last executing test programs: 3.099826086s ago: executing program 0 (id=533): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffc01, 0x3]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44050}, 0x1000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x800b, 0xc, 0xc711, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2, 0x3}, &(0x7f0000000380)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xce3e}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x91d}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.099525877s ago: executing program 0 (id=534): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@metacopy_off}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_auto}], [{@context={'context', 0x3d, 'system_u'}}]}) shutdown(r0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nr0\x00'}) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(authenc(blake2s-128-x86,xts-cast6-avx))\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000107, 0x0, 0x6}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687d", 0x1d}], 0x29}, 0x20000084) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x400) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000bc0)={0x0, "b49501800000d171868b86c8dfa70378"}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendto$inet(r3, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'vlan1\x00', {'ip_vti0\x00'}, 0x2}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44048001}, 0xc0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.561300493s ago: executing program 0 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) 2.512137278s ago: executing program 0 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000000c0)}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x35, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x56d1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x0, 0x4, 0xe, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @exit]}, &(0x7f0000000380)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x9, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x4, 0x7, 0x4}, {0x5, 0x4, 0xe, 0xb}, {0x0, 0x2, 0x0, 0x9}, {0x3, 0x1, 0x0, 0x4}, {0x4, 0x1, 0x2, 0x5}], 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000005c0)={r0, r8}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40440c0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_setup(0x631, &(0x7f0000000600)={0x0, 0x652e, 0x25e7092cc6223988, 0x2, 0x3ac, 0x0, r9}) r10 = epoll_create(0x6) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r11, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x7ff}]}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000180)={0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r12 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r12, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 1.429572955s ago: executing program 3 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) mount$overlay(0x8cff, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@metacopy_on}, {@userxattr}], [], 0x2c}) 1.352269948s ago: executing program 3 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x1000007ffffffa) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000f0a000/0x1000)=nil, 0x1000, 0x11) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x20004200, &(0x7f0000000080)="25d75a4396442a4dacf273c3fc3bdfa414d2115f4aad19c2d9a40ba696200c29089eb8f15b5464aae1d1337df50037e2c98f447193ec27c265e987e955c4914b520352484e8c194d137f7ebd45def88e3ad156efb638badb0f8a484d3740cbdd6048fb704ca50896a952f7f9bb4b1199fdb747028fc9853c0e2ff1af6a87120badedd3b08060f558b0524aee4a", 0x8d, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="877a83f3c077fcc709f95ca01edde4bb2b8d8b1deb2c4d13ece23f52524a939831510bb38d11e3aad380af3858210f690de8a1662b32e40c920c729220420d1fa392d8fbe83f8c62ca45468b9f577d5222ebde6af6dc045caf85998d621ad6c55d345cc027a2fba36ecf4b29d49fac1460583997c924c6dba685fb2e151933f374a952d31823841d1c0b880efafc7594dd99856bedd91f1595b63cedf0856b2623d6bdf2463122f1785d6395") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 1.051145681s ago: executing program 0 (id=552): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xfffffffc], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xfff, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000001a80)={0x0, 0x0, 0x4}) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) r3 = gettid() r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROMREADAUDIO(r4, 0x530e, &(0x7f0000000080)={@lba=0x7, 0x1, 0x21, &(0x7f0000000040)=""/33}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd50f15b47f07015e, 0x0) tkill(r3, 0xb) 852.66294ms ago: executing program 0 (id=554): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698}], 0x1) semctl$SETALL(r0, 0x0, 0x11, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 561.989477ms ago: executing program 3 (id=557): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4048800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 561.602931ms ago: executing program 1 (id=558): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0x2020) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="9089", 0x2}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x9, 0x1, 0x7fffffff}}], 0x20, 0x4000}], 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x48, r12, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x3, 0x1, 0x5}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4}) 440.539694ms ago: executing program 1 (id=560): syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) 352.029434ms ago: executing program 1 (id=561): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb45470c1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x39}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x954d, r0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000380)={r1, 0x0, 0xc0000, 0x8, 0x8fd0, 0x4, [0x461, 0x1000000000000000, 0x7fffffff, 0x6, 0xd3, 0x2]}) write(r0, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x4048810) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) 351.862504ms ago: executing program 2 (id=562): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x18, r1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x10, 0x20}, 0x18) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x2) 211.300462ms ago: executing program 1 (id=563): close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 211.127475ms ago: executing program 2 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) 210.913675ms ago: executing program 1 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x80, 0x4) 210.659278ms ago: executing program 2 (id=566): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x801) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002000)=@delqdisc={0x18c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0xfff2, 0xffe2}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x2, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xfb, '\x00', 0x8, 0x698b, 0x4, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x800, 0x5, 0x2, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xb0, 0x6, 0x4, 0x30}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd8, '\x00', 0x3d, 0x6, 0x0, 0x4}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0x7fff, 0xb7, 0x0, 0x6, 0xff, 0x8}}, {0x14, 0x2, [0xffff, 0x4, 0x9, 0x4, 0x5, 0x6, 0xc, 0x30]}}, {{0x1c, 0x1, {0x4, 0x40, 0x7ff, 0x80000000, 0x0, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x0, 0x6, 0x1000, 0x5, 0x3, 0x7fff, 0x8000, 0x7d, 0x1]}}, {{0x1c, 0x1, {0x8, 0x2, 0x5, 0x1, 0x0, 0x4, 0x10000, 0x1}}, {0x6, 0x2, [0x3730]}}, {{0x1c, 0x1, {0x4, 0x40, 0x4, 0x6, 0x2, 0x7, 0x0, 0x4}}, {0xc, 0x2, [0x1ff, 0x2, 0x9, 0x4]}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0], 0x1ac}}, 0x20084005) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) userfaultfd(0x801) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002000)=@delqdisc={0x18c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0xfff2, 0xffe2}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x2, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xfb, '\x00', 0x8, 0x698b, 0x4, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x800, 0x5, 0x2, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xb0, 0x6, 0x4, 0x30}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd8, '\x00', 0x3d, 0x6, 0x0, 0x4}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0x7fff, 0xb7, 0x0, 0x6, 0xff, 0x8}}, {0x14, 0x2, [0xffff, 0x4, 0x9, 0x4, 0x5, 0x6, 0xc, 0x30]}}, {{0x1c, 0x1, {0x4, 0x40, 0x7ff, 0x80000000, 0x0, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x0, 0x6, 0x1000, 0x5, 0x3, 0x7fff, 0x8000, 0x7d, 0x1]}}, {{0x1c, 0x1, {0x8, 0x2, 0x5, 0x1, 0x0, 0x4, 0x10000, 0x1}}, {0x6, 0x2, [0x3730]}}, {{0x1c, 0x1, {0x4, 0x40, 0x4, 0x6, 0x2, 0x7, 0x0, 0x4}}, {0xc, 0x2, [0x1ff, 0x2, 0x9, 0x4]}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0], 0x1ac}}, 0x20084005) (async) 153.313763ms ago: executing program 3 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@metacopy_on}, {@userxattr}], [], 0x2c}) (fail_nth: 11) 101.84227ms ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) 101.569634ms ago: executing program 3 (id=569): nanosleep(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x401, 0x1, "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", 0x9, 0xb, 0x1c, 0x8, 0x3, 0x40, 0xde, 0x1}}}, 0x120) (fail_nth: 3) 52.221285ms ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x23, 0x9, 0x2, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x5, r2, 0x0, &(0x7f000034c000/0x4000)=nil, 0x4000, 0xbc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r2, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000140)={0x28, 0x5, r2, r2, 0xffff, 0x20000000000539, 0x3ffd}) 51.873521ms ago: executing program 1 (id=571): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) socketpair(0xa, 0x5, 0x9, &(0x7f0000000000)) 48.945761ms ago: executing program 3 (id=572): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r1 = socket(0x2a, 0x2, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r1, 0x0, 0x0) 0s ago: executing program 2 (id=573): socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0986dd6000000000200640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8018100090780000080a23305cbd000000030000bfbe8322e6c110b914a7e2d891eebd4bf367466f1e97f32e632414869222244ea0b3e9c28693b0dc6b6add3d19b4ba53bad8403d000862da0c870002e7b2d7260a70e447e6ce2700b45cb675008e2b06da9ec74d3c1e7200d66e03e01d7e483f5a9edc936e1b"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) kernel console output (not intermixed with test programs): nsions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.793403][ T6088] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 56.796753][ T576] Bluetooth: hci4: Frame reassembly failed (-84) [ 56.799240][ T227] Bluetooth: hci4: Frame reassembly failed (-84) [ 57.038907][ T6106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.080372][ T6106] md: couldn't update array info. -22 [ 57.130523][ T6106] md: could not open device unknown-block(1,1). [ 57.130609][ T6106] md: md_import_device returned -16 [ 57.130723][ T6104] md: couldn't update array info. -22 [ 57.161771][ T6109] md: could not open device unknown-block(1,1). [ 57.161802][ T6109] md: md_import_device returned -16 [ 57.848970][ T6147] netlink: 40508 bytes leftover after parsing attributes in process `syz.0.85'. [ 57.990444][ T5089] Bluetooth: hci0: command tx timeout [ 58.070627][ T5745] Bluetooth: hci3: command tx timeout [ 58.070660][ T5745] Bluetooth: hci2: command tx timeout [ 58.070695][ T5089] Bluetooth: hci1: command tx timeout [ 58.164472][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 58.216256][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.225649][ T6166] ip_tables: iptables: counters copy to user failed while replacing table [ 58.269700][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.385492][ T6174] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 58.875945][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.170133][ T6219] Zero length message leads to an empty skb [ 59.227485][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 59.276178][ T6229] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.300758][ T6233] FAULT_INJECTION: forcing a failure. [ 59.300758][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.300776][ T6233] CPU: 2 UID: 0 PID: 6233 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) [ 59.300788][ T6233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.300795][ T6233] Call Trace: [ 59.300799][ T6233] [ 59.300804][ T6233] dump_stack_lvl+0x100/0x190 [ 59.300822][ T6233] should_fail_ex.cold+0x5/0xa [ 59.300839][ T6233] _copy_from_user+0x2e/0xd0 [ 59.300851][ T6233] copy_msghdr_from_user+0x9f/0x4c0 [ 59.300876][ T6233] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.300895][ T6233] ? _kstrtoull+0x144/0x200 [ 59.300909][ T6233] ? __pfx__kstrtoull+0x10/0x10 [ 59.300925][ T6233] ___sys_sendmsg+0x106/0x1e0 [ 59.300942][ T6233] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.300964][ T6233] ? __fget_files+0x34/0x3d0 [ 59.300986][ T6233] __sys_sendmmsg+0x20c/0x440 [ 59.301001][ T6233] ? __pfx___sys_sendmmsg+0x10/0x10 [ 59.301014][ T6233] ? ksys_write+0x190/0x250 [ 59.301035][ T6233] ? fput+0x7c/0x100 [ 59.301048][ T6233] ? ksys_write+0x1ac/0x250 [ 59.301059][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 59.301072][ T6233] __x64_sys_sendmmsg+0x9c/0x100 [ 59.301085][ T6233] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.301101][ T6233] do_syscall_64+0x123/0x790 [ 59.301124][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.301139][ T6233] RIP: 0033:0x7f828259e159 [ 59.301152][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.301166][ T6233] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.301183][ T6233] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 59.301194][ T6233] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 59.301205][ T6233] RBP: 00007f8283447090 R08: 0000000000000000 R09: 0000000000000000 [ 59.301216][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.301227][ T6233] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 59.301252][ T6233] [ 59.479198][ T6241] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 59.541431][ T6243] md: couldn't update array info. -22 [ 59.581090][ T6243] md: could not open device unknown-block(1,1). [ 59.581146][ T6243] md: md_import_device returned -16 [ 59.648857][ T6245] sctp: [Deprecated]: syz.0.124 (pid 6245) Use of int in max_burst socket option deprecated. [ 59.648857][ T6245] Use struct sctp_assoc_value instead [ 59.660296][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.820453][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 59.822151][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.825862][ T50] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 59.825910][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 59.825935][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 59.825957][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 59.826092][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 59.826112][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.826145][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.040832][ T50] usb 6-1: usb_control_msg returned -32 [ 60.040873][ T50] usbtmc 6-1:16.0: can't read capabilities [ 60.170299][ T852] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.220463][ T1603] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.287429][ T6258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.330328][ T852] usb 8-1: Using ep0 