last executing test programs: 2.51249573s ago: executing program 2 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 2.453006028s ago: executing program 2 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1, 0xfffffdbe}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="13042dbd7000fbdbdf251000000008000300", @ANYRES32=r6, @ANYBLOB="9ad2f29976f956a359f53046a16554a44e99f22c2d6a318b6e0e155f7f38e14387f9fbc0d1b7ac856a281109b3161f17b8db4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000007400128009000100766c616e00000000640002800600010004000000580004800c00010001800000020000000c000100fcffffff050000000c00010000020000040000000c00010001000080a97500000c00010003000000080000000c00010010000000000000000c000100030000000600000008000500", @ANYRES32=r1, @ANYBLOB="0d320ad484687c6035406cd34e9b7a3a660ad08cd329243f0e1ee11405fa94acb07a99b5875fa5ebbcd75ea492c51c1ac3417fd86953ebad"], 0x9c}, 0x1, 0x0, 0x0, 0x881}, 0x8008006) 2.381865989s ago: executing program 2 (id=62): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.38110381s ago: executing program 2 (id=65): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000004110000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) 2.270353265s ago: executing program 2 (id=67): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x30, 0x0, @void}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x30, 0x0, @void}, 0x10) (async) 2.208798399s ago: executing program 2 (id=70): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c2"], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x4800000000000000, 0x1, 0x3b}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="b8", 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) close(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setreuid(0xee01, 0xee01) r6 = getpgrp(0xffffffffffffffff) prlimit64(r6, 0xd, 0x0, 0x0) mount$pvfs2(&(0x7f0000000080), &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340), 0x40004e, &(0x7f0000000380)={[{'devtmpfs\x00'}, {'\x0e}'}], [{@dont_hash}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) 2.071887996s ago: executing program 1 (id=76): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r0, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r2, 0x1, 0x3, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x80) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 2.01264756s ago: executing program 1 (id=78): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r1, 0xc028644b, &(0x7f0000000080)={0x0, 0x80, 0x4e0000, 0x9, 0x6, 0x0, 0xfffffffffffffffc, 0xce35}) (async) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r1, 0xc028644b, &(0x7f0000000080)={0x0, 0x80, 0x4e0000, 0x9, 0x6, 0x0, 0xfffffffffffffffc, 0xce35}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@bloom_filter={0x1e, 0x8, 0x9, 0x10000, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x96) (async) read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x96) close(r5) (async) close(r5) read$FUSE(r6, &(0x7f0000005040)={0x2020}, 0x2020) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) clock_getres(0xfffffffffffffff1, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) write(r0, &(0x7f00000005c0)="a68c7e5f89791155a9ffe41c35b9c8bfaa96ad1de55b1e2df1d21192f9ef5d042b462b26bd32352ae7addf247d4563091a33a7c34366f58d58eb1e827956240a18b08031e900ade8397d65bf49f1c16120d1e9bd76a1c9caf227342c35010440805607a57e2c62", 0x67) creat(&(0x7f0000000340)='./file0\x00', 0x28) (async) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r9) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$packet_int(r9, 0x107, 0x9, &(0x7f00000003c0)=0x1, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0x9, &(0x7f00000003c0)=0x1, 0x4) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000640)) (async) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000640)) ppoll(&(0x7f0000000240)=[{r8, 0x610a}, {r8, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r8, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.941723943s ago: executing program 1 (id=80): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000034}, 0x10) 1.872559463s ago: executing program 1 (id=81): r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x4, 0x700000000000000}, 0x0) syz_usb_disconnect(r0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x7, 0x582b04d7, 0x0, 0x1, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 1.302384548s ago: executing program 0 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00"}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 1.237431177s ago: executing program 0 (id=91): mkdir(&(0x7f0000000340)='./file0\x00', 0xb8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d00070f400000000000000007000000291e802e9764bff54e5caedbd9aec3c2aa072deb3f5d2c6e39dd", @ANYRES32=0x0, @ANYBLOB='@\x00R\x00'], 0x1c}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="5063a6a88464ee807b5f096caff549afe2d9325b3a7c35da0d9a3f18d1be4c712cd34f5d2bdb39bb2f87b03cc5aa05bfa20a0a81b9f4a9668dafba2bf45a809a8ef5c9b554f8f1c578"]) read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f000000a980)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}], 0x1, 0x44008004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x4, {0x7, 0x2d, 0x0, 0x6438207, 0x1, 0xffff, 0x5, 0xf84, 0x0, 0x0, 0x80, 0xfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000006ec0)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000008f00)={0x50, 0xffffffffffffffda, r2, {0x7, 0x2d, 0x2, 0x5081b14, 0x7, 0xc, 0x2203, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xcbebe000) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x3a8, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0xb, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x1, 0xeb99, 0xb, 0x2, 0xf, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000002000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r12 = syz_open_procfs$userns(r3, &(0x7f0000000240)) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000, &(0x7f0000000380)={0x100002, 0x79, 0x0, {r12}}, 0x20) 1.18979995s ago: executing program 0 (id=92): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.188041445s ago: executing program 0 (id=95): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.102524927s ago: executing program 0 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = memfd_create(&(0x7f0000000f00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "23ccf2c0a26488a81966ba1159"}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001840)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000018c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001800)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/custom0\x00', 0x800, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x63) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001b80)={0x68, 0x0, &(0x7f0000001a00)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r7}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001940)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f00000019c0)={0x0, 0x18, 0x30}}}], 0xdf, 0x0, &(0x7f0000001a80)="17db693961a4c46607574d1ff06876a5a3916019fa9bebdb819e7cd40d5c8629ce0e473efc47991669e704715877309f6dc1fa6ada9dd1980d78aea6e7f07a6bd4d5813d995c1286e6a5025e30a604760eb46ebd163cb60b56811a46661246c87295784fb2d37241e4b31fa234641d125bee2a5c73b1e54e45eeb05240f720dde53f91969aae419aab6fc78f46581afce7f6c322027e37e0ce37c0d70f98f2cb1671fdddfcfe4c81e6ec1a9e0b22b9fb00bbb3ea75be9ac48f85d8ee8317ac205f66544efe0b904f528f26991640c5ec94347f93f74d2f747b2f5fa2693de1"}) r8 = syz_open_dev$vcsa(&(0x7f0000001bc0), 0x6, 0x408000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs/binder1\x00', 0x800, 0x0) r10 = openat$cgroup_type(r8, &(0x7f0000001c40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001ec0)={0x68, 0x0, &(0x7f0000001d40)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001c80)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x2b}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000001d00)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x2}], 0xee, 0x0, &(0x7f0000001dc0)="18d90116e23a9e1becd0a5e2f61e43c7a754bcc941229f44859a37eede04cb43fee7c133f552e8fffd7556ab934b9f263da19eda7dd34ff4cbe46971fc0aee493133d8ffbc9a5b2c23a983abcb6c420810ef84441bd78620386582b42a64641189f07f3bbfa92162d6a1339a8add0215403c19ebec695bcef6f28e4a50ffd36eeb080d28b9a320663ded9946c0dd825aabfffe88ae50216a97880af97c342b2fb7dee9545a58ad9e2d2bce7524544de7a6d865863de3cab667834ce59dd0575114e262aa4b8b25ad1bd5234b1f8bcee06d232dedf35a7dd54e99a1bb490c0f2dc1e814ac3c2f13dc27aacbf6ca77"}) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x40014) io_uring_enter(r8, 0x3fb8, 0x1602, 0x88, &(0x7f0000002000)={[0x400]}, 0x8) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000002080)=0x9bd) recvmmsg$unix(r11, &(0x7f00000027c0)=[{{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002140)=""/249, 0xf9}, {&(0x7f0000002240)=""/157, 0x9d}, {&(0x7f0000002300)=""/242, 0xf2}], 0x3}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/205, 0xcd}, {&(0x7f00000025c0)=""/249, 0xf9}, {&(0x7f00000026c0)=""/192, 0xc0}], 0x3}}], 0x2, 0x20010042, &(0x7f0000002840)) close(r11) fcntl$notify(r6, 0x402, 0x24) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000002880)={'\x00', 0x5, 0x7, 0xfffffffd, 0x9, 0x3, 0xffffffffffffffff}) syz_open_procfs$userns(r12, &(0x7f0000002900)) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002940), 0x10503, 0x0) tee(r8, r13, 0x7, 0x4) 212.540417ms ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = memfd_create(&(0x7f0000000f00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x3ff) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000002fc0)=""/4109, 0x100d) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000003) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34257' (ED25519) to the list of known hosts. [ 40.281819][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.281830][ T43] audit: type=1400 audit(1789050093.120:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.312819][ T43] audit: type=1400 audit(1789050093.150:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.313464][ T43] audit: type=1400 audit(1789050093.150:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.747501][ T43] audit: type=1400 audit(1789050095.590:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.749109][ T43] audit: type=1400 audit(1789050095.590:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.751272][ T5719] cgroup: Unknown subsys name 'net' [ 42.752700][ T43] audit: type=1400 audit(1789050095.590:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.870832][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.875836][ T5719] cgroup: Unknown subsys name 'rlimit' [ 43.020737][ T43] audit: type=1400 audit(1789050095.860:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.023090][ T43] audit: type=1400 audit(1789050095.860:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.023116][ T43] audit: type=1400 audit(1789050095.860:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.023134][ T43] audit: type=1400 audit(1789050095.860:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.086461][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.750415][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.235874][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.235890][ T43] audit: type=1400 audit(1789050100.070:158): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.399986][ T43] audit: type=1400 audit(1789050100.240:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.402225][ T43] audit: type=1400 audit(1789050100.240:160): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.402267][ T43] audit: type=1400 audit(1789050100.240:161): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.406046][ T43] audit: type=1400 audit(1789050100.240:162): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[5836]" dev="sockfs" ino=5836 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.415878][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.417024][ T5732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.417711][ T5732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.418074][ T5732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.418341][ T5732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.419449][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.422189][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.425580][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.425801][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.429449][ T43] audit: type=1400 audit(1789050100.270:163): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.429715][ T43] audit: type=1400 audit(1789050100.270:164): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.430474][ T43] audit: type=1400 audit(1789050100.270:165): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.431070][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.434368][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.434574][ T43] audit: type=1400 audit(1789050100.270:166): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.434721][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.435356][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.436540][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.436867][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.438198][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.438776][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.439855][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.443230][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.454647][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.465160][ T43] audit: type=1400 audit(1789050100.300:167): avc: denied { sys_module } for pid=5730 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.121045][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.121793][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.121886][ T5739] bridge_slave_0: entered allmulticast mode [ 48.123505][ T5739] bridge_slave_0: entered promiscuous mode [ 48.138051][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.138122][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.138206][ T5733] bridge_slave_0: entered allmulticast mode [ 48.139897][ T5733] bridge_slave_0: entered promiscuous mode [ 48.153140][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.153215][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.153303][ T5739] bridge_slave_1: entered allmulticast mode [ 48.154757][ T5739] bridge_slave_1: entered promiscuous mode [ 48.171349][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.171412][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.171607][ T5733] bridge_slave_1: entered allmulticast mode [ 48.172585][ T5733] bridge_slave_1: entered promiscuous mode [ 48.215936][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.218736][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.241115][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.284058][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.325607][ T5733] team0: Port device team_slave_0 added [ 48.334591][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.334709][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.334811][ T5738] bridge_slave_0: entered allmulticast mode [ 48.336030][ T5738] bridge_slave_0: entered promiscuous mode [ 48.350360][ T5733] team0: Port device team_slave_1 added [ 48.351251][ T5739] team0: Port device team_slave_0 added [ 48.368167][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.368242][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.368335][ T5738] bridge_slave_1: entered allmulticast mode [ 48.369574][ T5738] bridge_slave_1: entered promiscuous mode [ 48.384446][ T5739] team0: Port device team_slave_1 added [ 48.400714][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.400757][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.400807][ T5730] bridge_slave_0: entered allmulticast mode [ 48.401513][ T5730] bridge_slave_0: entered promiscuous mode [ 48.403086][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.403126][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.403292][ T5730] bridge_slave_1: entered allmulticast mode [ 48.404161][ T5730] bridge_slave_1: entered promiscuous mode [ 48.438064][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.449528][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.449538][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.449551][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.450539][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.450552][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.450573][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.461627][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.461980][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.461993][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.462006][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.469066][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.469079][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.469097][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.471485][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.473038][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.508045][ T5738] team0: Port device team_slave_0 added [ 48.529671][ T5738] team0: Port device team_slave_1 added [ 48.533127][ T5739] hsr_slave_0: entered promiscuous mode [ 48.533587][ T5739] hsr_slave_1: entered promiscuous mode [ 48.535108][ T5730] team0: Port device team_slave_0 added [ 48.561464][ T5730] team0: Port device team_slave_1 added [ 48.567881][ T5733] hsr_slave_0: entered promiscuous mode [ 48.568321][ T5733] hsr_slave_1: entered promiscuous mode [ 48.568629][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.568685][ T5733] Cannot create hsr debugfs directory [ 48.569422][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.569429][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.569442][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.582610][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.582623][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.582642][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.604131][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.604142][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.604154][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.628193][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.628203][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.628215][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.642934][ T5738] hsr_slave_0: entered promiscuous mode [ 48.643422][ T5738] hsr_slave_1: entered promiscuous mode [ 48.643720][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.643731][ T5738] Cannot create hsr debugfs directory [ 48.798903][ T5730] hsr_slave_0: entered promiscuous mode [ 48.799450][ T5730] hsr_slave_1: entered promiscuous mode [ 48.799806][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.799818][ T5730] Cannot create hsr debugfs directory [ 48.978878][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.985283][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.985938][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.993379][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.995443][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.999104][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.008122][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.011000][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.056414][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.061450][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.061825][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.063827][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.065092][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.068782][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.069582][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.074808][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.138410][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.141136][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.145889][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.148269][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.148669][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.151071][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.153570][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.155969][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.238660][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.240234][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.242398][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.245316][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.250285][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.258686][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.263893][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.265385][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.270357][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.288502][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.301060][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.310712][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.316227][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.316347][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.337452][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.337530][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.339794][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.339839][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.340699][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.340741][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.364003][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.381241][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.400198][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.400334][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.411867][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.411937][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.438807][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.458391][ T5732] Bluetooth: hci0: command tx timeout [ 49.460006][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.466024][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.466071][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.468359][ T5732] Bluetooth: hci2: command tx timeout [ 49.468465][ T5732] Bluetooth: hci1: command tx timeout [ 49.475328][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.475423][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.512206][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.537278][ T5092] Bluetooth: hci3: command tx timeout [ 49.676947][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.702365][ T5739] veth0_vlan: entered promiscuous mode [ 49.706468][ T5739] veth1_vlan: entered promiscuous mode [ 49.714272][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.749855][ T5739] veth0_macvtap: entered promiscuous mode [ 49.755071][ T5739] veth1_macvtap: entered promiscuous mode [ 49.756318][ T5733] veth0_vlan: entered promiscuous mode [ 49.763658][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.766857][ T5733] veth1_vlan: entered promiscuous mode [ 49.768720][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.780534][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.801601][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.841767][ T5733] veth0_macvtap: entered promiscuous mode [ 49.852091][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.852105][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.857022][ T5733] veth1_macvtap: entered promiscuous mode [ 49.868357][ T5738] veth0_vlan: entered promiscuous mode [ 49.880760][ T5730] veth0_vlan: entered promiscuous mode [ 49.885113][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.885125][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.890178][ T5730] veth1_vlan: entered promiscuous mode [ 49.892002][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.894681][ T5738] veth1_vlan: entered promiscuous mode [ 49.902920][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.909796][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.909958][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910034][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910106][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937237][ T5730] veth0_macvtap: entered promiscuous mode [ 49.940267][ T5730] veth1_macvtap: entered promiscuous mode [ 49.943510][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.945472][ T5738] veth0_macvtap: entered promiscuous mode [ 49.964073][ T5738] veth1_macvtap: entered promiscuous mode [ 49.979816][ T827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.979829][ T827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.983602][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.004302][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.013399][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.016748][ T827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.016760][ T827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.022814][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.042026][ T5882] process 'syz.1.2' launched '/dev/fd/3' with NULL argv: empty string added [ 50.083581][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.083594][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.111263][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.111274][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.127235][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.128513][ T827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.128524][ T827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.146076][ T827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.146088][ T827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.159077][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159291][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159512][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.162693][ T5887] FAULT_INJECTION: forcing a failure. [ 50.162693][ T5887] name failslab, interval 1, probability 0, space 0, times 1 [ 50.162710][ T5887] CPU: 3 UID: 0 PID: 5887 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 50.162723][ T5887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.162729][ T5887] Call Trace: [ 50.162733][ T5887] [ 50.162737][ T5887] dump_stack_lvl+0x100/0x190 [ 50.162758][ T5887] should_fail_ex.cold+0x5/0xa [ 50.162773][ T5887] should_failslab+0xc2/0x120 [ 50.162787][ T5887] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.162799][ T5887] ? __alloc_skb+0x5b7/0x710 [ 50.162811][ T5887] ? __alloc_skb+0x140/0x710 [ 50.162824][ T5887] __alloc_skb+0x140/0x710 [ 50.162834][ T5887] ? __alloc_skb+0x5b7/0x710 [ 50.162845][ T5887] ? __pfx___alloc_skb+0x10/0x10 [ 50.162855][ T5887] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 