510][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.686553][ T7063] RIP: 0033:0x7fdee6b9e159 [ 77.686568][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.686586][ T7063] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.686604][ T7063] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 77.686616][ T7063] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 77.686628][ T7063] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 77.686639][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.686649][ T7063] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 77.686675][ T7063] [ 77.825498][ T66] Bluetooth: hci2: command tx timeout [ 77.914897][ T7076] FAULT_INJECTION: forcing a failure. [ 77.914897][ T7076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.914919][ T7076] CPU: 0 UID: 0 PID: 7076 Comm: syz.1.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.914934][ T7076] Tainted: [L]=SOFTLOCKUP [ 77.914938][ T7076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.914945][ T7076] Call Trace: [ 77.914950][ T7076] [ 77.914954][ T7076] dump_stack_lvl+0x100/0x190 [ 77.914975][ T7076] should_fail_ex.cold+0x5/0xa [ 77.914989][ T7076] ? prepare_alloc_pages+0x16d/0x5b0 [ 77.915005][ T7076] should_fail_alloc_page+0xeb/0x140 [ 77.915020][ T7076] prepare_alloc_pages+0x1f0/0x5b0 [ 77.915037][ T7076] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 77.915050][ T7076] ? lock_acquire+0x1d1/0x380 [ 77.915062][ T7076] ? unwind_next_frame+0xbd/0x2090 [ 77.915083][ T7076] ? find_held_lock+0x2b/0x80 [ 77.915099][ T7076] ? unwind_next_frame+0x3be/0x2090 [ 77.915114][ T7076] ? unwind_next_frame+0x3be/0x2090 [ 77.915132][ T7076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.915145][ T7076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.915156][ T7076] ? __kernel_text_address+0xd/0x30 [ 77.915174][ T7076] ? unwind_get_return_address+0x59/0xa0 [ 77.915189][ T7076] ? arch_stack_walk+0x88/0xf0 [ 77.915207][ T7076] ? __lock_acquire+0x5c0/0x1f40 [ 77.915221][ T7076] ? __pfx_stack_trace_save+0x10/0x10 [ 77.915231][ T7076] ? __update_page_owner_handle+0x390/0x530 [ 77.915246][ T7076] ? stack_depot_save_flags+0x27/0x9f0 [ 77.915263][ T7076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.915277][ T7076] ? policy_nodemask+0xed/0x4f0 [ 77.915307][ T7076] alloc_pages_mpol+0x201/0x550 [ 77.915322][ T7076] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.915341][ T7076] folio_alloc_mpol_noprof+0x36/0x260 [ 77.915359][ T7076] shmem_alloc_folio+0x135/0x160 [ 77.915375][ T7076] shmem_alloc_and_add_folio+0x371/0xd40 [ 77.915394][ T7076] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.915412][ T7076] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 77.915432][ T7076] shmem_get_folio_gfp+0x75b/0x1980 [ 77.915452][ T7076] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.915468][ T7076] ? rcu_read_unlock+0x17/0x60 [ 77.915483][ T7076] ? rcu_read_unlock+0x17/0x60 [ 77.915504][ T7076] shmem_fault+0x1fb/0xa30 [ 77.915521][ T7076] ? __pfx_shmem_fault+0x10/0x10 [ 77.915538][ T7076] ? __lock_acquire+0x5c0/0x1f40 [ 77.915556][ T7076] __do_fault+0x10b/0x440 [ 77.915568][ T7076] do_fault+0x585/0x1830 [ 77.915581][ T7076] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.915597][ T7076] ? __pfx_do_fault+0x10/0x10 [ 77.915609][ T7076] ? rcu_read_unlock+0x2d/0xb0 [ 77.915626][ T7076] ? rcu_read_unlock+0x2d/0xb0 [ 77.915641][ T7076] ? __pte_offset_map+0x179/0x310 [ 77.915656][ T7076] __handle_mm_fault+0x150b/0x2f60 [ 77.915675][ T7076] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.915691][ T7076] ? pte_offset_map_lock+0x174/0x320 [ 77.915704][ T7076] ? find_held_lock+0x2b/0x80 [ 77.915719][ T7076] ? find_held_lock+0x2b/0x80 [ 77.915734][ T7076] ? follow_page_pte+0x536/0x1050 [ 77.915755][ T7076] handle_mm_fault+0x363/0xa20 [ 77.915774][ T7076] __get_user_pages+0x8ae/0x2c30 [ 77.915792][ T7076] ? __pfx___get_user_pages+0x10/0x10 [ 77.915805][ T7076] ? __pfx_down_read_killable+0x10/0x10 [ 77.915824][ T7076] ? __pfx_gup_fast_fallback+0x10/0x10 [ 77.915840][ T7076] get_user_pages_unlocked+0x1cb/0x7d0 [ 77.915856][ T7076] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 77.915869][ T7076] ? get_user_pages_fast_only+0xae/0xf0 [ 77.915882][ T7076] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 77.915896][ T7076] ? __pfx___might_resched+0x10/0x10 [ 77.915908][ T7076] ? __mutex_lock+0x26c/0x1bd0 [ 77.915925][ T7076] hva_to_pfn+0x871/0xd60 [ 77.915934][ T7076] ? kvm_hv_setup_tsc_page+0x290/0x870 [ 77.915952][ T7076] ? __pfx_hva_to_pfn+0x10/0x10 [ 77.915964][ T7076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.915981][ T7076] ? __lock_acquire+0x5c0/0x1f40 [ 77.915998][ T7076] kvm_follow_pfn+0x291/0x430 [ 77.916010][ T7076] __kvm_faultin_pfn+0x11c/0x1a0 [ 77.916021][ T7076] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 77.916039][ T7076] vmx_set_apic_access_page_addr+0x3e8/0x910 [ 