maxpacket: 8 [ 60.333168][ T852] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.334747][ T852] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.334772][ T852] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.334791][ T852] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.334808][ T852] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.334861][ T852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.340652][ T6258] md: couldn't update array info. -22 [ 60.380272][ T1603] usb 5-1: Using ep0 maxpacket: 8 [ 60.381200][ T1603] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.382430][ T1603] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.382454][ T1603] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.382473][ T1603] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.382552][ T1603] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.382584][ T1603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.393418][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 60.393432][ T43] audit: type=1400 audit(1789500887.075:321): avc: denied { write } for pid=6238 comm="syz.1.122" name="usbtmc0" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.398107][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 60.398350][ T6260] usbtmc 6-1:16.0: Unable to send data, error -71 [ 60.400100][ T6260] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 60.400690][ T6259] md: could not open device unknown-block(1,1). [ 60.400738][ T6259] md: md_import_device returned -16 [ 60.404925][ T43] audit: type=1400 audit(1789500887.085:322): avc: denied { ioctl } for pid=6238 comm="syz.1.122" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12103 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.406281][ T43] audit: type=1400 audit(1789500887.085:323): avc: denied { ioctl } for pid=6238 comm="syz.1.122" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 60.438679][ T5833] usb 6-1: USB disconnect, device number 2 [ 60.478358][ T6262] Bluetooth: hci0: unsupported parameter 255 [ 60.478375][ T6262] Bluetooth: hci0: unsupported parameter 255 [ 60.563657][ T852] usb 8-1: GET_CAPABILITIES returned 0 [ 60.563791][ T852] usbtmc 8-1:16.0: can't read capabilities [ 60.624751][ T1603] usb 5-1: GET_CAPABILITIES returned 0 [ 60.624790][ T1603] usbtmc 5-1:16.0: can't read capabilities [ 60.685868][ T43] audit: type=1400 audit(1789500887.365:324): avc: denied { accept } for pid=6267 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 60.765434][ T6254] FAULT_INJECTION: forcing a failure. [ 60.765434][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 60.765463][ T6254] CPU: 3 UID: 0 PID: 6254 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(full) [ 60.765484][ T6254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.765494][ T6254] Call Trace: [ 60.765501][ T6254] [ 60.765508][ T6254] dump_stack_lvl+0x100/0x190 [ 60.765557][ T6254] should_fail_ex.cold+0x5/0xa [ 60.765582][ T6254] should_failslab+0xc2/0x120 [ 60.765610][ T6254] __kmalloc_noprof+0xfc/0x840 [ 60.765629][ T6254] ? rcu_is_watching+0x13/0xc0 [ 60.765653][ T6254] ? tomoyo_realpath_from_path+0xb6/0x690 [ 60.765682][ T6254] tomoyo_realpath_from_path+0xb6/0x690 [ 60.765709][ T6254] tomoyo_path_number_perm+0x23c/0x580 [ 60.765727][ T6254] ? tomoyo_path_number_perm+0x22e/0x580 [ 60.765747][ T6254] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.765775][ T6254] ? __lock_acquire+0x5c0/0x1f40 [ 60.765808][ T6254] ? __fget_files+0x34/0x3d0 [ 60.765831][ T6254] ? find_held_lock+0x2b/0x80 [ 60.765854][ T6254] ? hook_file_ioctl_common+0x140/0x440 [ 60.765883][ T6254] ? __fget_files+0x21f/0x3d0 [ 60.765915][ T6254] security_file_ioctl+0xd3/0x230 [ 60.765936][ T6254] __x64_sys_ioctl+0xb7/0x210 [ 60.765957][ T6254] do_syscall_64+0x123/0x790 [ 60.765989][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.766008][ T6254] RIP: 0033:0x7fb08279e159 [ 60.766023][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.766040][ T6254] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.766059][ T6254] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 60.766070][ T6254] RDX: 0000200000000040 RSI: 00000000c0145b0d RDI: 0000000000000005 [ 60.766081][ T6254] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 60.766091][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.766102][ T6254] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 60.766126][ T6254] [ 60.766133][ T6254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.769094][ T1282] usb 8-1: USB disconnect, device number 2 [ 60.827133][ T30] usb 5-1: USB disconnect, device number 2 [ 60.991607][ T6274] FAULT_INJECTION: forcing a failure. [ 60.991607][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.991638][ T6274] CPU: 3 UID: 0 PID: 6274 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT(full) [ 60.991659][ T6274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.991669][ T6274] Call Trace: [ 60.991675][ T6274] [ 60.991682][ T6274] dump_stack_lvl+0x100/0x190 [ 60.991713][ T6274] should_fail_ex.cold+0x5/0xa [ 60.991738][ T6274] _copy_from_iter+0x1f4/0x1690 [ 60.991763][ T6274] ? __pfx__copy_from_iter+0x10/0x10 [ 60.991782][ T6274] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.991808][ T6274] ? lock_acquire+0x1d1/0x380 [ 60.991831][ T6274] copy_page_from_iter+0x238/0x300 [ 60.991852][ T6274] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 60.991890][ T6274] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 60.991911][ T6274] ? unwind_get_return_address+0x59/0xa0 [ 60.991938][ T6274] ? arch_stack_walk+0xa6/0xf0 [ 60.991975][ T6274] ? _kstrtoull+0x144/0x200 [ 60.991996][ T6274] ? __pfx__kstrtoull+0x10/0x10 [ 60.992021][ T6274] tun_get_user+0x1674/0x3cc0 [ 60.992048][ T6274] ? __lock_acquire+0x5c0/0x1f40 [ 60.992067][ T6274] ? __pfx_tun_get_user+0x10/0x10 [ 60.992096][ T6274] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 60.992128][ T6274] ? find_held_lock+0x2b/0x80 [ 60.992152][ T6274] ? tun_get+0x191/0x370 [ 60.992169][ T6274] ? tun_get+0x191/0x370 [ 60.992193][ T6274] tun_chr_write_iter+0xdc/0x200 [ 60.992216][ T6274] vfs_write+0x6af/0x1050 [ 60.992235][ T6274] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 60.992258][ T6274] ? __pfx_vfs_write+0x10/0x10 [ 60.992274][ T6274] ? find_held_lock+0x2b/0x80 [ 60.992312][ T6274] ksys_write+0x12a/0x250 [ 60.992330][ T6274] ? __pfx_ksys_write+0x10/0x10 [ 60.992355][ T6274] do_syscall_64+0x123/0x790 [ 60.992383][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.992401][ T6274] RIP: 0033:0x7f828255e98e [ 60.992416][ T6274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.992432][ T6274] RSP: 002b:00007f8283446fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.992450][ T6274] RAX: ffffffffffffffda RBX: 00007f82834476c0 RCX: 00007f828255e98e [ 60.992461][ T6274] RDX: 000000000000003e RSI: 0000200000000700 RDI: 00000000000000c8 [ 60.992472][ T6274] RBP: 00007f8283447090 R08: 0000000000000000 R09: 0000000000000000 [ 60.992483][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.992493][ T6274] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 60.992517][ T6274] [ 61.043266][ T65] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 61.075180][ T6284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.122912][ T6284] md: couldn't update array info. -22 [ 61.167829][ T43] audit: type=1400 audit(1789500887.845:325): avc: denied { write } for pid=6288 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.171684][ T6284] md: could not open device unknown-block(1,1). [ 61.171733][ T6284] md: md_import_device returned -16 [ 61.395722][ T6302] FAULT_INJECTION: forcing a failure. [ 61.395722][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 61.395752][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(full) [ 61.395770][ T6302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.395780][ T6302] Call Trace: [ 61.395786][ T6302] [ 61.395793][ T6302] dump_stack_lvl+0x100/0x190 [ 61.395824][ T6302] should_fail_ex.cold+0x5/0xa [ 61.395849][ T6302] should_failslab+0xc2/0x120 [ 61.395871][ T6302] __kmalloc_noprof+0xfc/0x840 [ 61.395889][ T6302] ? tomoyo_encode2+0xfb/0x3c0 [ 61.395915][ T6302] tomoyo_encode2+0xfb/0x3c0 [ 61.395940][ T6302] tomoyo_encode+0x29/0x50 [ 61.395961][ T6302] tomoyo_realpath_from_path+0x18c/0x690 [ 61.395989][ T6302] tomoyo_path_number_perm+0x23c/0x580 [ 61.396007][ T6302] ? tomoyo_path_number_perm+0x22e/0x580 [ 61.396028][ T6302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 61.396056][ T6302] ? __lock_acquire+0x5c0/0x1f40 [ 61.396089][ T6302] ? __fget_files+0x34/0x3d0 [ 61.396112][ T6302] ? find_held_lock+0x2b/0x80 [ 61.396137][ T6302] ? hook_file_ioctl_common+0x140/0x440 [ 61.396168][ T6302] ? __fget_files+0x21f/0x3d0 [ 61.396195][ T6302] security_file_ioctl+0xd3/0x230 [ 61.396217][ T6302] __x64_sys_ioctl+0xb7/0x210 [ 61.396241][ T6302] do_syscall_64+0x123/0x790 [ 61.396270][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.396289][ T6302] RIP: 0033:0x7fb08279e159 [ 61.396305][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.396320][ T6302] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.396341][ T6302] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 61.396353][ T6302] RDX: 0000200000000400 RSI: 0000000000005393 RDI: 0000000000000003 [ 61.396365][ T6302] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 61.396376][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.396387][ T6302] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 61.396413][ T6302] [ 61.396428][ T6302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.441307][ T6305] md: couldn't update array info. -22 [ 61.500423][ T6305] md: could not open device unknown-block(1,1). [ 61.500471][ T6305] md: md_import_device returned -16 [ 61.523737][ T43] audit: type=1400 audit(1789500888.205:326): avc: denied { read } for pid=6312 comm="syz.3.148" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.523783][ T43] audit: type=1400 audit(1789500888.205:327): avc: denied { open } for pid=6312 comm="syz.3.148" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.526092][ T43] audit: type=1400 audit(1789500888.205:328): avc: denied { create } for pid=6312 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 61.526694][ T43] audit: type=1400 audit(1789500888.205:329): avc: denied { connect } for pid=6312 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 61.527314][ T43] audit: type=1400 audit(1789500888.205:330): avc: denied { ioctl } for pid=6312 comm="syz.3.148" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.795683][ T6329] capability: warning: `syz.0.153' uses deprecated v2 capabilities in a way that may be insecure [ 61.799085][ T6329] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 61.799107][ T6329] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 61.799116][ T6329] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 61.980454][ T1603] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.131032][ T1603] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.134714][ T1603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.134736][ T1603] usb 7-1: Product: syz [ 62.134749][ T1603] usb 7-1: Manufacturer: syz [ 62.134761][ T1603] usb 7-1: SerialNumber: syz [ 62.181335][ T6348] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.189549][ T1603] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.200651][ T6348] md: couldn't update array info. -22 [ 62.221030][ T6348] md: could not open device unknown-block(1,1). [ 62.221075][ T6348] md: md_import_device returned -16 [ 62.329423][ T6357] syzkaller0: entered promiscuous mode [ 62.329446][ T6357] syzkaller0: entered allmulticast mode [ 62.499055][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 62.571857][ T6375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.599033][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.599501][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.608435][ T58] usb 7-1: USB disconnect, device number 2 [ 62.630783][ T6375] md: couldn't update array info. -22 [ 62.668906][ T6382] syzkaller0: entered promiscuous mode [ 62.668925][ T6382] syzkaller0: entered allmulticast mode [ 62.682279][ T6380] md: could not open device unknown-block(1,1). [ 62.682309][ T6380] md: md_import_device returned -16 [ 62.739844][ T6387] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.773845][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 62.830511][ T6396] md: couldn't update array info. -22 [ 62.890290][ T6396] md: could not open device unknown-block(1,1). [ 62.890324][ T6396] md: md_import_device returned -16 [ 63.215468][ T6420] syzkaller0: entered promiscuous mode [ 63.215484][ T6420] syzkaller0: entered allmulticast mode [ 63.384582][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 63.430334][ T1603] usb 7-1: Service connection timeout for: 256 [ 63.430356][ T1603] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 63.431670][ T1603] ath9k_htc: Failed to initialize the device [ 63.433664][ T58] usb 7-1: ath9k_htc: USB layer deinitialized [ 63.503099][ T65] Bluetooth: latency 65520 > 499 [ 63.506170][ T6438] tmpfs: Bad value for 'mpol' [ 63.526499][ T6438] netlink: 44 bytes leftover after parsing attributes in process `syz.3.191'. [ 63.809906][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 63.916734][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.970767][ T6474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 64.019435][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.075283][ T6480] batman_adv: batadv0: Adding interface: dummy0 [ 64.075295][ T6480] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.075310][ T6480] batman_adv: batadv0: Interface activated: dummy0 [ 64.286075][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 64.332237][ T6490] FAULT_INJECTION: forcing a failure. [ 64.332237][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.332267][ T6490] CPU: 2 UID: 0 PID: 6490 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 64.332287][ T6490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.332298][ T6490] Call Trace: [ 64.332304][ T6490] [ 64.332312][ T6490] dump_stack_lvl+0x100/0x190 [ 64.332342][ T6490] should_fail_ex.cold+0x5/0xa [ 64.332368][ T6490] _copy_from_user+0x2e/0xd0 [ 64.332389][ T6490] memdup_user+0x6b/0xe0 [ 64.332406][ T6490] strndup_user+0x78/0xe0 [ 64.332424][ T6490] __x64_sys_mount+0x136/0x310 [ 64.332453][ T6490] ? __pfx___x64_sys_mount+0x10/0x10 [ 64.332487][ T6490] do_syscall_64+0x123/0x790 [ 64.332514][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.332533][ T6490] RIP: 0033:0x7f2fcb79e159 [ 64.332548][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.332565][ T6490] RSP: 002b:00007f2fcc597028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.332584][ T6490] RAX: ffffffffffffffda RBX: 00007f2fcba25fa0 RCX: 00007f2fcb79e159 [ 64.332595][ T6490] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 64.332607][ T6490] RBP: 00007f2fcc597090 R08: 0000200000000180 R09: 0000000000000000 [ 64.332618][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.332628][ T6490] R13: 00007f2fcba26038 R14: 00007f2fcba25fa0 R15: 00007ffe9fee56d8 [ 64.332653][ T6490] [ 64.356759][ T6492] FAULT_INJECTION: forcing a failure. [ 64.356759][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 64.356786][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT(full) [ 64.356806][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.356816][ T6492] Call Trace: [ 64.356822][ T6492] [ 64.356830][ T6492] dump_stack_lvl+0x100/0x190 [ 64.356862][ T6492] should_fail_ex.cold+0x5/0xa [ 64.356889][ T6492] should_failslab+0xc2/0x120 [ 64.356913][ T6492] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.356933][ T6492] ? __lock_acquire+0x5c0/0x1f40 [ 64.356953][ T6492] ? dst_alloc+0x99/0x1a0 [ 64.356978][ T6492] dst_alloc+0x99/0x1a0 [ 64.356999][ T6492] rt_dst_alloc+0x35/0x3a0 [ 64.357025][ T6492] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 64.357052][ T6492] ip_route_output_key_hash+0x118/0x2b0 [ 64.357071][ T6492] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 64.357095][ T6492] ? udp_sendmsg+0x6db/0x2710 [ 64.357118][ T6492] ? find_held_lock+0x2b/0x80 [ 64.357148][ T6492] ip_route_output_flow+0x27/0x150 [ 64.357168][ T6492] udp_sendmsg+0x19c5/0x2710 [ 64.357198][ T6492] ? __pfx_udp_sendmsg+0x10/0x10 [ 64.357222][ T6492] ? __pfx_avc_has_perm+0x10/0x10 [ 64.357260][ T6492] ? __pfx_sock_has_perm+0x10/0x10 [ 64.357286][ T6492] ? lock_acquire+0x1d1/0x380 [ 64.357322][ T6492] ? __pfx_udp_sendmsg+0x10/0x10 [ 64.357347][ T6492] inet_sendmsg+0x105/0x140 [ 64.357375][ T6492] ____sys_sendmsg+0x9c9/0xbe0 [ 64.357400][ T6492] ? __pfx_inet_sendmsg+0x10/0x10 [ 64.357430][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.357459][ T6492] ? _kstrtoull+0x144/0x200 [ 64.357481][ T6492] ? __pfx__kstrtoull+0x10/0x10 [ 64.357534][ T6492] ___sys_sendmsg+0x190/0x1e0 [ 64.357564][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.357602][ T6492] ? __fget_files+0x34/0x3d0 [ 64.357644][ T6492] __sys_sendmmsg+0x20c/0x440 [ 64.357670][ T6492] ? __pfx___sys_sendmmsg+0x10/0x10 [ 64.357691][ T6492] ? ksys_write+0x190/0x250 [ 64.357730][ T6492] ? fput+0x7c/0x100 [ 64.357752][ T6492] ? ksys_write+0x1ac/0x250 [ 64.357771][ T6492] ? __pfx_ksys_write+0x10/0x10 [ 64.357790][ T6492] __x64_sys_sendmmsg+0x9c/0x100 [ 64.357811][ T6492] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.357833][ T6492] do_syscall_64+0x123/0x790 [ 64.357859][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.357878][ T6492] RIP: 0033:0x7fb08279e159 [ 64.357894][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.357910][ T6492] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.357928][ T6492] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 64.357940][ T6492] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 64.357951][ T6492] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 64.357962][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.357972][ T6492] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 64.357995][ T6492] [ 64.459193][ T6499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.514191][ T6502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.569713][ T6502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.699915][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 65.344935][ T6553] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 65.404575][ T6558] evm: overlay not supported [ 65.407876][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 65.407886][ T43] audit: type=1400 audit(1789500892.085:346): avc: denied { remount } for pid=6557 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.408995][ T6558] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 65.509822][ T43] audit: type=1400 audit(1789500892.185:347): avc: denied { create } for pid=6562 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.510506][ T6563] syzkaller0: entered promiscuous mode [ 65.510523][ T6563] syzkaller0: entered allmulticast mode [ 65.510935][ T43] audit: type=1400 audit(1789500892.185:348): avc: denied { ioctl } for pid=6562 comm="syz.1.239" path="socket:[17618]" dev="sockfs" ino=17618 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.520314][ T65] Bluetooth: hci1: command tx timeout [ 65.590991][ T6564] FAULT_INJECTION: forcing a failure. [ 65.590991][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 65.591009][ T6564] CPU: 3 UID: 0 PID: 6564 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT(full) [ 65.591021][ T6564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.591028][ T6564] Call Trace: [ 65.591031][ T6564] [ 65.591036][ T6564] dump_stack_lvl+0x100/0x190 [ 65.591056][ T6564] should_fail_ex.cold+0x5/0xa [ 65.591071][ T6564] should_failslab+0xc2/0x120 [ 65.591086][ T6564] __kmalloc_noprof+0xfc/0x840 [ 65.591098][ T6564] ? bpf_ctx_init+0xf8/0x1e0 [ 65.591116][ T6564] bpf_ctx_init+0xf8/0x1e0 [ 65.591147][ T6564] bpf_prog_test_run_sk_lookup+0x2c6/0x1300 [ 65.591162][ T6564] ? lock_acquire+0x1d1/0x380 [ 65.591174][ T6564] ? __fget_files+0x34/0x3d0 [ 65.591188][ T6564] ? find_held_lock+0x2b/0x80 [ 65.591203][ T6564] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 65.591214][ T6564] ? __fget_files+0x215/0x3d0 [ 65.591230][ T6564] ? __fget_files+0x21f/0x3d0 [ 65.591245][ T6564] ? fput+0x7c/0x100 [ 65.591259][ T6564] ? __bpf_prog_get+0x97/0x290 [ 65.591273][ T6564] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 65.591285][ T6564] __sys_bpf+0x2265/0x4a30 [ 65.591299][ T6564] ? __pfx___sys_bpf+0x10/0x10 [ 65.591309][ T6564] ? find_held_lock+0x2b/0x80 [ 65.591324][ T6564] ? get_pid_task+0xfc/0x250 [ 65.591337][ T6564] ? get_pid_task+0xfc/0x250 [ 65.591361][ T6564] ? find_held_lock+0x2b/0x80 [ 65.591379][ T6564] ? rcu_read_lock_any_held+0x6a/0x90 [ 65.591396][ T6564] ? find_held_lock+0x2b/0x80 [ 65.591411][ T6564] ? ksys_write+0x190/0x250 [ 65.591421][ T6564] ? ksys_write+0x190/0x250 [ 65.591431][ T6564] ? lock_acquire+0x1d1/0x380 [ 65.591452][ T6564] ? fput+0x7c/0x100 [ 65.591465][ T6564] ? ksys_write+0x1ac/0x250 [ 65.591478][ T6564] ? __x64_sys_bpf+0xce/0x140 [ 65.591488][ T6564] __x64_sys_bpf+0xce/0x140 [ 65.591499][ T6564] ? do_syscall_64+0xae/0x790 [ 65.591515][ T6564] do_syscall_64+0x123/0x790 [ 65.591530][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.591542][ T6564] RIP: 0033:0x7fb00099e159 [ 65.591551][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.591561][ T6564] RSP: 002b:00007fb001841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.591573][ T6564] RAX: ffffffffffffffda RBX: 00007fb000c26180 RCX: 00007fb00099e159 [ 65.591579][ T6564] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 65.591586][ T6564] RBP: 00007fb001841090 R08: 0000000000000000 R09: 0000000000000000 [ 65.591592][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.591598][ T6564] R13: 00007fb000c26218 R14: 00007fb000c26180 R15: 00007ffc85826c78 [ 65.591612][ T6564] [ 65.617152][ T6566] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.691547][ T6566] md: couldn't update array info. -22 [ 65.810509][ T6567] md: could not open device unknown-block(1,1). [ 65.810563][ T6567] md: md_import_device returned -16 [ 65.876313][ T6571] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.943448][ T6571] md: couldn't update array info. -22 [ 65.943715][ T6574] md: could not open device unknown-block(1,1). [ 65.943831][ T6574] md: md_import_device returned -16 [ 66.442967][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 66.674719][ T6614] netlink: 10 bytes leftover after parsing attributes in process `syz.0.258'. [ 66.678982][ T43] audit: type=1400 audit(1789500893.355:349): avc: denied { mount } for pid=6611 comm="syz.1.257" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.696305][ T6611] syz.1.257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 66.696339][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 66.696359][ T6611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.696369][ T6611] Call Trace: [ 66.696376][ T6611] [ 66.696390][ T6611] dump_stack_lvl+0x100/0x190 [ 66.696422][ T6611] dump_header+0xfb/0x606 [ 66.696444][ T6611] oom_kill_process.cold+0xd/0x380 [ 66.696467][ T6611] out_of_memory+0x340/0x14f0 [ 66.696497][ T6611] ? __pfx_out_of_memory+0x10/0x10 [ 66.696528][ T6611] mem_cgroup_out_of_memory+0xc6/0x130 [ 66.696549][ T6611] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 66.696569][ T6611] ? find_held_lock+0x2b/0x80 [ 66.696617][ T6611] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.696643][ T6611] ? _raw_spin_unlock+0x28/0x50 [ 66.696667][ T6611] try_charge_memcg+0x783/0xf60 [ 66.696700][ T6611] ? __pfx_try_charge_memcg+0x10/0x10 [ 66.696725][ T6611] ? find_held_lock+0x2b/0x80 [ 66.696749][ T6611] ? rcu_read_unlock+0x17/0x60 [ 66.696775][ T6611] ? rcu_read_unlock+0x17/0x60 [ 66.696801][ T6611] ? find_held_lock+0x2b/0x80 [ 66.696827][ T6611] ? rcu_read_unlock+0x17/0x60 [ 66.696858][ T6611] charge_memcg+0x1ae/0x210 [ 66.696885][ T6611] __mem_cgroup_charge+0x2b/0x1c0 [ 66.696914][ T6611] do_anonymous_page+0xaf1/0x2050 [ 66.696948][ T6611] ? __pfx_do_anonymous_page+0x10/0x10 [ 66.696972][ T6611] ? rcu_read_unlock+0x2d/0xb0 [ 66.696998][ T6611] ? rcu_read_unlock+0x2d/0xb0 [ 66.697023][ T6611] ? __pte_offset_map+0x179/0x310 [ 66.697048][ T6611] __handle_mm_fault+0x1ff3/0x2f60 [ 66.697077][ T6611] ? lock_vma_under_rcu+0x11d/0x590 [ 66.697102][ T6611] ? __pfx___handle_mm_fault+0x10/0x10 [ 66.697133][ T6611] ? lock_vma_under_rcu+0x17c/0x590 [ 66.697173][ T6611] handle_mm_fault+0x363/0xa20 [ 66.697204][ T6611] do_user_addr_fault+0x59c/0x12f0 [ 66.697236][ T6611] exc_page_fault+0x6f/0xd0 [ 66.697260][ T6611] asm_exc_page_fault+0x26/0x30 [ 66.697278][ T6611] RIP: 0033:0x7f828256e788 [ 66.697294][ T6611] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f [ 66.697311][ T6611] RSP: 002b:00007ffd226603e8 EFLAGS: 00010246 [ 66.697327][ T6611] RAX: 0000200000001380 RBX: 0000000000000004 RCX: 00726573752f736e [ 66.697339][ T6611] RDX: 0000000000000008 RSI: 00726573752f736e RDI: 0000200000001380 [ 66.697350][ T6611] RBP: fffffffffffffffe R08: 0000001b32120000 R09: 0000000000000001 [ 66.697362][ T6611] R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 00007ffd22660510 [ 66.697373][ T6611] R13: 00007f8282825fac R14: 00000000000103c6 R15: 00007f8282825fa0 [ 66.697403][ T6611] [ 66.698134][ T6611] memory: usage 12kB, limit 8kB, failcnt 23 [ 66.698147][ T6611] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 66.698193][ T6611] kmem: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 66.698205][ T6611] Memory cgroup stats for /syz1/test: [ 66.698376][ T6611] cache 0 [ 66.698390][ T6611] rss 0 [ 66.698396][ T6611] rss_huge 0 [ 66.698402][ T6611] shmem 0 [ 66.698408][ T6611] mapped_file 0 [ 66.698415][ T6611] dirty 0 [ 66.698421][ T6611] writeback 0 [ 66.698427][ T6611] workingset_refault_anon 0 [ 66.698434][ T6611] workingset_refault_file 0 [ 66.698441][ T6611] swap 0 [ 66.698447][ T6611] swapcached 0 [ 66.698453][ T6611] pgpgin 0 [ 66.698459][ T6611] pgpgout 0 [ 66.698466][ T6611] pgfault 0 [ 66.698472][ T6611] pgmajfault 0 [ 66.698478][ T6611] inactive_anon 0 [ 66.698485][ T6611] active_anon 0 [ 66.698491][ T6611] inactive_file 0 [ 66.698498][ T6611] active_file 0 [ 66.698504][ T6611] unevictable 0 [ 66.698510][ T6611] hierarchical_memory_limit 8192 [ 66.698518][ T6611] hierarchical_memsw_limit 9223372036854771712 [ 66.698526][ T6611] total_cache 0 [ 66.698532][ T6611] total_rss 0 [ 66.698538][ T6611] total_rss_huge 0 [ 66.698545][ T6611] total_shmem 0 [ 66.698551][ T6611] total_mapped_file 0 [ 66.698558][ T6611] total_dirty 0 [ 66.698564][ T6611] total_writeback 0 [ 66.698570][ T6611] total_workingset_refault_anon 0 [ 66.698577][ T6611] total_workingset_refault_file 0 [ 66.698584][ T6611] total_swap 0 [ 66.698590][ T6611] total_swapcached 0 [ 66.698597][ T6611] total_pgpgin 0 [ 66.698603][ T6611] total_pgpgout 0 [ 66.698609][ T6611] total_pgfault 0 [ 66.698616][ T6611] total_pgmajfault 0 [ 66.698622][ T6611] total_inactive_anon 0 [ 66.698629][ T6611] total_active_anon 0 [ 66.698635][ T6611] total_inactive_file 0 [ 66.698642][ T6611] total_active_file 0 [ 66.698649][ T6611] total_unevictable 0 [ 66.698655][ T6611] anon_cost 0 [ 66.698662][ T6611] file_cost 0 [ 66.698669][ T6611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.257,pid=6611,uid=0 [ 66.699540][ T6611] Memory cgroup out of memory: Killed process 6611 (syz.1.257) total-vm:102252kB, anon-rss:1428kB, file-rss:23120kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 66.725926][ T43] audit: type=1400 audit(1789500893.405:350): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.735837][ T6618] FAULT_INJECTION: forcing a failure. [ 66.735837][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.735871][ T6618] CPU: 2 UID: 0 PID: 6618 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) [ 66.735889][ T6618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.735898][ T6618] Call Trace: [ 66.735905][ T6618] [ 66.735911][ T6618] dump_stack_lvl+0x100/0x190 [ 66.735941][ T6618] should_fail_ex.cold+0x5/0xa [ 66.735962][ T6618] _copy_from_user+0x2e/0xd0 [ 66.735978][ T6618] get_user_ifreq+0xe7/0x250 [ 66.735999][ T6618] sock_do_ioctl+0x16e/0x280 [ 66.736019][ T6618] ? __pfx_sock_do_ioctl+0x10/0x10 [ 66.736038][ T6618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.736058][ T6618] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.736072][ T6618] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 66.736090][ T6618] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.736110][ T6618] sock_ioctl+0x599/0x6b0 [ 66.736124][ T6618] ? __pfx_sock_ioctl+0x10/0x10 [ 66.736142][ T6618] ? selinux_file_ioctl+0x13b/0x290 [ 66.736156][ T6618] ? selinux_file_ioctl+0xb6/0x290 [ 66.736173][ T6618] ? __pfx_sock_ioctl+0x10/0x10 [ 66.736186][ T6618] __x64_sys_ioctl+0x18e/0x210 [ 66.736203][ T6618] do_syscall_64+0x123/0x790 [ 66.736224][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.736239][ T6618] RIP: 0033:0x7f2fcb79e159 [ 66.736251][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.736264][ T6618] RSP: 002b:00007f2fcc597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.736279][ T6618] RAX: ffffffffffffffda RBX: 00007f2fcba25fa0 RCX: 00007f2fcb79e159 [ 66.736288][ T6618] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 66.736297][ T6618] RBP: 00007f2fcc597090 R08: 0000000000000000 R09: 0000000000000000 [ 66.736305][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.736313][ T6618] R13: 00007f2fcba26038 R14: 00007f2fcba25fa0 R15: 00007ffe9fee56d8 [ 66.736332][ T6618] [ 66.821814][ T6628] overlayfs: conflicting options: userxattr,metacopy=on [ 66.874450][ T6631] netlink: Invalid conntrack helper [ 66.874464][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.939141][ T43] audit: type=1400 audit(1789500893.615:351): avc: denied { create } for pid=6639 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.939822][ T43] audit: type=1400 audit(1789500893.615:352): avc: denied { write } for pid=6639 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.984614][ T43] audit: type=1400 audit(1789500893.665:353): avc: denied { mmap_zero } for pid=6639 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 67.126006][ T6658] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 67.157975][ T6660] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 67.207148][ T43] audit: type=1400 audit(1789500893.885:354): avc: denied { create } for pid=6661 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.207600][ T43] audit: type=1400 audit(1789500893.885:355): avc: denied { setopt } for pid=6661 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.484998][ T65] Bluetooth: hci1: unexpected cc 0x2006 length: 2 > 1 [ 67.666718][ T6684] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.956081][ T6702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.022610][ T6702] md: couldn't update array info. -22 [ 68.061396][ T6710] md: could not open device unknown-block(1,1). [ 68.061442][ T6710] md: md_import_device returned -16 [ 68.149991][ T6718] FAULT_INJECTION: forcing a failure. [ 68.149991][ T6718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.150019][ T6718] CPU: 2 