50.162874][ T5887] ? sock_has_perm+0x25a/0x2f0 [ 50.162890][ T5887] ? __pfx_sock_has_perm+0x10/0x10 [ 50.162907][ T5887] netlink_alloc_large_skb+0x69/0x150 [ 50.162919][ T5887] netlink_sendmsg+0x680/0xda0 [ 50.162932][ T5887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.162945][ T5887] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.162964][ T5887] ____sys_sendmsg+0xa4d/0xbe0 [ 50.162985][ T5887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.162997][ T5887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.163015][ T5887] ? lock_acquire+0x1d1/0x380 [ 50.163027][ T5887] ? get_pid_task+0x2a/0x250 [ 50.163043][ T5887] ___sys_sendmsg+0x190/0x1e0 [ 50.163060][ T5887] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.163076][ T5887] ? get_pid_task+0x106/0x250 [ 50.163095][ T5887] ? find_held_lock+0x2b/0x80 [ 50.163117][ T5887] __sys_sendmsg+0x160/0x210 [ 50.163130][ T5887] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.163149][ T5887] do_syscall_64+0x123/0x790 [ 50.163165][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.163176][ T5887] RIP: 0033:0x7f65bb59e159 [ 50.163185][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.163195][ T5887] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.163206][ T5887] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 50.163213][ T5887] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 50.163219][ T5887] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 50.163225][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.163231][ T5887] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 50.163244][ T5887] [ 50.190997][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.191211][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.191422][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.191580][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.191850][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192044][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192253][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192561][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.348961][ T5896] Zero length message leads to an empty skb [ 50.366290][ T5897] tipc: Enabling of bearer rejected, media not registered [ 50.407919][ T5901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.432122][ T5909] FAULT_INJECTION: forcing a failure. [ 50.432122][ T5909] name failslab, interval 1, probability 0, space 0, times 0 [ 50.432181][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 50.432194][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.432201][ T5909] Call Trace: [ 50.432205][ T5909] [ 50.432209][ T5909] dump_stack_lvl+0x100/0x190 [ 50.432229][ T5909] should_fail_ex.cold+0x5/0xa [ 50.432245][ T5909] should_failslab+0xc2/0x120 [ 50.432259][ T5909] __kmalloc_noprof+0xfc/0x840 [ 50.432271][ T5909] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.432288][ T5909] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.432305][ T5909] genl_family_rcv_msg_doit+0xc7/0x300 [ 50.432319][ T5909] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 50.432336][ T5909] ? bpf_lsm_capable+0x9/0x10 [ 50.432351][ T5909] ? security_capable+0x80/0x260 [ 50.432370][ T5909] genl_rcv_msg+0x560/0x800 [ 50.432384][ T5909] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.432397][ T5909] ? __lock_acquire+0x5c0/0x1f40 [ 50.432408][ T5909] ? __pfx_net_dm_nl_pre_doit+0x10/0x10 [ 50.432421][ T5909] ? __pfx_net_dm_cmd_trace+0x10/0x10 [ 50.432436][ T5909] ? __pfx_net_dm_nl_post_doit+0x10/0x10 [ 50.432451][ T5909] ? __lock_acquire+0x5c0/0x1f40 [ 50.432464][ T5909] netlink_rcv_skb+0x159/0x420 [ 50.432475][ T5909] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.432489][ T5909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.432505][ T5909] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.432524][ T5909] genl_rcv+0x28/0x40 [ 50.432535][ T5909] netlink_unicast+0x585/0x850 [ 50.432548][ T5909] ? __pfx_netlink_unicast+0x10/0x10 [ 50.432559][ T5909] ? __pfx_sock_has_perm+0x10/0x10 [ 50.432580][ T5909] netlink_sendmsg+0x8b0/0xda0 [ 50.432593][ T5909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.432605][ T5909] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.432629][ T5909] ____sys_sendmsg+0xa4d/0xbe0 [ 50.432644][ T5909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.432656][ T5909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.432674][ T5909] ? lock_acquire+0x1d1/0x380 [ 50.432685][ T5909] ? get_pid_task+0x2a/0x250 [ 50.432701][ T5909] ___sys_sendmsg+0x190/0x1e0 [ 50.432718][ T5909] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.432734][ T5909] ? get_pid_task+0x106/0x250 [ 50.432753][ T5909] ? find_held_lock+0x2b/0x80 [ 50.432777][ T5909] __sys_sendmsg+0x160/0x210 [ 50.432790][ T5909] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.432809][ T5909] do_syscall_64+0x123/0x790 [ 50.432825][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.432837][ T5909] RIP: 0033:0x7f65bb59e159 [ 50.432846][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.432856][ T5909] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.432867][ T5909] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 50.432874][ T5909] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 50.432880][ T5909] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 50.432886][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.432892][ T5909] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 50.432908][ T5909] [ 50.480955][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 50.535184][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 50.543954][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 50.598223][ T5879] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.626027][ T5920] FAULT_INJECTION: forcing a failure. [ 50.626027][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 50.626054][ T5920] CPU: 3 UID: 0 PID: 5920 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 50.626073][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.626081][ T5920] Call Trace: [ 50.626085][ T5920] [ 50.626092][ T5920] dump_stack_lvl+0x100/0x190 [ 50.626120][ T5920] should_fail_ex.cold+0x5/0xa [ 50.626139][ T5920] should_failslab+0xc2/0x120 [ 50.626153][ T5920] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.626166][ T5920] ? copy_process+0x6a2/0x8370 [ 50.626181][ T5920] copy_process+0x6a2/0x8370 [ 50.626201][ T5920] ? __pfx_copy_process+0x10/0x10 [ 50.626213][ T5920] ? kasan_save_track+0x14/0x30 [ 50.626231][ T5920] ? __kasan_kmalloc+0xaa/0xb0 [ 50.626250][ T5920] ? lockdep_init_map_type+0x5c/0x250 [ 50.626266][ T5920] ? lockdep_init_map_type+0x5c/0x250 [ 50.626279][ T5920] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 50.626297][ T5920] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 50.626312][ T5920] vhost_task_create+0x1db/0x370 [ 50.626330][ T5920] ? __pfx_vhost_task_create+0x10/0x10 [ 50.626350][ T5920] ? __pfx_vhost_task_fn+0x10/0x10 [ 50.626368][ T5920] ? register_lock_class+0x3f/0x7b0 [ 50.626380][ T5920] ? rcu_is_watching+0x13/0xc0 [ 50.626394][ T5920] ? trace_contention_end+0x126/0x160 [ 50.626409][ T5920] kvm_mmu_post_init_vm+0x1b3/0x360 [ 50.626429][ T5920] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 50.626450][ T5920] ? __pfx___mutex_lock+0x10/0x10 [ 50.626471][ T5920] ? kasan_quarantine_put+0x104/0x240 [ 50.626489][ T5920] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.626502][ T5920] ? lock_acquire+0x1d1/0x380 [ 50.626513][ T5920] ? do_raw_write_lock+0x11e/0x260 [ 50.626527][ T5920] ? find_held_lock+0x2b/0x80 [ 50.626541][ T5920] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.626555][ T5920] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 50.626573][ T5920] kvm_vcpu_ioctl+0x730/0x1700 [ 50.626588][ T5920] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.626603][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.626617][ T5920] ? do_vfs_ioctl+0x226/0x13e0 [ 50.626628][ T5920] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.626637][ T5920] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 50.626651][ T5920] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.626666][ T5920] ? __fget_files+0x34/0x3d0 [ 50.626684][ T5920] ? selinux_file_ioctl+0x13b/0x290 [ 50.626695][ T5920] ? selinux_file_ioctl+0xb6/0x290 [ 50.626707][ T5920] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.626722][ T5920] __x64_sys_ioctl+0x18e/0x210 [ 50.626734][ T5920] do_syscall_64+0x123/0x790 [ 50.626749][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.626761][ T5920] RIP: 0033:0x7f65bb59e159 [ 50.626770][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.626780][ T5920] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.626792][ T5920] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 50.626799][ T5920] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 50.626805][ T5920] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 50.626812][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.626818][ T5920] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 50.626831][ T5920] [ 50.778076][ T5879] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 50.779516][ T5879] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 50.779530][ T5879] usb 8-1: config 1 has no interface number 0 [ 50.781137][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.781149][ T5879] usb 8-1: Product: syz [ 50.781156][ T5879] usb 8-1: Manufacturer: syz [ 50.781163][ T5879] usb 8-1: SerialNumber: syz [ 50.791230][ T5879] usb 8-1: 3:1 : does not exist [ 50.791242][ T5879] usb 8-1: 3:2 : does not exist [ 50.857859][ T5924] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 51.080467][ T5950] FAULT_INJECTION: forcing a failure. [ 51.080467][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 51.080486][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 51.080499][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.080506][ T5950] Call Trace: [ 51.080509][ T5950] [ 51.080514][ T5950] dump_stack_lvl+0x100/0x190 [ 51.080533][ T5950] should_fail_ex.cold+0x5/0xa [ 51.080550][ T5950] should_failslab+0xc2/0x120 [ 51.080564][ T5950] __kmalloc_cache_node_noprof+0x94/0x720 [ 51.080577][ T5950] ? __pfx_stack_trace_save+0x10/0x10 [ 51.080594][ T5950] ? __get_vm_area_node+0x124/0x350 [ 51.080610][ T5950] __get_vm_area_node+0x124/0x350 [ 51.080623][ T5950] ? __sys_bpf+0x1f46/0x4a30 [ 51.080635][ T5950] __vmalloc_node_range_noprof+0x268/0x1420 [ 51.080649][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.080667][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.080684][ T5950] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.080701][ T5950] ? avc_has_perm_noaudit+0x145/0x3b0 [ 51.080717][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.080730][ T5950] __vmalloc_node_noprof+0xad/0xf0 [ 51.080744][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.080759][ T5950] __vmalloc_noprof+0xa3/0x120 [ 51.080773][ T5950] ? __pfx___vmalloc_noprof+0x10/0x10 [ 51.080789][ T5950] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 51.080804][ T5950] ? security_bpf_prog_load+0x10f/0x2f0 [ 51.080817][ T5950] bpf_check+0x17fb/0xa980 [ 51.080831][ T5950] ? __css_rstat_updated+0x1ce/0x590 [ 51.080843][ T5950] ? __lock_acquire+0x5c0/0x1f40 [ 51.080856][ T5950] ? __pfx___css_rstat_updated+0x10/0x10 [ 51.080872][ T5950] ? __lock_acquire+0x5c0/0x1f40 [ 51.080887][ T5950] ? __pfx_bpf_check+0x10/0x10 [ 51.080901][ T5950] ? lock_acquire+0x1d1/0x380 [ 51.080911][ T5950] ? bpf_prog_load+0x1a09/0x2a80 [ 51.080925][ T5950] ? find_held_lock+0x2b/0x80 [ 51.080940][ T5950] ? bpf_prog_load+0x1a09/0x2a80 [ 51.080956][ T5950] ? __asan_memset+0x23/0x50 [ 51.080974][ T5950] ? bpf_prog_load+0x1ac3/0x2a80 [ 51.080988][ T5950] bpf_prog_load+0x1ac3/0x2a80 [ 51.081005][ T5950] ? __pfx_bpf_prog_load+0x10/0x10 [ 51.081029][ T5950] __sys_bpf+0x1f46/0x4a30 [ 51.081043][ T5950] ? __pfx___sys_bpf+0x10/0x10 [ 51.081053][ T5950] ? find_held_lock+0x2b/0x80 [ 51.081067][ T5950] ? get_pid_task+0xfc/0x250 [ 51.081081][ T5950] ? get_pid_task+0xfc/0x250 [ 51.081099][ T5950] ? find_held_lock+0x2b/0x80 [ 51.081117][ T5950] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.081133][ T5950] ? find_held_lock+0x2b/0x80 [ 51.081147][ T5950] ? ksys_write+0x190/0x250 [ 51.081158][ T5950] ? ksys_write+0x190/0x250 [ 51.081168][ T5950] ? lock_acquire+0x1d1/0x380 [ 51.081187][ T5950] ? fput+0x7c/0x100 [ 51.081200][ T5950] ? ksys_write+0x1ac/0x250 [ 51.081212][ T5950] ? __x64_sys_bpf+0xce/0x140 [ 51.081222][ T5950] __x64_sys_bpf+0xce/0x140 [ 51.081233][ T5950] ? do_syscall_64+0xae/0x790 [ 51.081249][ T5950] do_syscall_64+0x123/0x790 [ 51.081264][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.081275][ T5950] RIP: 0033:0x7f56abd9e159 [ 51.081284][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.081294][ T5950] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.081322][ T5950] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 51.081329][ T5950] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 51.081335][ T5950] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.081341][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.081348][ T5950] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 51.081361][ T5950] [ 51.081464][ T5950] syz.0.25: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 51.081520][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 51.081532][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.081538][ T5950] Call Trace: [ 51.081541][ T5950] [ 