77.916054][ T7076] ? __pfx_vmx_set_apic_access_page_addr+0x10/0x10 [ 77.916069][ T7076] ? vmx_flush_tlb_all+0x14a/0x2e0 [ 77.916091][ T7076] ? record_steal_time+0x452/0xbb0 [ 77.916105][ T7076] ? kvm_vcpu_flush_tlb_guest+0xd1/0x250 [ 77.916120][ T7076] vcpu_run+0x41b0/0x5e80 [ 77.916133][ T7076] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 77.916154][ T7076] ? __pfx_vcpu_run+0x10/0x10 [ 77.916169][ T7076] ? lock_acquire+0x1d1/0x380 [ 77.916180][ T7076] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 77.916196][ T7076] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 77.916212][ T7076] ? __local_bh_enable_ip+0xa5/0x120 [ 77.916226][ T7076] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 77.916240][ T7076] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 77.916257][ T7076] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 77.916271][ T7076] ? lock_acquire+0x1d1/0x380 [ 77.916283][ T7076] ? do_raw_write_lock+0x11e/0x260 [ 77.916297][ T7076] ? find_held_lock+0x2b/0x80 [ 77.916312][ T7076] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 77.916326][ T7076] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 77.916345][ T7076] kvm_vcpu_ioctl+0x730/0x1700 [ 77.916361][ T7076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.916377][ T7076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.916390][ T7076] ? do_vfs_ioctl+0x226/0x13e0 [ 77.916402][ T7076] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.916412][ T7076] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 77.916427][ T7076] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.916442][ T7076] ? __fget_files+0x34/0x3d0 [ 77.916462][ T7076] ? selinux_file_ioctl+0x13b/0x290 [ 77.916473][ T7076] ? selinux_file_ioctl+0xb6/0x290 [ 77.916486][ T7076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.916502][ T7076] __x64_sys_ioctl+0x18e/0x210 [ 77.916515][ T7076] do_syscall_64+0x123/0x790 [ 77.916531][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.916543][ T7076] RIP: 0033:0x7f3412b9e159 [ 77.916552][ T7076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.916563][ T7076] RSP: 002b:00007f34139b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.916574][ T7076] RAX: ffffffffffffffda RBX: 00007f3412e25fa0 RCX: 00007f3412b9e159 [ 77.916582][ T7076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 77.916588][ T7076] RBP: 00007f34139b4090 R08: 0000000000000000 R09: 0000000000000000 [ 77.916595][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.916601][ T7076] R13: 00007f3412e26038 R14: 00007f3412e25fa0 R15: 00007ffcb1af26b8 [ 77.916615][ T7076] [ 77.922096][ T7076] kvm [7074]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 77.922712][ T7076] kvm [7074]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 78.027356][ T7088] FAULT_INJECTION: forcing a failure. [ 78.027356][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 78.027388][ T7088] CPU: 3 UID: 0 PID: 7088 Comm: syz.3.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.027414][ T7088] Tainted: [L]=SOFTLOCKUP [ 78.027421][ T7088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.027432][ T7088] Call Trace: [ 78.027439][ T7088] [ 78.027447][ T7088] dump_stack_lvl+0x100/0x190 [ 78.027479][ T7088] should_fail_ex.cold+0x5/0xa [ 78.027507][ T7088] should_failslab+0xc2/0x120 [ 78.027532][ T7088] __kvmalloc_node_noprof+0x113/0x9b0 [ 78.027558][ T7088] ? alloc_netdev_mqs+0xd7/0x15c0 [ 78.027585][ T7088] ? __pfx_gtp_link_setup+0x10/0x10 [ 78.027609][ T7088] alloc_netdev_mqs+0xd7/0x15c0 [ 78.027638][ T7088] rtnl_create_link+0xc13/0xf80 [ 78.027666][ T7088] rtnl_newlink+0x15bc/0x2620 [ 78.027701][ T7088] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.027723][ T7088] ? avc_has_perm_noaudit+0x56/0x3b0 [ 78.027750][ T7088] ? find_held_lock+0x2b/0x80 [ 78.027774][ T7088] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 78.027799][ T7088] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 78.027851][ T7088] ? lock_acquire+0x1d1/0x380 [ 78.027870][ T7088] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 78.027895][ T7088] ? find_held_lock+0x2b/0x80 [ 78.027919][ T7088] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 78.027941][ T7088] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 78.027967][ T7088] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.027992][ T7088] rtnetlink_rcv_msg+0x95e/0xe90 [ 78.028018][ T7088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.028050][ T7088] ? ref_tracker_free+0x37e/0x6c0 [ 78.028078][ T7088] netlink_rcv_skb+0x159/0x420 [ 78.028099][ T7088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.028126][ T7088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.028156][ T7088] ? netlink_deliver_tap+0x1ae/0xcc0 [ 78.028181][ T7088] netlink_unicast+0x585/0x850 [ 78.028207][ T7088] ? __pfx_netlink_unicast+0x10/0x10 [ 78.028235][ T7088] netlink_sendmsg+0x8b0/0xda0 [ 78.028260][ T7088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.028291][ T7088] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.028315][ T7088] ____sys_sendmsg+0xa4d/0xbe0 [ 78.028341][ T7088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.028365][ T7088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.028398][ T7088] ? lock_acquire+0x1d1/0x380 [ 78.028417][ T7088] ? get_pid_task+0x2a/0x250 [ 78.028445][ T7088] ___sys_sendmsg+0x190/0x1e0 [ 78.028475][ T7088] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.028503][ T7088] ? get_pid_task+0x106/0x250 [ 78.028537][ T7088] ? find_held_lock+0x2b/0x80 [ 78.028580][ T7088] __sys_sendmsg+0x160/0x210 [ 78.028604][ T7088] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.028641][ T7088] do_syscall_64+0x123/0x790 [ 78.028669][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.028688][ T7088] RIP: 0033:0x7fdee6b9e159 [ 78.028704][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.028721][ T7088] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.028739][ T7088] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 78.028751][ T7088] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 78.028762][ T7088] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 78.028773][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.028784][ T7088] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 78.028809][ T7088] [ 78.089833][ T7091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=7091 comm=syz.3.372 [ 78.122966][ T7093] ip_tables: iptables: counters copy to user failed while replacing table [ 78.249217][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 78.250713][ T7099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5022 sclass=netlink_route_socket pid=7099 comm=syz.2.376 [ 78.254649][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 78.257384][ T7099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5022 sclass=netlink_route_socket pid=7099 comm=syz.2.376 [ 78.262295][ T7101] FAULT_INJECTION: forcing a failure. [ 78.262295][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 78.262324][ T7101] CPU: 3 UID: 0 PID: 7101 Comm: syz.3.375 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.262350][ T7101] Tainted: [L]=SOFTLOCKUP [ 78.262357][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.262368][ T7101] Call Trace: [ 78.262374][ T7101] [ 78.262382][ T7101] dump_stack_lvl+0x100/0x190 [ 78.262414][ T7101] should_fail_ex.cold+0x5/0xa [ 78.262439][ T7101] ? __pfx_fl_change+0x10/0x10 [ 78.262467][ T7101] should_failslab+0xc2/0x120 [ 78.262489][ T7101] ? __pfx_fl_change+0x10/0x10 [ 78.262514][ T7101] __kmalloc_cache_noprof+0x91/0x6d0 [ 78.262570][ T7101] ? fl_change+0x1b7/0x7cd0 [ 78.262601][ T7101] ? __pfx_fl_change+0x10/0x10 [ 78.262626][ T7101] fl_change+0x1b7/0x7cd0 [ 78.262659][ T7101] ? __lock_acquire+0x5c0/0x1f40 [ 78.262685][ T7101] ? rcu_is_watching+0x13/0xc0 [ 78.262710][ T7101] ? trace_contention_end+0x126/0x160 [ 78.262733][ T7101] ? __mutex_lock+0x26c/0x1bd0 [ 78.262764][ T7101] ? __pfx_fl_change+0x10/0x10 [ 78.262788][ T7101] ? fl_get+0x99/0x3d0 [ 78.262813][ T7101] ? find_held_lock+0x2b/0x80 [ 78.262837][ T7101] ? fl_get+0x20a/0x3d0 [ 78.262860][ T7101] ? fl_get+0x20a/0x3d0 [ 78.262888][ T7101] ? fl_get+0x214/0x3d0 [ 78.262928][ T7101] ? __pfx_fl_get+0x10/0x10 [ 78.262957][ T7101] ? __pfx_fl_change+0x10/0x10 [ 78.262982][ T7101] tc_new_tfilter+0x9c3/0x24c0 [ 78.263014][ T7101] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 78.263045][ T7101] ? __pfx_tc_new_tfilter+0x10/0x10 [ 78.263073][ T7101] ? __lock_acquire+0x5c0/0x1f40 [ 78.263104][ T7101] ? lock_acquire+0x1d1/0x380 [ 78.263122][ T7101] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 78.263148][ T7101] ? find_held_lock+0x2b/0x80 [ 78.263173][ T7101] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 78.263199][ T7101] ? __pfx_tc_new_tfilter+0x10/0x10 [ 78.263220][ T7101] rtnetlink_rcv_msg+0x95e/0xe90 [ 78.263246][ T7101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.263278][ T7101] ? ref_tracker_free+0x37e/0x6c0 [ 78.263307][ T7101] netlink_rcv_skb+0x159/0x420 [ 78.263328][ T7101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.263354][ T7101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.263384][ T7101] ? netlink_deliver_tap+0x1ae/0xcc0 [ 78.263409][ T7101] netlink_unicast+0x585/0x850 [ 78.263433][ T7101] ? __pfx_netlink_unicast+0x10/0x10 [ 78.263461][ T7101] netlink_sendmsg+0x8b0/0xda0 [ 78.263486][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.263510][ T7101] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.263534][ T7101] ____sys_sendmsg+0xa4d/0xbe0 [ 78.263561][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.263584][ T7101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.263616][ T7101] ? lock_acquire+0x1d1/0x380 [ 78.263635][ T7101] ? get_pid_task+0x2a/0x250 [ 78.263667][ T7101] ___sys_sendmsg+0x190/0x1e0 [ 78.263697][ T7101] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.263725][ T7101] ? get_pid_task+0x106/0x250 [ 78.263760][ T7101] ? find_held_lock+0x2b/0x80 [ 78.263802][ T7101] __sys_sendmsg+0x160/0x210 [ 78.263826][ T7101] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.263863][ T7101] do_syscall_64+0x123/0x790 [ 78.263891][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.263910][ T7101] RIP: 0033:0x7fdee6b9e159 [ 78.263926][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.263943][ T7101] RSP: 002b:00007fdee7a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.263962][ T7101] RAX: ffffffffffffffda RBX: 00007fdee6e25fa0 RCX: 00007fdee6b9e159 [ 78.263974][ T7101] RDX: 0000000020040014 RSI: 0000200000006040 RDI: 0000000000000004 [ 78.263986][ T7101] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 78.263997][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.264007][ T7101] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 78.264033][ T7101] [ 78.407305][ T7112] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 78.703125][ T7126] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 78.703207][ T7126] FAULT_INJECTION: forcing a failure. [ 78.703207][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.703232][ T7126] CPU: 2 UID: 0 PID: 7126 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.703255][ T7126] Tainted: [L]=SOFTLOCKUP [ 78.703261][ T7126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.703271][ T7126] Call Trace: [ 78.703277][ T7126] [ 78.703285][ T7126] dump_stack_lvl+0x100/0x190 [ 78.703315][ T7126] should_fail_ex.cold+0x5/0xa [ 78.703340][ T7126] _copy_to_user+0x32/0xd0 [ 78.703361][ T7126] simple_read_from_buffer+0xcb/0x170 [ 78.703384][ T7126] proc_fail_nth_read+0x1af/0x230 [ 78.703405][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.703428][ T7126] ? rw_verify_area+0xce/0x6d0 [ 78.703455][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.703475][ T7126] vfs_read+0x1e4/0xb40 [ 78.703493][ T7126] ? lock_acquire+0x1d1/0x380 [ 78.703512][ T7126] ? __fget_files+0x34/0x3d0 [ 78.703534][ T7126] ? __pfx_vfs_read+0x10/0x10 [ 78.703550][ T7126] ? find_held_lock+0x2b/0x80 [ 78.703582][ T7126] ? __fget_files+0x215/0x3d0 [ 78.703607][ T7126] ? __fget_files+0x21f/0x3d0 [ 78.703635][ T7126] ksys_read+0x12a/0x250 [ 78.703652][ T7126] ? __pfx_ksys_read+0x10/0x10 [ 78.703673][ T7126] do_syscall_64+0x123/0x790 [ 78.703700][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.703718][ T7126] RIP: 0033:0x7fdee6b5e98e [ 78.703733][ T7126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.703750][ T7126] RSP: 002b:00007fdee7a06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.703768][ T7126] RAX: ffffffffffffffda RBX: 00007fdee7a076c0 RCX: 00007fdee6b5e98e [ 78.703779][ T7126] RDX: 000000000000000f RSI: 00007fdee7a070a0 RDI: 0000000000000008 [ 78.703790][ T7126] RBP: 00007fdee7a07090 R08: 0000000000000000 R09: 0000000000000000 [ 78.703801][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.703811][ T7126] R13: 00007fdee6e26038 R14: 00007fdee6e25fa0 R15: 00007ffcc4640698 [ 78.703836][ T7126] [ 78.813175][ T7130] FAULT_INJECTION: forcing a failure. [ 78.813175][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 78.813211][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.2.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.813236][ T7130] Tainted: [L]=SOFTLOCKUP [ 78.813243][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.813253][ T7130] Call Trace: [ 78.813260][ T7130] [ 78.813267][ T7130] dump_stack_lvl+0x100/0x190 [ 78.813299][ T7130] should_fail_ex.cold+0x5/0xa [ 78.813322][ T7130] should_failslab+0xc2/0x120 [ 78.813345][ T7130] __kmalloc_noprof+0xfc/0x840 [ 78.813363][ T7130] ? __kasan_kmalloc+0xaa/0xb0 [ 78.813382][ T7130] ? nla_strdup+0xc3/0x150 [ 78.813411][ T7130] nla_strdup+0xc3/0x150 [ 78.813433][ T7130] nf_tables_newflowtable+0x747/0x2830 [ 78.813468][ T7130] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 78.813497][ T7130] ? __pfx___nla_validate_parse+0x10/0x10 [ 78.813525][ T7130] ? lock_acquire+0x1d1/0x380 [ 78.813542][ T7130] ? net_generic+0x25/0x2a0 [ 78.813569][ T7130] ? __nla_parse+0x40/0x60 [ 78.813598][ T7130] nfnetlink_rcv_batch+0x1410/0x2880 [ 78.813637][ T7130] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 78.813664][ T7130] ? lock_acquire+0x1d1/0x380 [ 78.813682][ T7130] ? avc_has_perm_noaudit+0x56/0x3b0 [ 78.813719][ T7130] ? avc_has_perm_noaudit+0x145/0x3b0 [ 78.813769][ T7130] ? __nla_parse+0x40/0x60 [ 78.813795][ T7130] nfnetlink_rcv+0x3bd/0x440 [ 78.813819][ T7130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 78.813849][ T7130] netlink_unicast+0x585/0x850 [ 78.813874][ T7130] ? __pfx_netlink_unicast+0x10/0x10 [ 78.813894][ T7130] ? __pfx_sock_has_perm+0x10/0x10 [ 78.813926][ T7130] netlink_sendmsg+0x8b0/0xda0 [ 78.813950][ T7130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.813972][ T7130] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.813996][ T7130] ____sys_sendmsg+0xa4d/0xbe0 [ 78.814018][ T7130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.814039][ T7130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.814070][ T7130] ? lock_acquire+0x1d1/0x380 [ 78.814088][ T7130] ? get_pid_task+0x2a/0x250 [ 78.814115][ T7130] ___sys_sendmsg+0x190/0x1e0 [ 78.814143][ T7130] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.814169][ T7130] ? get_pid_task+0x106/0x250 [ 78.814206][ T7130] ? find_held_lock+0x2b/0x80 [ 78.814247][ T7130] __sys_sendmsg+0x160/0x210 [ 78.814267][ T7130] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.814322][ T7130] do_syscall_64+0x123/0x790 [ 78.814350][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.814368][ T7130] RIP: 0033:0x7f3d6ef9e159 [ 78.814382][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.814399][ T7130] RSP: 002b:00007f3d6fe38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.814418][ T7130] RAX: ffffffffffffffda RBX: 00007f3d6f225fa0 RCX: 00007f3d6ef9e159 [ 78.814431][ T7130] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 78.814442][ T7130] RBP: 00007f3d6fe38090 R08: 0000000000000000 R09: 0000000000000000 [ 78.814453][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.814464][ T7130] R13: 00007f3d6f226038 R14: 00007f3d6f225fa0 R15: 00007ffc448b0e28 [ 78.814488][ T7130] [ 78.892603][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.896778][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.902431][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.920998][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.926343][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.927742][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.930791][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.933838][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.937224][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.940229][ T7134] overlayfs: workdir and upperdir must reside under the same mount [ 78.943291][ T7137] capability: warning: `syz.3.387' uses 32-bit capabilities (legacy support in use) [ 78.943516][ T7138] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 78.964955][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.031604][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 79.031622][ T43] audit: type=1400 audit(78.919:515): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.146739][ T43] audit: type=1400 audit(79.039:516): avc: denied { setopt } for pid=7143 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.211121][ T7147] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 79.240470][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.240505][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.304568][ T7149] syzkaller0: entered promiscuous mode [ 79.304590][ T7149] syzkaller0: entered allmulticast mode [ 79.358791][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.358826][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.398440][ T1486] usb 5-1: USB disconnect, device number 11 [ 79.427604][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.427640][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.485019][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.485054][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.582167][ T43] audit: type=1400 audit(79.469:517): avc: denied { execute } for pid=7152 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.582322][ T43] audit: type=1400 audit(79.469:518): avc: denied { execute_no_trans } for pid=7152 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.685457][ T5726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.688738][ T5726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.689221][ T5726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.689782][ T5726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.690121][ T5726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.716262][ T7158] ip_tables: iptables: counters copy to user failed while replacing table [ 79.835391][ T12] team0: left allmulticast mode [ 79.835411][ T12] team_slave_1: left allmulticast mode [ 79.835904][ T12] team0: left promiscuous mode [ 79.835916][ T12] team_slave_1: left promiscuous mode [ 79.836427][ T12] bridge0: port 3(team0) entered disabled state [ 79.848154][ T43] audit: type=1400 audit(79.739:519): avc: denied { getopt } for pid=7164 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.849376][ T7165] bpf: Bad value for 'gid' [ 79.850051][ T43] audit: type=1400 audit(79.739:520): avc: denied { mounton } for pid=7164 comm="syz.0.398" path="/103/file0" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 79.852842][ T43] audit: type=1400 audit(79.739:521): avc: denied { write } for pid=7162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.867724][ T12] bridge_slave_1: left allmulticast mode [ 79.867747][ T12] bridge_slave_1: left promiscuous mode [ 79.868979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.890495][ T12] bridge_slave_0: left allmulticast mode [ 79.890539][ T12] bridge_slave_0: left promiscuous mode [ 79.890672][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.914622][ T5726] Bluetooth: hci2: command tx timeout [ 79.918054][ T43] audit: type=1400 audit(79.809:522): avc: denied { write } for pid=7170 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.061509][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.063845][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.068751][ T12] bond0 (unregistering): Released all slaves [ 80.073443][ T12] bond1 (unregistering): Released all slaves [ 80.288986][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 80.312492][ T43] audit: type=1400 audit(80.199:523): avc: denied { watch_mount } for pid=7178 comm="syz.3.401" path="/116" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.313616][ T7181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.452950][ T7189] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 80.457010][ T7189] bridge0: port 3(batadv0) entered disabled state [ 80.457482][ T7189] batadv0: left allmulticast mode [ 80.457501][ T7189] batadv0: left promiscuous mode [ 80.457667][ T7189] bridge0: port 3(batadv0) entered disabled state [ 81.294580][ T50] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 81.444908][ T50] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 81.445752][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.445781][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.445796][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.447504][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.447523][ T50] usb 8-1: Product: syz [ 81.447535][ T50] usb 8-1: Manufacturer: syz [ 81.447547][ T50] usb 8-1: SerialNumber: syz [ 81.452786][ T50] usbtmc 8-1:1.0: bulk endpoints not found [ 87.005445][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.009901][ T5726] Bluetooth: hci1: command tx timeout [ 87.010261][ T5726] Bluetooth: hci2: command tx timeout [ 87.015987][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.040676][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.042107][ T7189] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 87.052895][ T7200] ip_tables: iptables: counters copy to user failed while replacing table [ 87.057318][ T43] audit: type=1400 audit(86.949:524): avc: denied { write } for pid=7188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.075277][ T7155] lo speed is unknown, defaulting to 1000 [ 87.108857][ T43] audit: type=1400 audit(86.999:525): avc: denied { write } for pid=7202 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.414813][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.414954][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.415058][ T7155] bridge_slave_0: entered allmulticast mode [ 87.416529][ T7155] bridge_slave_0: entered promiscuous mode [ 87.419150][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.419233][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.419524][ T7155] bridge_slave_1: entered allmulticast mode [ 87.420667][ T7155] bridge_slave_1: entered promiscuous mode [ 87.441405][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.442992][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.461948][ T7155] team0: Port device team_slave_0 added [ 87.463362][ T7155] team0: Port device team_slave_1 added [ 87.480115][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.480131][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.480152][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.481578][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.481590][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.481612][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.516075][ T7155] hsr_slave_0: entered promiscuous mode [ 87.516970][ T7155] hsr_slave_1: entered promiscuous mode [ 87.517728][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 87.517747][ T7155] Cannot create hsr debugfs directory [ 87.661135][ T7155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.144382][ T7185] ------------[ cut here ]------------ [ 88.144393][ T7185] [CRTC:40:crtc-0] vblank wait timed out [ 88.144402][ T7185] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1927 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#0: syz.0.403/7185 [ 88.152449][ T7185] Modules linked in: [ 88.153797][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.157973][ T7185] Tainted: [L]=SOFTLOCKUP [ 88.159865][ T7185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.163243][ T7185] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 88.165836][ T7185] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d a8 2f 75 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 63 ad 30 fc e9 7c fe ff ff e8 99 [ 88.172173][ T7185] RSP: 0018:ffffc9000fc7f0b8 EFLAGS: 00010246 [ 