UID: 0 PID: 6718 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(full) [ 68.150038][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.150047][ T6718] Call Trace: [ 68.150053][ T6718] [ 68.150060][ T6718] dump_stack_lvl+0x100/0x190 [ 68.150100][ T6718] should_fail_ex.cold+0x5/0xa [ 68.150145][ T6718] _copy_from_iter+0x1f4/0x1690 [ 68.150174][ T6718] ? __asan_memset+0x23/0x50 [ 68.150192][ T6718] ? __pfx__copy_from_iter+0x10/0x10 [ 68.150211][ T6718] ? __pfx___alloc_skb+0x10/0x10 [ 68.150243][ T6718] netlink_sendmsg+0x808/0xda0 [ 68.150266][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.150287][ T6718] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.150308][ T6718] ____sys_sendmsg+0xa4d/0xbe0 [ 68.150330][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.150350][ T6718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.150387][ T6718] ? lock_acquire+0x1d1/0x380 [ 68.150405][ T6718] ? get_pid_task+0x2a/0x250 [ 68.150431][ T6718] ___sys_sendmsg+0x190/0x1e0 [ 68.150460][ T6718] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.150486][ T6718] ? get_pid_task+0x106/0x250 [ 68.150516][ T6718] ? find_held_lock+0x2b/0x80 [ 68.150555][ T6718] __sys_sendmsg+0x160/0x210 [ 68.150577][ T6718] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.150608][ T6718] do_syscall_64+0x123/0x790 [ 68.150638][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.150655][ T6718] RIP: 0033:0x7f828259e159 [ 68.150669][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.150684][ T6718] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.150701][ T6718] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 68.150712][ T6718] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 68.150722][ T6718] RBP: 00007f8283447090 R08: 0000000000000000 R09: 0000000000000000 [ 68.150732][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.150742][ T6718] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 68.150765][ T6718] [ 68.263391][ T6723] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.303691][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 68.620633][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.772425][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 68.773130][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.777146][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 68.777171][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 68.777191][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.777210][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.777243][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.022791][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 69.022858][ T58] usbtmc 7-1:16.0: can't read capabilities [ 69.035154][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 69.040486][ T6785] tipc: Started in network mode [ 69.040508][ T6785] tipc: Node identity ffffffff000000000000ffffffffffff, cluster identity 4711 [ 69.040551][ T6785] tipc: Enabling of bearer rejected, failed to enable media [ 69.085113][ T6788] netlink: 'syz.3.311': attribute type 39 has an invalid length. [ 69.227338][ T42] usb 7-1: USB disconnect, device number 3 [ 69.278599][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.344509][ T6800] netlink: 'syz.3.315': attribute type 2 has an invalid length. [ 69.992823][ T6832] FAULT_INJECTION: forcing a failure. [ 69.992823][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.992854][ T6832] CPU: 3 UID: 0 PID: 6832 Comm: syz.1.322 Not tainted syzkaller #0 PREEMPT(full) [ 69.992875][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.992886][ T6832] Call Trace: [ 69.992893][ T6832] [ 69.992900][ T6832] dump_stack_lvl+0x100/0x190 [ 69.992944][ T6832] should_fail_ex.cold+0x5/0xa [ 69.992970][ T6832] _copy_from_user+0x2e/0xd0 [ 69.992995][ T6832] bpf_ctx_init+0x14e/0x1e0 [ 69.993030][ T6832] bpf_prog_test_run_sk_lookup+0x2c6/0x1300 [ 69.993154][ T6832] ? lock_acquire+0x1d1/0x380 [ 69.993175][ T6832] ? __fget_files+0x34/0x3d0 [ 69.993198][ T6832] ? find_held_lock+0x2b/0x80 [ 69.993295][ T6832] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 69.993400][ T6832] ? __fget_files+0x215/0x3d0 [ 69.993426][ T6832] ? __fget_files+0x21f/0x3d0 [ 69.993452][ T6832] ? fput+0x7c/0x100 [ 69.993476][ T6832] ? __bpf_prog_get+0x97/0x290 [ 69.993500][ T6832] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 69.993521][ T6832] __sys_bpf+0x2265/0x4a30 [ 69.993546][ T6832] ? __pfx___sys_bpf+0x10/0x10 [ 69.993564][ T6832] ? find_held_lock+0x2b/0x80 [ 69.993588][ T6832] ? get_pid_task+0xfc/0x250 [ 69.993613][ T6832] ? get_pid_task+0xfc/0x250 [ 69.993645][ T6832] ? find_held_lock+0x2b/0x80 [ 69.993675][ T6832] ? rcu_read_lock_any_held+0x6a/0x90 [ 69.993702][ T6832] ? find_held_lock+0x2b/0x80 [ 69.993726][ T6832] ? ksys_write+0x190/0x250 [ 69.993743][ T6832] ? ksys_write+0x190/0x250 [ 69.993761][ T6832] ? lock_acquire+0x1d1/0x380 [ 69.993797][ T6832] ? fput+0x7c/0x100 [ 69.993820][ T6832] ? ksys_write+0x1ac/0x250 [ 69.993842][ T6832] ? __x64_sys_bpf+0xce/0x140 [ 69.993859][ T6832] __x64_sys_bpf+0xce/0x140 [ 69.993878][ T6832] ? do_syscall_64+0xae/0x790 [ 69.993910][ T6832] do_syscall_64+0x123/0x790 [ 69.993937][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.993957][ T6832] RIP: 0033:0x7f828259e159 [ 69.993972][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.993990][ T6832] RSP: 002b:00007f8283405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.994009][ T6832] RAX: ffffffffffffffda RBX: 00007f8282826180 RCX: 00007f828259e159 [ 69.994021][ T6832] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 69.994032][ T6832] RBP: 00007f8283405090 R08: 0000000000000000 R09: 0000000000000000 [ 69.994044][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.994055][ T6832] R13: 00007f8282826218 R14: 00007f8282826180 R15: 00007ffd22660288 [ 69.994079][ T6832] [ 70.058494][ T6836] overlayfs: conflicting options: userxattr,metacopy=on [ 70.804788][ T6851] EXT4-fs: Conflicting test_dummy_encryption options [ 70.805784][ T6851] ======================================================= [ 70.805784][ T6851] WARNING: The mand mount option has been deprecated and [ 70.805784][ T6851] and is ignored by this kernel. Remove the mand [ 70.805784][ T6851] option from the mount to silence this warning. [ 70.805784][ T6851] ======================================================= [ 70.825009][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 70.825025][ T43] audit: type=1400 audit(1789500897.505:380): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.928723][ T6838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.996312][ T6859] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.006525][ T6861] FAULT_INJECTION: forcing a failure. [ 71.006525][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 71.006554][ T6861] CPU: 2 UID: 0 PID: 6861 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 71.006574][ T6861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.006585][ T6861] Call Trace: [ 71.006592][ T6861] [ 71.006599][ T6861] dump_stack_lvl+0x100/0x190 [ 71.006653][ T6861] should_fail_ex.cold+0x5/0xa [ 71.006675][ T6861] ? __netlink_lookup+0x652/0x900 [ 71.006696][ T6861] should_failslab+0xc2/0x120 [ 71.006718][ T6861] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.006738][ T6861] ? skb_clone+0x190/0x400 [ 71.006764][ T6861] skb_clone+0x190/0x400 [ 71.006809][ T6861] netlink_deliver_tap+0xaed/0xcc0 [ 71.006835][ T6861] netlink_unicast+0x62b/0x850 [ 71.006857][ T6861] ? __pfx_netlink_unicast+0x10/0x10 [ 71.006884][ T6861] netlink_sendmsg+0x8b0/0xda0 [ 71.006906][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.006928][ T6861] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.006958][ T6861] ____sys_sendmsg+0xa4d/0xbe0 [ 71.006981][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.007002][ T6861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.007035][ T6861] ? lock_acquire+0x1d1/0x380 [ 71.007054][ T6861] ? get_pid_task+0x2a/0x250 [ 71.007080][ T6861] ___sys_sendmsg+0x190/0x1e0 [ 71.007109][ T6861] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.007136][ T6861] ? get_pid_task+0x106/0x250 [ 71.007170][ T6861] ? find_held_lock+0x2b/0x80 [ 71.007210][ T6861] __sys_sendmsg+0x160/0x210 [ 71.007234][ T6861] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.007269][ T6861] do_syscall_64+0x123/0x790 [ 71.007297][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.007317][ T6861] RIP: 0033:0x7fb08279e159 [ 71.007332][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.007349][ T6861] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.007368][ T6861] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 71.007380][ T6861] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 71.007391][ T6861] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 71.007402][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.007413][ T6861] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 71.007438][ T6861] [ 71.044451][ T6859] md: couldn't update array info. -22 [ 71.095699][ T6859] md: could not open device unknown-block(1,1). [ 71.095772][ T6859] md: md_import_device returned -16 [ 71.178358][ T6874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.210953][ T6874] md: couldn't update array info. -22 [ 71.237140][ T6876] kvm [6875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 71.237933][ T6876] kvm [6875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 71.282360][ T6874] md: could not open device unknown-block(1,1). [ 71.282409][ T6874] md: md_import_device returned -16 [ 71.345505][ T6883] FAULT_INJECTION: forcing a failure. [ 71.345505][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 71.345539][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(full) [ 71.345564][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.345576][ T6883] Call Trace: [ 71.345590][ T6883] [ 71.345598][ T6883] dump_stack_lvl+0x100/0x190 [ 71.345644][ T6883] should_fail_ex.cold+0x5/0xa [ 71.345675][ T6883] should_failslab+0xc2/0x120 [ 71.345709][ T6883] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.345742][ T6883] ? dev_ethtool+0x1b1/0x6bb0 [ 71.345782][ T6883] dev_ethtool+0x1b1/0x6bb0 [ 71.345817][ T6883] ? bpf_ksym_find+0x128/0x1c0 [ 71.345849][ T6883] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.345886][ T6883] ? is_bpf_text_address+0x94/0x1a0 [ 71.345914][ T6883] ? kernel_text_address+0x8d/0x100 [ 71.345947][ T6883] ? __kernel_text_address+0xd/0x30 [ 71.345979][ T6883] ? unwind_get_return_address+0x59/0xa0 [ 71.346012][ T6883] ? __pfx_dev_ethtool+0x10/0x10 [ 71.346046][ T6883] ? tomoyo_path_number_perm+0x46d/0x580 [ 71.346069][ T6883] ? stack_trace_save+0x8e/0xc0 [ 71.346089][ T6883] ? __pfx_stack_trace_save+0x10/0x10 [ 71.346110][ T6883] ? stack_depot_save_flags+0x27/0x9f0 [ 71.346138][ T6883] ? __lock_acquire+0x5c0/0x1f40 [ 71.346165][ T6883] ? __lock_acquire+0x5c0/0x1f40 [ 71.346188][ T6883] ? __kasan_slab_free+0x5f/0x80 [ 71.346212][ T6883] ? kfree+0x22b/0x6d0 [ 71.346240][ T6883] ? tomoyo_path_number_perm+0x46d/0x580 [ 71.346261][ T6883] ? security_file_ioctl+0xd3/0x230 [ 71.346283][ T6883] ? __x64_sys_ioctl+0xb7/0x210 [ 71.346304][ T6883] ? do_syscall_64+0x123/0x790 [ 71.346336][ T6883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.346361][ T6883] ? lock_acquire+0x1d1/0x380 [ 71.346381][ T6883] ? avc_has_extended_perms+0x201/0x1080 [ 71.346409][ T6883] ? find_held_lock+0x2b/0x80 [ 71.346436][ T6883] ? avc_has_extended_perms+0x33a/0x1080 [ 71.346462][ T6883] ? avc_has_extended_perms+0x33a/0x1080 [ 71.346497][ T6883] ? __lock_acquire+0x5c0/0x1f40 [ 71.346520][ T6883] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 71.346553][ T6883] ? lock_acquire+0x1d1/0x380 [ 71.346572][ T6883] ? dev_load+0x2a/0x240 [ 71.346595][ T6883] ? find_held_lock+0x2b/0x80 [ 71.346620][ T6883] ? dev_load+0x8e/0x240 [ 71.346641][ T6883] ? dev_load+0x8e/0x240 [ 71.346669][ T6883] dev_ioctl+0x63b/0x10e0 [ 71.346695][ T6883] sock_do_ioctl+0x1a0/0x280 [ 71.346724][ T6883] ? __pfx_sock_do_ioctl+0x10/0x10 [ 71.346751][ T6883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.346778][ T6883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.346828][ T6883] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.346854][ T6883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.346880][ T6883] sock_ioctl+0x599/0x6b0 [ 71.346900][ T6883] ? __pfx_sock_ioctl+0x10/0x10 [ 71.346924][ T6883] ? selinux_file_ioctl+0x13b/0x290 [ 71.346944][ T6883] ? selinux_file_ioctl+0xb6/0x290 [ 71.346966][ T6883] ? __pfx_sock_ioctl+0x10/0x10 [ 71.346985][ T6883] __x64_sys_ioctl+0x18e/0x210 [ 71.347007][ T6883] do_syscall_64+0x123/0x790 [ 71.347034][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.347054][ T6883] RIP: 0033:0x7fb00099e159 [ 71.347070][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.347088][ T6883] RSP: 002b:00007fb001883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.347113][ T6883] RAX: ffffffffffffffda RBX: 00007fb000c25fa0 RCX: 00007fb00099e159 [ 71.347126][ T6883] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 71.347138][ T6883] RBP: 00007fb001883090 R08: 0000000000000000 R09: 0000000000000000 [ 71.347150][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.347161][ T6883] R13: 00007fb000c26038 R14: 00007fb000c25fa0 R15: 00007ffc85826c78 [ 71.347186][ T6883] [ 71.439776][ T43] audit: type=1400 audit(1789500898.115:381): avc: denied { read } for pid=6889 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.514687][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.514777][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.623462][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 71.623485][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 71.640286][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.676031][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.350'. [ 71.719727][ T6908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.770488][ T6908] md: couldn't update array info. -22 [ 71.804092][ T35] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.810961][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.810986][ T35] usb 7-1: Product: syz [ 71.810998][ T35] usb 7-1: Manufacturer: syz [ 71.811010][ T35] usb 7-1: SerialNumber: syz [ 71.826888][ T6908] md: could not open device unknown-block(1,1). [ 71.826937][ T6908] md: md_import_device returned -16 [ 71.862536][ T58] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 71.961408][ T6917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.973428][ T6919] FAULT_INJECTION: forcing a failure. [ 71.973428][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 71.973457][ T6919] CPU: 3 UID: 0 PID: 6919 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 71.973476][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.973500][ T6919] Call Trace: [ 71.973507][ T6919] [ 71.973513][ T6919] dump_stack_lvl+0x100/0x190 [ 71.973558][ T6919] should_fail_ex.cold+0x5/0xa [ 71.973580][ T6919] should_failslab+0xc2/0x120 [ 71.973606][ T6919] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.973626][ T6919] ? do_getname+0x35/0x390 [ 71.973653][ T6919] do_getname+0x35/0x390 [ 71.973678][ T6919] user_path_at+0x26/0x60 [ 71.973697][ T6919] __x64_sys_mount+0x1fb/0x310 [ 71.973722][ T6919] ? __pfx___x64_sys_mount+0x10/0x10 [ 71.973752][ T6919] do_syscall_64+0x123/0x790 [ 71.973781][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.973799][ T6919] RIP: 0033:0x7fb08279e159 [ 71.973813][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.973828][ T6919] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.973846][ T6919] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 71.973862][ T6919] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 71.973873][ T6919] RBP: 00007fb0836fc090 R08: 0000200000000180 R09: 0000000000000000 [ 71.973883][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.973892][ T6919] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 71.973914][ T6919] [ 72.048893][ T6917] md: couldn't update array info. -22 [ 72.310765][ T1603] usb 7-1: USB disconnect, device number 4 [ 72.577831][ T6922] tipc: Enabled bearer , priority 10 [ 72.597243][ T43] audit: type=1400 audit(1789500899.265:382): avc: denied { ioctl } for pid=6921 comm="syz.3.357" path="socket:[21932]" dev="sockfs" ino=21932 ioctlcmd=0x551e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.757887][ T43] audit: type=1400 audit(1789500899.435:383): avc: denied { create } for pid=6929 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.761543][ T43] audit: type=1400 audit(1789500899.445:384): avc: denied { bind } for pid=6929 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.841871][ T43] audit: type=1400 audit(1789500899.525:385): avc: denied { map } for pid=6929 comm="syz.1.360" path="socket:[20938]" dev="sockfs" ino=20938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 72.911547][ T6937] Bluetooth: MGMT ver 1.23 [ 72.911945][ T6937] Bluetooth: MGMT ver 1.23 [ 72.933335][ T6937] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 72.935088][ T6937] bond1 (unregistering): Released all slaves [ 72.969221][ T6939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.363'. [ 73.055613][ T6948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.071317][ T6948] md: couldn't update array info. -22 [ 73.108791][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'. [ 73.109161][ T6953] netlink: 'syz.2.369': attribute type 53 has an invalid length. [ 73.110614][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.120293][ T58] usb 7-1: Service connection timeout for: 256 [ 73.120314][ T58] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 73.120753][ T58] ath9k_htc: Failed to initialize the device [ 73.123115][ T1603] usb 7-1: ath9k_htc: USB layer deinitialized [ 73.148027][ T6955] FAULT_INJECTION: forcing a failure. [ 73.148027][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.148069][ T6955] CPU: 3 UID: 0 PID: 6955 Comm: syz.0.370 Not tainted syzkaller #0 PREEMPT(full) [ 73.148091][ T6955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.148103][ T6955] Call Trace: [ 73.148110][ T6955] [ 73.148117][ T6955] dump_stack_lvl+0x100/0x190 [ 73.148168][ T6955] should_fail_ex.cold+0x5/0xa [ 73.148197][ T6955] _copy_from_user+0x2e/0xd0 [ 73.148275][ T6955] memdup_user+0x6b/0xe0 [ 73.148304][ T6955] strndup_user+0x78/0xe0 [ 73.148322][ T6955] __do_sys_request_key+0x127/0x3c0 [ 73.148362][ T6955] ? __pfx___do_sys_request_key+0x10/0x10 [ 73.148391][ T6955] ? ksys_write+0x1ac/0x250 [ 73.148423][ T6955] do_syscall_64+0x123/0x790 [ 73.148462][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.148484][ T6955] RIP: 0033:0x7f2fcb79e159 [ 73.148502][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.148521][ T6955] RSP: 002b:00007f2fcc597028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 73.148543][ T6955] RAX: ffffffffffffffda RBX: 00007f2fcba25fa0 RCX: 00007f2fcb79e159 [ 73.148556][ T6955] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 73.148570][ T6955] RBP: 00007f2fcc597090 R08: 0000000000000000 R09: 0000000000000000 [ 73.148582][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.148594][ T6955] R13: 00007f2fcba26038 R14: 00007f2fcba25fa0 R15: 00007ffe9fee56d8 [ 73.148622][ T6955] [ 73.169569][ T43] audit: type=1400 audit(1789500899.845:386): avc: denied { name_bind } for pid=6952 comm="syz.2.369" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.234438][ T43] audit: type=1400 audit(1789500899.915:387): avc: denied { create } for pid=6961 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.240331][ T43] audit: type=1400 audit(1789500899.915:388): avc: denied { write } for pid=6961 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.240376][ T43] audit: type=1400 audit(1789500899.915:389): avc: denied { nlmsg_write } for pid=6961 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.245777][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.451409][ T6984] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.470991][ T6984] md: couldn't update array info. -22 [ 73.557670][ T6984] md: could not open device unknown-block(0,3). [ 73.557701][ T6984] md: md_import_device returned -6 [ 73.591746][ T42] tipc: Node number set to 65535 [ 73.796371][ T6996] overlayfs: conflicting lowerdir path [ 74.335931][ T7019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.360781][ T7019] md: couldn't update array info. -22 [ 74.391621][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 74.391651][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 74.439127][ T7019] md: could not open device unknown-block(0,3). [ 74.439158][ T7019] md: md_import_device returned -6 [ 74.445389][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.3.396'. [ 74.525256][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.577016][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.630942][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.794284][ T7056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.829199][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'. [ 74.829222][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'. [ 74.840532][ T7056] md: couldn't update array info. -22 [ 74.881212][ T7056] md: could not open device unknown-block(1,1). [ 74.881242][ T7056] md: md_import_device returned -16 [ 74.933518][ T7063] FAULT_INJECTION: forcing a failure. [ 74.933518][ T7063] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.933550][ T7063] CPU: 2 UID: 0 PID: 7063 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) [ 74.933572][ T7063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.933583][ T7063] Call Trace: [ 74.933589][ T7063] [ 74.933597][ T7063] dump_stack_lvl+0x100/0x190 [ 74.933646][ T7063] should_fail_ex.cold+0x5/0xa [ 74.933670][ T7063] ? prepare_alloc_pages+0x16d/0x5b0 [ 74.933697][ T7063] should_fail_alloc_page+0xeb/0x140 [ 74.933723][ T7063] prepare_alloc_pages+0x1f0/0x5b0 [ 74.933752][ T7063] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 74.933772][ T7063] ? __pfx_get_page_from_freelist+0x10/0x10 [ 74.933802][ T7063] ? prepare_alloc_pages+0x1f0/0x5b0 [ 74.933828][ T7063] ? rcu_is_watching+0x13/0xc0 [ 74.933855][ T7063] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 74.933878][ T7063] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.933904][ T7063] ? find_held_lock+0x2b/0x80 [ 74.933929][ T7063] ? is_bpf_text_address+0x8a/0x1a0 [ 74.933955][ T7063] ? is_bpf_text_address+0x8a/0x1a0 [ 74.933979][ T7063] ? bpf_ksym_find+0x128/0x1c0 [ 74.934007][ T7063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.934038][ T7063] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.934055][ T7063] ? is_bpf_text_address+0x94/0x1a0 [ 74.934081][ T7063] ? __kernel_text_address+0xd/0x30 [ 74.934129][ T7063] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 74.934154][ T7063] ? policy_nodemask+0xed/0x4f0 [ 74.934182][ T7063] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 74.934204][ T7063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.934235][ T7063] __kasan_populate_vmalloc+0xf0/0x210 [ 74.934261][ T7063] alloc_vmap_area+0x95d/0x2bb0 [ 74.934291][ T7063] ? kasan_save_track+0x14/0x30 [ 74.934329][ T7063] ? __kasan_kmalloc+0xaa/0xb0 [ 74.934350][ T7063] ? __pfx_alloc_vmap_area+0x10/0x10 [ 74.934374][ T7063] ? __get_vm_area_node+0x124/0x350 [ 74.934400][ T7063] __get_vm_area_node+0x1ed/0x350 [ 74.934428][ T7063] __vmalloc_node_range_noprof+0x268/0x1420 [ 74.934455][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.934477][ T7063] ? __pfx_stack_trace_save+0x10/0x10 [ 74.934496][ T7063] ? stack_depot_save_flags+0x27/0x9f0 [ 74.934525][ T7063] ? __lock_acquire+0x5c0/0x1f40 [ 74.934549][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.934572][ T7063] ? kfree+0x22b/0x6d0 [ 74.934598][ T7063] ? __x64_sys_ioctl+0xb7/0x210 [ 74.934619][ T7063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.934655][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.934677][ T7063] __vmalloc_node_noprof+0xad/0xf0 [ 74.934701][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.934728][ T7063] __vmalloc_noprof+0xa3/0x120 [ 74.934751][ T7063] ? __pfx___vmalloc_noprof+0x10/0x10 [ 74.934802][ T7063] ? lock_acquire+0x1d1/0x380 [ 74.934822][ T7063] ? __tun_chr_ioctl+0x6f3/0x4880 [ 74.934860][ T7063] bpf_prog_alloc_no_stats+0x59/0x690 [ 74.934887][ T7063] bpf_prog_alloc+0x3b/0x200 [ 74.934918][ T7063] __get_filter+0x112/0x2c0 [ 74.934947][ T7063] sk_attach_filter+0x1c/0x150 [ 74.934974][ T7063] tun_attach.isra.0+0xcd0/0x1870 [ 74.934998][ T7063] ? __pfx_avc_has_perm+0x10/0x10 [ 74.935036][ T7063] __tun_chr_ioctl+0x832/0x4880 [ 74.935055][ T7063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.935072][ T7063] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 74.935101][ T7063] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 74.935120][ T7063] ? __fget_files+0x34/0x3d0 [ 74.935154][ T7063] ? selinux_file_ioctl+0x13b/0x290 [ 74.935173][ T7063] ? selinux_file_ioctl+0xb6/0x290 [ 74.935196][ T7063] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 74.935218][ T7063] __x64_sys_ioctl+0x18e/0x210 [ 74.935239][ T7063] do_syscall_64+0x123/0x790 [ 74.935268][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.935287][ T7063] RIP: 0033:0x7f828259e159 [ 74.935304][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.935321][ T7063] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.935340][ T7063] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 74.935353][ T7063] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003 [ 74.935365][ T7063] RBP: 00007f8283447090 R08: 0000000000000000 R09: 0000000000000000 [ 74.935376][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.935387][ T7063] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 74.935412][ T7063] [ 74.936449][ T7063] syz.1.412: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 74.936524][ T7063] CPU: 2 UID: 0 PID: 7063 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) [ 74.936544][ T7063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.936555][ T7063] Call Trace: [ 74.936561][ T7063] [ 74.936568][ T7063] dump_stack_lvl+0x100/0x190 [ 74.936598][ T7063] warn_alloc.cold+0x9e/0xb2 [ 74.936619][ T7063] ? __pfx_warn_alloc+0x10/0x10 [ 74.936647][ T7063] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.936674][ T7063] ? __get_vm_area_node+0x2f0/0x350 [ 74.936702][ T7063] ? __get_vm_area_node+0x22b/0x350 [ 74.936730][ T7063] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 74.936755][ T7063] ? __pfx_stack_trace_save+0x10/0x10 [ 74.936774][ T7063] ? stack_depot_save_flags+0x27/0x9f0 [ 74.936799][ T7063] ? __lock_acquire+0x5c0/0x1f40 [ 74.936823][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.936847][ T7063] ? kfree+0x22b/0x6d0 [ 74.936873][ T7063] ? __x64_sys_ioctl+0xb7/0x210 [ 74.936899][ T7063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.936934][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.936957][ T7063] __vmalloc_node_noprof+0xad/0xf0 [ 74.936981][ T7063] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 74.937008][ T7063] __vmalloc_noprof+0xa3/0x120 [ 74.937032][ T7063] ? __pfx___vmalloc_noprof+0x10/0x10 [ 74.937055][ T7063] ? lock_acquire+0x1d1/0x380 [ 74.937074][ T7063] ? __tun_chr_ioctl+0x6f3/0x4880 [ 74.937101][ T7063] bpf_prog_alloc_no_stats+0x59/0x690 [ 74.937128][ T7063] bpf_prog_alloc+0x3b/0x200 [ 74.937153][ T7063] __get_filter+0x112/0x2c0 [ 74.937181][ T7063] sk_attach_filter+0x1c/0x150 [ 74.937208][ T7063] tun_attach.isra.0+0xcd0/0x1870 [ 74.937231][ T7063] ? __pfx_avc_has_perm+0x10/0x10 [ 74.937268][ T7063] __tun_chr_ioctl+0x832/0x4880 [ 74.937287][ T7063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.937304][ T7063] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 74.937332][ T7063] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 74.937352][ T7063] ? __fget_files+0x34/0x3d0 [ 74.937386][ T7063] ? selinux_file_ioctl+0x13b/0x290 [ 74.937405][ T7063] ? selinux_file_ioctl+0xb6/0x290 [ 74.937426][ T7063] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 74.937449][ T7063] __x64_sys_ioctl+0x18e/0x210 [ 74.937470][ T7063] do_syscall_64+0x123/0x790 [ 74.937497][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.937516][ T7063] RIP: 0033:0x7f828259e159 [ 74.937531][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.937549][ T7063] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.937566][ T7063] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 74.937579][ T7063] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003 [ 74.937590][ T7063] RBP: 00007f8283447090 R08: 0000000000000000 R09: 0000000000000000 [ 74.937601][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.937612][ T7063] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 74.937638][ T7063] [ 74.937699][ T7063] Mem-Info: [ 74.937708][ T7063] active_anon:8596 inactive_anon:0 isolated_anon:0 [ 74.937708][ T7063] active_file:0 inactive_file:59179 isolated_file:0 [ 74.937708][ T7063] unevictable:1000 dirty:994 writeback:0 [ 74.937708][ T7063] slab_reclaimable:11833 slab_unreclaimable:69530 [ 74.937708][ T7063] mapped:25451 shmem:1553 pagetables:1183 [ 74.937708][ T7063] sec_pagetables:295 bounce:0 [ 74.937708][ T7063] kernel_misc_reclaimable:0 [ 74.937708][ T7063] free:447272 free_pcp:21750 free_cma:0 [ 74.937752][ T7063] Node 0 active_anon:34384kB inactive_anon:0kB active_file:0kB inactive_file:236516kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:101804kB dirty:3964kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12992kB pagetables:4508kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.937799][ T7063] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.937843][ T7063] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.937896][ T7063] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 74.937929][ T7063] Node 0 DMA32 free:127092kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34384kB inactive_anon:0kB active_file:0kB inactive_file:236516kB unevictable:2000kB writepending:3964kB zspages:0kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:81760kB local_pcp:21688kB free_cma:0kB [ 74.937979][ T7063] lowmem_reserve[]: 0 0 0 0 0 [ 74.938010][ T7063] Node 1 Normal free:1646636kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:5452kB local_pcp:752kB free_cma:0kB [ 74.938060][ T7063] lowmem_reserve[]: 0 0 0 0 0 [ 74.938091][ T7063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 74.938213][ T7063] Node 0 DMA32: 155*4kB (UME) 609*8kB (UME) 314*16kB (UME) 24*32kB (ME) 38*64kB (ME) 25*128kB (UME) 21*256kB (UM) 2*512kB (M) 3*1024kB (UM) 3*2048kB (UME) 23*4096kB (M) = 126740kB [ 74.939126][ T7063] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 400*4096kB (M) = 1646640kB [ 74.939275][ T7063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.939290][ T7063] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.939304][ T7063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.939318][ T7063] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.939332][ T7063] 60728 total pagecache pages [ 74.939339][ T7063] 0 pages in swap cache [ 74.939345][ T7063] Free swap = 124996kB [ 74.939352][ T7063] Total swap = 124996kB [ 74.939359][ T7063] 1048443 pages RAM [ 74.939365][ T7063] 0 pages HighMem/MovableOnly [ 74.939371][ T7063] 285812 pages reserved [ 74.939377][ T7063] 0 pages cma reserved [ 75.089939][ T7069] overlayfs: conflicting lowerdir path [ 75.470268][ T1044] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.480491][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.559885][ T7090] CIFS: VFS: UNC: path must begin with // or \\ [ 75.559898][ T7090] Malformed UNC in devname [ 75.559898][ T7090] [ 75.559954][ T7090] CIFS: VFS: Malformed UNC in devname [ 75.606890][ T7094] bridge0: port 3(syz_tun) entered blocking state [ 75.607714][ T7094] bridge0: port 3(syz_tun) entered disabled state [ 75.607919][ T7094] syz_tun: entered allmulticast mode [ 75.609953][ T7094] syz_tun: entered promiscuous mode [ 75.610445][ T50] usb 6-1: device descriptor read/64, error -71 [ 75.621551][ T1044] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.629006][ T1044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.629022][ T1044] usb 5-1: Product: syz [ 75.629030][ T1044] usb 5-1: Manufacturer: syz [ 75.629037][ T1044] usb 5-1: SerialNumber: syz [ 75.629572][ T7094] bridge0: port 3(syz_tun) entered blocking state [ 75.629660][ T7094] bridge0: port 3(syz_tun) entered forwarding state [ 75.661194][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.830451][ T43] kauditd_printk_skb: 9640 callbacks suppressed [ 75.830474][ T43] audit: type=1326 audit(1789500902.505:10030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.830656][ T43] audit: type=1326 audit(1789500902.515:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.830797][ T43] audit: type=1326 audit(1789500902.515:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.830975][ T43] audit: type=1326 audit(1789500902.515:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831146][ T43] audit: type=1326 audit(1789500902.515:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831288][ T43] audit: type=1326 audit(1789500902.515:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831464][ T43] audit: type=1326 audit(1789500902.515:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831610][ T43] audit: type=1326 audit(1789500902.515:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831765][ T43] audit: type=1326 audit(1789500902.515:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.831903][ T43] audit: type=1326 audit(1789500902.515:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.2.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00099e159 code=0x7ff00000 [ 75.851142][ T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.000371][ T50] usb 6-1: device descriptor read/64, error -71 [ 76.095976][ T5833] usb 5-1: USB disconnect, device number 3 [ 76.113165][ T50] usb usb6-port1: attempt power cycle [ 76.450251][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.471567][ T50] usb 6-1: device descriptor read/8, error -71 [ 76.639882][ T1041] cfg80211: failed to load regulatory.db [ 76.710273][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 76.731230][ T50] usb 6-1: device descriptor read/8, error -71 [ 76.745875][ T7128] 9p: Could not find request transport: virtio0.u [ 76.771102][ T7128] bond1: Removing last arp target with arp_interval on [ 76.842657][ T50] usb usb6-port1: unable to enumerate USB device [ 76.950360][ T25] usb 5-1: Service connection timeout for: 256 [ 76.950383][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 76.950645][ T25] ath9k_htc: Failed to initialize the device [ 76.950875][ T5833] usb 5-1: ath9k_htc: USB layer deinitialized [ 77.110505][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.191821][ T7142] netlink: 'syz.0.443': attribute type 30 has an invalid length. [ 77.243273][ T7143] netlink: 'syz.0.443': attribute type 30 has an invalid length. [ 77.260953][ T50] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 77.261911][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.261949][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.272255][ T50] as10x_usb: device has been detected [ 77.273018][ T50] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 77.283685][ T50] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 77.299994][ T50] as10x_usb: error during firmware upload part1 [ 77.300831][ T50] Registered device Abilis Systems DVB-Titan [ 77.438243][ T7145] FAULT_INJECTION: forcing a failure. [ 77.438243][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.438281][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.0.444 Not tainted syzkaller #0 PREEMPT(full) [ 77.438305][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.438317][ T7145] Call Trace: [ 77.438325][ T7145] [ 77.438334][ T7145] dump_stack_lvl+0x100/0x190 [ 77.438370][ T7145] should_fail_ex.cold+0x5/0xa [ 77.438401][ T7145] strncpy_from_user+0x3b/0x2d0 [ 77.438431][ T7145] do_getname+0x78/0x390 [ 77.438465][ T7145] user_path_at+0x26/0x60 [ 77.438490][ T7145] __x64_sys_mount+0x1fb/0x310 [ 77.438524][ T7145] ? __pfx___x64_sys_mount+0x10/0x10 [ 77.438564][ T7145] do_syscall_64+0x123/0x790 [ 77.438597][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.438620][ T7145] RIP: 0033:0x7f2fcb79e159 [ 77.438638][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.438658][ T7145] RSP: 002b:00007f2fcc597028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.438680][ T7145] RAX: ffffffffffffffda RBX: 00007f2fcba25fa0 RCX: 00007f2fcb79e159 [ 77.438694][ T7145] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 77.438708][ T7145] RBP: 00007f2fcc597090 R08: 0000200000000180 R09: 0000000000000000 [ 77.438721][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.438734][ T7145] R13: 00007f2fcba26038 R14: 00007f2fcba25fa0 R15: 00007ffe9fee56d8 [ 77.438789][ T7145] [ 77.616760][ T7155] __nla_validate_parse: 7 callbacks suppressed [ 77.616779][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 77.616812][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 77.669112][ T7156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.448'. [ 78.402073][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.461'. [ 78.402165][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.461'. [ 78.454455][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.461'. [ 78.531116][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 78.621363][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 78.621399][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 78.674155][ T7198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.464'. [ 78.735416][ T7200] ip_tables: iptables: counters copy to user failed while replacing table [ 79.038722][ T7215] FAULT_INJECTION: forcing a failure. [ 79.038722][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 79.038777][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(full) [ 79.038798][ T7215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.038809][ T7215] Call Trace: [ 79.038816][ T7215] [ 79.038823][ T7215] dump_stack_lvl+0x100/0x190 [ 79.038851][ T7215] should_fail_ex.cold+0x5/0xa [ 79.038873][ T7215] should_failslab+0xc2/0x120 [ 79.038894][ T7215] __kmalloc_noprof+0xfc/0x840 [ 79.038912][ T7215] ? rcu_is_watching+0x13/0xc0 [ 79.038935][ T7215] ? tomoyo_realpath_from_path+0xb6/0x690 [ 79.038961][ T7215] tomoyo_realpath_from_path+0xb6/0x690 [ 79.038987][ T7215] tomoyo_mount_acl+0x1b6/0x8b0 [ 79.039004][ T7215] ? is_bpf_text_address+0x8a/0x1a0 [ 79.039033][ T7215] ? is_bpf_text_address+0x8a/0x1a0 [ 79.039058][ T7215] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.039083][ T7215] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 79.039100][ T7215] ? kernel_text_address+0x8d/0x100 [ 79.039128][ T7215] ? unwind_get_return_address+0x59/0xa0 [ 79.039151][ T7215] ? arch_stack_walk+0xa6/0xf0 [ 79.039177][ T7215] ? __lock_acquire+0x5c0/0x1f40 [ 79.039205][ T7215] ? tomoyo_mount_permission+0x1f6/0x460 [ 79.039228][ T7215] ? tomoyo_domain+0xb2/0x150 [ 79.039252][ T7215] ? tomoyo_profile+0x47/0x60 [ 79.039279][ T7215] tomoyo_mount_permission+0x214/0x460 [ 79.039298][ T7215] ? tomoyo_mount_permission+0x1f6/0x460 [ 79.039321][ T7215] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 79.039357][ T7215] security_sb_mount+0xdd/0x270 [ 79.039377][ T7215] path_mount+0x158/0x24c0 [ 79.039408][ T7215] ? __pfx_path_mount+0x10/0x10 [ 79.039433][ T7215] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.039461][ T7215] ? putname+0xb1/0x110 [ 79.039483][ T7215] ? kmem_cache_free+0x127/0x6c0 [ 79.039518][ T7215] ? __x64_sys_mount+0x293/0x310 [ 79.039543][ T7215] __x64_sys_mount+0x293/0x310 [ 79.039569][ T7215] ? __pfx___x64_sys_mount+0x10/0x10 [ 79.039599][ T7215] do_syscall_64+0x123/0x790 [ 79.039623][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.039640][ T7215] RIP: 0033:0x7f828259e159 [ 79.039670][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.039687][ T7215] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.039705][ T7215] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 79.039716][ T7215] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 79.039726][ T7215] RBP: 00007f8283447090 R08: 0000200000000180 R09: 0000000000000000 [ 79.039736][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.039746][ T7215] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 79.039770][ T7215] [ 79.039792][ T7215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.341660][ T7231] tmpfs: Cannot enable quota on remount [ 79.388685][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.444728][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.496928][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.021172][ T7258] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 80.082046][ T5833] usb 7-1: USB disconnect, device number 5 [ 80.101788][ T5833] Unregistered device Abilis Systems DVB-Titan [ 80.107374][ T5833] as10x_usb: device has been disconnected [ 80.310293][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.482287][ T35] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.485432][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.485461][ T35] usb 6-1: Product: syz [ 80.485474][ T35] usb 6-1: Manufacturer: syz [ 80.485487][ T35] usb 6-1: SerialNumber: syz [ 80.521720][ T1282] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 81.044222][ T5833] usb 6-1: USB disconnect, device number 7 [ 81.140685][ T43] kauditd_printk_skb: 4874 callbacks suppressed [ 81.140698][ T43] audit: type=1400 audit(1789500907.815:14914): avc: denied { prog_load } for pid=7317 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.140720][ T43] audit: type=1400 audit(1789500907.825:14915): avc: denied { prog_run } for pid=7317 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.198730][ T43] audit: type=1400 audit(1789500907.875:14916): avc: denied { create } for pid=7327 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.210049][ T43] audit: type=1400 audit(1789500907.885:14917): avc: denied { write } for pid=7327 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.537361][ T43] audit: type=1400 audit(1789500908.215:14918): avc: denied { create } for pid=7327 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.578770][ T7336] FAULT_INJECTION: forcing a failure. [ 81.578770][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 81.578802][ T7336] CPU: 0 UID: 0 PID: 7336 Comm: syz.2.510 Not tainted syzkaller #0 PREEMPT(full) [ 81.578831][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.578842][ T7336] Call Trace: [ 81.578849][ T7336] [ 81.578857][ T7336] dump_stack_lvl+0x100/0x190 [ 81.578900][ T7336] should_fail_ex.cold+0x5/0xa [ 81.578926][ T7336] should_failslab+0xc2/0x120 [ 81.578955][ T7336] __kmalloc_noprof+0xfc/0x840 [ 81.578976][ T7336] ? tomoyo_encode2+0xfb/0x3c0 [ 81.579003][ T7336] tomoyo_encode2+0xfb/0x3c0 [ 81.579028][ T7336] tomoyo_encode+0x29/0x50 [ 81.579049][ T7336] tomoyo_realpath_from_path+0x18c/0x690 [ 81.579077][ T7336] tomoyo_mount_acl+0x1b6/0x8b0 [ 81.579096][ T7336] ? is_bpf_text_address+0x8a/0x1a0 [ 81.579121][ T7336] ? is_bpf_text_address+0x8a/0x1a0 [ 81.579148][ T7336] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 81.579179][ T7336] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 81.579199][ T7336] ? kernel_text_address+0x8d/0x100 [ 81.579228][ T7336] ? unwind_get_return_address+0x59/0xa0 [ 81.579255][ T7336] ? arch_stack_walk+0xa6/0xf0 [ 81.579282][ T7336] ? __lock_acquire+0x5c0/0x1f40 [ 81.579313][ T7336] ? tomoyo_mount_permission+0x1f6/0x460 [ 81.579337][ T7336] ? tomoyo_domain+0xb2/0x150 [ 81.579361][ T7336] ? tomoyo_profile+0x47/0x60 [ 81.579402][ T7336] tomoyo_mount_permission+0x214/0x460 [ 81.579423][ T7336] ? tomoyo_mount_permission+0x1f6/0x460 [ 81.579446][ T7336] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 81.579481][ T7336] security_sb_mount+0xdd/0x270 [ 81.579502][ T7336] path_mount+0x158/0x24c0 [ 81.579533][ T7336] ? __pfx_path_mount+0x10/0x10 [ 81.579559][ T7336] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.579592][ T7336] ? putname+0xb1/0x110 [ 81.579614][ T7336] ? kmem_cache_free+0x127/0x6c0 [ 81.579650][ T7336] ? __x64_sys_mount+0x293/0x310 [ 81.579676][ T7336] __x64_sys_mount+0x293/0x310 [ 81.579703][ T7336] ? __pfx___x64_sys_mount+0x10/0x10 [ 81.579737][ T7336] do_syscall_64+0x123/0x790 [ 81.579764][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.579784][ T7336] RIP: 0033:0x7fb00099e159 [ 81.579800][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.579822][ T7336] RSP: 002b:00007fb001883028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.579842][ T7336] RAX: ffffffffffffffda RBX: 00007fb000c25fa0 RCX: 00007fb00099e159 [ 81.579854][ T7336] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 81.579866][ T7336] RBP: 00007fb001883090 R08: 0000200000000180 R09: 0000000000000000 [ 81.579877][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.579888][ T7336] R13: 00007fb000c26038 R14: 00007fb000c25fa0 R15: 00007ffc85826c78 [ 81.579913][ T7336] [ 81.579973][ T7336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.655406][ T43] audit: type=1400 audit(1789500908.335:14919): avc: denied { setattr } for pid=7337 comm="syz.1.511" name="NETLINK" dev="sockfs" ino=24002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.676360][ T43] audit: type=1400 audit(1789500908.345:14920): avc: denied { map_create } for pid=7337 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.762139][ T1282] usb 6-1: Service connection timeout for: 256 [ 81.762161][ T1282] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 81.762688][ T1282] ath9k_htc: Failed to initialize the device [ 81.765961][ T5833] usb 6-1: ath9k_htc: USB layer deinitialized [ 81.795597][ T43] audit: type=1400 audit(1789500908.475:14921): avc: denied { append } for pid=7345 comm="syz.1.514" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.813351][ T43] audit: type=1400 audit(1789500908.495:14922): avc: denied { watch } for pid=7343 comm="syz.2.513" path="/108/file1" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.834794][ T7344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.839980][ T7351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7351 comm=syz.1.514 [ 81.848974][ T7351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.015769][ T7356] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 82.016427][ T7356] capability: warning: `syz.3.516' uses 32-bit capabilities (legacy support in use) [ 82.099280][ T7360] process 'syz.2.518' launched './file2' with NULL argv: empty string added [ 82.101946][ T43] audit: type=1400 audit(1789500908.775:14923): avc: denied { execute_no_trans } for pid=7359 