51.081545][ T5950] dump_stack_lvl+0x100/0x190 [ 51.081562][ T5950] warn_alloc.cold+0x9e/0xb2 [ 51.081574][ T5950] ? __pfx_warn_alloc+0x10/0x10 [ 51.081590][ T5950] ? __kasan_kmalloc+0x8a/0xb0 [ 51.081603][ T5950] ? __pfx_stack_trace_save+0x10/0x10 [ 51.081623][ T5950] ? __get_vm_area_node+0x22b/0x350 [ 51.081638][ T5950] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 51.081657][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.081673][ T5950] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.081690][ T5950] ? avc_has_perm_noaudit+0x145/0x3b0 [ 51.081706][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.081719][ T5950] __vmalloc_node_noprof+0xad/0xf0 [ 51.081733][ T5950] ? bpf_check+0x17fb/0xa980 [ 51.081748][ T5950] __vmalloc_noprof+0xa3/0x120 [ 51.081762][ T5950] ? __pfx___vmalloc_noprof+0x10/0x10 [ 51.081777][ T5950] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 51.081792][ T5950] ? security_bpf_prog_load+0x10f/0x2f0 [ 51.081805][ T5950] bpf_check+0x17fb/0xa980 [ 51.081818][ T5950] ? __css_rstat_updated+0x1ce/0x590 [ 51.081831][ T5950] ? __lock_acquire+0x5c0/0x1f40 [ 51.081842][ T5950] ? __pfx___css_rstat_updated+0x10/0x10 [ 51.081858][ T5950] ? __lock_acquire+0x5c0/0x1f40 [ 51.081873][ T5950] ? __pfx_bpf_check+0x10/0x10 [ 51.081887][ T5950] ? lock_acquire+0x1d1/0x380 [ 51.081897][ T5950] ? bpf_prog_load+0x1a09/0x2a80 [ 51.081911][ T5950] ? find_held_lock+0x2b/0x80 [ 51.081925][ T5950] ? bpf_prog_load+0x1a09/0x2a80 [ 51.081941][ T5950] ? __asan_memset+0x23/0x50 [ 51.081953][ T5950] ? bpf_prog_load+0x1ac3/0x2a80 [ 51.081972][ T5950] bpf_prog_load+0x1ac3/0x2a80 [ 51.081989][ T5950] ? __pfx_bpf_prog_load+0x10/0x10 [ 51.082013][ T5950] __sys_bpf+0x1f46/0x4a30 [ 51.082027][ T5950] ? __pfx___sys_bpf+0x10/0x10 [ 51.082037][ T5950] ? find_held_lock+0x2b/0x80 [ 51.082051][ T5950] ? get_pid_task+0xfc/0x250 [ 51.082065][ T5950] ? get_pid_task+0xfc/0x250 [ 51.082083][ T5950] ? find_held_lock+0x2b/0x80 [ 51.082100][ T5950] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.082115][ T5950] ? find_held_lock+0x2b/0x80 [ 51.082130][ T5950] ? ksys_write+0x190/0x250 [ 51.082140][ T5950] ? ksys_write+0x190/0x250 [ 51.082150][ T5950] ? lock_acquire+0x1d1/0x380 [ 51.082169][ T5950] ? fput+0x7c/0x100 [ 51.082182][ T5950] ? ksys_write+0x1ac/0x250 [ 51.082194][ T5950] ? __x64_sys_bpf+0xce/0x140 [ 51.082204][ T5950] __x64_sys_bpf+0xce/0x140 [ 51.082215][ T5950] ? do_syscall_64+0xae/0x790 [ 51.082229][ T5950] do_syscall_64+0x123/0x790 [ 51.082244][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.082271][ T5950] RIP: 0033:0x7f56abd9e159 [ 51.082280][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.082289][ T5950] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.082299][ T5950] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 51.082306][ T5950] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 51.082312][ T5950] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.082318][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.082324][ T5950] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 51.082338][ T5950] [ 51.082368][ T5950] Mem-Info: [ 51.082374][ T5950] active_anon:8354 inactive_anon:23 isolated_anon:0 [ 51.082374][ T5950] active_file:3040 inactive_file:54011 isolated_file:0 [ 51.082374][ T5950] unevictable:1000 dirty:37 writeback:0 [ 51.082374][ T5950] slab_reclaimable:11706 slab_unreclaimable:64593 [ 51.082374][ T5950] mapped:24685 shmem:1579 pagetables:1229 [ 51.082374][ T5950] sec_pagetables:298 bounce:0 [ 51.082374][ T5950] kernel_misc_reclaimable:0 [ 51.082374][ T5950] free:462911 free_pcp:18266 free_cma:0 [ 51.082433][ T5950] Node 0 active_anon:33416kB inactive_anon:92kB active_file:12160kB inactive_file:215840kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98740kB dirty:148kB writeback:0kB shmem:4316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13024kB pagetables:4724kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.082462][ T5950] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.082487][ T5950] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.082515][ T5950] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 51.082534][ T5950] Node 0 DMA32 free:186040kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33416kB inactive_anon:92kB active_file:12160kB inactive_file:215840kB unevictable:2000kB writepending:148kB zspages:0kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:69216kB local_pcp:19500kB free_cma:0kB [ 51.082563][ T5950] lowmem_reserve[]: 0 0 0 0 0 [ 51.082580][ T5950] Node 1 Normal free:1650244kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3844kB local_pcp:28kB free_cma:0kB [ 51.082609][ T5950] lowmem_reserve[]: 0 0 0 0 0 [ 51.082626][ T5950] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.082687][ T5950] Node 0 DMA32: 1*4kB (E) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UE) 1*128kB (M) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 43*4096kB (M) = 185924kB [ 51.082768][ T5950] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 3*32kB (M) 3*64kB (UM) 4*128kB (UM) 3*256kB (U) 4*512kB (UM) 2*1024kB (U) 1*2048kB (M) 401*4096kB (UM) = 1650240kB [ 51.082848][ T5950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.082856][ T5950] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.082864][ T5950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.082872][ T5950] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.082879][ T5950] 58647 total pagecache pages [ 51.082883][ T5950] 0 pages in swap cache [ 51.082886][ T5950] Free swap = 124992kB [ 51.082890][ T5950] Total swap = 124996kB [ 51.082894][ T5950] 1048443 pages RAM [ 51.082900][ T5950] 0 pages HighMem/MovableOnly [ 51.082903][ T5950] 285903 pages reserved [ 51.082907][ T5950] 0 pages cma reserved [ 51.484242][ T5984] FAULT_INJECTION: forcing a failure. [ 51.484242][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.484272][ T5984] CPU: 2 UID: 0 PID: 5984 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 51.484312][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.484323][ T5984] Call Trace: [ 51.484329][ T5984] [ 51.484336][ T5984] dump_stack_lvl+0x100/0x190 [ 51.484366][ T5984] should_fail_ex.cold+0x5/0xa [ 51.484392][ T5984] _copy_from_user+0x2e/0xd0 [ 51.484412][ T5984] copy_msghdr_from_user+0x9f/0x4c0 [ 51.484439][ T5984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.484471][ T5984] ? lock_acquire+0x1d1/0x380 [ 51.484489][ T5984] ? get_pid_task+0x2a/0x250 [ 51.484515][ T5984] ___sys_sendmsg+0x106/0x1e0 [ 51.484542][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.484573][ T5984] ? get_pid_task+0x106/0x250 [ 51.484606][ T5984] ? find_held_lock+0x2b/0x80 [ 51.484647][ T5984] __sys_sendmsg+0x160/0x210 [ 51.484668][ T5984] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.484702][ T5984] do_syscall_64+0x123/0x790 [ 51.484728][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.484747][ T5984] RIP: 0033:0x7f65bb59e159 [ 51.484761][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.484777][ T5984] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.484795][ T5984] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 51.484807][ T5984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 51.484818][ T5984] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 51.484828][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.484839][ T5984] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 51.484863][ T5984] [ 51.537742][ T5092] Bluetooth: hci1: command tx timeout [ 51.537765][ T5092] Bluetooth: hci2: command tx timeout [ 51.537777][ T5092] Bluetooth: hci0: command tx timeout [ 51.563230][ T69] usb 8-1: USB disconnect, device number 2 [ 51.619036][ T5092] Bluetooth: hci3: command tx timeout [ 51.986405][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 52.019483][ T5989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5989 comm=syz.0.38 [ 52.062847][ T5994] FAULT_INJECTION: forcing a failure. [ 52.062847][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.062874][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(full) [ 52.062892][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.062901][ T5994] Call Trace: [ 52.062906][ T5994] [ 52.062912][ T5994] dump_stack_lvl+0x100/0x190 [ 52.062940][ T5994] should_fail_ex.cold+0x5/0xa [ 52.062962][ T5994] _copy_from_iter+0x1f4/0x1690 [ 52.062975][ T5994] ? __asan_memset+0x23/0x50 [ 52.062987][ T5994] ? __pfx__copy_from_iter+0x10/0x10 [ 52.062997][ T5994] ? __pfx___alloc_skb+0x10/0x10 [ 52.063008][ T5994] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 52.063027][ T5994] ? sock_has_perm+0x25a/0x2f0 [ 52.063044][ T5994] ? __pfx_sock_has_perm+0x10/0x10 [ 52.063104][ T5994] netlink_sendmsg+0x808/0xda0 [ 52.063120][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.063132][ T5994] ? selinux_socket_sendmsg+0x198/0x2f0 [ 52.063151][ T5994] ____sys_sendmsg+0xa4d/0xbe0 [ 52.063166][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.063211][ T5994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.063230][ T5994] ? lock_acquire+0x1d1/0x380 [ 52.063241][ T5994] ? get_pid_task+0x2a/0x250 [ 52.063257][ T5994] ___sys_sendmsg+0x190/0x1e0 [ 52.063273][ T5994] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.063289][ T5994] ? get_pid_task+0x106/0x250 [ 52.063308][ T5994] ? find_held_lock+0x2b/0x80 [ 52.063330][ T5994] __sys_sendmsg+0x160/0x210 [ 52.063343][ T5994] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.063362][ T5994] do_syscall_64+0x123/0x790 [ 52.063397][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.063409][ T5994] RIP: 0033:0x7f56abd9e159 [ 52.063418][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.063428][ T5994] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.063439][ T5994] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 52.063446][ T5994] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 52.063452][ T5994] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.063458][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.063464][ T5994] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 52.063477][ T5994] [ 52.170413][ T6002] FAULT_INJECTION: forcing a failure. [ 52.170413][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.170431][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 52.170444][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.170450][ T6002] Call Trace: [ 52.170454][ T6002] [ 52.170458][ T6002] dump_stack_lvl+0x100/0x190 [ 52.170478][ T6002] should_fail_ex.cold+0x5/0xa [ 52.170494][ T6002] _copy_to_user+0x32/0xd0 [ 52.170506][ T6002] simple_read_from_buffer+0xcb/0x170 [ 52.170521][ T6002] proc_fail_nth_read+0x1af/0x230 [ 52.170536][ T6002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.170550][ T6002] ? rw_verify_area+0xce/0x6d0 [ 52.170566][ T6002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.170579][ T6002] vfs_read+0x1e4/0xb40 [ 52.170590][ T6002] ? lock_acquire+0x1d1/0x380 [ 52.170601][ T6002] ? __fget_files+0x34/0x3d0 [ 52.170614][ T6002] ? __pfx_vfs_read+0x10/0x10 [ 52.170623][ T6002] ? find_held_lock+0x2b/0x80 [ 52.170638][ T6002] ? __fget_files+0x215/0x3d0 [ 52.170653][ T6002] ? __fget_files+0x21f/0x3d0 [ 52.170670][ T6002] ksys_read+0x12a/0x250 [ 52.170680][ T6002] ? __pfx_ksys_read+0x10/0x10 [ 52.170694][ T6002] do_syscall_64+0x123/0x790 [ 52.170710][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.170722][ T6002] RIP: 0033:0x7f56abd5e98e [ 52.170731][ T6002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.170741][ T6002] RSP: 002b:00007f56acd2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.170752][ T6002] RAX: ffffffffffffffda RBX: 00007f56acd2c6c0 RCX: 00007f56abd5e98e [ 52.170758][ T6002] RDX: 000000000000000f RSI: 00007f56acd2c0a0 RDI: 0000000000000003 [ 52.170765][ T6002] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.170771][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.170777][ T6002] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 52.170790][ T6002] [ 52.204104][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 52.252502][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 52.252512][ T43] audit: type=1400 audit(1789050105.090:237): avc: denied { create } for pid=6007 comm="syz.3.45" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.252839][ T43] audit: type=1400 audit(1789050105.090:238): avc: denied { read write } for pid=6007 comm="syz.3.45" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.253058][ T43] audit: type=1400 audit(1789050105.090:239): avc: denied { open } for pid=6007 comm="syz.3.45" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.253638][ T43] audit: type=1400 audit(1789050105.090:240): avc: denied { mounton } for pid=6007 comm="syz.3.45" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.255161][ T43] audit: type=1400 audit(1789050105.090:241): avc: denied { setattr } for pid=6007 comm="syz.3.45" name="file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.306397][ T43] audit: type=1400 audit(1789050105.140:242): avc: denied { prog_run } for pid=6017 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.313926][ T6012] FAULT_INJECTION: forcing a failure. [ 52.313926][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 52.313951][ T6012] CPU: 2 UID: 0 PID: 6012 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 52.313977][ T6012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.313984][ T6012] Call Trace: [ 52.313988][ T6012] [ 52.313992][ T6012] dump_stack_lvl+0x100/0x190 [ 52.314012][ T6012] should_fail_ex.cold+0x5/0xa [ 