last executing test programs: 54m25.072137424s ago: executing program 0 (id=67): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, 0x0) 54m23.369436348s ago: executing program 0 (id=69): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x1}, 0x18) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) ioctl$TIOCMBIS(r2, 0x5450, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'sit0\x00', 0x0}) mq_open(&(0x7f0000000040)='{\x00', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x5, 0xebb3}) 54m21.157997466s ago: executing program 0 (id=70): inotify_init1(0x0) r0 = epoll_create1(0x0) ioctl$GIO_UNISCRNMAP(r0, 0x5450, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8901, &(0x7f0000000100)) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "8031e9366334ce583b92c348e6ddad95"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) r2 = mq_open(&(0x7f0000000440)='127.0.0.1\x00', 0x40, 0xc0, &(0x7f0000000480)={0x4, 0x4, 0x23cfbd70, 0x5}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8901, &(0x7f0000000080)) 54m20.868336678s ago: executing program 0 (id=71): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000740)={0x1d, r3, 0x3, {0x2, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002240)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$kcm(0x2, 0xa, 0x2) pipe2(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 54m18.762036645s ago: executing program 0 (id=72): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5451, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x8005, 0x0, 0x0) mlockall(0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2$9p(&(0x7f00000000c0), 0x0) write(0xffffffffffffffff, 0x0, 0x3f) execve(0x0, 0x0, 0x0) 54m15.50907858s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/128, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000020000000401000000000000000000006c733100"/120, 0x78) 53m29.517946639s ago: executing program 32 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/128, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000020000000401000000000000000000006c733100"/120, 0x78) 7m34.138488697s ago: executing program 1 (id=5328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, 0x0, 0x80) write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2) 7m34.041073808s ago: executing program 1 (id=5329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 7m33.980959188s ago: executing program 1 (id=5330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m33.881116869s ago: executing program 1 (id=5331): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4) 7m33.809383879s ago: executing program 1 (id=5332): timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 7m33.369092203s ago: executing program 1 (id=5333): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 7m33.368900813s ago: executing program 33 (id=5333): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 6m33.4566908s ago: executing program 2 (id=5509): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) 6m30.485431904s ago: executing program 2 (id=5517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x80) write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2) 6m30.358099035s ago: executing program 2 (id=5518): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) 6m30.281257695s ago: executing program 2 (id=5519): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200400, 0x126) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 6m27.759352045s ago: executing program 2 (id=5522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) 6m27.637713276s ago: executing program 2 (id=5524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xffff485d}, @mss={0x2, 0x1}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xffff}], 0x8) sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)="20575acaa7e9cda209a50900c0a48e93eaae3f622f6fcaf68502e536d9bd040b6e49a49db1def24e96ab925988d5b02a41ef51b3fe13f7d642afc05c32e6f6df96242f8a53efd2f6f58ef92ae39c0f37b8d2f133e5b4865216aedad5770e31bebe956e47e184e3c8da3d093f3c2adcfcbdb50c75f68f88481e187b648ae02eca5540d2fcc48f833dc5ee36b6916b62", 0x13, 0x1, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 5m41.985961882s ago: executing program 34 (id=5524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xffff485d}, @mss={0x2, 0x1}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xffff}], 0x8) sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)="20575acaa7e9cda209a50900c0a48e93eaae3f622f6fcaf68502e536d9bd040b6e49a49db1def24e96ab925988d5b02a41ef51b3fe13f7d642afc05c32e6f6df96242f8a53efd2f6f58ef92ae39c0f37b8d2f133e5b4865216aedad5770e31bebe956e47e184e3c8da3d093f3c2adcfcbdb50c75f68f88481e187b648ae02eca5540d2fcc48f833dc5ee36b6916b62", 0x13, 0x1, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3m54.780253508s ago: executing program 3 (id=5817): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x330) 3m54.710140919s ago: executing program 3 (id=5818): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 3m54.620243699s ago: executing program 3 (id=5819): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) syz_ublk_setup_io_uring(0x40ec, &(0x7f0000000040)={0x0, 0x8580, 0x4000, 0x3, 0x3d, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000000c0)) 3m54.49983105s ago: executing program 3 (id=5820): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 3m54.386481722s ago: executing program 3 (id=5821): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x4000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) sendfile(r2, r3, 0x0, 0xe3aa6ea) 3m54.141607803s ago: executing program 3 (id=5822): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000240), &(0x7f00000004c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) 3m54.141425723s ago: executing program 35 (id=5822): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000240), &(0x7f00000004c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) 3m40.708242728s ago: executing program 4 (id=5877): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") 3m40.597424569s ago: executing program 4 (id=5880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000680001040000000000000000020000000000000008000500", @ANYRES32=0x1, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x38, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB], 0x38}}, 0x0) 3m40.525670589s ago: executing program 4 (id=5882): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYBLOB="010000000000000024001280090001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m40.4046304s ago: executing program 4 (id=5883): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, 0x0, 0x0, 0x60040, 0x0) 3m40.268055772s ago: executing program 4 (id=5884): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002300), 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 3m39.961072794s ago: executing program 4 (id=5885): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) 3m39.960915764s ago: executing program 36 (id=5885): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) 39.950162598s ago: executing program 5 (id=6747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000380)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x9, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4a}, 0x94) 39.880927119s ago: executing program 5 (id=6748): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) clock_gettime(0x5, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000100)="9ce9278bc8e075ab325f533c317c0f6cc8ec5759ac10394692141c2a6f6ee9377498cc806957c4202eb5c8e5ed5e41298228b77cd208054dbdf1f07b2870dbdd0c4cee5ed895041c0a077925fb2b3f84475a628ebc6c9bb6212649b6a234a3bf24c4d136c29dda77bfb3bf0ab3f1a83a2bfb4e5828b2d3c1b833293e34800aaebe584a9f2d84", 0x86, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='ne', 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x2, 0x3, r3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)={'wg0\x00', @random="01000000ff96"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000280)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 38.149173482s ago: executing program 5 (id=6751): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 37.887020354s ago: executing program 5 (id=6752): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 37.708456585s ago: executing program 5 (id=6753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000) write(r0, &(0x7f0000000000)='7', 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) 37.578936827s ago: executing program 5 (id=6754): sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 577.197045ms ago: executing program 6 (id=6839): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 418.722246ms ago: executing program 6 (id=6840): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 349.795097ms ago: executing program 6 (id=6841): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x5, {0x569142f7, 0x4, 0x1db, 0x0, 0x81, 0x1, 0x7, 0x1fd, 0x8}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x3, 0xff, 0x6, 0x8, "0062637d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) read(r0, &(0x7f0000000400)=""/227, 0x9) 241.234748ms ago: executing program 6 (id=6842): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) 130.221219ms ago: executing program 6 (id=6843): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 6 (id=6844): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): 3128.053593][T19674] copy_ipcs+0x170/0x300 [ 3128.053664][T19674] create_new_namespaces+0xa8/0x370 [ 3128.053747][T19674] unshare_nsproxy_namespaces+0x70/0xbc [ 3128.053825][T19674] ksys_unshare+0x1cc/0x3b8 [ 3128.053900][T19674] __arm64_sys_unshare+0x14/0x24 [ 3128.053972][T19674] invoke_syscall+0x54/0x10c [ 3128.054045][T19674] el0_svc_common.constprop.0+0x40/0xe0 [ 3128.054116][T19674] do_el0_svc+0x1c/0x34 [ 3128.054184][T19674] el0_svc+0x38/0x1fc [ 3128.054266][T19674] el0t_64_sync_handler+0xa0/0xe4 [ 3128.054341][T19674] el0t_64_sync+0x1a4/0x1a8 [ 3142.583600][T19736] device-mapper: ioctl: name not supplied when creating device [ 3146.058323][T19749] device-mapper: ioctl: name not supplied when creating device [ 3146.257428][T19753] autofs: Unknown parameter '0x0000000000000000' [ 3146.668810][T19763] xt_hashlimit: size too large, truncated to 1048576 [ 3147.120115][T19768] autofs: Unknown parameter '0x0000000000000000' [ 3147.579424][T19781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3152.615673][T19810] autofs: Unknown parameter 'fd0x0000000000000000' [ 3152.784898][T19814] FAULT_INJECTION: forcing a failure. [ 3152.784898][T19814] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3152.785271][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.4.5786 Tainted: G W L syzkaller #0 PREEMPT [ 3152.785413][T19814] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3152.785450][T19814] Hardware name: linux,dummy-virt (DT) [ 3152.785486][T19814] Call trace: [ 3152.785517][T19814] show_stack+0x18/0x24 (C) [ 3152.785611][T19814] dump_stack_lvl+0x60/0x80 [ 3152.785677][T19814] dump_stack+0x18/0x24 [ 3152.785773][T19814] should_fail_ex+0x1e0/0x238 [ 3152.785880][T19814] should_fail+0x14/0x40 [ 3152.785986][T19814] get_futex_key+0xdc/0x620 [ 3152.786155][T19814] futex_wait_setup+0x54/0x240 [ 3152.786292][T19814] __futex_wait+0xd4/0x180 [ 3152.786416][T19814] futex_wait+0x88/0x110 [ 3152.786518][T19814] do_futex+0x1a0/0x210 [ 3152.786653][T19814] __arm64_sys_futex+0x100/0x1a0 [ 3152.786759][T19814] invoke_syscall+0x54/0x10c [ 3152.786842][T19814] el0_svc_common.constprop.0+0x40/0xe0 [ 3152.786934][T19814] do_el0_svc+0x1c/0x34 [ 3152.786998][T19814] el0_svc+0x38/0x1fc [ 3152.787105][T19814] el0t_64_sync_handler+0xa0/0xe4 [ 3152.787192][T19814] el0t_64_sync+0x1a4/0x1a8 [ 3153.649111][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5794'. [ 3153.710002][T19833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3153.895262][ T28] audit: type=1326 audit(3409.785:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19836 comm="syz.3.5795" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf79368 code=0x0 [ 3159.812082][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5803'. [ 3160.173271][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3160.658314][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.038555][T19873] syzkaller0: entered promiscuous mode [ 3161.040165][T19873] syzkaller0: entered allmulticast mode [ 3161.216703][ T3460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.252390][T13987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.758277][T19893] FAULT_INJECTION: forcing a failure. [ 3162.758277][T19893] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.758663][T19893] CPU: 1 UID: 0 PID: 19893 Comm: syz.3.5819 Tainted: G W L syzkaller #0 PREEMPT [ 3162.758796][T19893] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3162.758837][T19893] Hardware name: linux,dummy-virt (DT) [ 3162.758878][T19893] Call trace: [ 3162.758912][T19893] show_stack+0x18/0x24 (C) [ 3162.759022][T19893] dump_stack_lvl+0x60/0x80 [ 3162.759101][T19893] dump_stack+0x18/0x24 [ 3162.759203][T19893] should_fail_ex+0x1e0/0x238 [ 3162.759374][T19893] should_failslab+0x54/0x80 [ 3162.759466][T19893] __kvmalloc_node_noprof+0xc8/0x65c [ 3162.759561][T19893] io_alloc_cache_init+0x38/0x74 [ 3162.759668][T19893] io_uring_setup+0x218/0x7ec [ 3162.759741][T19893] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3162.759809][T19893] invoke_syscall+0x54/0x10c [ 3162.759886][T19893] el0_svc_common.constprop.0+0x40/0xe0 [ 3162.759987][T19893] do_el0_svc+0x1c/0x34 [ 3162.760076][T19893] el0_svc+0x38/0x1fc [ 3162.760169][T19893] el0t_64_sync_handler+0xa0/0xe4 [ 3162.760244][T19893] el0t_64_sync+0x1a4/0x1a8 [ 3163.224775][T18602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3163.295092][ T3460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3163.337795][T18602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3163.457062][T18288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3163.466504][T18602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3163.565720][T18602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3163.703167][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.109229][T18602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3164.150405][T18602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3164.197252][T18602] bond0 (unregistering): Released all slaves [ 3164.216129][T18602] bond1 (unregistering): Released all slaves [ 3164.363709][T18602] hsr_slave_0: left promiscuous mode [ 3164.367791][T18602] hsr_slave_1: left promiscuous mode [ 3164.379764][T18602] veth1_macvtap: left promiscuous mode [ 3164.380568][T18602] veth0_macvtap: left promiscuous mode [ 3164.383021][T18602] veth1_vlan: left promiscuous mode [ 3164.384645][T18602] veth0_vlan: left promiscuous mode [ 3165.818964][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5824'. [ 3165.907221][T19920] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 3165.918928][T19920] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 3165.944588][T19920] bond1 (unregistering): Released all slaves [ 3166.217032][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3167.287045][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3167.314828][T19897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3167.325852][T19897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3168.033332][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3168.083514][T19978] FAULT_INJECTION: forcing a failure. [ 3168.083514][T19978] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.085493][T19978] CPU: 0 UID: 0 PID: 19978 Comm: syz.4.5837 Tainted: G W L syzkaller #0 PREEMPT [ 3168.085644][T19978] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3168.085682][T19978] Hardware name: linux,dummy-virt (DT) [ 3168.085719][T19978] Call trace: [ 3168.085750][T19978] show_stack+0x18/0x24 (C) [ 3168.085867][T19978] dump_stack_lvl+0x60/0x80 [ 3168.085936][T19978] dump_stack+0x18/0x24 [ 3168.086003][T19978] should_fail_ex+0x1e0/0x238 [ 3168.086076][T19978] should_failslab+0x54/0x80 [ 3168.086140][T19978] __kvmalloc_node_noprof+0xc8/0x65c [ 3168.086214][T19978] io_alloc_cache_init+0x38/0x74 [ 3168.086289][T19978] io_uring_setup+0x23c/0x7ec [ 3168.086366][T19978] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3168.086438][T19978] invoke_syscall+0x54/0x10c [ 3168.086509][T19978] el0_svc_common.constprop.0+0x40/0xe0 [ 3168.086579][T19978] do_el0_svc+0x1c/0x34 [ 3168.086647][T19978] el0_svc+0x38/0x1fc [ 3168.086722][T19978] el0t_64_sync_handler+0xa0/0xe4 [ 3168.086800][T19978] el0t_64_sync+0x1a4/0x1a8 [ 3168.817538][T19897] hsr_slave_0: entered promiscuous mode [ 3168.836016][T19897] hsr_slave_1: entered promiscuous mode [ 3168.855801][T19897] debugfs: 'hsr0' already exists in 'hsr' [ 3168.867240][T19897] Cannot create hsr debugfs directory [ 3169.106396][ T3220] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3169.910633][T19897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3169.949049][T19897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3169.965031][T19897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3169.986271][T19897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3169.993857][T19897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3170.007741][T19897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3170.013934][T19897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3170.030138][T19897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3170.853265][T19897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3170.932224][ T28] audit: type=1326 audit(3426.815:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.934195][ T28] audit: type=1326 audit(3426.825:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.936387][ T28] audit: type=1326 audit(3426.825:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.937747][ T28] audit: type=1326 audit(3426.825:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.939091][ T28] audit: type=1326 audit(3426.825:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.948284][ T28] audit: type=1326 audit(3426.825:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.950818][ T28] audit: type=1326 audit(3426.835:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3170.962507][ T28] audit: type=1326 audit(3426.845:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.4.5846" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 3171.742697][T20042] bond1: entered promiscuous mode [ 3171.746489][T20042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3174.357168][T20079] No control pipe specified [ 3174.869127][T19897] veth0_vlan: entered promiscuous mode [ 3174.953924][T19897] veth1_vlan: entered promiscuous mode [ 3175.136842][T19897] veth0_macvtap: entered promiscuous mode [ 3175.163572][T19897] veth1_macvtap: entered promiscuous mode [ 3175.264497][T20104] syzkaller0: entered promiscuous mode [ 3175.265667][T20104] syzkaller0: entered allmulticast mode [ 3175.273575][T20104] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 3175.330123][ T9008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3175.401958][T12396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3175.402318][T12396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3175.402591][T12396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3175.552365][T20108] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5864'. [ 3175.948448][T20122] fuse: Bad value for 'fd' [ 3176.846674][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5882'. [ 3181.827995][T20161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3181.879396][T20161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3182.748532][T20161] hsr_slave_0: entered promiscuous mode [ 3182.757023][T20161] hsr_slave_1: entered promiscuous mode [ 3182.759731][T20161] debugfs: 'hsr0' already exists in 'hsr' [ 3182.762649][T20161] Cannot create hsr debugfs directory [ 3183.229933][T20161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3183.246681][T20161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3183.250790][T20161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3183.267932][T20161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3183.274271][T20161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3183.288343][T20161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3183.299349][T20161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3183.316362][T20161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3184.698361][T20161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3185.171755][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5893'. [ 3188.697182][T20275] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 3188.846363][T20275] ip_tables: iptables: counters copy to user failed while replacing table [ 3189.905916][T20161] veth0_vlan: entered promiscuous mode [ 3189.943117][T20161] veth1_vlan: entered promiscuous mode [ 3190.062315][T20161] veth0_macvtap: entered promiscuous mode [ 3190.086384][T20161] veth1_macvtap: entered promiscuous mode [ 3190.247625][T18584] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.303411][ T9008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.303676][ T9008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.303851][ T9008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.685018][T20305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3191.365578][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5907'. [ 3194.406758][T20348] Injecting memory failure for pfn 0x561eb at process virtual address 0x20000000 [ 3194.439647][T20348] Memory failure: 0x561eb: Failed to punch page: 2 [ 3194.440306][T20348] Memory failure: 0x561eb: clean unevictable LRU page still referenced by 1 users [ 3194.443755][T20348] Memory failure: 0x561eb: recovery action for clean unevictable LRU page: Failed [ 3196.552629][T20370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3197.028027][ T28] audit: type=1326 audit(3452.915:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20381 comm="syz.5.5937" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x0 [ 3198.518664][T20401] fuse: Bad value for 'fd' [ 3198.624912][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5947'. [ 3198.930580][T20407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5949'. [ 3200.312077][T20428] fuse: Bad value for 'fd' [ 3202.926766][T20452] Injecting memory failure for pfn 0x9f911 at process virtual address 0x20000000 [ 3202.948619][T20452] Memory failure: 0x9f911: Sending SIGBUS to syz.5.5969:20452 due to hardware memory corruption [ 3202.954101][T20452] Memory failure: 0x9f911: recovery action for dirty LRU page: Recovered [ 3202.956383][T20452] Injecting memory failure for pfn 0x41f48 at process virtual address 0x20001000 [ 3202.958690][T20452] Memory failure: 0x41f48: unhandlable page. [ 3202.958992][T20452] Memory failure: 0x41f48: recovery action for reserved kernel page: Ignored [ 3203.170134][T20456] FAULT_INJECTION: forcing a failure. [ 3203.170134][T20456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3203.174146][T20456] CPU: 0 UID: 0 PID: 20456 Comm: syz.5.5971 Tainted: G W L syzkaller #0 PREEMPT [ 3203.174334][T20456] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3203.174376][T20456] Hardware name: linux,dummy-virt (DT) [ 3203.174431][T20456] Call trace: [ 3203.174487][T20456] show_stack+0x18/0x24 (C) [ 3203.174599][T20456] dump_stack_lvl+0x60/0x80 [ 3203.174674][T20456] dump_stack+0x18/0x24 [ 3203.174747][T20456] should_fail_ex+0x1e0/0x238 [ 3203.174825][T20456] should_fail+0x14/0x40 [ 3203.174889][T20456] get_futex_key+0xdc/0x620 [ 3203.174958][T20456] futex_wake+0x68/0x240 [ 3203.175024][T20456] do_futex+0x178/0x210 [ 3203.175087][T20456] __arm64_sys_futex+0x100/0x1a0 [ 3203.175155][T20456] invoke_syscall+0x54/0x10c [ 3203.175231][T20456] el0_svc_common.constprop.0+0x40/0xe0 [ 3203.175299][T20456] do_el0_svc+0x1c/0x34 [ 3203.175369][T20456] el0_svc+0x38/0x1fc [ 3203.175474][T20456] el0t_64_sync_handler+0xa0/0xe4 [ 3203.175552][T20456] el0t_64_sync+0x1a4/0x1a8 [ 3204.219337][T20476] FAULT_INJECTION: forcing a failure. [ 3204.219337][T20476] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.219749][T20476] CPU: 1 UID: 0 PID: 20476 Comm: syz.6.5981 Tainted: G W L syzkaller #0 PREEMPT [ 3204.219886][T20476] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3204.219927][T20476] Hardware name: linux,dummy-virt (DT) [ 3204.219966][T20476] Call trace: [ 3204.219998][T20476] show_stack+0x18/0x24 (C) [ 3204.220102][T20476] dump_stack_lvl+0x60/0x80 [ 3204.220175][T20476] dump_stack+0x18/0x24 [ 3204.220243][T20476] should_fail_ex+0x1e0/0x238 [ 3204.220320][T20476] should_failslab+0x54/0x80 [ 3204.220392][T20476] __kmalloc_noprof+0xac/0x520 [ 3204.220468][T20476] tomoyo_encode2+0x7c/0x13c [ 3204.220546][T20476] tomoyo_encode+0x28/0x40 [ 3204.220618][T20476] tomoyo_realpath_from_path+0x80/0x1d4 [ 3204.220692][T20476] tomoyo_path_number_perm+0xe0/0x21c [ 3204.220764][T20476] tomoyo_file_ioctl+0x1c/0x30 [ 3204.220874][T20476] security_file_ioctl+0x8c/0x19c [ 3204.220950][T20476] __arm64_sys_ioctl+0x44/0x100 [ 3204.221023][T20476] invoke_syscall+0x54/0x10c [ 3204.221128][T20476] el0_svc_common.constprop.0+0x40/0xe0 [ 3204.221201][T20476] do_el0_svc+0x1c/0x34 [ 3204.221269][T20476] el0_svc+0x38/0x1fc [ 3204.221349][T20476] el0t_64_sync_handler+0xa0/0xe4 [ 3204.221454][T20476] el0t_64_sync+0x1a4/0x1a8 [ 3204.226477][T20476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3206.914953][T20512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3211.031851][T20558] FAULT_INJECTION: forcing a failure. [ 3211.031851][T20558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3211.034695][T20558] CPU: 0 UID: 0 PID: 20558 Comm: syz.6.6018 Tainted: G W L syzkaller #0 PREEMPT [ 3211.034852][T20558] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3211.034894][T20558] Hardware name: linux,dummy-virt (DT) [ 3211.034935][T20558] Call trace: [ 3211.034969][T20558] show_stack+0x18/0x24 (C) [ 3211.035082][T20558] dump_stack_lvl+0x60/0x80 [ 3211.035165][T20558] dump_stack+0x18/0x24 [ 3211.035243][T20558] should_fail_ex+0x1e0/0x238 [ 3211.035326][T20558] should_fail+0x14/0x40 [ 3211.035408][T20558] should_fail_usercopy+0x1c/0x40 [ 3211.035483][T20558] bpf_verifier_vlog+0x13c/0x3e8 [ 3211.035572][T20558] btf_verifier_log+0x9c/0xa4 [ 3211.035660][T20558] btf_func_proto_log+0x1dc/0x29c [ 3211.035734][T20558] __btf_verifier_log_type+0x108/0x1e8 [ 3211.035804][T20558] btf_func_proto_check_meta+0x74/0x9c [ 3211.035878][T20558] btf_new_fd+0x5bc/0x167c [ 3211.035952][T20558] __sys_bpf+0xb28/0x1d1c [ 3211.036030][T20558] __arm64_sys_bpf+0x2c/0x40 [ 3211.036104][T20558] invoke_syscall+0x54/0x10c [ 3211.036179][T20558] el0_svc_common.constprop.0+0x40/0xe0 [ 3211.036253][T20558] do_el0_svc+0x1c/0x34 [ 3211.036322][T20558] el0_svc+0x38/0x1fc [ 3211.036413][T20558] el0t_64_sync_handler+0xa0/0xe4 [ 3211.036491][T20558] el0t_64_sync+0x1a4/0x1a8 [ 3211.557819][T20572] FAULT_INJECTION: forcing a failure. [ 3211.557819][T20572] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3211.559659][T20572] CPU: 0 UID: 0 PID: 20572 Comm: syz.5.6025 Tainted: G W L syzkaller #0 PREEMPT [ 3211.559795][T20572] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3211.559831][T20572] Hardware name: linux,dummy-virt (DT) [ 3211.559868][T20572] Call trace: [ 3211.559897][T20572] show_stack+0x18/0x24 (C) [ 3211.559991][T20572] dump_stack_lvl+0x60/0x80 [ 3211.560056][T20572] dump_stack+0x18/0x24 [ 3211.560120][T20572] should_fail_ex+0x1e0/0x238 [ 3211.560187][T20572] should_fail+0x14/0x40 [ 3211.560261][T20572] get_futex_key+0xdc/0x620 [ 3211.560392][T20572] futex_wake+0x68/0x240 [ 3211.560463][T20572] do_futex+0x178/0x210 [ 3211.560524][T20572] __arm64_sys_futex+0x100/0x1a0 [ 3211.560587][T20572] invoke_syscall+0x54/0x10c [ 3211.560650][T20572] el0_svc_common.constprop.0+0x40/0xe0 [ 3211.560713][T20572] do_el0_svc+0x1c/0x34 [ 3211.560773][T20572] el0_svc+0x38/0x1fc [ 3211.560877][T20572] el0t_64_sync_handler+0xa0/0xe4 [ 3211.560975][T20572] el0t_64_sync+0x1a4/0x1a8 [ 3211.998739][ T28] audit: type=1326 audit(3467.875:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3211.999130][ T28] audit: type=1326 audit(3467.885:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.004042][ T28] audit: type=1326 audit(3467.895:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.004411][ T28] audit: type=1326 audit(3467.895:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.006640][ T28] audit: type=1326 audit(3467.895:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.006822][ T28] audit: type=1326 audit(3467.895:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.006936][ T28] audit: type=1326 audit(3467.895:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.013513][ T28] audit: type=1326 audit(3467.905:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.016423][ T28] audit: type=1326 audit(3467.905:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.019594][ T28] audit: type=1326 audit(3467.905:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20583 comm="syz.6.6030" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3212.395939][T20596] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 3212.396215][T20596] device-mapper: ioctl: error adding target to table [ 3215.472361][T20616] Injecting memory failure for pfn 0x7adfa at process virtual address 0x20000000 [ 3215.494142][T20616] Memory failure: 0x7adfa: recovery action for clean LRU page: Recovered [ 3215.496189][T20616] Injecting memory failure for pfn 0xa8287 at process virtual address 0x20001000 [ 3215.499068][T20616] Memory failure: 0xa8287: recovery action for clean LRU page: Recovered [ 3215.501485][T20616] Injecting memory failure for pfn 0xa828d at process virtual address 0x20002000 [ 3215.503969][T20616] Memory failure: 0xa828d: recovery action for clean LRU page: Recovered [ 3215.511500][T20616] Injecting memory failure for pfn 0x53c71 at process virtual address 0x20003000 [ 3215.514806][T20616] Memory failure: 0x53c71: recovery action for clean LRU page: Recovered [ 3215.517010][T20616] Injecting memory failure for pfn 0x7eb24 at process virtual address 0x20004000 [ 3215.519652][T20616] Memory failure: 0x7eb24: recovery action for clean LRU page: Recovered [ 3215.522031][T20616] Injecting memory failure for pfn 0x7ad9e at process virtual address 0x20005000 [ 3215.524731][T20616] Memory failure: 0x7ad9e: recovery action for clean LRU page: Recovered [ 3215.531466][T20616] Injecting memory failure for pfn 0x7e7b1 at process virtual address 0x20006000 [ 3215.534253][T20616] Memory failure: 0x7e7b1: recovery action for clean LRU page: Recovered [ 3215.535796][T20616] Injecting memory failure for pfn 0x7e7b0 at process virtual address 0x20007000 [ 3215.538119][T20616] Memory failure: 0x7e7b0: recovery action for clean LRU page: Recovered [ 3215.539597][T20616] Injecting memory failure for pfn 0xa234a at process virtual address 0x20008000 [ 3215.543764][T20616] Memory failure: 0xa234a: recovery action for clean LRU page: Recovered [ 3215.561947][T20616] Injecting memory failure for pfn 0x5c07f at process virtual address 0x20009000 [ 3215.576997][T20616] Memory failure: 0x5c07f: recovery action for clean LRU page: Recovered [ 3215.577439][T20616] Injecting memory failure for pfn 0x7adfe at process virtual address 0x2000a000 [ 3215.589661][T20616] Memory failure: 0x7adfe: recovery action for clean LRU page: Recovered [ 3215.597547][T20616] Injecting memory failure for pfn 0x7adff at process virtual address 0x2000b000 [ 3215.598707][T20616] Memory failure: 0x7adff: recovery action for clean LRU page: Recovered [ 3215.598779][T20616] Injecting memory failure for pfn 0x53c6f at process virtual address 0x2000c000 [ 3215.599247][T20616] Memory failure: 0x53c6f: recovery action for clean LRU page: Recovered [ 3215.599313][T20616] Injecting memory failure for pfn 0x7ad90 at process virtual address 0x2000d000 [ 3215.599746][T20616] Memory failure: 0x7ad90: recovery action for clean LRU page: Recovered [ 3215.599823][T20616] Injecting memory failure for pfn 0x7adf6 at process virtual address 0x2000e000 [ 3215.600228][T20616] Memory failure: 0x7adf6: recovery action for clean LRU page: Recovered [ 3215.600285][T20616] Injecting memory failure for pfn 0x7adf7 at process virtual address 0x2000f000 [ 3215.600703][T20616] Memory failure: 0x7adf7: recovery action for clean LRU page: Recovered [ 3215.600781][T20616] Injecting memory failure for pfn 0x52b72 at process virtual address 0x20010000 [ 3215.673858][T20616] Memory failure: 0x52b72: recovery action for clean LRU page: Recovered [ 3215.674289][T20616] Injecting memory failure for pfn 0x78139 at process virtual address 0x20011000 [ 3215.676413][T20616] Memory failure: 0x78139: recovery action for clean LRU page: Recovered [ 3215.676566][T20616] Injecting memory failure for pfn 0xa3dec at process virtual address 0x20012000 [ 3215.677085][T20616] Memory