comm="syz.2.518" path="/110/file2" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.113360][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.153826][ T5833] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 82.165605][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.217804][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.280324][ T5833] usb 6-1: device descriptor read/64, error -71 [ 82.287124][ T7364] syz.0.520 uses obsolete (PF_INET,SOCK_PACKET) [ 82.530318][ T5833] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 82.670399][ T5833] usb 6-1: device descriptor read/64, error -71 [ 82.783870][ T5833] usb usb6-port1: attempt power cycle [ 82.858650][ T7379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 82.858679][ T7379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.861214][ T7379] vhci_hcd vhci_hcd.0: Device attached [ 82.864215][ T7380] vhci_hcd: cannot find the pending unlink 8 [ 82.865864][ T7380] vhci_hcd: connection closed [ 82.868211][ T5810] vhci_hcd vhci_hcd.2: stop threads [ 82.868508][ T5810] vhci_hcd vhci_hcd.2: release socket [ 82.868534][ T5810] vhci_hcd vhci_hcd.2: disconnect device [ 82.884080][ T7383] __nla_validate_parse: 5 callbacks suppressed [ 82.884098][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 82.884122][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 83.150316][ T5833] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 83.171039][ T5833] usb 6-1: device descriptor read/8, error -71 [ 83.175234][ T7390] FAULT_INJECTION: forcing a failure. [ 83.175234][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 83.175264][ T7390] CPU: 3 UID: 0 PID: 7390 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 83.175305][ T7390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.175316][ T7390] Call Trace: [ 83.175324][ T7390] [ 83.175332][ T7390] dump_stack_lvl+0x100/0x190 [ 83.175367][ T7390] should_fail_ex.cold+0x5/0xa [ 83.175396][ T7390] should_failslab+0xc2/0x120 [ 83.175424][ T7390] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 83.175448][ T7390] ? __alloc_skb+0x5b7/0x710 [ 83.175482][ T7390] ? __alloc_skb+0x140/0x710 [ 83.175509][ T7390] __alloc_skb+0x140/0x710 [ 83.175530][ T7390] ? __alloc_skb+0x5b7/0x710 [ 83.175553][ T7390] ? __pfx___alloc_skb+0x10/0x10 [ 83.175584][ T7390] netlink_alloc_large_skb+0x69/0x150 [ 83.175610][ T7390] netlink_sendmsg+0x680/0xda0 [ 83.175638][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.175664][ T7390] ? selinux_socket_sendmsg+0x198/0x2f0 [ 83.175691][ T7390] ____sys_sendmsg+0xa4d/0xbe0 [ 83.175720][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.175745][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.175781][ T7390] ? lock_acquire+0x1d1/0x380 [ 83.175809][ T7390] ? get_pid_task+0x2a/0x250 [ 83.175839][ T7390] ___sys_sendmsg+0x190/0x1e0 [ 83.175872][ T7390] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.175904][ T7390] ? get_pid_task+0x106/0x250 [ 83.175941][ T7390] ? find_held_lock+0x2b/0x80 [ 83.175987][ T7390] __sys_sendmsg+0x160/0x210 [ 83.176014][ T7390] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.176053][ T7390] do_syscall_64+0x123/0x790 [ 83.176084][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.176106][ T7390] RIP: 0033:0x7fb08279e159 [ 83.176124][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.176144][ T7390] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.176165][ T7390] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 83.176179][ T7390] RDX: 0000000000004050 RSI: 00002000000012c0 RDI: 0000000000000006 [ 83.176192][ T7390] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 83.176204][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.176217][ T7390] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 83.176245][ T7390] [ 83.359548][ T7397] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 83.421670][ T5833] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 83.453565][ T5833] usb 6-1: device descriptor read/8, error -71 [ 83.499537][ T7397] kvm [7396]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 83.500492][ T7397] kvm [7396]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 83.561032][ T5833] usb usb6-port1: unable to enumerate USB device [ 83.832923][ T7411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7411 comm=syz.2.538 [ 83.839771][ T7411] bridge_slave_0: left allmulticast mode [ 83.839788][ T7411] bridge_slave_0: left promiscuous mode [ 83.842090][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.850560][ T7411] bridge_slave_1: left allmulticast mode [ 83.850579][ T7411] bridge_slave_1: left promiscuous mode [ 83.851338][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.864858][ T7411] bond0: (slave bond_slave_0): Releasing backup interface [ 83.878451][ T7411] bond0: (slave bond_slave_1): Releasing backup interface [ 83.887862][ T7411] team0: Port device team_slave_0 removed [ 83.896537][ T7411] team0: Port device team_slave_1 removed [ 83.897212][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.897230][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.901231][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.901249][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.904985][ T7411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.039986][ T7418] FAULT_INJECTION: forcing a failure. [ 84.039986][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 84.040007][ T7418] CPU: 2 UID: 0 PID: 7418 Comm: syz.2.541 Not tainted syzkaller #0 PREEMPT(full) [ 84.040021][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.040028][ T7418] Call Trace: [ 84.040032][ T7418] [ 84.040046][ T7418] dump_stack_lvl+0x100/0x190 [ 84.040077][ T7418] should_fail_ex.cold+0x5/0xa [ 84.040101][ T7418] should_failslab+0xc2/0x120 [ 84.040125][ T7418] __kmalloc_noprof+0xfc/0x840 [ 84.040163][ T7418] ? tomoyo_encode2+0xfb/0x3c0 [ 84.040192][ T7418] tomoyo_encode2+0xfb/0x3c0 [ 84.040212][ T7418] ? __get_fs_type+0xe3/0x200 [ 84.040235][ T7418] tomoyo_encode+0x29/0x50 [ 84.040248][ T7418] tomoyo_mount_acl+0x388/0x8b0 [ 84.040260][ T7418] ? is_bpf_text_address+0x8a/0x1a0 [ 84.040276][ T7418] ? is_bpf_text_address+0x8a/0x1a0 [ 84.040292][ T7418] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 84.040312][ T7418] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 84.040325][ T7418] ? kernel_text_address+0x8d/0x100 [ 84.040348][ T7418] ? unwind_get_return_address+0x59/0xa0 [ 84.040366][ T7418] ? arch_stack_walk+0xa6/0xf0 [ 84.040383][ T7418] ? __lock_acquire+0x5c0/0x1f40 [ 84.040402][ T7418] ? tomoyo_mount_permission+0x1f6/0x460 [ 84.040417][ T7418] ? tomoyo_domain+0xb2/0x150 [ 84.040432][ T7418] ? tomoyo_profile+0x47/0x60 [ 84.040449][ T7418] tomoyo_mount_permission+0x214/0x460 [ 84.040461][ T7418] ? tomoyo_mount_permission+0x1f6/0x460 [ 84.040475][ T7418] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 84.040497][ T7418] security_sb_mount+0xdd/0x270 [ 84.040510][ T7418] path_mount+0x158/0x24c0 [ 84.040529][ T7418] ? __pfx_path_mount+0x10/0x10 [ 84.040545][ T7418] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.040563][ T7418] ? putname+0xb1/0x110 [ 84.040577][ T7418] ? kmem_cache_free+0x127/0x6c0 [ 84.040600][ T7418] ? __x64_sys_mount+0x293/0x310 [ 84.040616][ T7418] __x64_sys_mount+0x293/0x310 [ 84.040633][ T7418] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.040654][ T7418] do_syscall_64+0x123/0x790 [ 84.040675][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.040687][ T7418] RIP: 0033:0x7fb00099e159 [ 84.040698][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.040709][ T7418] RSP: 002b:00007fb001883028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.040721][ T7418] RAX: ffffffffffffffda RBX: 00007fb000c25fa0 RCX: 00007fb00099e159 [ 84.040729][ T7418] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 84.040735][ T7418] RBP: 00007fb001883090 R08: 0000200000000180 R09: 0000000000000000 [ 84.040742][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.040749][ T7418] R13: 00007fb000c26038 R14: 00007fb000c25fa0 R15: 00007ffc85826c78 [ 84.040764][ T7418] [ 84.144742][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 84.144775][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 84.210327][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.303853][ T7429] CacheFiles: No cache directory specified [ 84.306787][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.358885][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.380807][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.384517][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.384537][ T25] usb 5-1: Product: syz [ 84.384547][ T25] usb 5-1: Manufacturer: syz [ 84.384556][ T25] usb 5-1: SerialNumber: syz [ 84.411906][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.417071][ T1041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.801732][ T7433] netlink: zone id is out of range [ 84.801790][ T7433] netlink: zone id is out of range [ 84.801824][ T7433] netlink: zone id is out of range [ 84.801885][ T7433] netlink: zone id is out of range [ 84.801991][ T7433] netlink: zone id is out of range [ 84.802020][ T7433] netlink: zone id is out of range [ 84.802026][ T7433] netlink: zone id is out of range [ 84.802044][ T7433] netlink: zone id is out of range [ 84.802050][ T7433] netlink: zone id is out of range [ 84.803433][ T7432] xt_time: unknown flags 0x78 [ 84.824727][ T852] usb 5-1: USB disconnect, device number 4 [ 84.956651][ T7440] netlink: 'syz.3.548': attribute type 28 has an invalid length. [ 84.956667][ T7440] netlink: 'syz.3.548': attribute type 3 has an invalid length. [ 84.956676][ T7440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.548'. [ 85.493167][ T7450] cdrom: dropping to single frame dma [ 85.670265][ T1041] usb 5-1: Service connection timeout for: 256 [ 85.670288][ T1041] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 85.670753][ T1041] ath9k_htc: Failed to initialize the device [ 85.673460][ T852] usb 5-1: ath9k_htc: USB layer deinitialized [ 85.849757][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 85.930423][ T7465] syz.1.558 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.930460][ T7465] CPU: 2 UID: 0 PID: 7465 Comm: syz.1.558 Not tainted syzkaller #0 PREEMPT(full) [ 85.930483][ T7465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.930495][ T7465] Call Trace: [ 85.930502][ T7465] [ 85.930510][ T7465] dump_stack_lvl+0x100/0x190 [ 85.930554][ T7465] dump_header+0xfb/0x606 [ 85.930579][ T7465] oom_kill_process.cold+0xd/0x380 [ 85.930604][ T7465] out_of_memory+0x340/0x14f0 [ 85.930639][ T7465] ? __pfx_out_of_memory+0x10/0x10 [ 85.930671][ T7465] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.930698][ T7465] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.930744][ T7465] ? find_held_lock+0x2b/0x80 [ 85.930778][ T7465] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.930806][ T7465] ? _raw_spin_unlock+0x28/0x50 [ 85.930835][ T7465] try_charge_memcg+0x783/0xf60 [ 85.930871][ T7465] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.930901][ T7465] ? find_held_lock+0x2b/0x80 [ 85.930930][ T7465] ? rcu_read_unlock+0x17/0x60 [ 85.930961][ T7465] ? rcu_read_unlock+0x17/0x60 [ 85.931000][ T7465] obj_cgroup_charge_pages+0x2b/0x1f0 [ 85.931030][ T7465] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 85.931064][ T7465] ? kasan_save_track+0x14/0x30 [ 85.931088][ T7465] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 85.931108][ T7465] ? d_instantiate+0x8a/0xb0 [ 85.931135][ T7465] ? alloc_empty_file+0x5b/0x1c0 [ 85.931165][ T7465] alloc_empty_file+0x5b/0x1c0 [ 85.931192][ T7465] alloc_file_pseudo+0x183/0x290 [ 85.931220][ T7465] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 85.931247][ T7465] ? alloc_fd+0x471/0x7a0 [ 85.931276][ T7465] sock_alloc_file+0x50/0x210 [ 85.931307][ T7465] __sys_socket+0x1c0/0x260 [ 85.931332][ T7465] ? __pfx___sys_socket+0x10/0x10 [ 85.931358][ T7465] __x64_sys_socket+0x72/0xb0 [ 85.931374][ T7465] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.931402][ T7465] do_syscall_64+0x123/0x790 [ 85.931433][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.931454][ T7465] RIP: 0033:0x7f828259e159 [ 85.931479][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.931498][ T7465] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 85.931518][ T7465] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 85.931530][ T7465] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 85.931542][ T7465] RBP: 00007f828263503b R08: 0000000000000000 R09: 0000000000000000 [ 85.931554][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.931566][ T7465] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 85.931594][ T7465] [ 85.931602][ T7465] memory: usage 8kB, limit 8kB, failcnt 61 [ 85.931613][ T7465] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 85.931624][ T7465] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 85.931634][ T7465] Memory cgroup stats for /syz1/test: [ 85.931777][ T7465] cache 0 [ 85.931785][ T7465] rss 0 [ 85.931792][ T7465] rss_huge 0 [ 85.931798][ T7465] shmem 0 [ 85.931805][ T7465] mapped_file 0 [ 85.931813][ T7465] dirty 0 [ 85.931820][ T7465] writeback 0 [ 85.931826][ T7465] workingset_refault_anon 0 [ 85.931833][ T7465] workingset_refault_file 0 [ 85.931841][ T7465] swap 0 [ 85.931847][ T7465] swapcached 0 [ 85.931854][ T7465] pgpgin 0 [ 85.931861][ T7465] pgpgout 0 [ 85.931868][ T7465] pgfault 5 [ 85.931874][ T7465] pgmajfault 0 [ 85.931881][ T7465] inactive_anon 0 [ 85.931888][ T7465] active_anon 0 [ 85.931894][ T7465] inactive_file 0 [ 85.931901][ T7465] active_file 0 [ 85.931908][ T7465] unevictable 0 [ 85.931915][ T7465] hierarchical_memory_limit 8192 [ 85.931923][ T7465] hierarchical_memsw_limit 9223372036854771712 [ 85.931932][ T7465] total_cache 0 [ 85.931939][ T7465] total_rss 0 [ 85.931946][ T7465] total_rss_huge 0 [ 85.931953][ T7465] total_shmem 0 [ 85.931961][ T7465] total_mapped_file 0 [ 85.931968][ T7465] total_dirty 0 [ 85.931975][ T7465] total_writeback 0 [ 85.931982][ T7465] total_workingset_refault_anon 0 [ 85.931990][ T7465] total_workingset_refault_file 0 [ 85.931998][ T7465] total_swap 0 [ 85.932005][ T7465] total_swapcached 0 [ 85.932012][ T7465] total_pgpgin 0 [ 85.932020][ T7465] total_pgpgout 0 [ 85.932027][ T7465] total_pgfault 5 [ 85.932034][ T7465] total_pgmajfault 0 [ 85.932041][ T7465] total_inactive_anon 0 [ 85.932049][ T7465] total_active_anon 0 [ 85.932056][ T7465] total_inactive_file 0 [ 85.932063][ T7465] total_active_file 0 [ 85.932071][ T7465] total_unevictable 0 [ 85.932078][ T7465] anon_cost 0 [ 85.932085][ T7465] file_cost 0 [ 85.932092][ T7465] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.558,pid=7463,uid=0 [ 85.933770][ T7465] Memory cgroup out of memory: Killed process 7463 (syz.1.558) total-vm:102252kB, anon-rss:1460kB, file-rss:23332kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 86.102244][ T7474] syz.1.561 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 86.102267][ T7474] CPU: 0 UID: 0 PID: 7474 Comm: syz.1.561 Not tainted syzkaller #0 PREEMPT(full) [ 86.102280][ T7474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.102287][ T7474] Call Trace: [ 86.102292][ T7474] [ 86.102296][ T7474] dump_stack_lvl+0x100/0x190 [ 86.102326][ T7474] dump_header+0xfb/0x606 [ 86.102340][ T7474] oom_kill_process.cold+0xd/0x380 [ 86.102355][ T7474] out_of_memory+0x340/0x14f0 [ 86.102376][ T7474] ? __pfx_out_of_memory+0x10/0x10 [ 86.102394][ T7474] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.102407][ T7474] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.102418][ T7474] ? find_held_lock+0x2b/0x80 [ 