52.314028][ T6012] should_failslab+0xc2/0x120 [ 52.314042][ T6012] __kmalloc_noprof+0xfc/0x840 [ 52.314054][ T6012] ? lsm_blob_alloc+0x68/0x90 [ 52.314071][ T6012] lsm_blob_alloc+0x68/0x90 [ 52.314086][ T6012] security_task_alloc+0x2a/0x260 [ 52.314099][ T6012] copy_process+0x2c11/0x8370 [ 52.314135][ T6012] ? __pfx_copy_process+0x10/0x10 [ 52.314154][ T6012] ? kasan_save_track+0x14/0x30 [ 52.314171][ T6012] ? __kasan_kmalloc+0xaa/0xb0 [ 52.314183][ T6012] ? lockdep_init_map_type+0x5c/0x250 [ 52.314196][ T6012] ? lockdep_init_map_type+0x5c/0x250 [ 52.314209][ T6012] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 52.314227][ T6012] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 52.314242][ T6012] vhost_task_create+0x1db/0x370 [ 52.314260][ T6012] ? __pfx_vhost_task_create+0x10/0x10 [ 52.314281][ T6012] ? __pfx_vhost_task_fn+0x10/0x10 [ 52.314299][ T6012] ? register_lock_class+0x3f/0x7b0 [ 52.314310][ T6012] ? rcu_is_watching+0x13/0xc0 [ 52.314325][ T6012] ? trace_contention_end+0x126/0x160 [ 52.314340][ T6012] kvm_mmu_post_init_vm+0x1b3/0x360 [ 52.314354][ T6012] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 52.314368][ T6012] ? __pfx___mutex_lock+0x10/0x10 [ 52.314382][ T6012] ? kasan_quarantine_put+0x104/0x240 [ 52.314396][ T6012] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 52.314409][ T6012] ? lock_acquire+0x1d1/0x380 [ 52.314420][ T6012] ? do_raw_write_lock+0x11e/0x260 [ 52.314433][ T6012] ? find_held_lock+0x2b/0x80 [ 52.314461][ T6012] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 52.314477][ T6012] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 52.314494][ T6012] kvm_vcpu_ioctl+0x730/0x1700 [ 52.314510][ T6012] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.314525][ T6012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.314540][ T6012] ? do_vfs_ioctl+0x226/0x13e0 [ 52.314551][ T6012] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 52.314561][ T6012] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 52.314575][ T6012] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.314589][ T6012] ? __fget_files+0x34/0x3d0 [ 52.314611][ T6012] ? selinux_file_ioctl+0x13b/0x290 [ 52.314627][ T6012] ? selinux_file_ioctl+0xb6/0x290 [ 52.314645][ T6012] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.314667][ T6012] __x64_sys_ioctl+0x18e/0x210 [ 52.314679][ T6012] do_syscall_64+0x123/0x790 [ 52.314694][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.314706][ T6012] RIP: 0033:0x7f56abd9e159 [ 52.314716][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.314726][ T6012] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.314737][ T6012] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 52.314744][ T6012] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 52.314750][ T6012] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.314757][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.314763][ T6012] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 52.314777][ T6012] [ 52.350687][ T43] audit: type=1400 audit(1789050105.190:243): avc: denied { unlink } for pid=5730 comm="syz-executor" name="file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.403472][ T6022] xt_esp: unknown flags DD [ 52.411173][ T43] audit: type=1400 audit(1789050105.250:244): avc: denied { setopt } for pid=6023 comm="syz.1.49" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.411252][ T6024] syz_tun: entered allmulticast mode [ 52.411770][ T6024] syz_tun: left allmulticast mode [ 52.586633][ T6032] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 52.586657][ T43] audit: type=1400 audit(1789050105.420:245): avc: denied { ioctl } for pid=6031 comm="syz.1.52" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.617571][ T6038] FAULT_INJECTION: forcing a failure. [ 52.617571][ T6038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.617591][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 52.617604][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.617610][ T6038] Call Trace: [ 52.617614][ T6038] [ 52.617619][ T6038] dump_stack_lvl+0x100/0x190 [ 52.617638][ T6038] should_fail_ex.cold+0x5/0xa [ 52.617654][ T6038] _copy_from_iter+0x1f4/0x1690 [ 52.617667][ T6038] ? __asan_memset+0x23/0x50 [ 52.617678][ T6038] ? __pfx__copy_from_iter+0x10/0x10 [ 52.617689][ T6038] ? __pfx___alloc_skb+0x10/0x10 [ 52.617705][ T6038] netlink_sendmsg+0x808/0xda0 [ 52.617719][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.617731][ T6038] ? selinux_socket_sendmsg+0x198/0x2f0 [ 52.617752][ T6038] ____sys_sendmsg+0xa4d/0xbe0 [ 52.617766][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.617778][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.617796][ T6038] ? lock_acquire+0x1d1/0x380 [ 52.617807][ T6038] ? get_pid_task+0x2a/0x250 [ 52.617823][ T6038] ___sys_sendmsg+0x190/0x1e0 [ 52.617840][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.617856][ T6038] ? get_pid_task+0x106/0x250 [ 52.617875][ T6038] ? find_held_lock+0x2b/0x80 [ 52.617897][ T6038] __sys_sendmsg+0x160/0x210 [ 52.617910][ T6038] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.617935][ T6038] do_syscall_64+0x123/0x790 [ 52.617951][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.617962][ T6038] RIP: 0033:0x7f31cf59e159 [ 52.617972][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.617982][ T6038] RSP: 002b:00007f31d04e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.617993][ T6038] RAX: ffffffffffffffda RBX: 00007f31cf825fa0 RCX: 00007f31cf59e159 [ 52.617999][ T6038] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 52.618006][ T6038] RBP: 00007f31d04e6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.618012][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.618018][ T6038] R13: 00007f31cf826038 R14: 00007f31cf825fa0 R15: 00007ffcf2c97628 [ 52.618031][ T6038] [ 52.632614][ T43] audit: type=1400 audit(1789050105.470:246): avc: denied { mount } for pid=6039 comm="syz.0.55" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.765121][ T6053] FAULT_INJECTION: forcing a failure. [ 52.765121][ T6053] name failslab, interval 1, probability 0, space 0, times 0 [ 52.765141][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) [ 52.765154][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.765160][ T6053] Call Trace: [ 52.765165][ T6053] [ 52.765169][ T6053] dump_stack_lvl+0x100/0x190 [ 52.765188][ T6053] should_fail_ex.cold+0x5/0xa [ 52.765204][ T6053] should_failslab+0xc2/0x120 [ 52.765219][ T6053] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 52.765232][ T6053] ? alloc_vmap_area+0x640/0x2bb0 [ 52.765246][ T6053] alloc_vmap_area+0x640/0x2bb0 [ 52.765262][ T6053] ? kasan_save_track+0x14/0x30 [ 52.765274][ T6053] ? __kasan_kmalloc+0xaa/0xb0 [ 52.765286][ T6053] ? __pfx_alloc_vmap_area+0x10/0x10 [ 52.765298][ T6053] ? __pfx_stack_trace_save+0x10/0x10 [ 52.765315][ T6053] ? __get_vm_area_node+0x124/0x350 [ 52.765330][ T6053] __get_vm_area_node+0x1ed/0x350 [ 52.765345][ T6053] __vmalloc_node_range_noprof+0x268/0x1420 [ 52.765360][ T6053] ? bpf_check+0x17fb/0xa980 [ 52.765379][ T6053] ? bpf_check+0x17fb/0xa980 [ 52.765395][ T6053] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.765412][ T6053] ? avc_has_perm_noaudit+0x145/0x3b0 [ 52.765429][ T6053] ? bpf_check+0x17fb/0xa980 [ 52.765442][ T6053] __vmalloc_node_noprof+0xad/0xf0 [ 52.765456][ T6053] ? bpf_check+0x17fb/0xa980 [ 52.765471][ T6053] __vmalloc_noprof+0xa3/0x120 [ 52.765485][ T6053] ? __pfx___vmalloc_noprof+0x10/0x10 [ 52.765501][ T6053] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 52.765517][ T6053] ? security_bpf_prog_load+0x10f/0x2f0 [ 52.765529][ T6053] bpf_check+0x17fb/0xa980 [ 52.765543][ T6053] ? __css_rstat_updated+0x1ce/0x590 [ 52.765556][ T6053] ? __lock_acquire+0x5c0/0x1f40 [ 52.765568][ T6053] ? __pfx___css_rstat_updated+0x10/0x10 [ 52.765585][ T6053] ? __lock_acquire+0x5c0/0x1f40 [ 52.765600][ T6053] ? __pfx_bpf_check+0x10/0x10 [ 52.765614][ T6053] ? lock_acquire+0x1d1/0x380 [ 52.765625][ T6053] ? bpf_prog_load+0x1a09/0x2a80 [ 52.765639][ T6053] ? find_held_lock+0x2b/0x80 [ 52.765654][ T6053] ? bpf_prog_load+0x1a09/0x2a80 [ 52.765669][ T6053] ? __asan_memset+0x23/0x50 [ 52.765682][ T6053] ? bpf_prog_load+0x1ac3/0x2a80 [ 52.765695][ T6053] bpf_prog_load+0x1ac3/0x2a80 [ 52.765712][ T6053] ? __pfx_bpf_prog_load+0x10/0x10 [ 52.765738][ T6053] __sys_bpf+0x1f46/0x4a30 [ 52.765751][ T6053] ? __pfx___sys_bpf+0x10/0x10 [ 52.765761][ T6053] ? find_held_lock+0x2b/0x80 [ 52.765776][ T6053] ? get_pid_task+0xfc/0x250 [ 52.765790][ T6053] ? get_pid_task+0xfc/0x250 [ 52.765808][ T6053] ? find_held_lock+0x2b/0x80 [ 52.765825][ T6053] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.765857][ T6053] ? find_held_lock+0x2b/0x80 [ 52.765874][ T6053] ? ksys_write+0x190/0x250 [ 52.765884][ T6053] ? ksys_write+0x190/0x250 [ 52.765895][ T6053] ? lock_acquire+0x1d1/0x380 [ 52.765914][ T6053] ? fput+0x7c/0x100 [ 52.765928][ T6053] ? ksys_write+0x1ac/0x250 [ 52.765940][ T6053] ? __x64_sys_bpf+0xce/0x140 [ 52.765950][ T6053] __x64_sys_bpf+0xce/0x140 [ 52.765961][ T6053] ? do_syscall_64+0xae/0x790 [ 52.765976][ T6053] do_syscall_64+0x123/0x790 [ 52.765991][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.766002][ T6053] RIP: 0033:0x7f65bb59e159 [ 52.766012][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.766036][ T6053] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.766047][ T6053] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 52.766054][ T6053] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 52.766060][ T6053] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 52.766067][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.766073][ T6053] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 52.766086][ T6053] [ 52.833621][ T6062] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 52.958562][ T6081] FAULT_INJECTION: forcing a failure. [ 52.958562][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 52.958590][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 52.958611][ T6081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.958621][ T6081] Call Trace: [ 52.958627][ T6081] [ 52.958634][ T6081] dump_stack_lvl+0x100/0x190 [ 52.958664][ T6081] should_fail_ex.cold+0x5/0xa [ 52.958689][ T6081] should_failslab+0xc2/0x120 [ 52.958712][ T6081] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 52.958732][ T6081] ? __alloc_skb+0x5b7/0x710 [ 52.958751][ T6081] ? __alloc_skb+0x140/0x710 [ 52.958773][ T6081] __alloc_skb+0x140/0x710 [ 52.958790][ T6081] ? __alloc_skb+0x5b7/0x710 [ 52.958807][ T6081] ? __pfx___alloc_skb+0x10/0x10 [ 52.958832][ T6081] netlink_alloc_large_skb+0x69/0x150 [ 52.958853][ T6081] netlink_sendmsg+0x680/0xda0 [ 52.958875][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.958911][ T6081] ? selinux_socket_sendmsg+0x198/0x2f0 [ 52.958948][ T6081] ____sys_sendmsg+0xa4d/0xbe0 [ 52.958971][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.958989][ T6081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.959018][ T6081] ? lock_acquire+0x1d1/0x380 [ 52.959036][ T6081] ? get_pid_task+0x2a/0x250 [ 52.959062][ T6081] ___sys_sendmsg+0x190/0x1e0 [ 52.959089][ T6081] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.959114][ T6081] ? get_pid_task+0x106/0x250 [ 52.959145][ T6081] ? find_held_lock+0x2b/0x80 [ 52.959183][ T6081] __sys_sendmsg+0x160/0x210 [ 52.959205][ T6081] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.959237][ T6081] do_syscall_64+0x123/0x790 [ 52.959264][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.959283][ T6081] RIP: 0033:0x7f56abd9e159 [ 52.959298][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.959313][ T6081] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.959331][ T6081] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 52.959343][ T6081] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 52.959354][ T6081] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.959364][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.959402][ T6081] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 52.959424][ T6081] [ 53.080309][ T6093] FAULT_INJECTION: forcing a failure. [ 53.080309][ T6093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.080339][ T6093] CPU: 3 UID: 0 PID: 6093 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 53.080361][ T6093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.080372][ T6093] Call Trace: [ 53.080378][ T6093] [ 53.080385][ T6093] dump_stack_lvl+0x100/0x190 [ 53.080414][ T6093] should_fail_ex.cold+0x5/0xa [ 53.080441][ T6093] _copy_from_iter+0x1f4/0x1690 [ 53.080464][ T6093] ? __asan_memset+0x23/0x50 [ 53.080484][ T6093] ? __pfx__copy_from_iter+0x10/0x10 [ 53.080502][ T6093] ? __pfx___alloc_skb+0x10/0x10 [ 53.080522][ T6093] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 53.080550][ T6093] ? sock_has_perm+0x25a/0x2f0 [ 53.080577][ T6093] ? __pfx_sock_has_perm+0x10/0x10 [ 53.080608][ T6093] netlink_sendmsg+0x808/0xda0 [ 53.080629][ T6093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.080648][ T6093] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.080681][ T6093] ____sys_sendmsg+0xa4d/0xbe0 [ 53.080706][ T6093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.080727][ T6093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.080756][ T6093] ? lock_acquire+0x1d1/0x380 [ 53.080775][ T6093] ? get_pid_task+0x2a/0x250 [ 53.080801][ T6093] ___sys_sendmsg+0x190/0x1e0 [ 53.080830][ T6093] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.080856][ T6093] ? get_pid_task+0x106/0x250 [ 53.080889][ T6093] ? find_held_lock+0x2b/0x80 [ 53.080931][ T6093] __sys_sendmsg+0x160/0x210 [ 53.080953][ T6093] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.080986][ T6093] do_syscall_64+0x123/0x790 [ 53.081011][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.081038][ T6093] RIP: 0033:0x7f56abd9e159 [ 53.081055][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.081072][ T6093] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.081090][ T6093] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 53.081101][ T6093] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 53.081111][ T6093] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.081121][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.081132][ T6093] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 53.081158][ T6093] [ 53.197190][ T1481] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.265552][ T6109] FAULT_INJECTION: forcing a failure. [ 53.265552][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 53.265573][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 53.265585][ T6109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.265592][ T6109] Call Trace: [ 53.265596][ T6109] [ 53.265600][ T6109] dump_stack_lvl+0x100/0x190 [ 53.265620][ T6109] should_fail_ex.cold+0x5/0xa [ 53.265636][ T6109] should_failslab+0xc2/0x120 [ 53.265650][ T6109] __kmalloc_cache_node_noprof+0x94/0x720 [ 53.265663][ T6109] ? __css_rstat_updated+0x1ce/0x590 [ 53.265676][ T6109] ? __get_vm_area_node+0x124/0x350 [ 53.265692][ T6109] __get_vm_area_node+0x124/0x350 [ 53.265707][ T6109] __vmalloc_node_range_noprof+0x268/0x1420 [ 53.265722][ T6109] ? vhost_task_create+0x1db/0x370 [ 53.265738][ T6109] ? lock_acquire+0x1d1/0x380 [ 53.265750][ T6109] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 53.265768][ T6109] ? find_held_lock+0x2b/0x80 [ 53.265782][ T6109] ? rcu_read_unlock+0x17/0x60 [ 53.265800][ T6109] ? vhost_task_create+0x1db/0x370 [ 53.265820][ T6109] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.265836][ T6109] ? rcu_is_watching+0x13/0xc0 [ 53.265851][ T6109] ? trace_kmem_cache_alloc+0xdd/0x100 [ 53.265866][ T6109] ? vhost_task_create+0x1db/0x370 [ 53.265882][ T6109] __vmalloc_node_noprof+0xad/0xf0 [ 53.265896][ T6109] ? vhost_task_create+0x1db/0x370 [ 53.265914][ T6109] copy_process+0x803/0x8370 [ 53.265935][ T6109] ? __pfx_copy_process+0x10/0x10 [ 53.265947][ T6109] ? kasan_save_track+0x14/0x30 [ 53.265958][ T6109] ? __kasan_kmalloc+0xaa/0xb0 [ 53.265971][ T6109] ? lockdep_init_map_type+0x5c/0x250 [ 53.265984][ T6109] ? lockdep_init_map_type+0x5c/0x250 [ 53.265996][ T6109] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 53.266014][ T6109] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 53.266029][ T6109] vhost_task_create+0x1db/0x370 [ 53.266046][ T6109] ? __pfx_vhost_task_create+0x10/0x10 [ 53.266073][ T6109] ? __pfx_vhost_task_fn+0x10/0x10 [ 53.266091][ T6109] ? register_lock_class+0x3f/0x7b0 [ 53.266102][ T6109] ? rcu_is_watching+0x13/0xc0 [ 53.266116][ T6109] ? trace_contention_end+0x126/0x160 [ 53.266131][ T6109] kvm_mmu_post_init_vm+0x1b3/0x360 [ 53.266145][ T6109] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 53.266159][ T6109] ? __pfx___mutex_lock+0x10/0x10 [ 53.266174][ T6109] ? kasan_quarantine_put+0x104/0x240 [ 53.266187][ T6109] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.266200][ T6109] ? lock_acquire+0x1d1/0x380 [ 53.266212][ T6109] ? do_raw_write_lock+0x11e/0x260 [ 53.266225][ T6109] ? find_held_lock+0x2b/0x80 [ 53.266240][ T6109] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.266254][ T6109] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.266272][ T6109] kvm_vcpu_ioctl+0x730/0x1700 [ 53.266288][ T6109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.266303][ T6109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.266317][ T6109] ? do_vfs_ioctl+0x226/0x13e0 [ 53.266328][ T6109] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 53.266338][ T6109] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 53.266352][ T6109] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.266367][ T6109] ? __fget_files+0x34/0x3d0 [ 53.266386][ T6109] ? selinux_file_ioctl+0x13b/0x290 [ 53.266396][ T6109] ? selinux_file_ioctl+0xb6/0x290 [ 53.266408][ T6109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.266424][ T6109] __x64_sys_ioctl+0x18e/0x210 [ 53.266436][ T6109] do_syscall_64+0x123/0x790 [ 53.266451][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.266463][ T6109] RIP: 0033:0x7f56abd9e159 [ 53.266472][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.266482][ T6109] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.266493][ T6109] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 53.266500][ T6109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 53.266506][ T6109] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.266513][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.266519][ T6109] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 53.266533][ T6109] [ 53.347220][ T1481] usb 7-1: Using ep0 maxpacket: 32 [ 53.348152][ T1481] usb 7-1: New USB device found, idVendor=00c2, idProduct=0000, bcdDevice= 0.00 [ 53.348181][ T1481] usb 7-1: no configurations [ 53.348190][ T1481] usb 7-1: can't read configurations, error -22 [ 53.487289][ T1481] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.549016][ T69] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.618638][ T5092] Bluetooth: hci2: command tx timeout [ 53.618661][ T5092] Bluetooth: hci0: command tx timeout [ 53.628090][ T5732] Bluetooth: hci1: command tx timeout [ 53.647181][ T1481] usb 7-1: Using ep0 maxpacket: 32 [ 53.647923][ T1481] usb 7-1: New USB device found, idVendor=00c2, idProduct=0000, bcdDevice= 0.00 [ 53.647954][ T1481] usb 7-1: no configurations [ 53.647964][ T1481] usb 7-1: can't read configurations, error -22 [ 53.648279][ T1481] usb usb7-port1: attempt power cycle [ 53.703572][ T6120] FAULT_INJECTION: forcing a failure. [ 53.703572][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 53.703602][ T6120] CPU: 3 UID: 0 PID: 6120 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full) [ 53.703622][ T6120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.703632][ T6120] Call Trace: [ 53.703639][ T6120] [ 53.703646][ T6120] dump_stack_lvl+0x100/0x190 [ 53.703677][ T6120] should_fail_ex.cold+0x5/0xa [ 53.703703][ T6120] should_failslab+0xc2/0x120 [ 53.703726][ T6120] __kmalloc_noprof+0xfc/0x840 [ 53.703746][ T6120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 53.703777][ T6120] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 53.703804][ T6120] genl_family_rcv_msg_doit+0xc7/0x300 [ 53.703833][ T6120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 53.703867][ T6120] ? bpf_lsm_capable+0x9/0x10 [ 53.703892][ T6120] ? security_capable+0x80/0x260 [ 53.703923][ T6120] genl_rcv_msg+0x560/0x800 [ 53.703946][ T6120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.703965][ T6120] ? __lock_acquire+0x5c0/0x1f40 [ 53.703983][ T6120] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 53.704010][ T6120] ? __lock_acquire+0x5c0/0x1f40 [ 53.704034][ T6120] netlink_rcv_skb+0x159/0x420 [ 53.704052][ T6120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.704073][ T6120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.704101][ T6120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 53.704132][ T6120] genl_rcv+0x28/0x40 [ 53.704150][ T6120] netlink_unicast+0x585/0x850 [ 53.704173][ T6120] ? __pfx_netlink_unicast+0x10/0x10 [ 53.704198][ T6120] netlink_sendmsg+0x8b0/0xda0 [ 53.704221][ T6120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.704241][ T6120] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.704275][ T6120] ____sys_sendmsg+0xa4d/0xbe0 [ 53.704298][ T6120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.704318][ T6120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.704349][ T6120] ? lock_acquire+0x1d1/0x380 [ 53.704366][ T6120] ? get_pid_task+0x2a/0x250 [ 53.704390][ T6120] ___sys_sendmsg+0x190/0x1e0 [ 53.704417][ T6120] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.704442][ T6120] ? get_pid_task+0x106/0x250 [ 53.704474][ T6120] ? find_held_lock+0x2b/0x80 [ 53.704516][ T6120] __sys_sendmsg+0x160/0x210 [ 53.704536][ T6120] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.704576][ T6120] do_syscall_64+0x123/0x790 [ 53.704601][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.704620][ T6120] RIP: 0033:0x7f56abd9e159 [ 53.704635][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.704651][ T6120] RSP: 002b:00007f56acd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.704668][ T6120] RAX: ffffffffffffffda RBX: 00007f56ac025fa0 RCX: 00007f56abd9e159 [ 53.704678][ T6120] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 53.704688][ T6120] RBP: 00007f56acd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.704698][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.704710][ T6120] R13: 00007f56ac026038 R14: 00007f56ac025fa0 R15: 00007ffd19306318 [ 53.704735][ T6120] [ 53.708674][ T5732] Bluetooth: hci3: command tx timeout [ 53.722143][ T69] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 53.729420][ T69] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 53.729442][ T69] usb 6-1: config 1 has no interface number 0 [ 53.756180][ T6124] capability: warning: `syz.0.84' uses deprecated v2 capabilities in a way that may be insecure [ 53.824628][ T69] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.824643][ T69] usb 6-1: Product: syz [ 53.824650][ T69] usb 6-1: Manufacturer: syz [ 53.824658][ T69] usb 6-1: SerialNumber: syz [ 53.838545][ T69] usb 6-1: 3:1 : does not exist [ 53.838564][ T69] usb 6-1: 3:2 : does not exist [ 53.924964][ T6138] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000004ÿÿÿÿÿÿÿÿ00000000000000000000' [ 54.007938][ T1481] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.029122][ T1481] usb 7-1: Using ep0 maxpacket: 32 [ 54.029650][ T1481] usb 7-1: New USB device found, idVendor=00c2, idProduct=0000, bcdDevice= 0.00 [ 54.029677][ T1481] usb 7-1: no configurations [ 54.029685][ T1481] usb 7-1: can't read configurations, error -22 [ 54.149410][ T6153] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 54.156710][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.158696][ T1481] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 54.159633][ T6153] team0: Port device netdevsim1 added [ 54.179205][ T1481] usb 7-1: Using ep0 maxpacket: 32 [ 54.179705][ T1481] usb 7-1: New USB device found, idVendor=00c2, idProduct=0000, bcdDevice= 0.00 [ 54.179726][ T1481] usb 7-1: no configurations [ 54.179732][ T1481] usb 7-1: can't read configurations, error -22 [ 54.179921][ T1481] usb usb7-port1: unable to enumerate USB device [ 54.262230][ T6159] FAULT_INJECTION: forcing a failure. [ 54.262230][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 54.262259][ T6159] CPU: 2 UID: 0 PID: 6159 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 54.262279][ T6159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.262289][ T6159] Call Trace: [ 54.262296][ T6159] [ 54.262303][ T6159] dump_stack_lvl+0x100/0x190 [ 54.262335][ T6159] should_fail_ex.cold+0x5/0xa [ 54.262362][ T6159] should_failslab+0xc2/0x120 [ 54.262385][ T6159] __kmalloc_noprof+0xfc/0x840 [ 54.262405][ T6159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 54.262434][ T6159] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 54.262463][ T6159] genl_family_rcv_msg_doit+0xc7/0x300 [ 54.262487][ T6159] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 54.262518][ T6159] ? bpf_lsm_capable+0x9/0x10 [ 54.262543][ T6159] ? security_capable+0x80/0x260 [ 54.262574][ T6159] genl_rcv_msg+0x560/0x800 [ 54.262599][ T6159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.262619][ T6159] ? __lock_acquire+0x5c0/0x1f40 [ 54.262637][ T6159] ? __pfx_net_dm_nl_pre_doit+0x10/0x10 [ 54.262659][ T6159] ? __pfx_net_dm_cmd_config+0x10/0x10 [ 54.262681][ T6159] ? __pfx_net_dm_nl_post_doit+0x10/0x10 [ 54.262706][ T6159] ? __lock_acquire+0x5c0/0x1f40 [ 54.262730][ T6159] netlink_rcv_skb+0x159/0x420 [ 54.262749][ T6159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.262770][ T6159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.262799][ T6159] ? netlink_deliver_tap+0x1ae/0xcc0 [ 54.262831][ T6159] genl_rcv+0x28/0x40 [ 54.262850][ T6159] netlink_unicast+0x585/0x850 [ 54.262872][ T6159] ? __pfx_netlink_unicast+0x10/0x10 [ 54.262891][ T6159] ? __pfx_sock_has_perm+0x10/0x10 [ 54.262923][ T6159] netlink_sendmsg+0x8b0/0xda0 [ 54.262946][ T6159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.262968][ T6159] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.263002][ T6159] ____sys_sendmsg+0xa4d/0xbe0 [ 54.263026][ T6159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.263047][ T6159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.263077][ T6159] ? lock_acquire+0x1d1/0x380 [ 54.263094][ T6159] ? get_pid_task+0x2a/0x250 [ 54.263128][ T6159] ___sys_sendmsg+0x190/0x1e0 [ 54.263156][ T6159] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.263182][ T6159] ? get_pid_task+0x106/0x250 [ 54.263216][ T6159] ? find_held_lock+0x2b/0x80 [ 54.263258][ T6159] __sys_sendmsg+0x160/0x210 [ 54.263280][ T6159] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.263315][ T6159] do_syscall_64+0x123/0x790 [ 54.263342][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.263361][ T6159] RIP: 0033:0x7f0a25b9e159 [ 54.263400][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.263416][ T6159] RSP: 