failure: 0xa3dec: recovery action for clean LRU page: Recovered [ 3215.677253][T20616] Injecting memory failure for pfn 0x50a21 at process virtual address 0x20013000 [ 3215.677889][T20616] Memory failure: 0x50a21: recovery action for clean LRU page: Recovered [ 3215.678063][T20616] Injecting memory failure for pfn 0x7813a at process virtual address 0x20014000 [ 3215.678596][T20616] Memory failure: 0x7813a: recovery action for clean LRU page: Recovered [ 3215.678726][T20616] Injecting memory failure for pfn 0x53c6b at process virtual address 0x20015000 [ 3215.679219][T20616] Memory failure: 0x53c6b: recovery action for clean LRU page: Recovered [ 3215.679280][T20616] Injecting memory failure for pfn 0x7adfd at process virtual address 0x20016000 [ 3215.679714][T20616] Memory failure: 0x7adfd: recovery action for clean LRU page: Recovered [ 3215.679780][T20616] Injecting memory failure for pfn 0x5a8c0 at process virtual address 0x20017000 [ 3215.680173][T20616] Memory failure: 0x5a8c0: recovery action for clean LRU page: Recovered [ 3215.680232][T20616] Injecting memory failure for pfn 0x5a8c1 at process virtual address 0x20018000 [ 3215.680641][T20616] Memory failure: 0x5a8c1: recovery action for clean LRU page: Recovered [ 3215.680703][T20616] Injecting memory failure for pfn 0xa8288 at process virtual address 0x20019000 [ 3215.775112][T20616] Memory failure: 0xa8288: recovery action for clean LRU page: Recovered [ 3215.775590][T20616] Injecting memory failure for pfn 0x7adfb at process virtual address 0x2001a000 [ 3215.802849][T20616] Memory failure: 0x7adfb: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.803648][T20616] Memory failure: 0x7adfb: recovery action for dirty LRU page: Recovered [ 3215.803902][T20616] Injecting memory failure for pfn 0x7c5be at process virtual address 0x2001b000 [ 3215.804334][T20616] Memory failure: 0x7c5be: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.804539][T20616] Memory failure: 0x7c5be: recovery action for dirty LRU page: Recovered [ 3215.804635][T20616] Injecting memory failure for pfn 0xa828e at process virtual address 0x2001c000 [ 3215.805002][T20616] Memory failure: 0xa828e: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.805201][T20616] Memory failure: 0xa828e: recovery action for dirty LRU page: Recovered [ 3215.805306][T20616] Injecting memory failure for pfn 0xa8284 at process virtual address 0x2001d000 [ 3215.805698][T20616] Memory failure: 0xa8284: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.805987][T20616] Memory failure: 0xa8284: recovery action for dirty LRU page: Recovered [ 3215.806087][T20616] Injecting memory failure for pfn 0x7e542 at process virtual address 0x2001e000 [ 3215.806453][T20616] Memory failure: 0x7e542: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.806697][T20616] Memory failure: 0x7e542: recovery action for dirty LRU page: Recovered [ 3215.806799][T20616] Injecting memory failure for pfn 0x9d778 at process virtual address 0x2001f000 [ 3215.807156][T20616] Memory failure: 0x9d778: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.807363][T20616] Memory failure: 0x9d778: recovery action for dirty LRU page: Recovered [ 3215.807461][T20616] Injecting memory failure for pfn 0xa515f at process virtual address 0x20020000 [ 3215.807809][T20616] Memory failure: 0xa515f: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.808008][T20616] Memory failure: 0xa515f: recovery action for dirty LRU page: Recovered [ 3215.808104][T20616] Injecting memory failure for pfn 0x5bc65 at process virtual address 0x20021000 [ 3215.808464][T20616] Memory failure: 0x5bc65: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.808680][T20616] Memory failure: 0x5bc65: recovery action for dirty LRU page: Recovered [ 3215.808905][T20616] Injecting memory failure for pfn 0x5bc66 at process virtual address 0x20022000 [ 3215.809288][T20616] Memory failure: 0x5bc66: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.809547][T20616] Memory failure: 0x5bc66: recovery action for dirty LRU page: Recovered [ 3215.809700][T20616] Injecting memory failure for pfn 0x5bc67 at process virtual address 0x20023000 [ 3215.810096][T20616] Memory failure: 0x5bc67: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.810328][T20616] Memory failure: 0x5bc67: recovery action for dirty LRU page: Recovered [ 3215.810427][T20616] Injecting memory failure for pfn 0x53c69 at process virtual address 0x20024000 [ 3215.851402][T20616] Memory failure: 0x53c69: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.853277][T20616] Memory failure: 0x53c69: recovery action for dirty LRU page: Recovered [ 3215.854889][T20616] Injecting memory failure for pfn 0x4aedf at process virtual address 0x20025000 [ 3215.857211][T20616] Memory failure: 0x4aedf: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.859394][T20616] Memory failure: 0x4aedf: recovery action for dirty LRU page: Recovered [ 3215.861689][T20616] Injecting memory failure for pfn 0x7adf5 at process virtual address 0x20026000 [ 3215.864042][T20616] Memory failure: 0x7adf5: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.865957][T20616] Memory failure: 0x7adf5: recovery action for dirty LRU page: Recovered [ 3215.867481][T20616] Injecting memory failure for pfn 0x7adf4 at process virtual address 0x20027000 [ 3215.869684][T20616] Memory failure: 0x7adf4: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.872418][T20616] Memory failure: 0x7adf4: recovery action for dirty LRU page: Recovered [ 3215.874335][T20616] Injecting memory failure for pfn 0x7adf3 at process virtual address 0x20028000 [ 3215.876664][T20616] Memory failure: 0x7adf3: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.879006][T20616] Memory failure: 0x7adf3: recovery action for dirty LRU page: Recovered [ 3215.880702][T20616] Injecting memory failure for pfn 0x7adf1 at process virtual address 0x20029000 [ 3215.883281][T20616] Memory failure: 0x7adf1: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.885269][T20616] Memory failure: 0x7adf1: recovery action for dirty LRU page: Recovered [ 3215.886816][T20616] Injecting memory failure for pfn 0x7adf2 at process virtual address 0x2002a000 [ 3215.888918][T20616] Memory failure: 0x7adf2: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.890788][T20616] Memory failure: 0x7adf2: recovery action for dirty LRU page: Recovered [ 3215.892607][T20616] Injecting memory failure for pfn 0x7adf0 at process virtual address 0x2002b000 [ 3215.894669][T20616] Memory failure: 0x7adf0: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.896404][T20616] Memory failure: 0x7adf0: recovery action for dirty LRU page: Recovered [ 3215.897754][T20616] Injecting memory failure for pfn 0x7adef at process virtual address 0x2002c000 [ 3215.900038][T20616] Memory failure: 0x7adef: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.902180][T20616] Memory failure: 0x7adef: recovery action for dirty LRU page: Recovered [ 3215.903609][T20616] Injecting memory failure for pfn 0x7adee at process virtual address 0x2002d000 [ 3215.905692][T20616] Memory failure: 0x7adee: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.907596][T20616] Memory failure: 0x7adee: recovery action for dirty LRU page: Recovered [ 3215.909253][T20616] Injecting memory failure for pfn 0x9c33d at process virtual address 0x2002e000 [ 3215.911779][T20616] Memory failure: 0x9c33d: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.913617][T20616] Memory failure: 0x9c33d: recovery action for dirty LRU page: Recovered [ 3215.915064][T20616] Injecting memory failure for pfn 0x4ac7e at process virtual address 0x2002f000 [ 3215.917144][T20616] Memory failure: 0x4ac7e: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.918896][T20616] Memory failure: 0x4ac7e: recovery action for dirty LRU page: Recovered [ 3215.920183][T20616] Injecting memory failure for pfn 0x5c1f7 at process virtual address 0x20030000 [ 3215.922780][T20616] Memory failure: 0x5c1f7: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.924659][T20616] Memory failure: 0x5c1f7: recovery action for dirty LRU page: Recovered [ 3215.926009][T20616] Injecting memory failure for pfn 0xa5c7e at process virtual address 0x20031000 [ 3215.927925][T20616] Memory failure: 0xa5c7e: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.929682][T20616] Memory failure: 0xa5c7e: recovery action for dirty LRU page: Recovered [ 3215.933407][T20616] Injecting memory failure for pfn 0x5cbe3 at process virtual address 0x20032000 [ 3215.939236][T20616] Memory failure: 0x5cbe3: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.942409][T20616] Memory failure: 0x5cbe3: recovery action for dirty LRU page: Recovered [ 3215.943835][T20616] Injecting memory failure for pfn 0xa84ee at process virtual address 0x20033000 [ 3215.946119][T20616] Memory failure: 0xa84ee: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.948510][T20616] Memory failure: 0xa84ee: recovery action for dirty LRU page: Recovered [ 3215.950490][T20616] Injecting memory failure for pfn 0xa8281 at process virtual address 0x20034000 [ 3215.953213][T20616] Memory failure: 0xa8281: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.955094][T20616] Memory failure: 0xa8281: recovery action for dirty LRU page: Recovered [ 3215.956436][T20616] Injecting memory failure for pfn 0x4da35 at process virtual address 0x20035000 [ 3215.958956][T20616] Memory failure: 0x4da35: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.960843][T20616] Memory failure: 0x4da35: recovery action for dirty LRU page: Recovered [ 3215.963098][T20616] Injecting memory failure for pfn 0x7e288 at process virtual address 0x20036000 [ 3215.965154][T20616] Memory failure: 0x7e288: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.966874][T20616] Memory failure: 0x7e288: recovery action for dirty LRU page: Recovered [ 3215.968310][T20616] Injecting memory failure for pfn 0xa723a at process virtual address 0x20037000 [ 3215.970226][T20616] Memory failure: 0xa723a: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.972884][T20616] Memory failure: 0xa723a: recovery action for dirty LRU page: Recovered [ 3215.974485][T20616] Injecting memory failure for pfn 0x49a77 at process virtual address 0x20038000 [ 3215.976616][T20616] Memory failure: 0x49a77: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.978359][T20616] Memory failure: 0x49a77: recovery action for dirty LRU page: Recovered [ 3215.979700][T20616] Injecting memory failure for pfn 0x56964 at process virtual address 0x20039000 [ 3215.982342][T20616] Memory failure: 0x56964: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.984320][T20616] Memory failure: 0x56964: recovery action for dirty LRU page: Recovered [ 3215.985829][T20616] Injecting memory failure for pfn 0x5b260 at process virtual address 0x2003a000 [ 3215.988069][T20616] Memory failure: 0x5b260: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.989943][T20616] Memory failure: 0x5b260: recovery action for dirty LRU page: Recovered [ 3215.992315][T20616] Injecting memory failure for pfn 0x7bea4 at process virtual address 0x2003b000 [ 3215.995793][T20616] Memory failure: 0x7bea4: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3215.997871][T20616] Memory failure: 0x7bea4: recovery action for dirty LRU page: Recovered [ 3215.999357][T20616] Injecting memory failure for pfn 0x7bea3 at process virtual address 0x2003c000 [ 3216.002141][T20616] Memory failure: 0x7bea3: Sending SIGBUS to syz.5.6041:20616 due to hardware memory corruption [ 3216.003878][T20616] Memory failure: 0x7bea3: recovery action for dirty LRU page: Recovered [ 3216.005274][T20616] Injecting memory failure for pfn 0x7bea2 at process virtual address 0x2003d000 [ 3216.008424][T20616] Memory failure: 0x7bea2: dirty LRU page still referenced by 1 users [ 3216.009869][T20616] Memory failure: 0x7bea2: recovery action for dirty LRU page: Failed [ 3218.423465][T20628] FAULT_INJECTION: forcing a failure. [ 3218.423465][T20628] name failslab, interval 1, probability 0, space 0, times 0 [ 3218.424543][T20628] CPU: 0 UID: 0 PID: 20628 Comm: syz.6.6047 Tainted: G W L syzkaller #0 PREEMPT [ 3218.424635][T20628] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3218.424656][T20628] Hardware name: linux,dummy-virt (DT) [ 3218.424678][T20628] Call trace: [ 3218.424696][T20628] show_stack+0x18/0x24 (C) [ 3218.424758][T20628] dump_stack_lvl+0x60/0x80 [ 3218.424798][T20628] dump_stack+0x18/0x24 [ 3218.424843][T20628] should_fail_ex+0x1e0/0x238 [ 3218.424884][T20628] should_failslab+0x54/0x80 [ 3218.424922][T20628] kmem_cache_alloc_noprof+0x54/0x458 [ 3218.424963][T20628] security_file_alloc+0x30/0x1a0 [ 3218.425003][T20628] init_file+0x3c/0x10c [ 3218.425044][T20628] alloc_empty_file+0x74/0x130 [ 3218.425079][T20628] dentry_open+0x28/0x80 [ 3218.425117][T20628] __arm64_sys_fsmount+0x294/0x420 [ 3218.425155][T20628] invoke_syscall+0x54/0x10c [ 3218.425192][T20628] el0_svc_common.constprop.0+0x40/0xe0 [ 3218.425229][T20628] do_el0_svc+0x1c/0x34 [ 3218.425264][T20628] el0_svc+0x38/0x1fc [ 3218.425307][T20628] el0t_64_sync_handler+0xa0/0xe4 [ 3218.425350][T20628] el0t_64_sync+0x1a4/0x1a8 [ 3223.158224][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 3223.160682][ T28] audit: type=1326 audit(3479.045:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.164832][ T28] audit: type=1326 audit(3479.045:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.165167][ T28] audit: type=1326 audit(3479.045:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.173284][ T28] audit: type=1326 audit(3479.065:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.173795][ T28] audit: type=1326 audit(3479.065:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.173997][ T28] audit: type=1326 audit(3479.065:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.183706][ T28] audit: type=1326 audit(3479.045:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.188243][ T28] audit: type=1326 audit(3479.075:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.193211][ T28] audit: type=1326 audit(3479.085:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3223.197201][ T28] audit: type=1326 audit(3479.085:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20677 comm="syz.5.