88.174159][ T7185] RAX: 0000000000000000 RBX: ffff888100740040 RCX: 1ffff110200e8022 [ 88.176855][ T7185] RDX: ffff88802718abc0 RSI: 0000000000000028 RDI: ffffffff9150a1e0 [ 88.179421][ T7185] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 88.181972][ T7185] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.184506][ T7185] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802aae0c00 [ 88.187110][ T7185] FS: 00007f84555df6c0(0000) GS:ffff8880d5b59000(0000) knlGS:0000000000000000 [ 88.189900][ T7185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.192022][ T7185] CR2: 00007f06140b8e9c CR3: 000000003418b000 CR4: 0000000000352ef0 [ 88.194596][ T7185] Call Trace: [ 88.195788][ T7185] [ 88.196769][ T7185] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 88.199203][ T7185] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.201085][ T7185] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.202760][ T7185] ? __pfx_autoremove_wake_function+0x10/0x10 [ 88.204779][ T7185] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 88.207038][ T7185] drm_atomic_helper_commit_tail+0xff/0x130 [ 88.208943][ T7185] commit_tail+0x338/0x430 [ 88.210403][ T7185] drm_atomic_helper_commit+0x303/0x380 [ 88.212213][ T7185] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 88.214139][ T7185] drm_atomic_commit+0x230/0x300 [ 88.215902][ T7185] ? __pfx_drm_atomic_commit+0x10/0x10 [ 88.217675][ T7185] ? __pfx___drm_printfn_info+0x10/0x10 [ 88.219682][ T7185] ? drm_client_rotation+0x451/0x6a0 [ 88.221676][ T7185] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 88.223683][ T7185] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 88.226333][ T7185] ? __mutex_lock+0x26c/0x1bd0 [ 88.227968][ T7185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.229890][ T7185] drm_client_modeset_commit_locked+0x14d/0x580 [ 88.231910][ T7185] drm_fb_helper_pan_display+0x32d/0xa40 [ 88.233699][ T7185] fb_pan_display+0x195/0x820 [ 88.235339][ T7185] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 88.237330][ T7185] ? queue_delayed_work_on+0x122/0x1e0 [ 88.239065][ T7185] bit_update_start+0x48/0x1f0 [ 88.240612][ T7185] fbcon_switch+0x1119/0x19f0 [ 88.242139][ T7185] ? __pfx_fbcon_switch+0x10/0x10 [ 88.243769][ T7185] ? __pfx_bit_cursor+0x10/0x10 [ 88.245416][ T7185] ? fbcon_cursor+0x24c/0x5e0 [ 88.246964][ T7185] csi_J+0x872/0xad0 [ 88.248239][ T7185] csi_ECMA.constprop.0+0x51e/0x3b60 [ 88.249915][ T7185] ? find_held_lock+0x2b/0x80 [ 88.251550][ T7185] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 88.253406][ T7185] do_con_write+0x35dc/0x4980 [ 88.255097][ T7185] ? __pfx_do_con_write+0x10/0x10 [ 88.256736][ T7185] ? add_softcursor+0x1b0/0x290 [ 88.258328][ T7185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.260226][ T7185] con_write+0x23/0xb0 [ 88.261615][ T7185] n_tty_write+0x431/0x1160 [ 88.263133][ T7185] ? __pfx_n_tty_write+0x10/0x10 [ 88.264838][ T7185] ? __kasan_kmalloc+0xaa/0xb0 [ 88.266350][ T7185] ? __pfx_woken_wake_function+0x10/0x10 [ 88.268079][ T7185] ? rcu_is_watching+0x13/0xc0 [ 88.269619][ T7185] ? file_tty_write.isra.0+0x694/0x890 [ 88.271489][ T7185] ? kfree+0x1e5/0x6d0 [ 88.272819][ T7185] ? __pfx_n_tty_write+0x10/0x10 [ 88.274431][ T7185] file_tty_write.isra.0+0x4d2/0x890 [ 88.276372][ T7185] vfs_write+0x6af/0x1050 [ 88.277804][ T7185] ? __pfx_tty_write+0x10/0x10 [ 88.279363][ T7185] ? __pfx_vfs_write+0x10/0x10 [ 88.280907][ T7185] ? find_held_lock+0x2b/0x80 [ 88.282465][ T7185] ksys_write+0x12a/0x250 [ 88.283874][ T7185] ? __pfx_ksys_write+0x10/0x10 [ 88.285504][ T7185] do_syscall_64+0x123/0x790 [ 88.286966][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.288768][ T7185] RIP: 0033:0x7f845479e159 [ 88.290212][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.296466][ T7185] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.299389][ T7185] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 88.301936][ T7185] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000005 [ 88.304461][ T7185] RBP: 00007f845483506b R08: 0000000000000000 R09: 0000000000000000 [ 88.307054][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.309699][ T7185] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 88.312260][ T7185] [ 88.313374][ T7185] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.315679][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.318875][ T7185] Tainted: [L]=SOFTLOCKUP [ 88.320209][ T7185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.323539][ T7185] Call Trace: [ 88.324785][ T7185] [ 88.325774][ T7185] dump_stack_lvl+0x100/0x190 [ 88.327294][ T7185] vpanic+0x553/0x970 [ 88.328556][ T7185] ? __pfx_vpanic+0x10/0x10 [ 88.329984][ T7185] panic+0xd1/0xe0 [ 88.331200][ T7185] ? __pfx_panic+0x10/0x10 [ 88.332615][ T7185] check_panic_on_warn.cold+0x19/0x34 [ 88.334308][ T7185] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 88.336699][ T7185] __warn.cold+0x191/0x318 [ 88.338062][ T7185] __report_bug+0x30f/0x440 [ 88.339501][ T7185] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 88.341756][ T7185] ? __pfx___report_bug+0x10/0x10 [ 88.343360][ T7185] report_bug_entry+0xe2/0x290 [ 88.344974][ T7185] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 88.347324][ T7185] handle_bug+0x1cd/0x2a0 [ 88.348690][ T7185] exc_invalid_op+0x17/0x50 [ 88.350135][ T7185] asm_exc_invalid_op+0x1a/0x20 [ 88.351688][ T7185] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 88.354097][ T7185] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d a8 2f 75 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 63 ad 30 fc e9 7c fe ff ff e8 99 [ 88.359860][ T7185] RSP: 0018:ffffc9000fc7f0b8 EFLAGS: 00010246 [ 88.361758][ T7185] RAX: 0000000000000000 RBX: ffff888100740040 RCX: 1ffff110200e8022 [ 88.364206][ T7185] RDX: ffff88802718abc0 RSI: 0000000000000028 RDI: ffffffff9150a1e0 [ 88.366758][ T7185] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 88.369300][ T7185] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.371811][ T7185] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802aae0c00 [ 88.374371][ T7185] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 88.376606][ T7185] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 88.378890][ T7185] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.380678][ T7185] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.382329][ T7185] ? __pfx_autoremove_wake_function+0x10/0x10 [ 88.384245][ T7185] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 88.386340][ T7185] drm_atomic_helper_commit_tail+0xff/0x130 [ 88.388144][ T7185] commit_tail+0x338/0x430 [ 88.389477][ T7185] drm_atomic_helper_commit+0x303/0x380 [ 88.391218][ T7185] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 88.393115][ T7185] drm_atomic_commit+0x230/0x300 [ 88.394719][ T7185] ? __pfx_drm_atomic_commit+0x10/0x10 [ 88.396432][ T7185] ? __pfx___drm_printfn_info+0x10/0x10 [ 88.398173][ T7185] ? drm_client_rotation+0x451/0x6a0 [ 88.399835][ T7185] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 88.401799][ T7185] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 88.403909][ T7185] ? __mutex_lock+0x26c/0x1bd0 [ 88.405520][ T7185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.407426][ T7185] drm_client_modeset_commit_locked+0x14d/0x580 [ 88.409367][ T7185] drm_fb_helper_pan_display+0x32d/0xa40 [ 88.411341][ T7185] fb_pan_display+0x195/0x820 [ 88.412853][ T7185] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 88.414889][ T7185] ? queue_delayed_work_on+0x122/0x1e0 [ 88.416643][ T7185] bit_update_start+0x48/0x1f0 [ 88.418174][ T7185] fbcon_switch+0x1119/0x19f0 [ 88.419669][ T7185] ? __pfx_fbcon_switch+0x10/0x10 [ 88.421277][ T7185] ? __pfx_bit_cursor+0x10/0x10 [ 88.422816][ T7185] ? fbcon_cursor+0x24c/0x5e0 [ 88.424313][ T7185] csi_J+0x872/0xad0 [ 88.425659][ T7185] csi_ECMA.constprop.0+0x51e/0x3b60 [ 88.427350][ T7185] ? find_held_lock+0x2b/0x80 [ 88.428827][ T7185] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 88.430653][ T7185] do_con_write+0x35dc/0x4980 [ 88.432150][ T7185] ? __pfx_do_con_write+0x10/0x10 [ 88.433729][ T7185] ? add_softcursor+0x1b0/0x290 [ 88.435289][ T7185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.437125][ T7185] con_write+0x23/0xb0 [ 88.438406][ T7185] n_tty_write+0x431/0x1160 [ 88.439856][ T7185] ? __pfx_n_tty_write+0x10/0x10 [ 88.441424][ T7185] ? __kasan_kmalloc+0xaa/0xb0 [ 88.442933][ T7185] ? __pfx_woken_wake_function+0x10/0x10 [ 88.444737][ T7185] ? rcu_is_watching+0x13/0xc0 [ 88.446496][ T7185] ? file_tty_write.isra.0+0x694/0x890 [ 88.448209][ T7185] ? kfree+0x1e5/0x6d0 [ 88.449496][ T7185] ? __pfx_n_tty_write+0x10/0x10 [ 88.451078][ T7185] file_tty_write.isra.0+0x4d2/0x890 [ 88.452733][ T7185] vfs_write+0x6af/0x1050 [ 88.454088][ T7185] ? __pfx_tty_write+0x10/0x10 [ 88.455727][ T7185] ? __pfx_vfs_write+0x10/0x10 [ 88.457184][ T7185] ? find_held_lock+0x2b/0x80 [ 88.458640][ T7185] ksys_write+0x12a/0x250 [ 88.459952][ T7185] ? __pfx_ksys_write+0x10/0x10 [ 88.461491][ T7185] do_syscall_64+0x123/0x790 [ 88.462964][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.464890][ T7185] RIP: 0033:0x7f845479e159 [ 88.466338][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.472264][ T7185] RSP: 002b:00007f84555df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.474868][ T7185] RAX: ffffffffffffffda RBX: 00007f8454a25fa0 RCX: 00007f845479e159 [ 88.477292][ T7185] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000005 [ 88.479855][ T7185] RBP: 00007f845483506b R08: 0000000000000000 R09: 0000000000000000 [ 88.482311][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.484860][ T7185] R13: 00007f8454a26038 R14: 00007f8454a25fa0 R15: 00007ffcadc4a158 [ 88.487380][ T7185] [ 89.551500][ T7185] Shutting down cpus with NMI [ 89.553557][ T7185] Kernel Offset: disabled [ 89.555016][ T7185] Rebooting in 86400 seconds..