002b:00007f0a26ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.263434][ T6159] RAX: ffffffffffffffda RBX: 00007f0a25e25fa0 RCX: 00007f0a25b9e159 [ 54.263445][ T6159] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 54.263456][ T6159] RBP: 00007f0a26ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 54.263466][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.263477][ T6159] R13: 00007f0a25e26038 R14: 00007f0a25e25fa0 R15: 00007fff471bf258 [ 54.263503][ T6159] [ 54.309493][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 54.309509][ T6161] netlink: 48 bytes leftover after parsing attributes in process `syz.3.101'. [ 54.377195][ T3382] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.513663][ T6173] FAULT_INJECTION: forcing a failure. [ 54.513663][ T6173] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.513682][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 54.513695][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.513701][ T6173] Call Trace: [ 54.513706][ T6173] [ 54.513710][ T6173] dump_stack_lvl+0x100/0x190 [ 54.513730][ T6173] should_fail_ex.cold+0x5/0xa [ 54.513744][ T6173] ? prepare_alloc_pages+0x16d/0x5b0 [ 54.513759][ T6173] should_fail_alloc_page+0xeb/0x140 [ 54.513774][ T6173] prepare_alloc_pages+0x1f0/0x5b0 [ 54.513787][ T6173] ? is_bpf_text_address+0x94/0x1a0 [ 54.513804][ T6173] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 54.513828][ T6173] ? stack_trace_save+0x8e/0xc0 [ 54.513845][ T6173] ? __pfx_stack_trace_save+0x10/0x10 [ 54.513861][ T6173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 54.513879][ T6173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 54.513896][ T6173] ? is_bpf_text_address+0x94/0x1a0 [ 54.513913][ T6173] ? kasan_save_stack+0x3f/0x50 [ 54.513924][ T6173] ? kasan_save_stack+0x30/0x50 [ 54.513935][ T6173] ? kasan_save_track+0x14/0x30 [ 54.513946][ T6173] ? __kasan_slab_alloc+0x89/0x90 [ 54.513960][ T6173] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 54.513972][ T6173] ? alloc_vmap_area+0x640/0x2bb0 [ 54.513983][ T6173] ? __get_vm_area_node+0x1ed/0x350 [ 54.513995][ T6173] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 54.514009][ T6173] ? __vmalloc_node_noprof+0xad/0xf0 [ 54.514022][ T6173] ? copy_process+0x803/0x8370 [ 54.514036][ T6173] ? vhost_task_create+0x1db/0x370 [ 54.514057][ T6173] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 54.514075][ T6173] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 54.514093][ T6173] ? kvm_vcpu_ioctl+0x730/0x1700 [ 54.514114][ T6173] ? __x64_sys_ioctl+0x18e/0x210 [ 54.514130][ T6173] ? do_syscall_64+0x123/0x790 [ 54.514145][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.514163][ T6173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.514176][ T6173] ? policy_nodemask+0xed/0x4f0 [ 54.514192][ T6173] alloc_pages_mpol+0x201/0x550 [ 54.514207][ T6173] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 54.514225][ T6173] alloc_pages_noprof+0x1a/0x160 [ 54.514242][ T6173] get_free_pages_noprof+0x10/0xb0 [ 54.514254][ T6173] __kasan_populate_vmalloc+0xa0/0x210 [ 54.514268][ T6173] alloc_vmap_area+0x95d/0x2bb0 [ 54.514285][ T6173] ? kasan_save_track+0x14/0x30 [ 54.514296][ T6173] ? __kasan_kmalloc+0xaa/0xb0 [ 54.514308][ T6173] ? __pfx_alloc_vmap_area+0x10/0x10 [ 54.514321][ T6173] ? __get_vm_area_node+0x124/0x350 [ 54.514336][ T6173] __get_vm_area_node+0x1ed/0x350 [ 54.514351][ T6173] __vmalloc_node_range_noprof+0x268/0x1420 [ 54.514367][ T6173] ? vhost_task_create+0x1db/0x370 [ 54.514401][ T6173] ? lock_acquire+0x1d1/0x380 [ 54.514417][ T6173] ? vhost_task_create+0x1db/0x370 [ 54.514439][ T6173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.514460][ T6173] ? rcu_is_watching+0x13/0xc0 [ 54.514475][ T6173] ? trace_kmem_cache_alloc+0xdd/0x100 [ 54.514491][ T6173] ? vhost_task_create+0x1db/0x370 [ 54.514507][ T6173] __vmalloc_node_noprof+0xad/0xf0 [ 54.514522][ T6173] ? vhost_task_create+0x1db/0x370 [ 54.514540][ T6173] copy_process+0x803/0x8370 [ 54.514561][ T6173] ? __pfx_copy_process+0x10/0x10 [ 54.514572][ T6173] ? kasan_save_track+0x14/0x30 [ 54.514584][ T6173] ? __kasan_kmalloc+0xaa/0xb0 [ 54.514596][ T6173] ? lockdep_init_map_type+0x5c/0x250 [ 54.514610][ T6173] ? lockdep_init_map_type+0x5c/0x250 [ 54.514622][ T6173] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 54.514641][ T6173] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 54.514656][ T6173] vhost_task_create+0x1db/0x370 [ 54.514674][ T6173] ? __pfx_vhost_task_create+0x10/0x10 [ 54.514695][ T6173] ? __pfx_vhost_task_fn+0x10/0x10 [ 54.514714][ T6173] ? register_lock_class+0x3f/0x7b0 [ 54.514726][ T6173] ? rcu_is_watching+0x13/0xc0 [ 54.514739][ T6173] ? trace_contention_end+0x126/0x160 [ 54.514754][ T6173] kvm_mmu_post_init_vm+0x1b3/0x360 [ 54.514768][ T6173] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 54.514782][ T6173] ? __pfx___mutex_lock+0x10/0x10 [ 54.514796][ T6173] ? kasan_quarantine_put+0x104/0x240 [ 54.514809][ T6173] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.514822][ T6173] ? lock_acquire+0x1d1/0x380 [ 54.514833][ T6173] ? do_raw_write_lock+0x11e/0x260 [ 54.514846][ T6173] ? find_held_lock+0x2b/0x80 [ 54.514861][ T6173] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 54.514876][ T6173] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 54.514894][ T6173] kvm_vcpu_ioctl+0x730/0x1700 [ 54.514910][ T6173] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.514925][ T6173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.514939][ T6173] ? do_vfs_ioctl+0x226/0x13e0 [ 54.514950][ T6173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.514959][ T6173] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 54.514974][ T6173] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.514988][ T6173] ? __fget_files+0x34/0x3d0 [ 54.515008][ T6173] ? selinux_file_ioctl+0x13b/0x290 [ 54.515019][ T6173] ? selinux_file_ioctl+0xb6/0x290 [ 54.515031][ T6173] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.515047][ T6173] __x64_sys_ioctl+0x18e/0x210 [ 54.515058][ T6173] do_syscall_64+0x123/0x790 [ 54.515074][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.515086][ T6173] RIP: 0033:0x7f0a25b9e159 [ 54.515095][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.515105][ T6173] RSP: 002b:00007f0a26ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.515116][ T6173] RAX: ffffffffffffffda RBX: 00007f0a25e25fa0 RCX: 00007f0a25b9e159 [ 54.515123][ T6173] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 54.515130][ T6173] RBP: 00007f0a26ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 54.515136][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.515142][ T6173] R13: 00007f0a25e26038 R14: 00007f0a25e25fa0 R15: 00007fff471bf258 [ 54.515157][ T6173] [ 54.527191][ T3382] usb 5-1: Using ep0 maxpacket: 16 [ 54.527946][ T3382] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 54.528890][ T3382] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 54.528908][ T3382] usb 5-1: config 0 has no interface number 0 [ 54.528936][ T3382] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.530304][ T3382] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 54.530322][ T3382] usb 5-1: Product: syz [ 54.530333][ T3382] usb 5-1: SerialNumber: syz [ 54.537376][ T3382] usb 5-1: config 0 descriptor?? [ 54.541663][ T3382] cm109 5-1:0.8: invalid payload size 3, expected 4 [ 54.545014][ T3382] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input5 [ 54.590702][ T2259] usb 6-1: USB disconnect, device number 2 [ 54.945996][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.946743][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.949463][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.951270][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.952080][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.955046][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.956902][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.959767][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.960618][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.961367][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.962202][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.963054][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.963924][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.964681][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.965395][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.966159][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.968250][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.969002][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.969874][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.970619][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.971385][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.972219][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.972959][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.973726][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.974460][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.975254][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.976010][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.976823][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.978216][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.979107][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.980723][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.981453][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.982953][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.986664][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.987623][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.988412][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.989524][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.991034][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.992675][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 54.993429][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.000924][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.004125][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.009017][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.009836][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.010619][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.011337][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.017910][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.018622][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.019474][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.020202][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.020956][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.021687][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.022425][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.023161][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.023949][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.024827][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.025574][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.026477][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.027419][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.028231][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.028951][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.029701][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.030442][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.031171][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.031964][ T6175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 55.163070][ T6189] FAULT_INJECTION: forcing a failure. [ 55.163070][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 55.163138][ T6189] CPU: 3 UID: 0 PID: 6189 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 55.163152][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.163159][ T6189] Call Trace: [ 55.163163][ T6189] [ 55.163168][ T6189] dump_stack_lvl+0x100/0x190 [ 55.163187][ T6189] should_fail_ex.cold+0x5/0xa [ 55.163203][ T6189] should_failslab+0xc2/0x120 [ 55.163218][ T6189] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 55.163231][ T6189] ? __alloc_skb+0x140/0x710 [ 55.163256][ T6189] __alloc_skb+0x140/0x710 [ 55.163269][ T6189] ? __alloc_skb+0x5b7/0x710 [ 55.163280][ T6189] ? __pfx___alloc_skb+0x10/0x10 [ 55.163292][ T6189] ? __nla_validate_parse+0x1e7/0x28b0 [ 55.163311][ T6189] ieee802154_nl_new_reply+0x32/0x110 [ 55.163326][ T6189] ieee802154_add_iface+0x273/0xa90 [ 55.163342][ T6189] ? rcu_is_watching+0x13/0xc0 [ 55.163357][ T6189] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 55.163394][ T6189] ? __kasan_kmalloc+0xaa/0xb0 [ 55.163409][ T6189] ? __nla_parse+0x40/0x60 [ 55.163425][ T6189] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 55.163441][ T6189] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 55.163457][ T6189] genl_family_rcv_msg_doit+0x214/0x300 [ 55.163472][ T6189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 55.163490][ T6189] ? bpf_lsm_capable+0x9/0x10 [ 55.163506][ T6189] ? security_capable+0x80/0x260 [ 55.163526][ T6189] genl_rcv_msg+0x560/0x800 [ 55.163540][ T6189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.163553][ T6189] ? __lock_acquire+0x5c0/0x1f40 [ 55.163564][ T6189] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 55.163581][ T6189] ? __lock_acquire+0x5c0/0x1f40 [ 55.163595][ T6189] netlink_rcv_skb+0x159/0x420 [ 55.163606][ T6189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.163620][ T6189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.163637][ T6189] ? netlink_deliver_tap+0x1ae/0xcc0 [ 55.163657][ T6189] genl_rcv+0x28/0x40 [ 55.163668][ T6189] netlink_unicast+0x585/0x850 [ 55.163681][ T6189] ? __pfx_netlink_unicast+0x10/0x10 [ 55.163697][ T6189] netlink_sendmsg+0x8b0/0xda0 [ 55.163710][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.163723][ T6189] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.163743][ T6189] ____sys_sendmsg+0xa4d/0xbe0 [ 55.163757][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.163770][ T6189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.163788][ T6189] ? lock_acquire+0x1d1/0x380 [ 55.163799][ T6189] ? get_pid_task+0x2a/0x250 [ 55.163815][ T6189] ___sys_sendmsg+0x190/0x1e0 [ 55.163832][ T6189] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.163848][ T6189] ? get_pid_task+0x106/0x250 [ 55.163868][ T6189] ? find_held_lock+0x2b/0x80 [ 55.163896][ T6189] __sys_sendmsg+0x160/0x210 [ 55.163910][ T6189] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.163930][ T6189] do_syscall_64+0x123/0x790 [ 55.163945][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.163957][ T6189] RIP: 0033:0x7f65bb59e159 [ 55.163967][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.163977][ T6189] RSP: 002b:00007f65bc4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.163989][ T6189] RAX: ffffffffffffffda RBX: 00007f65bb825fa0 RCX: 00007f65bb59e159 [ 55.163996][ T6189] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 55.164003][ T6189] RBP: 00007f65bc4df090 R08: 0000000000000000 R09: 0000000000000000 [ 55.164009][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.164016][ T6189] R13: 00007f65bb826038 R14: 00007f65bb825fa0 R15: 00007fff380bcba8 [ 55.164030][ T6189] [ 55.322099][ C3] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 55.322140][ C3] ------------[ cut here ]------------ [ 55.322147][ C3] URB ffff88802cea4500 submitted while active [ 55.322153][ C3] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#3: syz.3.108/6186 [ 55.322330][ T6154] usb 5-1: USB disconnect, device number 2 [ 55.333132][ C3] Modules linked in: [ 55.334370][ C3] CPU: 3 UID: 0 PID: 6186 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(full) [ 55.337174][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.340375][ C3] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 55.342148][ C3] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 de 29 7d fa 48 8d 3d e7 63 c3 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 55.348105][ C3] RSP: 0018:ffffc90000708af8 EFLAGS: 00010046 [ 55.350007][ C3] RAX: 0000000000000000 RBX: ffff88802cea4500 RCX: 0000000000000102 [ 55.352456][ C3] RDX: ffff888029cd8000 RSI: ffff88802cea4500 RDI: ffffffff91525020 [ 55.354910][ C3] RBP: ffff888059884640 R08: 0000000000000001 R09: 0000000000000000 [ 55.357627][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000046 [ 55.360347][ C3] R13: ffff888059418858 R14: 000000000000000f R15: 0000000000000001 [ 55.362795][ C3] FS: 0000000000000000(0000) GS:ffff8880d5e5a000(0000) knlGS:0000000000000000 [ 55.365564][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.367641][ C3] CR2: 00007f65bc4bed58 CR3: 00000000594c6000 CR4: 0000000000352ef0 [ 55.370127][ C3] Call Trace: [ 55.371192][ C3] [ 55.372126][ C3] cm109_urb_irq_callback+0x473/0xa70 [ 55.373811][ C3] ? do_raw_spin_lock+0x128/0x260 [ 55.375424][ C3] __usb_hcd_giveback_urb+0x38e/0x610 [ 55.377209][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 55.378846][ C3] dummy_timer+0xdb2/0x3700 [ 55.380333][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.382179][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 55.384006][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.385825][ C3] ? mark_held_locks+0x40/0x70 [ 55.387488][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.389215][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.390742][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 55.392351][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 55.393913][ C3] handle_softirqs+0x1e6/0x9d0 [ 55.395374][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 55.396937][ C3] ? _raw_spin_unlock+0x28/0x50 [ 55.398427][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 55.400157][ C3] __irq_exit_rcu+0x16a/0x210 [ 55.401643][ C3] irq_exit_rcu+0x9/0x30 [ 55.402958][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 55.404843][ C3] [ 55.405958][ C3] [ 55.406916][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.408805][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 55.410767][ C3] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b 8b 82 10 17 00 00 <83> f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 00 00 48 8b 01 48 [ 55.416579][ C3] RSP: 0018:ffffc90005ab74c8 EFLAGS: 00000246 [ 55.418451][ C3] RAX: 0000000000000000 RBX: ffffea00014b77c0 RCX: 0000000000000001 [ 55.421046][ C3] RDX: ffff888029cd8000 RSI: ffffffff826aa329 RDI: ffffea00014b77c8 [ 55.423527][ C3] RBP: ffffea00014b77c0 R08: 0000000000000005 R09: 0000000000000000 [ 55.425977][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 55.428429][ C3] R13: ffff8880354b68c0 R14: 0000000000052ddf R15: ffffea00014b77f0 [ 55.430885][ C3] ? folio_remove_rmap_ptes+0x139/0xdd0 [ 55.432629][ C3] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 55.434442][ C3] folio_remove_rmap_ptes+0x139/0xdd0 [ 55.436134][ C3] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 55.438308][ C3] __zap_vma_range+0x1fe7/0x48e0 [ 55.440203][ C3] ? __pfx___zap_vma_range+0x10/0x10 [ 55.441870][ C3] ? mas_next_slot+0xc05/0x13a0 [ 55.443568][ C3] unmap_vmas+0x299/0x5f0 [ 55.445054][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 55.446521][ C3] ? mas_next_slot+0xc05/0x13a0 [ 55.448074][ C3] exit_mmap+0x1ef/0xa00 [ 55.449420][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 55.450971][ C3] ? rcu_is_watching+0x13/0xc0 [ 55.452495][ C3] ? find_held_lock+0x2b/0x80 [ 55.453901][ C3] ? uprobe_clear_state+0x5f/0x250 [ 55.455320][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 55.456883][ C3] __mmput+0x12a/0x410 [ 55.458029][ C3] mmput+0x67/0x80 [ 55.459122][ C3] do_exit+0x8b1/0x2ae0 [ 55.460468][ C3] ? __pfx_do_exit+0x10/0x10 [ 55.461929][ C3] ? do_raw_spin_lock+0x128/0x260 [ 55.463473][ C3] ? find_held_lock+0x2b/0x80 [ 55.464952][ C3] ? get_signal+0x7e0/0x21e0 [ 55.466387][ C3] do_group_exit+0xd5/0x2a0 [ 55.467754][ C3] get_signal+0x1ec7/0x21e0 [ 55.469203][ C3] ? __pfx_get_signal+0x10/0x10 [ 55.470759][ C3] ? do_futex+0x190/0x440 [ 55.472132][ C3] arch_do_signal_or_restart+0x91/0x7e0 [ 55.473860][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 55.475815][ C3] exit_to_user_mode_loop+0x139/0x700 [ 55.477492][ C3] ? rcu_is_watching+0x13/0xc0 [ 55.479014][ C3] do_syscall_64+0x661/0x790 [ 55.480513][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.482353][ C3] RIP: 0033:0x7f0a25b9e159 [ 55.483759][ C3] Code: Unable to access opcode bytes at 0x7f0a25b9e12f. [ 55.485900][ C3] RSP: 002b:00007f0a26ae90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.488461][ C3] RAX: fffffffffffffe00 RBX: 00007f0a25e25fa8 RCX: 00007f0a25b9e159 [ 55.490942][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a25e25fa8 [ 55.493426][ C3] RBP: 00007f0a25e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 55.495782][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.498148][ C3] R13: 00007f0a25e26038 R14: 00007fff471bf170 R15: 00007fff471bf258 [ 55.500660][ C3] [ 55.501647][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.503917][ C3] CPU: 3 UID: 0 PID: 6186 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(full) [ 55.506683][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.509888][ C3] Call Trace: [ 55.510981][ C3] [ 55.511921][ C3] dump_stack_lvl+0x100/0x190 [ 55.513406][ C3] vpanic+0x553/0x970 [ 55.514621][ C3] ? __pfx_vpanic+0x10/0x10 [ 55.516003][ C3] panic+0xd1/0xe0 [ 55.517147][ C3] ? __pfx_panic+0x10/0x10 [ 55.518575][ C3] check_panic_on_warn.cold+0x19/0x34 [ 55.520314][ C3] ? usb_submit_urb+0x1689/0x19b0 [ 55.521890][ C3] __warn.cold+0x191/0x318 [ 55.523395][ C3] __report_bug+0x30f/0x440 [ 55.525199][ C3] ? usb_submit_urb+0x1689/0x19b0 [ 55.527033][ C3] ? __pfx___report_bug+0x10/0x10 [ 55.528662][ C3] ? dev_printk_emit+0xd2/0x10d [ 55.530250][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 55.531977][ C3] report_bug_entry+0xe2/0x290 [ 55.533490][ C3] ? usb_submit_urb+0x168c/0x19b0 [ 55.535058][ C3] handle_bug+0x1cd/0x2a0 [ 55.536359][ C3] exc_invalid_op+0x17/0x50 [ 55.537785][ C3] asm_exc_invalid_op+0x1a/0x20 [ 55.539298][ C3] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 55.541077][ C3] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 de 29 7d fa 48 8d 3d e7 63 c3 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 55.548089][ C3] RSP: 0018:ffffc90000708af8 EFLAGS: 00010046 [ 55.550043][ C3] RAX: 0000000000000000 RBX: ffff88802cea4500 RCX: 0000000000000102 [ 55.552539][ C3] RDX: ffff888029cd8000 RSI: ffff88802cea4500 RDI: ffffffff91525020 [ 55.555007][ C3] RBP: ffff888059884640 R08: 0000000000000001 R09: 0000000000000000 [ 55.557679][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000046 [ 55.560260][ C3] R13: ffff888059418858 R14: 000000000000000f R15: 0000000000000001 [ 55.562741][ C3] ? usb_submit_urb+0x1682/0x19b0 [ 55.564360][ C3] cm109_urb_irq_callback+0x473/0xa70 [ 55.566047][ C3] ? do_raw_spin_lock+0x128/0x260 [ 55.567643][ C3] __usb_hcd_giveback_urb+0x38e/0x610 [ 55.569338][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 55.571035][ C3] dummy_timer+0xdb2/0x3700 [ 55.572580][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.574394][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 55.576095][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.577588][ C3] ? mark_held_locks+0x40/0x70 [ 55.579079][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.580947][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.582477][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 55.584093][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 55.585732][ C3] handle_softirqs+0x1e6/0x9d0 [ 55.587246][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 55.588910][ C3] ? _raw_spin_unlock+0x28/0x50 [ 55.590479][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 55.592264][ C3] __irq_exit_rcu+0x16a/0x210 [ 55.593756][ C3] irq_exit_rcu+0x9/0x30 [ 55.595102][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 55.596867][ C3] [ 55.597834][ C3] [ 55.598804][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.600772][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 55.602779][ C3] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b 8b 82 10 17 00 00 <83> f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 00 00 48 8b 01 48 [ 55.610109][ C3] RSP: 0018:ffffc90005ab74c8 EFLAGS: 00000246 [ 55.612103][ C3] RAX: 0000000000000000 RBX: ffffea00014b77c0 RCX: 0000000000000001 [ 55.614537][ C3] RDX: ffff888029cd8000 RSI: ffffffff826aa329 RDI: ffffea00014b77c8 [ 55.617016][ C3] RBP: ffffea00014b77c0 R08: 0000000000000005 R09: 0000000000000000 [ 55.619540][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 55.622026][ C3] R13: ffff8880354b68c0 R14: 0000000000052ddf R15: ffffea00014b77f0 [ 55.624520][ C3] ? folio_remove_rmap_ptes+0x139/0xdd0 [ 55.626200][ C3] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 55.628001][ C3] folio_remove_rmap_ptes+0x139/0xdd0 [ 55.629706][ C3] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 55.631986][ C3] __zap_vma_range+0x1fe7/0x48e0 [ 55.633576][ C3] ? __pfx___zap_vma_range+0x10/0x10 [ 55.635210][ C3] ? mas_next_slot+0xc05/0x13a0 [ 55.636708][ C3] unmap_vmas+0x299/0x5f0 [ 55.638040][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 55.639570][ C3] ? mas_next_slot+0xc05/0x13a0 [ 55.641147][ C3] exit_mmap+0x1ef/0xa00 [ 55.642497][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 55.644053][ C3] ? rcu_is_watching+0x13/0xc0 [ 55.645565][ C3] ? find_held_lock+0x2b/0x80 [ 55.647048][ C3] ? uprobe_clear_state+0x5f/0x250 [ 55.648661][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 55.650444][ C3] __mmput+0x12a/0x410 [ 55.651740][ C3] mmput+0x67/0x80 [ 55.652928][ C3] do_exit+0x8b1/0x2ae0 [ 55.654239][ C3] ? __pfx_do_exit+0x10/0x10 [ 55.655699][ C3] ? do_raw_spin_lock+0x128/0x260 [ 55.657255][ C3] ? find_held_lock+0x2b/0x80 [ 55.658701][ C3] ? get_signal+0x7e0/0x21e0 [ 55.660156][ C3] do_group_exit+0xd5/0x2a0 [ 55.661510][ C3] get_signal+0x1ec7/0x21e0 [ 55.662948][ C3] ? __pfx_get_signal+0x10/0x10 [ 55.664429][ C3] ? do_futex+0x190/0x440 [ 55.665718][ C3] arch_do_signal_or_restart+0x91/0x7e0 [ 55.667403][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 55.669331][ C3] exit_to_user_mode_loop+0x139/0x700 [ 55.671044][ C3] ? rcu_is_watching+0x13/0xc0 [ 55.672559][ C3] do_syscall_64+0x661/0x790 [ 55.674002][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.675772][ C3] RIP: 0033:0x7f0a25b9e159 [ 55.677150][ C3] Code: Unable to access opcode bytes at 0x7f0a25b9e12f. [ 55.679337][ C3] RSP: 002b:00007f0a26ae90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.681969][ C3] RAX: fffffffffffffe00 RBX: 00007f0a25e25fa8 RCX: 00007f0a25b9e159 [ 55.684565][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a25e25fa8 [ 55.687024][ C3] RBP: 00007f0a25e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 55.689487][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.691946][ C3] R13: 00007f0a25e26038 R14: 00007fff471bf170 R15: 00007fff471bf258 [ 55.694384][ C3] [ 55.695987][ C3] Kernel Offset: disabled [ 55.697345][ C3] Rebooting in 86400 seconds..