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3226.048786][T20699] FAULT_INJECTION: forcing a failure. [ 3226.048786][T20699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3226.049094][T20699] CPU: 1 UID: 0 PID: 20699 Comm: syz.5.6077 Tainted: G W L syzkaller #0 PREEMPT [ 3226.049217][T20699] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3226.049255][T20699] Hardware name: linux,dummy-virt (DT) [ 3226.049348][T20699] Call trace: [ 3226.049436][T20699] show_stack+0x18/0x24 (C) [ 3226.049540][T20699] dump_stack_lvl+0x60/0x80 [ 3226.049611][T20699] dump_stack+0x18/0x24 [ 3226.049719][T20699] should_fail_ex+0x1e0/0x238 [ 3226.049831][T20699] should_fail+0x14/0x40 [ 3226.049932][T20699] should_fail_usercopy+0x1c/0x40 [ 3226.050052][T20699] put_timespec64+0x34/0xc0 [ 3226.050169][T20699] poll_select_finish+0x260/0x2a4 [ 3226.050263][T20699] __arm64_sys_pselect6+0x10c/0x1a8 [ 3226.050358][T20699] invoke_syscall+0x54/0x10c [ 3226.050464][T20699] el0_svc_common.constprop.0+0x40/0xe0 [ 3226.050537][T20699] do_el0_svc+0x1c/0x34 [ 3226.050632][T20699] el0_svc+0x38/0x1fc [ 3226.050739][T20699] el0t_64_sync_handler+0xa0/0xe4 [ 3226.050820][T20699] el0t_64_sync+0x1a4/0x1a8 [ 3228.222558][T20740] FAULT_INJECTION: forcing a failure. [ 3228.222558][T20740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3228.222905][T20740] CPU: 1 UID: 0 PID: 20740 Comm: syz.6.6097 Tainted: G W L syzkaller #0 PREEMPT [ 3228.223038][T20740] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3228.223081][T20740] Hardware name: linux,dummy-virt (DT) [ 3228.223124][T20740] Call trace: [ 3228.223159][T20740] show_stack+0x18/0x24 (C) [ 3228.223310][T20740] dump_stack_lvl+0x60/0x80 [ 3228.223456][T20740] dump_stack+0x18/0x24 [ 3228.223539][T20740] should_fail_ex+0x1e0/0x238 [ 3228.223638][T20740] should_fail+0x14/0x40 [ 3228.223740][T20740] should_fail_usercopy+0x1c/0x40 [ 3228.223823][T20740] __arm64_sys_openat2+0x64/0x1a0 [ 3228.223948][T20740] invoke_syscall+0x54/0x10c [ 3228.224033][T20740] el0_svc_common.constprop.0+0x40/0xe0 [ 3228.224108][T20740] do_el0_svc+0x1c/0x34 [ 3228.224213][T20740] el0_svc+0x38/0x1fc [ 3228.224308][T20740] el0t_64_sync_handler+0xa0/0xe4 [ 3228.224407][T20740] el0t_64_sync+0x1a4/0x1a8 [ 3230.970643][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 3230.972602][ T28] audit: type=1326 audit(3486.855:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.974760][ T28] audit: type=1326 audit(3486.865:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.980647][ T28] audit: type=1326 audit(3486.865:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.982033][ T28] audit: type=1326 audit(3486.865:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.984744][ T28] audit: type=1326 audit(3486.875:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.986791][ T28] audit: type=1326 audit(3486.875:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.988810][ T28] audit: type=1326 audit(3486.875:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.999299][ T28] audit: type=1326 audit(3486.885:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3230.999715][ T28] audit: type=1326 audit(3486.885:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3231.004152][ T28] audit: type=1326 audit(3486.885:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.6112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3232.390074][T20778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6114'. [ 3232.390579][T20778] bond0: option lp_interval: invalid value (18446744073709551612) [ 3232.390733][T20778] bond0: option lp_interval: allowed values 1 - 2147483647 [ 3234.233796][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6120'. [ 3235.052276][T20810] FAULT_INJECTION: forcing a failure. [ 3235.052276][T20810] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.052626][T20810] CPU: 1 UID: 0 PID: 20810 Comm: syz.5.6127 Tainted: G W L syzkaller #0 PREEMPT [ 3235.052741][T20810] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3235.052780][T20810] Hardware name: linux,dummy-virt (DT) [ 3235.052821][T20810] Call trace: [ 3235.052868][T20810] show_stack+0x18/0x24 (C) [ 3235.052981][T20810] dump_stack_lvl+0x60/0x80 [ 3235.053048][T20810] dump_stack+0x18/0x24 [ 3235.053118][T20810] should_fail_ex+0x1e0/0x238 [ 3235.053191][T20810] should_failslab+0x54/0x80 [ 3235.053298][T20810] kmem_cache_alloc_noprof+0x54/0x458 [ 3235.053471][T20810] inet_bind2_bucket_create+0x30/0xf4 [ 3235.053581][T20810] inet_csk_get_port+0x868/0xaa4 [ 3235.053704][T20810] __inet_bind+0x1d8/0x2c0 [ 3235.053810][T20810] inet_bind_sk+0xa0/0x120 [ 3235.054018][T20810] inet_bind+0x14/0x20 [ 3235.054102][T20810] __sys_bind+0xfc/0x12c [ 3235.054178][T20810] __arm64_sys_bind+0x1c/0x30 [ 3235.054245][T20810] invoke_syscall+0x54/0x10c [ 3235.054313][T20810] el0_svc_common.constprop.0+0x40/0xe0 [ 3235.054382][T20810] do_el0_svc+0x1c/0x34 [ 3235.054483][T20810] el0_svc+0x38/0x1fc [ 3235.054583][T20810] el0t_64_sync_handler+0xa0/0xe4 [ 3235.054709][T20810] el0t_64_sync+0x1a4/0x1a8 [ 3235.360078][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6133'. [ 3236.697140][T20846] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6144'. [ 3238.329503][T20868] FAULT_INJECTION: forcing a failure. [ 3238.329503][T20868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3238.330056][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.5.6154 Tainted: G W L syzkaller #0 PREEMPT [ 3238.330190][T20868] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3238.330231][T20868] Hardware name: linux,dummy-virt (DT) [ 3238.330271][T20868] Call trace: [ 3238.330306][T20868] show_stack+0x18/0x24 (C) [ 3238.330412][T20868] dump_stack_lvl+0x60/0x80 [ 3238.330534][T20868] dump_stack+0x18/0x24 [ 3238.330611][T20868] should_fail_ex+0x1e0/0x238 [ 3238.330723][T20868] should_fail_alloc_page+0x60/0x80 [ 3238.330826][T20868] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 3238.330974][T20868] alloc_pages_mpol+0x74/0x1b8 [ 3238.331050][T20868] alloc_frozen_pages_noprof+0x4c/0xd4 [ 3238.331143][T20868] alloc_pages_noprof+0x10/0x28 [ 3238.331216][T20868] timens_vdso_alloc_vvar_page+0x24/0x48 [ 3238.331295][T20868] copy_time_ns+0x6c/0x234 [ 3238.331419][T20868] create_new_namespaces+0x138/0x370 [ 3238.331512][T20868] unshare_nsproxy_namespaces+0x70/0xbc [ 3238.331593][T20868] ksys_unshare+0x1cc/0x3b8 [ 3238.331667][T20868] __arm64_sys_unshare+0x14/0x24 [ 3238.331765][T20868] invoke_syscall+0x54/0x10c [ 3238.331838][T20868] el0_svc_common.constprop.0+0x40/0xe0 [ 3238.331918][T20868] do_el0_svc+0x1c/0x34 [ 3238.332039][T20868] el0_svc+0x38/0x1fc [ 3238.332135][T20868] el0t_64_sync_handler+0xa0/0xe4 [ 3238.332211][T20868] el0t_64_sync+0x1a4/0x1a8 [ 3239.349239][T20880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3239.926253][T20890] FAULT_INJECTION: forcing a failure. [ 3239.926253][T20890] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.926683][T20890] CPU: 1 UID: 0 PID: 20890 Comm: syz.6.6165 Tainted: G W L syzkaller #0 PREEMPT [ 3239.926825][T20890] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3239.926894][T20890] Hardware name: linux,dummy-virt (DT) [ 3239.926937][T20890] Call trace: [ 3239.926973][T20890] show_stack+0x18/0x24 (C) [ 3239.927083][T20890] dump_stack_lvl+0x60/0x80 [ 3239.927279][T20890] dump_stack+0x18/0x24 [ 3239.927386][T20890] should_fail_ex+0x1e0/0x238 [ 3239.927503][T20890] should_failslab+0x54/0x80 [ 3239.927664][T20890] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3239.927752][T20890] alloc_inode+0xb0/0xdc [ 3239.927844][T20890] alloc_anon_inode+0x18/0xac [ 3239.927917][T20890] anon_inode_make_secure_inode+0x34/0xd0 [ 3239.928011][T20890] anon_inode_create_getfile+0x54/0x100 [ 3239.928086][T20890] io_uring_setup+0x740/0x7ec [ 3239.928170][T20890] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3239.928245][T20890] invoke_syscall+0x54/0x10c [ 3239.928355][T20890] el0_svc_common.constprop.0+0x40/0xe0 [ 3239.928435][T20890] do_el0_svc+0x1c/0x34 [ 3239.928503][T20890] el0_svc+0x38/0x1fc [ 3239.928585][T20890] el0t_64_sync_handler+0xa0/0xe4 [ 3239.928651][T20890] el0t_64_sync+0x1a4/0x1a8 [ 3240.277852][T20897] FAULT_INJECTION: forcing a failure. [ 3240.277852][T20897] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3240.278077][T20897] CPU: 1 UID: 0 PID: 20897 Comm: syz.5.6169 Tainted: G W L syzkaller #0 PREEMPT [ 3240.278145][T20897] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3240.278165][T20897] Hardware name: linux,dummy-virt (DT) [ 3240.278185][T20897] Call trace: [ 3240.278202][T20897] show_stack+0x18/0x24 (C) [ 3240.278257][T20897] dump_stack_lvl+0x60/0x80 [ 3240.278295][T20897] dump_stack+0x18/0x24 [ 3240.278333][T20897] should_fail_ex+0x1e0/0x238 [ 3240.278374][T20897] should_fail+0x14/0x40 [ 3240.278408][T20897] get_futex_key+0xdc/0x620 [ 3240.278490][T20897] futex_wake+0x68/0x240 [ 3240.278589][T20897] do_futex+0x178/0x210 [ 3240.278678][T20897] __arm64_sys_futex+0x100/0x1a0 [ 3240.278768][T20897] invoke_syscall+0x54/0x10c [ 3240.278865][T20897] el0_svc_common.constprop.0+0x40/0xe0 [ 3240.279038][T20897] do_el0_svc+0x1c/0x34 [ 3240.279111][T20897] el0_svc+0x38/0x1fc [ 3240.279223][T20897] el0t_64_sync_handler+0xa0/0xe4 [ 3240.279340][T20897] el0t_64_sync+0x1a4/0x1a8 [ 3240.317964][T20898] FAULT_INJECTION: forcing a failure. [ 3240.317964][T20898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3240.318443][T20898] CPU: 1 UID: 0 PID: 20898 Comm: syz.6.6168 Tainted: G W L syzkaller #0 PREEMPT [ 3240.318562][T20898] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3240.318598][T20898] Hardware name: linux,dummy-virt (DT) [ 3240.318642][T20898] Call trace: [ 3240.318675][T20898] show_stack+0x18/0x24 (C) [ 3240.318817][T20898] dump_stack_lvl+0x60/0x80 [ 3240.318905][T20898] dump_stack+0x18/0x24 [ 3240.318976][T20898] should_fail_ex+0x1e0/0x238 [ 3240.319048][T20898] should_fail_alloc_page+0x60/0x80 [ 3240.319126][T20898] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 3240.319172][T20898] alloc_pages_mpol+0x74/0x1b8 [ 3240.319208][T20898] folio_alloc_mpol_noprof+0x14/0x68 [ 3240.319244][T20898] shmem_alloc_folio+0xc0/0xe0 [ 3240.319284][T20898] shmem_alloc_and_add_folio+0x100/0x628 [ 3240.319324][T20898] shmem_get_folio_gfp+0x114/0x758 [ 3240.319391][T20898] shmem_fallocate+0x1e4/0x430 [ 3240.319432][T20898] vfs_fallocate+0x150/0x2e0 [ 3240.319482][T20898] __arm64_sys_fallocate+0x4c/0xb4 [ 3240.319567][T20898] invoke_syscall+0x54/0x10c [ 3240.319631][T20898] el0_svc_common.constprop.0+0x40/0xe0 [ 3240.319671][T20898] do_el0_svc+0x1c/0x34 [ 3240.319718][T20898] el0_svc+0x38/0x1fc [ 3240.319889][T20898] el0t_64_sync_handler+0xa0/0xe4 [ 3240.319990][T20898] el0t_64_sync+0x1a4/0x1a8 [ 3240.955736][T20910] FAULT_INJECTION: forcing a failure. [ 3240.955736][T20910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3240.955965][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.5.6175 Tainted: G W L syzkaller #0 PREEMPT [ 3240.956033][T20910] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3240.956053][T20910] Hardware name: linux,dummy-virt (DT) [ 3240.956074][T20910] Call trace: [ 3240.956091][T20910] show_stack+0x18/0x24 (C) [ 3240.956147][T20910] dump_stack_lvl+0x60/0x80 [ 3240.956186][T20910] dump_stack+0x18/0x24 [ 3240.956220][T20910] should_fail_ex+0x1e0/0x238 [ 3240.956258][T20910] should_fail+0x14/0x40 [ 3240.956292][T20910] should_fail_usercopy+0x1c/0x40 [ 3240.956335][T20910] _inline_copy_from_user+0x24/0xa8 [ 3240.956373][T20910] __arm64_sys_timer_create+0x54/0xc4 [ 3240.956408][T20910] invoke_syscall+0x54/0x10c [ 3240.956442][T20910] el0_svc_common.constprop.0+0x40/0xe0 [ 3240.956478][T20910] do_el0_svc+0x1c/0x34 [ 3240.956511][T20910] el0_svc+0x38/0x1fc [ 3240.956551][T20910] el0t_64_sync_handler+0xa0/0xe4 [ 3240.956588][T20910] el0t_64_sync+0x1a4/0x1a8 [ 3244.309963][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6200'. [ 3244.418987][T20965] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3244.886534][T20978] FAULT_INJECTION: forcing a failure. [ 3244.886534][T20978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3244.888720][T20978] CPU: 0 UID: 0 PID: 20978 Comm: syz.6.6206 Tainted: G W L syzkaller #0 PREEMPT [ 3244.888858][T20978] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3244.888897][T20978] Hardware name: linux,dummy-virt (DT) [ 3244.888935][T20978] Call trace: [ 3244.888966][T20978] show_stack+0x18/0x24 (C) [ 3244.889064][T20978] dump_stack_lvl+0x60/0x80 [ 3244.889134][T20978] dump_stack+0x18/0x24 [ 3244.889203][T20978] should_fail_ex+0x1e0/0x238 [ 3244.889279][T20978] should_fail+0x14/0x40 [ 3244.889353][T20978] should_fail_usercopy+0x1c/0x40 [ 3244.889484][T20978] _inline_copy_from_user+0x24/0xc0 [ 3244.889557][T20978] io_uring_setup+0x50/0x7ec [ 3244.889620][T20978] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3244.889690][T20978] invoke_syscall+0x54/0x10c [ 3244.889756][T20978] el0_svc_common.constprop.0+0x40/0xe0 [ 3244.889825][T20978] do_el0_svc+0x1c/0x34 [ 3244.889894][T20978] el0_svc+0x38/0x1fc [ 3244.889973][T20978] el0t_64_sync_handler+0xa0/0xe4 [ 3244.890041][T20978] el0t_64_sync+0x1a4/0x1a8 [ 3245.312926][T20988] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 3246.099044][T21003] FAULT_INJECTION: forcing a failure. [ 3246.099044][T21003] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3246.099377][T21003] CPU: 1 UID: 0 PID: 21003 Comm: syz.6.6219 Tainted: G W L syzkaller #0 PREEMPT [ 3246.099512][T21003] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3246.099663][T21003] Hardware name: linux,dummy-virt (DT) [ 3246.099688][T21003] Call trace: [ 3246.099774][T21003] show_stack+0x18/0x24 (C) [ 3246.099864][T21003] dump_stack_lvl+0x60/0x80 [ 3246.099917][T21003] dump_stack+0x18/0x24 [ 3246.099966][T21003] should_fail_ex+0x1e0/0x238 [ 3246.100026][T21003] should_fail+0x14/0x40 [ 3246.100073][T21003] get_futex_key+0xdc/0x620 [ 3246.100114][T21003] futex_wait_setup+0x54/0x240 [ 3246.100171][T21003] __futex_wait+0xd4/0x180 [ 3246.100209][T21003] futex_wait+0x88/0x110 [ 3246.100244][T21003] do_futex+0x1a0/0x210 [ 3246.100287][T21003] __arm64_sys_futex+0x100/0x1a0 [ 3246.100347][T21003] invoke_syscall+0x54/0x10c [ 3246.100393][T21003] el0_svc_common.constprop.0+0x40/0xe0 [ 3246.100446][T21003] do_el0_svc+0x1c/0x34 [ 3246.100492][T21003] el0_svc+0x38/0x1fc [ 3246.100545][T21003] el0t_64_sync_handler+0xa0/0xe4 [ 3246.100595][T21003] el0t_64_sync+0x1a4/0x1a8 [ 3248.538186][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6224'. [ 3249.497071][T21035] GUP no longer grows the stack in syz.5.6232 (21035): 20005000-20008000 (20004000) [ 3249.498106][T21035] CPU: 0 UID: 0 PID: 21035 Comm: syz.5.6232 Tainted: G W L syzkaller #0 PREEMPT [ 3249.498285][T21035] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3249.498335][T21035] Hardware name: linux,dummy-virt (DT) [ 3249.498382][T21035] Call trace: [ 3249.498403][T21035] show_stack+0x18/0x24 (C) [ 3249.498466][T21035] dump_stack_lvl+0x60/0x80 [ 3249.498505][T21035] dump_stack+0x18/0x24 [ 3249.498541][T21035] gup_vma_lookup+0xac/0xc0 [ 3249.498581][T21035] fixup_user_fault+0x64/0x1a0 [ 3249.498617][T21035] fault_in_user_writeable+0x40/0x64 [ 3249.498656][T21035] futex_lock_pi+0x330/0x3d4 [ 3249.498694][T21035] do_futex+0xf4/0x210 [ 3249.498735][T21035] __arm64_sys_futex+0x100/0x1a0 [ 3249.498804][T21035] invoke_syscall+0x54/0x10c [ 3249.498843][T21035] el0_svc_common.constprop.0+0x40/0xe0 [ 3249.498887][T21035] do_el0_svc+0x1c/0x34 [ 3249.498923][T21035] el0_svc+0x38/0x1fc [ 3249.498967][T21035] el0t_64_sync_handler+0xa0/0xe4 [ 3249.499006][T21035] el0t_64_sync+0x1a4/0x1a8 [ 3252.245918][T21047] FAULT_INJECTION: forcing a failure. [ 3252.245918][T21047] name failslab, interval 1, probability 0, space 0, times 0 [ 3252.246388][T21047] CPU: 1 UID: 0 PID: 21047 Comm: syz.6.6237 Tainted: G W L syzkaller #0 PREEMPT [ 3252.246517][T21047] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3252.246560][T21047] Hardware name: linux,dummy-virt (DT) [ 3252.246600][T21047] Call trace: [ 3252.246634][T21047] show_stack+0x18/0x24 (C) [ 3252.246747][T21047] dump_stack_lvl+0x60/0x80 [ 3252.246823][T21047] dump_stack+0x18/0x24 [ 3252.246896][T21047] should_fail_ex+0x1e0/0x238 [ 3252.246977][T21047] should_failslab+0x54/0x80 [ 3252.247054][T21047] __kvmalloc_node_noprof+0xc8/0x65c [ 3252.247138][T21047] io_alloc_cache_init+0x38/0x74 [ 3252.247240][T21047] io_rsrc_cache_init+0x28/0x60 [ 3252.247328][T21047] io_uring_setup+0x284/0x7ec [ 3252.247415][T21047] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3252.247508][T21047] invoke_syscall+0x54/0x10c [ 3252.247586][T21047] el0_svc_common.constprop.0+0x40/0xe0 [ 3252.247657][T21047] do_el0_svc+0x1c/0x34 [ 3252.247727][T21047] el0_svc+0x38/0x1fc [ 3252.247809][T21047] el0t_64_sync_handler+0xa0/0xe4 [ 3252.247886][T21047] el0t_64_sync+0x1a4/0x1a8 [ 3252.797902][T21063] netlink: 'syz.5.6236': attribute type 32 has an invalid length. [ 3252.798219][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6236'. [ 3252.868501][T21063] bond1: option coupled_control: invalid value (27) [ 3252.878313][T21063] bond1 (unregistering): Released all slaves [ 3253.520328][T21075] FAULT_INJECTION: forcing a failure. [ 3253.520328][T21075] name failslab, interval 1, probability 0, space 0, times 0 [ 3253.520673][T21075] CPU: 1 UID: 0 PID: 21075 Comm: syz.6.6248 Tainted: G W L syzkaller #0 PREEMPT [ 3253.520806][T21075] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3253.520851][T21075] Hardware name: linux,dummy-virt (DT) [ 3253.520894][T21075] Call trace: [ 3253.520927][T21075] show_stack+0x18/0x24 (C) [ 3253.521038][T21075] dump_stack_lvl+0x60/0x80 [ 3253.521129][T21075] dump_stack+0x18/0x24 [ 3253.521203][T21075] should_fail_ex+0x1e0/0x238 [ 3253.521284][T21075] should_failslab+0x54/0x80 [ 3253.521401][T21075] kmem_cache_alloc_noprof+0x54/0x458 [ 3253.522022][T21075] prepare_creds+0x24/0x33c [ 3253.522084][T21075] __sys_setfsgid+0x4c/0xf0 [ 3253.522147][T21075] __arm64_sys_setfsgid+0x14/0x20 [ 3253.522210][T21075] invoke_syscall+0x54/0x10c [ 3253.522273][T21075] el0_svc_common.constprop.0+0x40/0xe0 [ 3253.522347][T21075] do_el0_svc+0x1c/0x34 [ 3253.522410][T21075] el0_svc+0x38/0x1fc [ 3253.522484][T21075] el0t_64_sync_handler+0xa0/0xe4 [ 3253.522552][T21075] el0t_64_sync+0x1a4/0x1a8 [ 3254.002567][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 3254.003088][ T28] audit: type=1326 audit(3509.885:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3254.003403][ T28] audit: type=1326 audit(3509.895:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3254.013791][ T28] audit: type=1326 audit(3509.905:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3254.026348][ T28] audit: type=1326 audit(3509.905:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=188 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3254.026920][ T28] audit: type=1326 audit(3509.905:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3254.538656][ T28] audit: type=1326 audit(3510.425:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff99d5c22c code=0x7ffc0000 [ 3254.554848][ T28] audit: type=1326 audit(3510.445:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff99d5c22c code=0x7ffc0000 [ 3254.567069][ T28] audit: type=1326 audit(3510.455:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff99d5c22c code=0x7ffc0000 [ 3254.579139][ T28] audit: type=1326 audit(3510.465:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff99d5c22c code=0x7ffc0000 [ 3254.591391][ T28] audit: type=1326 audit(3510.475:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21084 comm="syz.6.6253" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff99d5c22c code=0x7ffc0000 [ 3255.590793][T21097] FAULT_INJECTION: forcing a failure. [ 3255.590793][T21097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3255.591929][T21097] CPU: 0 UID: 0 PID: 21097 Comm: syz.5.6259 Tainted: G W L syzkaller #0 PREEMPT [ 3255.592055][T21097] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3255.592091][T21097] Hardware name: linux,dummy-virt (DT) [ 3255.592127][T21097] Call trace: [ 3255.592157][T21097] show_stack+0x18/0x24 (C) [ 3255.592265][T21097] dump_stack_lvl+0x60/0x80 [ 3255.592344][T21097] dump_stack+0x18/0x24 [ 3255.592407][T21097] should_fail_ex+0x1e0/0x238 [ 3255.592474][T21097] should_fail+0x14/0x40 [ 3255.592536][T21097] get_futex_key+0xdc/0x620 [ 3255.592600][T21097] futex_wake+0x68/0x240 [ 3255.592664][T21097] do_futex+0x178/0x210 [ 3255.592725][T21097] __arm64_sys_futex+0x100/0x1a0 [ 3255.592788][T21097] invoke_syscall+0x54/0x10c [ 3255.592852][T21097] el0_svc_common.constprop.0+0x40/0xe0 [ 3255.592916][T21097] do_el0_svc+0x1c/0x34 [ 3255.592976][T21097] el0_svc+0x38/0x1fc [ 3255.593047][T21097] el0t_64_sync_handler+0xa0/0xe4 [ 3255.593115][T21097] el0t_64_sync+0x1a4/0x1a8 [ 3258.107881][T21139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3258.163913][T21139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3258.216817][T21139] bond0 (unregistering): Released all slaves [ 3258.429849][T21142] FAULT_INJECTION: forcing a failure. [ 3258.429849][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 3258.432814][T21142] CPU: 1 UID: 0 PID: 21142 Comm: syz.5.6278 Tainted: G W L syzkaller #0 PREEMPT [ 3258.433006][T21142] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3258.433086][T21142] Hardware name: linux,dummy-virt (DT) [ 3258.433146][T21142] Call trace: [ 3258.433182][T21142] show_stack+0x18/0x24 (C) [ 3258.433315][T21142] dump_stack_lvl+0x60/0x80 [ 3258.433417][T21142] dump_stack+0x18/0x24 [ 3258.433488][T21142] should_fail_ex+0x1e0/0x238 [ 3258.433563][T21142] should_failslab+0x54/0x80 [ 3258.433630][T21142] kmem_cache_alloc_noprof+0x54/0x458 [ 3258.433710][T21142] alloc_empty_file+0x60/0x130 [ 3258.433781][T21142] dentry_open+0x28/0x80 [ 3258.433871][T21142] __arm64_sys_fsmount+0x294/0x420 [ 3258.433945][T21142] invoke_syscall+0x54/0x10c [ 3258.434014][T21142] el0_svc_common.constprop.0+0x40/0xe0 [ 3258.434080][T21142] do_el0_svc+0x1c/0x34 [ 3258.434143][T21142] el0_svc+0x38/0x1fc [ 3258.434220][T21142] el0t_64_sync_handler+0xa0/0xe4 [ 3258.434329][T21142] el0t_64_sync+0x1a4/0x1a8 [ 3259.169525][T21164] FAULT_INJECTION: forcing a failure. [ 3259.169525][T21164] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3259.171755][T21164] CPU: 0 UID: 0 PID: 21164 Comm: syz.5.6289 Tainted: G W L syzkaller #0 PREEMPT [ 3259.171941][T21164] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3259.171980][T21164] Hardware name: linux,dummy-virt (DT) [ 3259.172017][T21164] Call trace: [ 3259.172049][T21164] show_stack+0x18/0x24 (C) [ 3259.172152][T21164] dump_stack_lvl+0x60/0x80 [ 3259.172221][T21164] dump_stack+0x18/0x24 [ 3259.172284][T21164] should_fail_ex+0x1e0/0x238 [ 3259.172363][T21164] should_fail+0x14/0x40 [ 3259.172425][T21164] get_futex_key+0xdc/0x620 [ 3259.172492][T21164] futex_wait_setup+0x54/0x240 [ 3259.172559][T21164] __futex_wait+0xd4/0x180 [ 3259.172625][T21164] futex_wait+0x88/0x110 [ 3259.172687][T21164] do_futex+0x1a0/0x210 [ 3259.172752][T21164] __arm64_sys_futex+0x100/0x1a0 [ 3259.172816][T21164] invoke_syscall+0x54/0x10c [ 3259.172888][T21164] el0_svc_common.constprop.0+0x40/0xe0 [ 3259.172958][T21164] do_el0_svc+0x1c/0x34 [ 3259.173023][T21164] el0_svc+0x38/0x1fc [ 3259.173100][T21164] el0t_64_sync_handler+0xa0/0xe4 [ 3259.173173][T21164] el0t_64_sync+0x1a4/0x1a8 [ 3259.272513][T21166] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 3259.969652][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 3259.975774][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3259.976601][ T28] audit: type=1326 audit(3515.855:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3259.976819][ T28] audit: type=1326 audit(3515.865:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3259.982338][ T28] audit: type=1326 audit(3515.875:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3259.982593][ T28] audit: type=1326 audit(3515.875:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3259.995668][ T28] audit: type=1326 audit(3515.875:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3260.116155][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3260.222630][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3260.331911][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3260.418651][ T28] audit: type=1326 audit(3516.305:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3260.435546][ T28] audit: type=1326 audit(3516.325:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3260.438794][ T28] audit: type=1326 audit(3516.325:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3260.880263][ T28] audit: type=1326 audit(3516.755:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3260.880791][ T28] audit: type=1326 audit(3516.755:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21177 comm="syz.5.6296" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93579368 code=0x7ffc0000 [ 3261.063032][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3261.107019][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3261.140473][ T53] bond0 (unregistering): Released all slaves [ 3261.175856][ T53] bond1 (unregistering): Released all slaves [ 3261.377281][ T53] hsr_slave_0: left promiscuous mode [ 3261.380484][ T53] hsr_slave_1: left promiscuous mode [ 3261.424448][ T53] veth1_macvtap: left promiscuous mode [ 3261.424883][ T53] veth0_macvtap: left promiscuous mode [ 3261.425224][ T53] veth1_vlan: left promiscuous mode [ 3261.425526][ T53] veth0_vlan: left promiscuous mode [ 3264.375356][T21205] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 3264.375799][T21205] device-mapper: ioctl: error adding target to table [ 3264.622132][ T3220] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3265.691378][ T3220] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3266.270770][ T3220] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3267.282051][ T3220] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3274.527228][T21325] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6334'. [ 3274.530450][T21325] gretap0: entered promiscuous mode [ 3274.561914][T21325] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6334'. [ 3274.562755][T21325] 0ªî{X¹¦: renamed from gretap0 [ 3274.570531][T21325] 0ªî{X¹¦: left promiscuous mode [ 3274.574522][T21325] 0ªî{X¹¦: entered allmulticast mode [ 3274.593231][T21325] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 3280.503054][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3280.505199][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3280.524926][T21386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3280.527108][T21386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3281.614714][T21392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3281.617895][T21392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3286.109240][T21414] FAULT_INJECTION: forcing a failure. [ 3286.109240][T21414] name failslab, interval 1, probability 0, space 0, times 0 [ 3286.112652][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.5.6360 Tainted: G W L syzkaller #0 PREEMPT [ 3286.112826][T21414] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3286.112867][T21414] Hardware name: linux,dummy-virt (DT) [ 3286.112925][T21414] Call trace: [ 3286.112962][T21414] show_stack+0x18/0x24 (C) [ 3286.113070][T21414] dump_stack_lvl+0x60/0x80 [ 3286.113145][T21414] dump_stack+0x18/0x24 [ 3286.113218][T21414] should_fail_ex+0x1e0/0x238 [ 3286.113295][T21414] should_failslab+0x54/0x80 [ 3286.113412][T21414] kmem_cache_alloc_noprof+0x54/0x458 [ 3286.113490][T21414] __kernfs_new_node+0x70/0x254 [ 3286.113569][T21414] kernfs_new_node+0x88/0xa4 [ 3286.113644][T21414] __kernfs_create_file+0x30/0xfc [ 3286.113712][T21414] cgroup_addrm_files+0x140/0x2e0 [ 3286.113782][T21414] css_populate_dir+0x6c/0x1e0 [ 3286.113849][T21414] cgroup_apply_control_enable+0x100/0x32c [ 3286.113931][T21414] cgroup_mkdir+0x114/0x520 [ 3286.114003][T21414] kernfs_iop_mkdir+0x6c/0xc0 [ 3286.114076][T21414] vfs_mkdir+0xc4/0x210 [ 3286.114145][T21414] filename_mkdirat+0x1dc/0x218 [ 3286.114221][T21414] __arm64_sys_mkdirat+0x40/0x64 [ 3286.114286][T21414] invoke_syscall+0x54/0x10c [ 3286.114363][T21414] el0_svc_common.constprop.0+0x40/0xe0 [ 3286.114435][T21414] do_el0_svc+0x1c/0x34 [ 3286.114504][T21414] el0_svc+0x38/0x1fc [ 3286.114589][T21414] el0t_64_sync_handler+0xa0/0xe4 [ 3286.114664][T21414] el0t_64_sync+0x1a4/0x1a8 [ 3286.130604][T21414] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 3286.229781][T21416] FAULT_INJECTION: forcing a failure. [ 3286.229781][T21416] name failslab, interval 1, probability 0, space 0, times 0 [ 3286.234471][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.5.6361 Tainted: G W L syzkaller #0 PREEMPT [ 3286.234651][T21416] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3286.234690][T21416] Hardware name: linux,dummy-virt (DT) [ 3286.234731][T21416] Call trace: [ 3286.234766][T21416] show_stack+0x18/0x24 (C) [ 3286.234891][T21416] dump_stack_lvl+0x60/0x80 [ 3286.234971][T21416] dump_stack+0x18/0x24 [ 3286.235047][T21416] should_fail_ex+0x1e0/0x238 [ 3286.235128][T21416] should_failslab+0x54/0x80 [ 3286.235205][T21416] __kmalloc_cache_noprof+0x58/0x470 [ 3286.235324][T21416] ioc_cpd_alloc+0x44/0x78 [ 3286.235412][T21416] blkcg_css_alloc+0xe0/0x210 [ 3286.235489][T21416] cgroup_apply_control_enable+0x14c/0x32c [ 3286.235570][T21416] cgroup_mkdir+0x114/0x520 [ 3286.235649][T21416] kernfs_iop_mkdir+0x6c/0xc0 [ 3286.235731][T21416] vfs_mkdir+0xc4/0x210 [ 3286.235805][T21416] filename_mkdirat+0x1dc/0x218 [ 3286.235899][T21416] __arm64_sys_mkdirat+0x40/0x64 [ 3286.235981][T21416] invoke_syscall+0x54/0x10c [ 3286.236058][T21416] el0_svc_common.constprop.0+0x40/0xe0 [ 3286.236131][T21416] do_el0_svc+0x1c/0x34 [ 3286.236202][T21416] el0_svc+0x38/0x1fc [ 3286.236283][T21416] el0t_64_sync_handler+0xa0/0xe4 [ 3286.236357][T21416] el0t_64_sync+0x1a4/0x1a8 [ 3286.419472][T21420] Invalid input. Must be >= 4608 [ 3287.657102][T21433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3287.658868][T21433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3290.526832][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3290.532290][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3290.657769][T21447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3290.660662][T21447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3291.040382][T21455] FAULT_INJECTION: forcing a failure. [ 3291.040382][T21455] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.043684][T21455] CPU: 1 UID: 0 PID: 21455 Comm: syz.5.6379 Tainted: G W L syzkaller #0 PREEMPT [ 3291.043849][T21455] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3291.043892][T21455] Hardware name: linux,dummy-virt (DT) [ 3291.043936][T21455] Call trace: [ 3291.044000][T21455] show_stack+0x18/0x24 (C) [ 3291.044112][T21455] dump_stack_lvl+0x60/0x80 [ 3291.044196][T21455] dump_stack+0x18/0x24 [ 3291.044268][T21455] should_fail_ex+0x1e0/0x238 [ 3291.044349][T21455] should_failslab+0x54/0x80 [ 3291.044427][T21455] kmem_cache_alloc_noprof+0x54/0x458 [ 3291.044510][T21455] __kernfs_new_node+0x70/0x254 [ 3291.044604][T21455] kernfs_new_node+0x88/0xa4 [ 3291.044685][T21455] kernfs_create_link+0xc0/0x100 [ 3291.044759][T21455] sysfs_do_create_link_sd+0x6c/0x100 [ 3291.044836][T21455] sysfs_create_link+0x20/0x40 [ 3291.044910][T21455] module_add_driver+0x40/0x180 [ 3291.044999][T21455] bus_add_driver+0xf8/0x208 [ 3291.045076][T21455] driver_register+0x68/0x130 [ 3291.045150][T21455] usb_gadget_register_driver_owner+0x54/0xfc [ 3291.045256][T21455] raw_ioctl+0x728/0xd38 [ 3291.045339][T21455] __arm64_sys_ioctl+0xa8/0x100 [ 3291.045442][T21455] invoke_syscall+0x54/0x10c [ 3291.045521][T21455] el0_svc_common.constprop.0+0x40/0xe0 [ 3291.045590][T21455] do_el0_svc+0x1c/0x34 [ 3291.045652][T21455] el0_svc+0x38/0x1fc [ 3291.045736][T21455] el0t_64_sync_handler+0xa0/0xe4 [ 3291.045810][T21455] el0t_64_sync+0x1a4/0x1a8 [ 3291.063614][T21455] bus_add_driver: failed to create module links for raw-gadget.0 [ 3291.065597][T21455] UDC core: USB Raw Gadget: driver registration failed: -12 [ 3291.067196][T21455] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 3291.933696][T21471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3292.489783][T21479] null_blk: rnullb0: using native zone append [ 3292.569297][T21479] null_blk: disk rnullb0 created [ 3293.795789][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3293.797252][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3294.054593][T21495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3294.056391][T21495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3297.069066][T21506] nbd: must specify a size in bytes for the device [ 3297.337785][T21515] xt_hashlimit: size too large, truncated to 1048576 [ 3298.845881][T21548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3299.060277][T21557] random: crng reseeded on system resumption [ 3299.283292][T21563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.287111][T21563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.445201][T21567] bond0: (slave bond_slave_0): Releasing backup interface [ 3299.511428][T21567] bond0: (slave bond_slave_1): Releasing backup interface [ 3299.573656][T21567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3300.018590][T21582] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6427'. [ 3300.183927][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6430'. [ 3300.220282][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6430'. [ 3300.241918][T18584] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3300.242403][T18584] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3300.242532][T18584] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3300.242679][T18584] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3300.595597][T21597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6434'. [ 3301.828776][T21617] netlink: 'syz.6.6440': attribute type 2 has an invalid length. [ 3302.205996][T21627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3302.208740][T21627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3302.514636][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3302.516451][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3302.770364][T21655] binder: tried to use weak ref as strong ref [ 3302.770765][T21655] binder: 21654:21655 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3305.340730][T21689] random: crng reseeded on system resumption [ 3305.376153][T21690] binder_alloc: binder_alloc_mmap_handler: 21688 20ffe000-21000000 already mapped failed -16 [ 3305.658713][T21700] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6474'. [ 3306.209451][T21715] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6481'. [ 3306.212311][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6481'. [ 3306.214104][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6481'. [ 3307.197082][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6498'. [ 3307.832000][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6504'. [ 3311.512832][T21788] device-mapper: table: 248:2: integrity: Device lookup failed (-ENXIO) [ 3311.513193][T21788] device-mapper: ioctl: error adding target to table [ 3312.135922][T21797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3312.759355][T21810] loop0: detected capacity change from 0 to 3 [ 3313.343902][T21822] bonding: bond1 is being created... [ 3313.452774][T21822] bond1: (slave dummy0): making interface the new active one [ 3313.457741][T21822] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 3313.475825][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6527'. [ 3314.686152][T21831] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6527'. [ 3314.701469][T21825] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6527'. [ 3314.704557][T21830] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6527'. [ 3315.363719][T21836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3315.540087][T21840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.552496][T21840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3315.606116][T21837] syz.5.6532: attempt to access beyond end of device [ 3315.606116][T21837] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 3315.664770][T21837] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 3315.665997][T21837] device-mapper: ioctl: error adding target to table [ 3315.908856][T21854] netlink: 'syz.6.6536': attribute type 4 has an invalid length. [ 3316.510346][T21876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.517317][T21876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.830670][T21884] se_dev->se_dev_ptr already set for storage object [ 3318.009588][T21899] could not allocate digest TFM handle xcbc(serpent) [ 3318.059974][T21912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3318.066514][T21912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3318.625194][T21921] could not allocate digest TFM handle xcbc(serpent) [ 3318.719409][T21929] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3318.757133][T21929] syzkaller0: entered promiscuous mode [ 3318.758588][T21929] syzkaller0: entered allmulticast mode [ 3322.515089][T21962] FAULT_INJECTION: forcing a failure. [ 3322.515089][T21962] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.517293][T21962] CPU: 1 UID: 0 PID: 21962 Comm: syz.6.6575 Tainted: G W L syzkaller #0 PREEMPT [ 3322.517521][T21962] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3322.517564][T21962] Hardware name: linux,dummy-virt (DT) [ 3322.517606][T21962] Call trace: [ 3322.517644][T21962] show_stack+0x18/0x24 (C) [ 3322.517764][T21962] dump_stack_lvl+0x60/0x80 [ 3322.517844][T21962] dump_stack+0x18/0x24 [ 3322.517935][T21962] should_fail_ex+0x1e0/0x238 [ 3322.518017][T21962] should_failslab+0x54/0x80 [ 3322.518093][T21962] __kmalloc_cache_noprof+0x58/0x470 [ 3322.518174][T21962] alloc_fs_context+0x44/0x2f8 [ 3322.518258][T21962] fs_context_for_mount+0x20/0x2c [ 3322.518338][T21962] mq_init_ns+0x3c/0x210 [ 3322.518414][T21962] copy_ipcs+0x170/0x300 [ 3322.518484][T21962] create_new_namespaces+0xa8/0x370 [ 3322.518572][T21962] unshare_nsproxy_namespaces+0x70/0xbc [ 3322.518653][T21962] ksys_unshare+0x1cc/0x3b8 [ 3322.518733][T21962] __arm64_sys_unshare+0x14/0x24 [ 3322.518809][T21962] invoke_syscall+0x54/0x10c [ 3322.518894][T21962] el0_svc_common.constprop.0+0x40/0xe0 [ 3322.518971][T21962] do_el0_svc+0x1c/0x34 [ 3322.519042][T21962] el0_svc+0x38/0x1fc [ 3322.519127][T21962] el0t_64_sync_handler+0xa0/0xe4 [ 3322.519207][T21962] el0t_64_sync+0x1a4/0x1a8 [ 3322.758160][T21962] FAULT_INJECTION: forcing a failure. [ 3322.758160][T21962] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.760333][T21962] CPU: 1 UID: 0 PID: 21962 Comm: syz.6.6575 Tainted: G W L syzkaller #0 PREEMPT [ 3322.760497][T21962] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3322.760536][T21962] Hardware name: linux,dummy-virt (DT) [ 3322.760574][T21962] Call trace: [ 3322.760608][T21962] show_stack+0x18/0x24 (C) [ 3322.760722][T21962] dump_stack_lvl+0x60/0x80 [ 3322.760798][T21962] dump_stack+0x18/0x24 [ 3322.760913][T21962] should_fail_ex+0x1e0/0x238 [ 3322.760996][T21962] should_failslab+0x54/0x80 [ 3322.761066][T21962] __kmalloc_noprof+0xac/0x520 [ 3322.761144][T21962] __list_lru_init+0x4c/0x148 [ 3322.761222][T21962] sget_fc+0x294/0x790 [ 3322.761293][T21962] get_tree_nodev+0x2c/0xb8 [ 3322.761390][T21962] mqueue_get_tree+0x44/0x50 [ 3322.761477][T21962] vfs_get_tree+0x28/0x100 [ 3322.761551][T21962] fc_mount_longterm+0x18/0xa0 [ 3322.761629][T21962] mq_init_ns+0xb8/0x210 [ 3322.761695][T21962] copy_ipcs+0x170/0x300 [ 3322.761763][T21962] create_new_namespaces+0xa8/0x370 [ 3322.761843][T21962] unshare_nsproxy_namespaces+0x70/0xbc [ 3322.761935][T21962] ksys_unshare+0x1cc/0x3b8 [ 3322.762012][T21962] __arm64_sys_unshare+0x14/0x24 [ 3322.762084][T21962] invoke_syscall+0x54/0x10c [ 3322.762156][T21962] el0_svc_common.constprop.0+0x40/0xe0 [ 3322.762228][T21962] do_el0_svc+0x1c/0x34 [ 3322.762300][T21962] el0_svc+0x38/0x1fc [ 3322.762402][T21962] el0t_64_sync_handler+0xa0/0xe4 [ 3322.762486][T21962] el0t_64_sync+0x1a4/0x1a8 [ 3322.910198][T21965] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3325.269764][T22001] configfs-gadget.g1 gadget.0: HOST MAC fe:9a:ff:ee:66:d9 [ 3325.270186][T22001] configfs-gadget.g1 gadget.0: MAC aa:36:80:06:c7:0c [ 3325.883613][T22022] FAULT_INJECTION: forcing a failure. [ 3325.883613][T22022] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.884017][T22022] CPU: 0 UID: 0 PID: 22022 Comm: syz.5.6592 Tainted: G W L syzkaller #0 PREEMPT [ 3325.884137][T22022] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3325.884175][T22022] Hardware name: linux,dummy-virt (DT) [ 3325.884213][T22022] Call trace: [ 3325.884243][T22022] show_stack+0x18/0x24 (C) [ 3325.884460][T22022] dump_stack_lvl+0x60/0x80 [ 3325.884700][T22022] dump_stack+0x18/0x24 [ 3325.884855][T22022] should_fail_ex+0x1e0/0x238 [ 3325.884995][T22022] should_failslab+0x54/0x80 [ 3325.885229][T22022] kmem_cache_alloc_noprof+0x54/0x458 [ 3325.885420][T22022] __kernfs_new_node+0x70/0x254 [ 3325.885562][T22022] kernfs_new_node+0x88/0xa4 [ 3325.885729][T22022] __kernfs_create_file+0x30/0xfc [ 3325.885880][T22022] sysfs_add_file_mode_ns+0x74/0x130 [ 3325.885990][T22022] internal_create_group+0x2e0/0x440 [ 3325.886092][T22022] internal_create_groups+0x50/0xd8 [ 3325.886209][T22022] sysfs_create_groups+0x18/0x24 [ 3325.886307][T22022] netdev_queue_update_kobjects+0xf4/0x2d8 [ 3325.886427][T22022] netif_set_real_num_tx_queues+0x74/0x2f8 [ 3325.886557][T22022] tun_attach.isra.0+0x168/0x520 [ 3325.886685][T22022] __tun_chr_ioctl+0x498/0x16e0 [ 3325.886793][T22022] tun_chr_ioctl+0x14/0x5c [ 3325.886877][T22022] __arm64_sys_ioctl+0xa8/0x100 [ 3325.886960][T22022] invoke_syscall+0x54/0x10c [ 3325.887051][T22022] el0_svc_common.constprop.0+0x40/0xe0 [ 3325.887134][T22022] do_el0_svc+0x1c/0x34 [ 3325.887233][T22022] el0_svc+0x38/0x1fc [ 3325.887319][T22022] el0t_64_sync_handler+0xa0/0xe4 [ 3325.887430][T22022] el0t_64_sync+0x1a4/0x1a8 [ 3326.278377][T22029] syz.6.6595: attempt to access beyond end of device [ 3326.278377][T22029] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 3326.293608][T22029] device-mapper: table: 248:3: integrity: Error reading superblock (-EIO) [ 3326.295415][T22029] device-mapper: ioctl: error adding target to table [ 3326.455270][T22039] FAULT_INJECTION: forcing a failure. [ 3326.455270][T22039] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.456757][T22039] CPU: 0 UID: 0 PID: 22039 Comm: syz.6.6596 Tainted: G W L syzkaller #0 PREEMPT [ 3326.456853][T22039] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3326.456912][T22039] Hardware name: linux,dummy-virt (DT) [ 3326.456941][T22039] Call trace: [ 3326.456959][T22039] show_stack+0x18/0x24 (C) [ 3326.457022][T22039] dump_stack_lvl+0x60/0x80 [ 3326.457062][T22039] dump_stack+0x18/0x24 [ 3326.457098][T22039] should_fail_ex+0x1e0/0x238 [ 3326.457138][T22039] should_failslab+0x54/0x80 [ 3326.457176][T22039] __kmalloc_cache_noprof+0x58/0x470 [ 3326.457217][T22039] alloc_fs_context+0x44/0x2f8 [ 3326.457260][T22039] fs_context_for_mount+0x20/0x2c [ 3326.457300][T22039] mq_init_ns+0x3c/0x210 [ 3326.457335][T22039] copy_ipcs+0x170/0x300 [ 3326.457419][T22039] create_new_namespaces+0xa8/0x370 [ 3326.457494][T22039] unshare_nsproxy_namespaces+0x70/0xbc [ 3326.457540][T22039] ksys_unshare+0x1cc/0x3b8 [ 3326.457579][T22039] __arm64_sys_unshare+0x14/0x24 [ 3326.457616][T22039] invoke_syscall+0x54/0x10c [ 3326.457653][T22039] el0_svc_common.constprop.0+0x40/0xe0 [ 3326.457713][T22039] do_el0_svc+0x1c/0x34 [ 3326.457752][T22039] el0_svc+0x38/0x1fc [ 3326.457794][T22039] el0t_64_sync_handler+0xa0/0xe4 [ 3326.457876][T22039] el0t_64_sync+0x1a4/0x1a8 [ 3326.677134][T22039] FAULT_INJECTION: forcing a failure. [ 3326.677134][T22039] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.679183][T22039] CPU: 1 UID: 0 PID: 22039 Comm: syz.6.6596 Tainted: G W L syzkaller #0 PREEMPT [ 3326.679347][T22039] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3326.679390][T22039] Hardware name: linux,dummy-virt (DT) [ 3326.679429][T22039] Call trace: [ 3326.679463][T22039] show_stack+0x18/0x24 (C) [ 3326.679570][T22039] dump_stack_lvl+0x60/0x80 [ 3326.679640][T22039] dump_stack+0x18/0x24 [ 3326.679708][T22039] should_fail_ex+0x1e0/0x238 [ 3326.679785][T22039] should_failslab+0x54/0x80 [ 3326.679864][T22039] __kmalloc_cache_noprof+0x58/0x470 [ 3326.679942][T22039] shrinker_alloc+0x5c/0x428 [ 3326.680011][T22039] sget_fc+0x22c/0x790 [ 3326.680080][T22039] get_tree_nodev+0x2c/0xb8 [ 3326.680150][T22039] mqueue_get_tree+0x44/0x50 [ 3326.680222][T22039] vfs_get_tree+0x28/0x100 [ 3326.680286][T22039] fc_mount_longterm+0x18/0xa0 [ 3326.680364][T22039] mq_init_ns+0xb8/0x210 [ 3326.680433][T22039] copy_ipcs+0x170/0x300 [ 3326.680497][T22039] create_new_namespaces+0xa8/0x370 [ 3326.680576][T22039] unshare_nsproxy_namespaces+0x70/0xbc [ 3326.680652][T22039] ksys_unshare+0x1cc/0x3b8 [ 3326.680727][T22039] __arm64_sys_unshare+0x14/0x24 [ 3326.680797][T22039] invoke_syscall+0x54/0x10c [ 3326.680917][T22039] el0_svc_common.constprop.0+0x40/0xe0 [ 3326.681009][T22039] do_el0_svc+0x1c/0x34 [ 3326.681079][T22039] el0_svc+0x38/0x1fc [ 3326.681185][T22039] el0t_64_sync_handler+0xa0/0xe4 [ 3326.681267][T22039] el0t_64_sync+0x1a4/0x1a8 [ 3327.530423][T22047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3327.786904][T22051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3327.832449][T22051] md: array md0 already has disks! [ 3327.989156][T22051] md: could not open device unknown-block(0,0). [ 3327.989641][T22051] md: error, md_import_device() returned -6 [ 3328.033657][T22051] md: could not open device unknown-block(1,0). [ 3328.034056][T22051] md: error, md_import_device() returned -16 [ 3328.123775][T22055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3328.132572][T22055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3329.044311][T22069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3329.045862][T22069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3329.148320][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6610'. [ 3329.580491][T22079] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6608'. [ 3329.727776][T22081] xt_hashlimit: size too large, truncated to 1048576 [ 3329.728105][T22081] xt_hashlimit: max too large, truncated to 1048576 [ 3329.936357][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6614'. [ 3330.809707][T22090] netlink: 'syz.6.6618': attribute type 1 has an invalid length. [ 3330.810519][T22090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3330.810645][T22090] IPv6: NLM_F_CREATE should be set when creating new route [ 3332.368741][T22112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6627'. [ 3332.376221][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6627'. [ 3333.319261][T22130] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6636'. [ 3333.571431][T22136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3333.573135][T22136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3333.919953][T22142] FAULT_INJECTION: forcing a failure. [ 3333.919953][T22142] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.920319][T22142] CPU: 1 UID: 0 PID: 22142 Comm: syz.6.6642 Tainted: G W L syzkaller #0 PREEMPT [ 3333.920446][T22142] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3333.920486][T22142] Hardware name: linux,dummy-virt (DT) [ 3333.920529][T22142] Call trace: [ 3333.920566][T22142] show_stack+0x18/0x24 (C) [ 3333.920672][T22142] dump_stack_lvl+0x60/0x80 [ 3333.920771][T22142] dump_stack+0x18/0x24 [ 3333.920842][T22142] should_fail_ex+0x1e0/0x238 [ 3333.920976][T22142] should_failslab+0x54/0x80 [ 3333.921146][T22142] __kvmalloc_node_noprof+0xc8/0x65c [ 3333.921251][T22142] sort_subprogs_topo+0x70/0x418 [ 3333.921338][T22142] bpf_check+0x20e0/0x2a60 [ 3333.921458][T22142] bpf_prog_load+0x778/0xbec [ 3333.921547][T22142] __sys_bpf+0x8e4/0x1d1c [ 3333.921615][T22142] __arm64_sys_bpf+0x2c/0x40 [ 3333.921701][T22142] invoke_syscall+0x54/0x10c [ 3333.921770][T22142] el0_svc_common.constprop.0+0x40/0xe0 [ 3333.921870][T22142] do_el0_svc+0x1c/0x34 [ 3333.921959][T22142] el0_svc+0x38/0x1fc [ 3333.922064][T22142] el0t_64_sync_handler+0xa0/0xe4 [ 3333.922140][T22142] el0t_64_sync+0x1a4/0x1a8 [ 3334.207048][T22148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3334.208456][T22148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3334.570667][T22160] FAULT_INJECTION: forcing a failure. [ 3334.570667][T22160] name failslab, interval 1, probability 0, space 0, times 0 [ 3334.573504][T22160] CPU: 0 UID: 0 PID: 22160 Comm: syz.5.6651 Tainted: G W L syzkaller #0 PREEMPT [ 3334.573664][T22160] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3334.573705][T22160] Hardware name: linux,dummy-virt (DT) [ 3334.573746][T22160] Call trace: [ 3334.573779][T22160] show_stack+0x18/0x24 (C) [ 3334.573895][T22160] dump_stack_lvl+0x60/0x80 [ 3334.573972][T22160] dump_stack+0x18/0x24 [ 3334.574040][T22160] should_fail_ex+0x1e0/0x238 [ 3334.574116][T22160] should_failslab+0x54/0x80 [ 3334.574188][T22160] __kmalloc_cache_noprof+0x58/0x470 [ 3334.574263][T22160] igmp6_group_dropped+0x158/0x260 [ 3334.574348][T22160] __ipv6_dev_mc_dec+0x7c/0x138 [ 3334.574421][T22160] __ipv6_sock_mc_drop+0x8c/0x230 [ 3334.574490][T22160] ipv6_sock_mc_close+0x80/0xa0 [ 3334.574561][T22160] inet6_release+0x24/0x4c [ 3334.574637][T22160] __sock_release+0x40/0xb8 [ 3334.574714][T22160] sock_close+0x18/0x28 [ 3334.574775][T22160] __fput+0xcc/0x2f8 [ 3334.574852][T22160] fput_close_sync+0x40/0x100 [ 3334.574921][T22160] __arm64_sys_close+0x38/0x7c [ 3334.575000][T22160] invoke_syscall+0x54/0x10c [ 3334.575072][T22160] el0_svc_common.constprop.0+0x40/0xe0 [ 3334.575146][T22160] do_el0_svc+0x1c/0x34 [ 3334.575218][T22160] el0_svc+0x38/0x1fc [ 3334.575306][T22160] el0t_64_sync_handler+0xa0/0xe4 [ 3334.575384][T22160] el0t_64_sync+0x1a4/0x1a8 [ 3335.538064][T22186] FAULT_INJECTION: forcing a failure. [ 3335.538064][T22186] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.538404][T22186] CPU: 1 UID: 0 PID: 22186 Comm: syz.5.6662 Tainted: G W L syzkaller #0 PREEMPT [ 3335.538534][T22186] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3335.538575][T22186] Hardware name: linux,dummy-virt (DT) [ 3335.538617][T22186] Call trace: [ 3335.538652][T22186] show_stack+0x18/0x24 (C) [ 3335.538755][T22186] dump_stack_lvl+0x60/0x80 [ 3335.538847][T22186] dump_stack+0x18/0x24 [ 3335.538918][T22186] should_fail_ex+0x1e0/0x238 [ 3335.538992][T22186] should_failslab+0x54/0x80 [ 3335.539065][T22186] __kmalloc_noprof+0xac/0x520 [ 3335.539142][T22186] nsim_fib_event_nb+0x110/0x464 [ 3335.539222][T22186] atomic_notifier_call_chain+0x5c/0x88 [ 3335.539344][T22186] call_fib_notifiers+0x48/0x70 [ 3335.539434][T22186] call_fib6_notifiers+0x18/0x24 [ 3335.539533][T22186] fib6_del+0x244/0x420 [ 3335.539655][T22186] fib6_clean_node+0xf0/0x148 [ 3335.539764][T22186] fib6_walk_continue+0x10c/0x1b8 [ 3335.539872][T22186] fib6_walk+0x70/0xec [ 3335.539974][T22186] fib6_clean_tree+0x80/0xb8 [ 3335.540068][T22186] __fib6_clean_all+0x70/0xac [ 3335.540153][T22186] fib6_clean_all+0x1c/0x28 [ 3335.540264][T22186] rt6_disable_ip+0x108/0x420 [ 3335.540365][T22186] addrconf_ifdown.isra.0+0x6c/0x800 [ 3335.540437][T22186] addrconf_notify+0x164/0x814 [ 3335.540531][T22186] raw_notifier_call_chain+0x54/0x80 [ 3335.540617][T22186] call_netdevice_notifiers_info+0x58/0xa4 [ 3335.540720][T22186] __dev_notify_flags+0xec/0x160 [ 3335.540822][T22186] netif_change_flags+0x54/0x6c [ 3335.541022][T22186] do_setlink.isra.0+0x28c/0xf80 [ 3335.541135][T22186] rtnl_newlink+0x8f0/0xa30 [ 3335.541220][T22186] rtnetlink_rcv_msg+0x300/0x3a0 [ 3335.541329][T22186] netlink_rcv_skb+0x60/0x134 [ 3335.541438][T22186] rtnetlink_rcv+0x18/0x30 [ 3335.541506][T22186] netlink_unicast+0x328/0x3ac [ 3335.541600][T22186] netlink_sendmsg+0x194/0x410 [ 3335.541680][T22186] __sock_sendmsg+0x54/0x60 [ 3335.541752][T22186] ____sys_sendmsg+0x250/0x2a8 [ 3335.541833][T22186] ___sys_sendmsg+0xb0/0x108 [ 3335.541902][T22186] __sys_sendmsg+0x9c/0x100 [ 3335.541971][T22186] __arm64_sys_sendmsg+0x20/0x38 [ 3335.542041][T22186] invoke_syscall+0x54/0x10c [ 3335.542114][T22186] el0_svc_common.constprop.0+0x40/0xe0 [ 3335.542201][T22186] do_el0_svc+0x1c/0x34 [ 3335.542313][T22186] el0_svc+0x38/0x1fc [ 3335.542412][T22186] el0t_64_sync_handler+0xa0/0xe4 [ 3335.542506][T22186] el0t_64_sync+0x1a4/0x1a8 [ 3336.375042][T21986] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3336.375267][T21986] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3336.375440][T21986] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3336.375541][T21986] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3336.513936][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3336.515530][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3336.617035][T22192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3336.618897][T22192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3336.735825][T22196] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3337.181970][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6670'. [ 3337.184355][T22205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6670'. [ 3337.198450][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6670'. [ 3337.387861][T22209] random: crng reseeded on system resumption [ 3337.407496][T22209] FAULT_INJECTION: forcing a failure. [ 3337.407496][T22209] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.410241][T22209] CPU: 1 UID: 0 PID: 22209 Comm: syz.5.6672 Tainted: G W L syzkaller #0 PREEMPT [ 3337.410413][T22209] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3337.410452][T22209] Hardware name: linux,dummy-virt (DT) [ 3337.410492][T22209] Call trace: [ 3337.410528][T22209] show_stack+0x18/0x24 (C) [ 3337.410638][T22209] dump_stack_lvl+0x60/0x80 [ 3337.410711][T22209] dump_stack+0x18/0x24 [ 3337.410789][T22209] should_fail_ex+0x1e0/0x238 [ 3337.410927][T22209] should_failslab+0x54/0x80 [ 3337.411005][T22209] __kmalloc_cache_noprof+0x58/0x470 [ 3337.411081][T22209] memory_bm_create+0x100/0x8ec [ 3337.411202][T22209] create_basic_memory_bitmaps+0xd0/0x1dc [ 3337.411279][T22209] snapshot_open+0x104/0x130 [ 3337.411376][T22209] misc_open+0xcc/0x180 [ 3337.411452][T22209] chrdev_open+0xac/0x220 [ 3337.411518][T22209] do_dentry_open+0x128/0x4fc [ 3337.411634][T22209] vfs_open+0x2c/0xe8 [ 3337.411712][T22209] path_openat+0x5b4/0x960 [ 3337.411789][T22209] do_file_open+0xb0/0x168 [ 3337.411865][T22209] do_sys_openat2+0x84/0x104 [ 3337.411936][T22209] __arm64_sys_openat+0x64/0xc0 [ 3337.412009][T22209] invoke_syscall+0x54/0x10c [ 3337.412077][T22209] el0_svc_common.constprop.0+0x40/0xe0 [ 3337.412147][T22209] do_el0_svc+0x1c/0x34 [ 3337.412269][T22209] el0_svc+0x38/0x1fc [ 3337.412379][T22209] el0t_64_sync_handler+0xa0/0xe4 [ 3337.412457][T22209] el0t_64_sync+0x1a4/0x1a8 [ 3337.473232][T22211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3339.289594][T22239] FAULT_INJECTION: forcing a failure. [ 3339.289594][T22239] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.292755][T22239] CPU: 1 UID: 0 PID: 22239 Comm: syz.6.6685 Tainted: G W L syzkaller #0 PREEMPT [ 3339.292937][T22239] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3339.292979][T22239] Hardware name: linux,dummy-virt (DT) [ 3339.293022][T22239] Call trace: [ 3339.293058][T22239] show_stack+0x18/0x24 (C) [ 3339.293166][T22239] dump_stack_lvl+0x60/0x80 [ 3339.293242][T22239] dump_stack+0x18/0x24 [ 3339.293316][T22239] should_fail_ex+0x1e0/0x238 [ 3339.293431][T22239] should_failslab+0x54/0x80 [ 3339.293508][T22239] kmem_cache_alloc_noprof+0x54/0x458 [ 3339.293585][T22239] __kernfs_new_node+0x70/0x254 [ 3339.293671][T22239] kernfs_new_node+0x88/0xa4 [ 3339.293748][T22239] __kernfs_create_file+0x30/0xfc [ 3339.293815][T22239] cgroup_addrm_files+0x140/0x2e0 [ 3339.293896][T22239] css_populate_dir+0x110/0x1e0 [ 3339.293966][T22239] cgroup_mkdir+0x104/0x520 [ 3339.294040][T22239] kernfs_iop_mkdir+0x6c/0xc0 [ 3339.294113][T22239] vfs_mkdir+0xc4/0x210 [ 3339.294185][T22239] filename_mkdirat+0x1dc/0x218 [ 3339.294257][T22239] __arm64_sys_mkdirat+0x40/0x64 [ 3339.294331][T22239] invoke_syscall+0x54/0x10c [ 3339.294409][T22239] el0_svc_common.constprop.0+0x40/0xe0 [ 3339.294484][T22239] do_el0_svc+0x1c/0x34 [ 3339.294556][T22239] el0_svc+0x38/0x1fc [ 3339.294720][T22239] el0t_64_sync_handler+0xa0/0xe4 [ 3339.294827][T22239] el0t_64_sync+0x1a4/0x1a8 [ 3339.312559][T22239] cgroup: cgroup_addrm_files: failed to add tasks, err=-12 [ 3340.015892][T22244] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6687'. [ 3340.018119][T22243] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6687'. [ 3341.012172][T21986] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3341.013889][T21986] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.015444][T21986] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3341.016695][T21986] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.018520][T21986] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3341.019773][T21986] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.025347][T21986] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3341.026566][T21986] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3343.096994][T22321] FAULT_INJECTION: forcing a failure. [ 3343.096994][T22321] name failslab, interval 1, probability 0, space 0, times 0 [ 3343.097266][T22321] CPU: 0 UID: 0 PID: 22321 Comm: syz.6.6711 Tainted: G W L syzkaller #0 PREEMPT [ 3343.097415][T22321] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3343.097455][T22321] Hardware name: linux,dummy-virt (DT) [ 3343.097483][T22321] Call trace: [ 3343.097501][T22321] show_stack+0x18/0x24 (C) [ 3343.097623][T22321] dump_stack_lvl+0x60/0x80 [ 3343.097707][T22321] dump_stack+0x18/0x24 [ 3343.097818][T22321] should_fail_ex+0x1e0/0x238 [ 3343.097906][T22321] should_failslab+0x54/0x80 [ 3343.098041][T22321] __kmalloc_cache_noprof+0x58/0x470 [ 3343.098133][T22321] __rdma_create_id+0x48/0x1d0 [ 3343.098240][T22321] rdma_create_user_id+0x3c/0x68 [ 3343.098317][T22321] ucma_create_id+0xa8/0x22c [ 3343.098369][T22321] ucma_write+0xc0/0x174 [ 3343.098417][T22321] vfs_write+0xd4/0x36c [ 3343.098471][T22321] ksys_write+0xec/0x108 [ 3343.098521][T22321] __arm64_sys_write+0x18/0x24 [ 3343.098583][T22321] invoke_syscall+0x54/0x10c [ 3343.098630][T22321] el0_svc_common.constprop.0+0x40/0xe0 [ 3343.098676][T22321] do_el0_svc+0x1c/0x34 [ 3343.098733][T22321] el0_svc+0x38/0x1fc [ 3343.098794][T22321] el0t_64_sync_handler+0xa0/0xe4 [ 3343.098885][T22321] el0t_64_sync+0x1a4/0x1a8 [ 3343.198672][T22323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3343.202539][T22323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.674984][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6715'. [ 3343.920777][T22337] syzkaller0: entered promiscuous mode [ 3343.924211][T22337] syzkaller0: entered allmulticast mode [ 3349.478314][T22358] FAULT_INJECTION: forcing a failure. [ 3349.478314][T22358] name failslab, interval 1, probability 0, space 0, times 0 [ 3349.478604][T22358] CPU: 0 UID: 0 PID: 22358 Comm: syz.5.6724 Tainted: G W L syzkaller #0 PREEMPT [ 3349.478737][T22358] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3349.478780][T22358] Hardware name: linux,dummy-virt (DT) [ 3349.478834][T22358] Call trace: [ 3349.478871][T22358] show_stack+0x18/0x24 (C) [ 3349.478985][T22358] dump_stack_lvl+0x60/0x80 [ 3349.479087][T22358] dump_stack+0x18/0x24 [ 3349.479165][T22358] should_fail_ex+0x1e0/0x238 [ 3349.479248][T22358] should_failslab+0x54/0x80 [ 3349.479326][T22358] __kmalloc_cache_noprof+0x58/0x470 [ 3349.479467][T22358] alloc_fs_context+0x44/0x2f8 [ 3349.479559][T22358] fs_context_for_mount+0x20/0x2c [ 3349.479640][T22358] mq_init_ns+0x3c/0x210 [ 3349.479883][T22358] copy_ipcs+0x170/0x300 [ 3349.480008][T22358] create_new_namespaces+0xa8/0x370 [ 3349.480121][T22358] unshare_nsproxy_namespaces+0x70/0xbc [ 3349.480219][T22358] ksys_unshare+0x1cc/0x3b8 [ 3349.480328][T22358] __arm64_sys_unshare+0x14/0x24 [ 3349.480435][T22358] invoke_syscall+0x54/0x10c [ 3349.480533][T22358] el0_svc_common.constprop.0+0x40/0xe0 [ 3349.480609][T22358] do_el0_svc+0x1c/0x34 [ 3349.480675][T22358] el0_svc+0x38/0x1fc [ 3349.480804][T22358] el0t_64_sync_handler+0xa0/0xe4 [ 3349.480934][T22358] el0t_64_sync+0x1a4/0x1a8 [ 3349.725131][T22358] FAULT_INJECTION: forcing a failure. [ 3349.725131][T22358] name failslab, interval 1, probability 0, space 0, times 0 [ 3349.725719][T22358] CPU: 0 UID: 0 PID: 22358 Comm: syz.5.6724 Tainted: G W L syzkaller #0 PREEMPT [ 3349.725869][T22358] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3349.725910][T22358] Hardware name: linux,dummy-virt (DT) [ 3349.725951][T22358] Call trace: [ 3349.726029][T22358] show_stack+0x18/0x24 (C) [ 3349.726152][T22358] dump_stack_lvl+0x60/0x80 [ 3349.726265][T22358] dump_stack+0x18/0x24 [ 3349.726383][T22358] should_fail_ex+0x1e0/0x238 [ 3349.726469][T22358] should_failslab+0x54/0x80 [ 3349.726577][T22358] __kmalloc_cache_noprof+0x58/0x470 [ 3349.726658][T22358] shrinker_alloc+0x5c/0x428 [ 3349.726769][T22358] sget_fc+0x22c/0x790 [ 3349.726865][T22358] get_tree_nodev+0x2c/0xb8 [ 3349.726963][T22358] mqueue_get_tree+0x44/0x50 [ 3349.727076][T22358] vfs_get_tree+0x28/0x100 [ 3349.727163][T22358] fc_mount_longterm+0x18/0xa0 [ 3349.727282][T22358] mq_init_ns+0xb8/0x210 [ 3349.727357][T22358] copy_ipcs+0x170/0x300 [ 3349.727438][T22358] create_new_namespaces+0xa8/0x370 [ 3349.727586][T22358] unshare_nsproxy_namespaces+0x70/0xbc [ 3349.727687][T22358] ksys_unshare+0x1cc/0x3b8 [ 3349.727780][T22358] __arm64_sys_unshare+0x14/0x24 [ 3349.727865][T22358] invoke_syscall+0x54/0x10c [ 3349.727969][T22358] el0_svc_common.constprop.0+0x40/0xe0 [ 3349.728076][T22358] do_el0_svc+0x1c/0x34 [ 3349.728172][T22358] el0_svc+0x38/0x1fc [ 3349.728272][T22358] el0t_64_sync_handler+0xa0/0xe4 [ 3349.728379][T22358] el0t_64_sync+0x1a4/0x1a8 [ 3350.271746][T22367] binder: 22366:22367 tried to acquire reference to desc 0, got 1 instead [ 3350.279143][T22367] binder: 22366:22367 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 3350.285639][T22367] binder: 22367 RLIMIT_NICE not set [ 3350.288789][T22367] binder: undelivered transaction 10, put_user failed [ 3350.289649][T22367] binder: 22366:22367 ioctl c0306201 20000180 returned -14 [ 3350.294506][T22252] binder: undelivered TRANSACTION_COMPLETE [ 3350.400628][T22369] syzkaller0: entered promiscuous mode [ 3350.402337][T22369] syzkaller0: entered allmulticast mode [ 3352.769966][T22376] FAULT_INJECTION: forcing a failure. [ 3352.769966][T22376] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.770183][T22376] CPU: 1 UID: 0 PID: 22376 Comm: syz.6.6731 Tainted: G W L syzkaller #0 PREEMPT [ 3352.770259][T22376] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3352.770281][T22376] Hardware name: linux,dummy-virt (DT) [ 3352.770307][T22376] Call trace: [ 3352.770327][T22376] show_stack+0x18/0x24 (C) [ 3352.770446][T22376] dump_stack_lvl+0x60/0x80 [ 3352.770489][T22376] dump_stack+0x18/0x24 [ 3352.770649][T22376] should_fail_ex+0x1e0/0x238 [ 3352.770729][T22376] should_failslab+0x54/0x80 [ 3352.770825][T22376] __kvmalloc_node_noprof+0xc8/0x65c [ 3352.770954][T22376] vmemdup_user+0x34/0xc0 [ 3352.771028][T22376] path_setxattrat+0xbc/0x1e0 [ 3352.771140][T22376] __arm64_sys_lsetxattr+0x2c/0x40 [ 3352.771212][T22376] invoke_syscall+0x54/0x10c [ 3352.771251][T22376] el0_svc_common.constprop.0+0x40/0xe0 [ 3352.771287][T22376] do_el0_svc+0x1c/0x34 [ 3352.771348][T22376] el0_svc+0x38/0x1fc [ 3352.771427][T22376] el0t_64_sync_handler+0xa0/0xe4 [ 3352.771469][T22376] el0t_64_sync+0x1a4/0x1a8 [ 3354.052047][T22391] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 3357.153132][T22413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3357.155995][T22413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3359.218059][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3359.222999][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3359.514286][T22433] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6752'. [ 3359.684673][T22435] FAULT_INJECTION: forcing a failure. [ 3359.684673][T22435] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.685127][T22435] CPU: 1 UID: 0 PID: 22435 Comm: syz.5.6753 Tainted: G W L syzkaller #0 PREEMPT [ 3359.685258][T22435] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3359.685296][T22435] Hardware name: linux,dummy-virt (DT) [ 3359.685334][T22435] Call trace: [ 3359.685400][T22435] show_stack+0x18/0x24 (C) [ 3359.685506][T22435] dump_stack_lvl+0x60/0x80 [ 3359.685595][T22435] dump_stack+0x18/0x24 [ 3359.685684][T22435] should_fail_ex+0x1e0/0x238 [ 3359.685809][T22435] should_failslab+0x54/0x80 [ 3359.685902][T22435] kmem_cache_alloc_noprof+0x54/0x458 [ 3359.685995][T22435] security_inode_alloc+0x30/0x1a0 [ 3359.686122][T22435] inode_init_always_gfp+0x174/0x254 [ 3359.686196][T22435] alloc_inode+0x40/0xdc [ 3359.686341][T22435] new_inode+0x14/0x88 [ 3359.686443][T22435] hugetlbfs_get_inode+0xf0/0x254 [ 3359.686551][T22435] hugetlb_file_setup+0xc4/0x2b0 [ 3359.686642][T22435] ksys_mmap_pgoff+0xc8/0x1f8 [ 3359.686744][T22435] __arm64_sys_mmap+0x2c/0x40 [ 3359.686812][T22435] invoke_syscall+0x54/0x10c [ 3359.686880][T22435] el0_svc_common.constprop.0+0x40/0xe0 [ 3359.686966][T22435] do_el0_svc+0x1c/0x34 [ 3359.687035][T22435] el0_svc+0x38/0x1fc [ 3359.687138][T22435] el0t_64_sync_handler+0xa0/0xe4 [ 3359.687217][T22435] el0t_64_sync+0x1a4/0x1a8 [ 3361.910192][T22439] FAULT_INJECTION: forcing a failure. [ 3361.910192][T22439] name failslab, interval 1, probability 0, space 0, times 0 [ 3361.910425][T22439] CPU: 1 UID: 0 PID: 22439 Comm: syz.6.6755 Tainted: G W L syzkaller #0 PREEMPT [ 3361.910495][T22439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3361.910515][T22439] Hardware name: linux,dummy-virt (DT) [ 3361.910536][T22439] Call trace: [ 3361.910553][T22439] show_stack+0x18/0x24 (C) [ 3361.910643][T22439] dump_stack_lvl+0x60/0x80 [ 3361.910684][T22439] dump_stack+0x18/0x24 [ 3361.910720][T22439] should_fail_ex+0x1e0/0x238 [ 3361.910774][T22439] should_failslab+0x54/0x80 [ 3361.910831][T22439] __kmalloc_cache_noprof+0x58/0x470 [ 3361.910915][T22439] proc_self_get_link+0x58/0xe0 [ 3361.910994][T22439] pick_link+0x318/0x404 [ 3361.911098][T22439] step_into_slowpath+0x1cc/0x2e0 [ 3361.911153][T22439] link_path_walk+0x434/0x688 [ 3361.911213][T22439] path_openat+0x88/0x960 [ 3361.911265][T22439] do_file_open+0xb0/0x168 [ 3361.911314][T22439] do_sys_openat2+0x84/0x104 [ 3361.911370][T22439] __arm64_sys_openat+0x64/0xc0 [ 3361.911447][T22439] invoke_syscall+0x54/0x10c [ 3361.911490][T22439] el0_svc_common.constprop.0+0x40/0xe0 [ 3361.911528][T22439] do_el0_svc+0x1c/0x34 [ 3361.911581][T22439] el0_svc+0x38/0x1fc [ 3361.911628][T22439] el0t_64_sync_handler+0xa0/0xe4 [ 3361.911667][T22439] el0t_64_sync+0x1a4/0x1a8 [ 3362.152513][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6757'. [ 3368.319044][T22468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3368.320640][T22468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3368.994972][T22468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3369.003283][T22468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3369.259515][T22470] 0.flash: buffer write error (status timeout) [ 3374.598616][T22510] FAULT_INJECTION: forcing a failure. [ 3374.598616][T22510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3374.602218][T22510] CPU: 0 UID: 0 PID: 22510 Comm: syz.6.6780 Tainted: G W L syzkaller #0 PREEMPT [ 3374.602395][T22510] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3374.602436][T22510] Hardware name: linux,dummy-virt (DT) [ 3374.602477][T22510] Call trace: [ 3374.602511][T22510] show_stack+0x18/0x24 (C) [ 3374.602615][T22510] dump_stack_lvl+0x60/0x80 [ 3374.602686][T22510] dump_stack+0x18/0x24 [ 3374.602763][T22510] should_fail_ex+0x1e0/0x238 [ 3374.602840][T22510] should_fail_alloc_page+0x60/0x80 [ 3374.602967][T22510] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 3374.603045][T22510] alloc_pages_mpol+0x74/0x1b8 [ 3374.603116][T22510] folio_alloc_mpol_noprof+0x14/0x68 [ 3374.603190][T22510] vma_alloc_folio_noprof+0x80/0xcc [ 3374.603260][T22510] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 3374.603330][T22510] do_anonymous_page+0x2b0/0x9b8 [ 3374.603420][T22510] __handle_mm_fault+0xa5c/0xec0 [ 3374.603497][T22510] handle_mm_fault+0x98/0x338 [ 3374.603574][T22510] do_page_fault+0x378/0x77c [ 3374.603641][T22510] do_translation_fault+0x5c/0x6c [ 3374.603708][T22510] do_mem_abort+0x40/0x90 [ 3374.603775][T22510] el0_da+0x38/0xf0 [ 3374.603861][T22510] el0t_64_sync_handler+0xd0/0xe4 [ 3374.603938][T22510] el0t_64_sync+0x1a4/0x1a8 [ 3374.619974][T22510] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3374.639584][T22510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3374.649605][T22510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3375.042427][T22519] syzkaller0: left promiscuous mode [ 3375.043640][T22519] syzkaller0: left allmulticast mode [ 3375.593116][T22523] FAULT_INJECTION: forcing a failure. [ 3375.593116][T22523] name failslab, interval 1, probability 0, space 0, times 0 [ 3375.596044][T22523] CPU: 0 UID: 0 PID: 22523 Comm: syz.6.6785 Tainted: G W L syzkaller #0 PREEMPT [ 3375.596213][T22523] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3375.596256][T22523] Hardware name: linux,dummy-virt (DT) [ 3375.596301][T22523] Call trace: [ 3375.596337][T22523] show_stack+0x18/0x24 (C) [ 3375.596451][T22523] dump_stack_lvl+0x60/0x80 [ 3375.596527][T22523] dump_stack+0x18/0x24 [ 3375.596600][T22523] should_fail_ex+0x1e0/0x238 [ 3375.596679][T22523] should_failslab+0x54/0x80 [ 3375.596755][T22523] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3375.596838][T22523] __d_alloc+0x3c/0x280 [ 3375.596929][T22523] d_make_root+0x24/0x68 [ 3375.596999][T22523] mqueue_fill_super+0x6c/0x90 [ 3375.597081][T22523] get_tree_nodev+0x70/0xb8 [ 3375.597155][T22523] mqueue_get_tree+0x44/0x50 [ 3375.597233][T22523] vfs_get_tree+0x28/0x100 [ 3375.597304][T22523] fc_mount_longterm+0x18/0xa0 [ 3375.597410][T22523] mq_init_ns+0xb8/0x210 [ 3375.597483][T22523] copy_ipcs+0x170/0x300 [ 3375.597551][T22523] create_new_namespaces+0xa8/0x370 [ 3375.597637][T22523] unshare_nsproxy_namespaces+0x70/0xbc [ 3375.597718][T22523] ksys_unshare+0x1cc/0x3b8 [ 3375.597794][T22523] __arm64_sys_unshare+0x14/0x24 [ 3375.597870][T22523] invoke_syscall+0x54/0x10c [ 3375.597953][T22523] el0_svc_common.constprop.0+0x40/0xe0 [ 3375.598029][T22523] do_el0_svc+0x1c/0x34 [ 3375.598101][T22523] el0_svc+0x38/0x1fc [ 3375.598185][T22523] el0t_64_sync_handler+0xa0/0xe4 [ 3375.598264][T22523] el0t_64_sync+0x1a4/0x1a8 [ 3375.732542][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6786'. [ 3376.102920][T22527] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.6787'. [ 3376.370180][T22534] FAULT_INJECTION: forcing a failure. [ 3376.370180][T22534] name failslab, interval 1, probability 0, space 0, times 0 [ 3376.370593][T22534] CPU: 1 UID: 0 PID: 22534 Comm: syz.6.6790 Tainted: G W L syzkaller #0 PREEMPT [ 3376.370719][T22534] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3376.370759][T22534] Hardware name: linux,dummy-virt (DT) [ 3376.370798][T22534] Call trace: [ 3376.370880][T22534] show_stack+0x18/0x24 (C) [ 3376.371038][T22534] dump_stack_lvl+0x60/0x80 [ 3376.371111][T22534] dump_stack+0x18/0x24 [ 3376.371181][T22534] should_fail_ex+0x1e0/0x238 [ 3376.371255][T22534] should_failslab+0x54/0x80 [ 3376.371344][T22534] kmem_cache_alloc_noprof+0x54/0x458 [ 3376.371458][T22534] audit_log_start+0x23c/0x3d8 [ 3376.371561][T22534] audit_seccomp+0x38/0xb0 [ 3376.371638][T22534] __seccomp_filter+0x44c/0x660 [ 3376.371734][T22534] __seccomp_permit_syscall+0x8c/0xe4 [ 3376.371895][T22534] syscall_trace_enter+0xf4/0x11c [ 3376.371960][T22534] el0_svc_common.constprop.0+0xa4/0xe0 [ 3376.372022][T22534] do_el0_svc+0x1c/0x34 [ 3376.372100][T22534] el0_svc+0x38/0x1fc [ 3376.372179][T22534] el0t_64_sync_handler+0xa0/0xe4 [ 3376.372239][T22534] el0t_64_sync+0x1a4/0x1a8 [ 3376.373168][T22534] audit_log_lost: 3 callbacks suppressed [ 3376.373221][T22534] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 3376.373287][T22534] audit: out of memory in audit_log_start [ 3376.426442][ T28] audit: type=1326 audit(3632.315:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.427530][ T28] audit: type=1326 audit(3632.315:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.430173][ T28] audit: type=1326 audit(3632.315:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.430581][ T28] audit: type=1326 audit(3632.315:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.430681][ T28] audit: type=1326 audit(3632.315:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.430766][ T28] audit: type=1326 audit(3632.315:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.430842][ T28] audit: type=1326 audit(3632.315:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.442872][ T28] audit: type=1326 audit(3632.325:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22535 comm="syz.6.6791" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff99d79368 code=0x7ffc0000 [ 3376.499840][T22538] block2mtd: error: cannot open device /dev/ram0 [ 3376.559324][T22540] syzkaller0: entered promiscuous mode [ 3376.559577][T22540] syzkaller0: entered allmulticast mode [ 3379.068139][T22564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3379.069959][T22564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3382.826525][T22587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3382.828488][T22587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3383.384129][T22596] hub 1-0:1.0: Interface 0 is not authorized for usage [ 3383.388097][T22596] usbtest 1-0:1.0: Interface 0 is not authorized for usage [ 3384.017534][T22604] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6815'. [ 3384.389274][T22611] vmxnet3 0000:00:00.0: Failed to map bar0 [ 3384.394705][T22611] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 3384.504123][T22613] can0: slcan on ttyS3. [ 3384.575632][T22612] can0 (unregistered): slcan off ttyS3. [ 3384.654256][T22615] FAULT_INJECTION: forcing a failure. [ 3384.654256][T22615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3384.656218][T22615] CPU: 0 UID: 0 PID: 22615 Comm: syz.6.6818 Tainted: G W L syzkaller #0 PREEMPT [ 3384.656360][T22615] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3384.656401][T22615] Hardware name: linux,dummy-virt (DT) [ 3384.656445][T22615] Call trace: [ 3384.656480][T22615] show_stack+0x18/0x24 (C) [ 3384.656590][T22615] dump_stack_lvl+0x60/0x80 [ 3384.656665][T22615] dump_stack+0x18/0x24 [ 3384.656731][T22615] should_fail_ex+0x1e0/0x238 [ 3384.656816][T22615] should_fail_alloc_page+0x60/0x80 [ 3384.656892][T22615] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 3384.656969][T22615] alloc_pages_mpol+0x74/0x1b8 [ 3384.657033][T22615] folio_alloc_mpol_noprof+0x14/0x68 [ 3384.657096][T22615] shmem_alloc_folio+0xc0/0xe0 [ 3384.657166][T22615] shmem_alloc_and_add_folio+0x100/0x628 [ 3384.657235][T22615] shmem_get_folio_gfp+0x114/0x758 [ 3384.657302][T22615] shmem_fault+0x74/0x330 [ 3384.657401][T22615] __do_fault+0x3c/0x218 [ 3384.657486][T22615] do_fault+0x390/0x5e0 [ 3384.657552][T22615] __handle_mm_fault+0x3b8/0xec0 [ 3384.657618][T22615] handle_mm_fault+0x98/0x338 [ 3384.657687][T22615] __get_user_pages+0x3bc/0xc70 [ 3384.657765][T22615] populate_vma_page_range+0x88/0xe0 [ 3384.657854][T22615] __mm_populate+0xbc/0x180 [ 3384.657917][T22615] vm_mmap_pgoff+0x164/0x198 [ 3384.657979][T22615] ksys_mmap_pgoff+0x50/0x1f8 [ 3384.658046][T22615] __arm64_sys_mmap+0x2c/0x40 [ 3384.658112][T22615] invoke_syscall+0x54/0x10c [ 3384.658179][T22615] el0_svc_common.constprop.0+0x40/0xe0 [ 3384.658247][T22615] do_el0_svc+0x1c/0x34 [ 3384.658313][T22615] el0_svc+0x38/0x1fc [ 3384.658393][T22615] el0t_64_sync_handler+0xa0/0xe4 [ 3384.658472][T22615] el0t_64_sync+0x1a4/0x1a8 [ 3385.998601][T22619] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6820'. [ 3389.209812][T22635] input: syz1 as /devices/virtual/input/input101 [ 3389.617906][T22643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3389.619353][T22643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3393.988527][T22652] IPv6: sit1: Disabled Multicast RS [ 3393.994654][T22652] sit1: entered allmulticast mode [ 3394.005257][T22652] netlink: 'syz.6.6832': attribute type 4 has an invalid length. [ 3394.005662][T22652] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6832'. [ 3397.127614][T22685] FAULT_INJECTION: forcing a failure. [ 3397.127614][T22685] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.128101][T22685] CPU: 1 UID: 0 PID: 22685 Comm: syz.6.6842 Tainted: G W L syzkaller #0 PREEMPT [ 3397.128232][T22685] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3397.128271][T22685] Hardware name: linux,dummy-virt (DT) [ 3397.128312][T22685] Call trace: [ 3397.128345][T22685] show_stack+0x18/0x24 (C) [ 3397.128450][T22685] dump_stack_lvl+0x60/0x80 [ 3397.128549][T22685] dump_stack+0x18/0x24 [ 3397.128645][T22685] should_fail_ex+0x1e0/0x238 [ 3397.128754][T22685] should_failslab+0x54/0x80 [ 3397.128844][T22685] kmem_cache_alloc_noprof+0x54/0x458 [ 3397.128982][T22685] copy_process+0x764/0x18a8 [ 3397.129106][T22685] kernel_clone+0x88/0x394 [ 3397.129180][T22685] __do_sys_clone+0x74/0xb0 [ 3397.129265][T22685] __arm64_sys_clone+0x1c/0x28 [ 3397.129340][T22685] invoke_syscall+0x54/0x10c [ 3397.129486][T22685] el0_svc_common.constprop.0+0x40/0xe0 [ 3397.129589][T22685] do_el0_svc+0x1c/0x34 [ 3397.129748][T22685] el0_svc+0x38/0x1fc [ 3397.129832][T22685] el0t_64_sync_handler+0xa0/0xe4 [ 3397.129926][T22685] el0t_64_sync+0x1a4/0x1a8 [ 3397.253551][T22687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3397.256006][T22687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3397.422115][T22690] nvmet: adding nsid 1 to subsystem testsubsys [ 3397.441985][T22690] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 3397.442318][T22690] Mem abort info: [ 3397.447437][T22690] ESR = 0x0000000096000006 [ 3397.447577][T22690] EC = 0x25: DABT (current EL), IL = 32 bits [ 3397.450450][T22690] SET = 0, FnV = 0 [ 3397.450810][T22690] EA = 0, S1PTW = 0 [ 3397.453805][T22690] FSC = 0x06: level 2 translation fault [ 3397.454207][T22690] Data abort info: [ 3397.454308][T22690] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 3397.454384][T22690] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 3397.454449][T22690] GCS = 0, Overlay = 0, DirtyBit = 0 [ 3397.454622][T22690] user pgtable: 4k pages, 52-bit VAs, pgdp=0000000046978900 [ 3397.454707][T22690] [0000000000000000] pgd=080000006fedb403, p4d=080000006fccd403, pud=0800000046972403, pmd=0000000000000000 [ 3397.455403][T22690] Internal error: Oops: 0000000096000006 [#1] SMP [ 3397.458222][T22690] Modules linked in: [ 3397.458770][T22690] CPU: 1 UID: 0 PID: 22690 Comm: syz.6.6844 Tainted: G W L syzkaller #0 PREEMPT [ 3397.459397][T22690] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3397.459728][T22690] Hardware name: linux,dummy-virt (DT) [ 3397.460282][T22690] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3397.460740][T22690] pc : __pi_strlen+0x14/0x150 [ 3397.461304][T22690] lr : do_getname_kernel+0x20/0x12c [ 3397.461724][T22690] sp : ffff8000847e3b60 [ 3397.462007][T22690] x29: ffff8000847e3b60 x28: f9f000002fa84400 x27: 0000000000000000 [ 3397.462652][T22690] x26: 0000000000000000 x25: 0000000000000000 x24: fdf000000bc75a40 [ 3397.463214][T22690] x23: faf000001195ec00 x22: 0000000000000000 x21: 0000000000000000 [ 3397.463757][T22690] x20: 00000000fffffff1 x19: 0000000000020002 x18: 0000000000000000 [ 3397.464329][T22690] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000bc0 [ 3397.464839][T22690] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 3397.465484][T22690] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000078 [ 3397.466057][T22690] x8 : 0101010101010101 x7 : fdf000000bc75a48 x6 : f5f000000b5f7002 [ 3397.466586][T22690] x5 : f5f000000b5f7002 x4 : 0000000000000000 x3 : f9f000002fa84400 [ 3397.467163][T22690] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 3397.467831][T22690] Call trace: [ 3397.468166][T22690] __pi_strlen+0x14/0x150 (P) [ 3397.468510][T22690] getname_kernel+0x14/0x20 [ 3397.468840][T22690] filp_open+0x34/0x104 [ 3397.469199][T22690] nvmet_file_ns_enable+0x38/0xfc [ 3397.469612][T22690] nvmet_ns_enable+0x12c/0x1e0 [ 3397.469976][T22690] nvmet_ns_enable_store+0x64/0xd4 [ 3397.470338][T22690] configfs_write_iter+0xc4/0x128 [ 3397.470691][T22690] vfs_write+0x244/0x36c [ 3397.471145][T22690] ksys_write+0x70/0x108 [ 3397.471545][T22690] __arm64_sys_write+0x18/0x24 [ 3397.471945][T22690] invoke_syscall+0x54/0x10c [ 3397.472282][T22690] el0_svc_common.constprop.0+0x40/0xe0 [ 3397.472642][T22690] do_el0_svc+0x1c/0x34 [ 3397.472951][T22690] el0_svc+0x38/0x1fc [ 3397.473242][T22690] el0t_64_sync_handler+0xa0/0xe4 [ 3397.473685][T22690] el0t_64_sync+0x1a4/0x1a8 [ 3397.474378][T22690] Code: 92400c04 b200c3e8 f100009f 5400088c (a9400c02) [ 3397.475435][T22690] ---[ end trace 0000000000000000 ]--- [ 3397.476430][T22690] Kernel panic - not syncing: Oops: Fatal exception [ 3397.477173][T22690] SMP: stopping secondary CPUs [ 3397.478290][T22690] Kernel Offset: disabled [ 3397.478589][T22690] CPU features: 0x0,00000000,00d1982f,df188f01,2afff73f [ 3397.479100][T22690] Memory Limit: none [ 3397.480045][T22690] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:56:34 Registers: info registers vcpu 0 CPU#0 PC=0000aaaad909a494 X00=0000aaaad90ea858 X01=0000000000000000 X02=0000000000000000 X03=0000000000000000 X04=0000000000000000 X05=0000000000000000 X06=0000000000000000 X07=0000000000000000 X08=0000000000000000 X09=0000000000000000 X10=0000000000000000 X11=0000000000000000 X12=0000000000000000 X13=57bd4d808aaea9a8 X14=0000000000000000 X15=3f2c85750247c189 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=0000aaaadd1987f0 X20=0000aaaad90f30d0 X21=0000aaaad90ea858 X22=0000aaaadd19b470 X23=00000000ffffffff X24=0000000000000009 X25=0000000000000003 X26=0000000000000009 X27=0000000000000001 X28=0000000000000000 X29=0000ffffc8539850 X30=0000aaaad909a4ec SP=0000ffffc8539820 PSTATE=60001000 -ZC- EL0t SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=4443653dd8d9013f:fdb914146c7f3d1d Q19=42f406533b2fcf70:284ba2761815f80b Q20=8b16e1e6eb17b71e:8c5bfefbe07dfef8 Q21=c717e172f4fcc0ca:7b385a8c51b13347 Q22=274086055a4ca740:31bf3d2f86215f53 Q23=f996496278648894:b06765f4ff2aa07c Q24=bb5408f97e6ccd09:1dbe6327f3acb939 Q25=6170786561707865:6170786561707865 Q26=3320646e3320646e:3320646e3320646e Q27=79622d3279622d32:79622d3279622d32 Q28=6b2065746b206574:6b2065746b206574 Q29=f564905af564905a:f564905af564905a Q30=ba0c03b5ba0c03b5:ba0c03b5ba0c03b5 Q31=4c1b00004c1b0000:4c1b00004c1b0000 info registers vcpu 1 CPU#1 PC=ffff800080172404 X00=00000000000000c0 X01=bffffffffffff743 X02=ffff800082cdc180 X03=3ffffffffffff743 X04=3ffffffffffff743 X05=000000000000000d X06=ffff8000847e3670 X07=0000000000000000 X08=0000000000000002 X09=0000000000000001 X10=000000000000a188 X11=ffff800082c09338 X12=0000000000025048 X13=ffff800082e7d570 X14=ffff8000847e3450 X15=ffff800082e7d567 X16=ffff800082f80000 X17=fff07ffffcd20000 X18=00000000ffffffff X19=fff000007f8d11a9 X20=0000000000000000 X21=000000000000002c X22=0000000000000000 X23=ffff8000826a4b28 X24=ffff8000847e3670 X25=ffff8000847e3650 X26=0000000000000030 X27=ffff800082c091f8 X28=0000000000000000 X29=ffff8000847e35e0 X30=ffff8000801736f8 SP=ffff8000847e35e0 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2054504d4545000a:3030303030303030 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000000ff00:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000fe00000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000f00f00f00000f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6e696f70204c4c55:4e206c656e72656b Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:7265746e696f7020:4c4c554e206c656e Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2074612065636e65:7265666572656420 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffcbd19240:0000ffffcbd19240 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffcbd19210 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000