86.102455][ T7474] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.102472][ T7474] ? _raw_spin_unlock+0x28/0x50 [ 86.102490][ T7474] try_charge_memcg+0x783/0xf60 [ 86.102510][ T7474] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.102525][ T7474] ? find_held_lock+0x2b/0x80 [ 86.102539][ T7474] ? rcu_read_unlock+0x17/0x60 [ 86.102555][ T7474] ? rcu_read_unlock+0x17/0x60 [ 86.102574][ T7474] ? find_held_lock+0x2b/0x80 [ 86.102595][ T7474] ? rcu_read_unlock+0x17/0x60 [ 86.102621][ T7474] charge_memcg+0x1ae/0x210 [ 86.102648][ T7474] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 86.102671][ T7474] swap_cache_alloc_folio+0x548/0xc50 [ 86.102698][ T7474] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 86.102739][ T7474] ? swap_cache_get_folio+0x28d/0x360 [ 86.102760][ T7474] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 86.102780][ T7474] ? is_bpf_text_address+0x25/0x1a0 [ 86.102801][ T7474] ? find_held_lock+0x2b/0x80 [ 86.102817][ T7474] swap_cache_read_folio+0x47/0x140 [ 86.102831][ T7474] swap_cluster_readahead+0x369/0x5d0 [ 86.102846][ T7474] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 86.102860][ T7474] ? lock_acquire+0x1d1/0x380 [ 86.102872][ T7474] ? swap_table_get+0x28/0x2c0 [ 86.102896][ T7474] swapin_readahead+0xf0/0x260 [ 86.102908][ T7474] ? __pfx_swapin_readahead+0x10/0x10 [ 86.102919][ T7474] ? __pfx_get_swap_device+0x10/0x10 [ 86.102936][ T7474] ? __x64_sys_socket+0x72/0xb0 [ 86.102956][ T7474] do_swap_page+0xf72/0x5580 [ 86.102981][ T7474] ? __pfx_do_swap_page+0x10/0x10 [ 86.102996][ T7474] ? lock_acquire+0x1d1/0x380 [ 86.103008][ T7474] ? __pte_offset_map+0x2f/0x310 [ 86.103027][ T7474] ? rcu_is_watching+0x13/0xc0 [ 86.103043][ T7474] ? __pte_offset_map+0x179/0x310 [ 86.103059][ T7474] __handle_mm_fault+0x15bd/0x2f60 [ 86.103079][ T7474] ? lock_vma_under_rcu+0x11d/0x590 [ 86.103096][ T7474] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.103115][ T7474] ? lock_vma_under_rcu+0x17c/0x590 [ 86.103139][ T7474] handle_mm_fault+0x363/0xa20 [ 86.103157][ T7474] do_user_addr_fault+0x59c/0x12f0 [ 86.103176][ T7474] exc_page_fault+0x6f/0xd0 [ 86.103191][ T7474] asm_exc_page_fault+0x26/0x30 [ 86.103202][ T7474] RIP: 0033:0x7f828259f9cf [ 86.103213][ T7474] Code: 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 86.103225][ T7474] RSP: 002b:00007f8283445f98 EFLAGS: 00010203 [ 86.103235][ T7474] RAX: 0000000000000005 RBX: 00007f8282825fa0 RCX: 00007f828259f9c7 [ 86.103242][ T7474] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 86.103249][ T7474] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 86.103256][ T7474] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000000 [ 86.103262][ T7474] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 86.103277][ T7474] [ 86.105384][ T7474] memory: usage 8kB, limit 8kB, failcnt 103 [ 86.105395][ T7474] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 86.105403][ T7474] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 86.105410][ T7474] Memory cgroup stats for /syz1/test: [ 86.105482][ T7474] cache 0 [ 86.105488][ T7474] rss 0 [ 86.105491][ T7474] rss_huge 0 [ 86.105495][ T7474] shmem 0 [ 86.105499][ T7474] mapped_file 0 [ 86.106694][ T7474] dirty 0 [ 86.106700][ T7474] writeback 0 [ 86.106704][ T7474] workingset_refault_anon 0 [ 86.106709][ T7474] workingset_refault_file 0 [ 86.106713][ T7474] swap 0 [ 86.106738][ T7474] swapcached 0 [ 86.106742][ T7474] pgpgin 0 [ 86.106746][ T7474] pgpgout 0 [ 86.106750][ T7474] pgfault 5 [ 86.106754][ T7474] pgmajfault 0 [ 86.106758][ T7474] inactive_anon 0 [ 86.106762][ T7474] active_anon 0 [ 86.106766][ T7474] inactive_file 0 [ 86.106770][ T7474] active_file 0 [ 86.106774][ T7474] unevictable 0 [ 86.106778][ T7474] hierarchical_memory_limit 8192 [ 86.106783][ T7474] hierarchical_memsw_limit 9223372036854771712 [ 86.106788][ T7474] total_cache 0 [ 86.106792][ T7474] total_rss 0 [ 86.106796][ T7474] total_rss_huge 0 [ 86.106800][ T7474] total_shmem 0 [ 86.106804][ T7474] total_mapped_file 0 [ 86.106809][ T7474] total_dirty 0 [ 86.106812][ T7474] total_writeback 0 [ 86.106817][ T7474] total_workingset_refault_anon 0 [ 86.106821][ T7474] total_workingset_refault_file 0 [ 86.106826][ T7474] total_swap 0 [ 86.106830][ T7474] total_swapcached 0 [ 86.106834][ ** replaying previous printk message ** [ 86.106834][ T7474] total_pgpgin 0 [ 86.106838][ T7474] total_pgpgout 0 [ 86.106842][ T7474] total_pgfault 5 [ 86.106846][ T7474] total_pgmajfault 0 [ 86.106850][ T7474] total_inactive_anon 0 [ 86.106854][ T7474] total_active_anon 0 [ 86.106858][ T7474] total_inactive_file 0 [ 86.106862][ T7474] total_active_file 0 [ 86.106867][ T7474] total_unevictable 0 [ 86.106871][ T7474] anon_cost 0 [ 86.106875][ T7474] file_cost 0 [ 86.106879][ T7474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.561,pid=7473,uid=0 [ 86.106949][ T7474] Memory cgroup out of memory: Killed process 7473 (syz.1.561) total-vm:102252kB, anon-rss:1444kB, file-rss:22944kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 86.321544][ T7491] FAULT_INJECTION: forcing a failure. [ 86.321544][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 86.321572][ T7491] CPU: 2 UID: 0 PID: 7491 Comm: syz.3.567 Not tainted syzkaller #0 PREEMPT(full) [ 86.321592][ T7491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.321603][ T7491] Call Trace: [ 86.321609][ T7491] [ 86.321616][ T7491] dump_stack_lvl+0x100/0x190 [ 86.321647][ T7491] should_fail_ex.cold+0x5/0xa [ 86.321673][ T7491] should_failslab+0xc2/0x120 [ 86.321696][ T7491] __kmalloc_cache_noprof+0x91/0x6d0 [ 86.321721][ T7491] ? find_held_lock+0x2b/0x80 [ 86.321746][ T7491] ? alloc_fs_context+0x57/0xf40 [ 86.321777][ T7491] alloc_fs_context+0x57/0xf40 [ 86.321804][ T7491] ? __get_fs_type+0xe3/0x200 [ 86.321840][ T7491] path_mount+0xdbd/0x24c0 [ 86.321869][ T7491] ? __pfx_path_mount+0x10/0x10 [ 86.321893][ T7491] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.321920][ T7491] ? putname+0xb1/0x110 [ 86.321942][ T7491] ? kmem_cache_free+0x127/0x6c0 [ 86.321977][ T7491] ? __x64_sys_mount+0x293/0x310 [ 86.322003][ T7491] __x64_sys_mount+0x293/0x310 [ 86.322029][ T7491] ? __pfx___x64_sys_mount+0x10/0x10 [ 86.322062][ T7491] do_syscall_64+0x123/0x790 [ 86.322088][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.322106][ T7491] RIP: 0033:0x7fb08279e159 [ 86.322121][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.322138][ T7491] RSP: 002b:00007fb0836fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.322156][ T7491] RAX: ffffffffffffffda RBX: 00007fb082a25fa0 RCX: 00007fb08279e159 [ 86.322172][ T7491] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 86.322183][ T7491] RBP: 00007fb0836fc090 R08: 0000200000000180 R09: 0000000000000000 [ 86.322197][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.322208][ T7491] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 86.322232][ T7491] [ 86.382833][ T7495] FAULT_INJECTION: forcing a failure. [ 86.382833][ T7495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.382854][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(full) [ 86.382877][ T7495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.382887][ T7495] Call Trace: [ 86.382893][ T7495] [ 86.382900][ T7495] dump_stack_lvl+0x100/0x190 [ 86.382921][ T7495] should_fail_ex.cold+0x5/0xa [ 86.382937][ T7495] _copy_to_user+0x32/0xd0 [ 86.382950][ T7495] simple_read_from_buffer+0xcb/0x170 [ 86.382966][ T7495] proc_fail_nth_read+0x1af/0x230 [ 86.382981][ T7495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.382997][ T7495] ? rw_verify_area+0xce/0x6d0 [ 86.383016][ T7495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.383035][ T7495] vfs_read+0x1e4/0xb40 [ 86.383052][ T7495] ? lock_acquire+0x1d1/0x380 [ 86.383068][ T7495] ? __fget_files+0x34/0x3d0 [ 86.383082][ T7495] ? __pfx_vfs_read+0x10/0x10 [ 86.383092][ T7495] ? find_held_lock+0x2b/0x80 [ 86.383110][ T7495] ? __fget_files+0x215/0x3d0 [ 86.383134][ T7495] ? __fget_files+0x21f/0x3d0 [ 86.383161][ T7495] ksys_read+0x12a/0x250 [ 86.383176][ T7495] ? __pfx_ksys_read+0x10/0x10 [ 86.383195][ T7495] do_syscall_64+0x123/0x790 [ 86.383220][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.383237][ T7495] RIP: 0033:0x7fb08275e98e [ 86.383251][ T7495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.383265][ T7495] RSP: 002b:00007fb0836fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.383276][ T7495] RAX: ffffffffffffffda RBX: 00007fb0836fc6c0 RCX: 00007fb08275e98e [ 86.383283][ T7495] RDX: 000000000000000f RSI: 00007fb0836fc0a0 RDI: 0000000000000004 [ 86.383290][ T7495] RBP: 00007fb0836fc090 R08: 0000000000000000 R09: 0000000000000000 [ 86.383296][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.383302][ T7495] R13: 00007fb082a26038 R14: 00007fb082a25fa0 R15: 00007ffdfb9b8df8 [ 86.383323][ T7495] [ 86.400107][ T7497] [ 86.431177][ T227] IPVS: starting estimator thread 0... [ 86.447868][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 86.447882][ T43] audit: type=1400 audit(1789500913.125:14948): avc: denied { getopt } for pid=7503 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.530685][ T7502] IPVS: using max 52 ests per chain, 124800 per kthread [ 86.601568][ T7497] ====================================================== [ 86.604230][ T7497] WARNING: possible circular locking dependency detected [ 86.606815][ T7497] syzkaller #0 Not tainted [ 86.608579][ T7497] ------------------------------------------------------ [ 86.611111][ T7497] syz.1.571/7497 is trying to acquire lock: [ 86.613296][ T7497] ffff88801cb40140 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 86.617303][ T7497] [ 86.617303][ T7497] but task is already holding lock: [ 86.620323][ T7497] ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 86.623773][ T7497] [ 86.623773][ T7497] which lock already depends on the new lock. [ 86.623773][ T7497] [ 86.627420][ T7497] [ 86.627420][ T7497] the existing dependency chain (in reverse order) is: [ 86.630578][ T7497] [ 86.630578][ T7497] -> #3 (major_names_lock){+.+.}-{4:4}: [ 86.633340][ T7497] lock_acquire+0x1d1/0x380 [ 86.635183][ T7497] __mutex_lock+0x1a4/0x1bd0 [ 86.637043][ T7497] blk_probe_dev+0x28/0x1e0 [ 86.638875][ T7497] blk_request_module+0x16/0xc0 [ 86.640823][ T7497] blkdev_get_no_open+0x9b/0xf0 [ 86.642764][ T7497] bdev_file_open_by_dev+0x70/0x210 [ 86.644892][ T7497] md_import_device+0x120/0x360 [ 86.647204][ T7497] md_add_new_disk+0xcc0/0x1820 [ 86.649688][ T7497] md_ioctl+0x2caa/0x36d0 [ 86.651973][ T7497] blkdev_ioctl+0x5ad/0x6f0 [ 86.654019][ T7497] __x64_sys_ioctl+0x18e/0x210 [ 86.655945][ T7497] do_syscall_64+0x123/0x790 [ 86.657818][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.660130][ T7497] [ 86.660130][ T7497] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 86.663083][ T7497] lock_acquire+0x1d1/0x380 [ 86.664910][ T7497] __mutex_lock+0x1a4/0x1bd0 [ 86.666782][ T7497] md_start_sync+0xc4/0xea0 [ 86.668662][ T7497] process_one_work+0xac7/0x1b10 [ 86.670654][ T7497] worker_thread+0x5ef/0xe50 [ 86.672603][ T7497] kthread+0x373/0x450 [ 86.674381][ T7497] ret_from_fork+0x730/0xd60 [ 86.676503][ T7497] ret_from_fork_asm+0x1a/0x30 [ 86.678930][ T7497] [ 86.678930][ T7497] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 86.682916][ T7497] lock_acquire+0x1d1/0x380 [ 86.684728][ T7497] process_one_work+0xa32/0x1b10 [ 86.686625][ T7497] worker_thread+0x5ef/0xe50 [ 86.688519][ T7497] kthread+0x373/0x450 [ 86.690200][ T7497] ret_from_fork+0x730/0xd60 [ 86.692100][ T7497] ret_from_fork_asm+0x1a/0x30 [ 86.694013][ T7497] [ 86.694013][ T7497] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 86.696981][ T7497] check_prev_add+0xeb/0xe60 [ 86.698912][ T7497] __lock_acquire+0x1528/0x1f40 [ 86.701036][ T7497] lock_acquire+0x1d1/0x380 [ 86.703225][ T7497] touch_wq_lockdep_map+0xad/0x1c0 [ 86.705668][ T7497] __flush_workqueue+0x131/0x1200 [ 86.708049][ T7497] md_alloc+0x30/0x10a0 [ 86.709852][ T7497] md_probe+0x73/0xf0 [ 86.711533][ T7497] blk_probe_dev+0x149/0x1e0 [ 86.713390][ T7497] blk_request_module+0x16/0xc0 [ 86.715336][ T7497] blkdev_get_no_open+0x9b/0xf0 [ 86.717259][ T7497] bdev_file_open_by_dev+0x70/0x210 [ 86.719341][ T7497] swsusp_check+0x72/0x470 [ 86.721138][ T7497] software_resume+0x6f/0x330 [ 86.723029][ T7497] resume_store+0x248/0x460 [ 86.724843][ T7497] kobj_attr_store+0x58/0x80 [ 86.726692][ T7497] sysfs_kf_write+0xf2/0x150 [ 86.728481][ T7497] kernfs_fop_write_iter+0x3e0/0x5f0 [ 86.730587][ T7497] vfs_write+0x6af/0x1050 [ 86.732368][ T7497] ksys_write+0x12a/0x250 [ 86.734366][ T7497] do_syscall_64+0x123/0x790 [ 86.736760][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.739742][ T7497] [ 86.739742][ T7497] other info that might help us debug this: [ 86.739742][ T7497] [ 86.743379][ T7497] Chain exists of: [ 86.743379][ T7497] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 86.743379][ T7497] [ 86.748454][ T7497] Possible unsafe locking scenario: [ 86.748454][ T7497] [ 86.751116][ T7497] CPU0 CPU1 [ 86.753026][ T7497] ---- ---- [ 86.754945][ T7497] lock(major_names_lock); [ 86.756587][ T7497] lock(&mddev->reconfig_mutex); [ 86.759303][ T7497] lock(major_names_lock); [ 86.761811][ T7497] lock((wq_completion)md_misc); [ 86.763628][ T7497] [ 86.763628][ T7497] *** DEADLOCK *** [ 86.763628][ T7497] [ 86.766495][ T7497] locks held by syz.1.571/7497: 6, last CPU#3: [ 86.768761][ T7497] #0: ffff88804a8957b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 86.772327][ T7497] #1: ffff88802be82460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 86.775449][ T7497] #2: ffff888055c2ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 86.778659][ T7497] #3: ffff88801cf47e18 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 86.782024][ T7497] #4: ffffffff8eca28c0 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 86.785467][ T7497] #5: ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 86.788749][ T7497] [ 86.788749][ T7497] stack backtrace: [ 86.790981][ T7497] CPU: 3 UID: 0 PID: 7497 Comm: syz.1.571 Not tainted syzkaller #0 PREEMPT(full) [ 86.794696][ T7497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.798799][ T7497] Call Trace: [ 86.800146][ T7497] [ 86.801273][ T7497] dump_stack_lvl+0x100/0x190 [ 86.803003][ T7497] print_circular_bug.cold+0x178/0x1be [ 86.804979][ T7497] check_noncircular+0x146/0x160 [ 86.806785][ T7497] check_prev_add+0xeb/0xe60 [ 86.809194][ T7497] __lock_acquire+0x1528/0x1f40 [ 86.810978][ T7497] ? kernel_text_address+0x8d/0x100 [ 86.812865][ T7497] lock_acquire+0x1d1/0x380 [ 86.814676][ T7497] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 86.817030][ T7497] ? lockdep_init_map_type+0x5c/0x250 [ 86.819443][ T7497] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 86.821641][ T7497] touch_wq_lockdep_map+0xad/0x1c0 [ 86.823629][ T7497] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 86.825538][ T7497] __flush_workqueue+0x131/0x1200 [ 86.827387][ T7497] ? rcu_is_watching+0x13/0xc0 [ 86.829148][ T7497] ? trace_contention_end+0x126/0x160 [ 86.831114][ T7497] ? __mutex_lock+0x26c/0x1bd0 [ 86.833129][ T7497] ? __pfx___flush_workqueue+0x10/0x10 [ 86.835153][ T7497] ? lock_acquire+0x1d1/0x380 [ 86.836865][ T7497] ? find_inode_fast+0x1fa/0xa30 [ 86.839219][ T7497] md_alloc+0x30/0x10a0 [ 86.841180][ T7497] md_probe+0x73/0xf0 [ 86.843053][ T7497] ? __pfx_md_probe+0x10/0x10 [ 86.844870][ T7497] blk_probe_dev+0x149/0x1e0 [ 86.846585][ T7497] blk_request_module+0x16/0xc0 [ 86.848404][ T7497] blkdev_get_no_open+0x9b/0xf0 [ 86.850190][ T7497] bdev_file_open_by_dev+0x70/0x210 [ 86.852095][ T7497] swsusp_check+0x72/0x470 [ 86.853725][ T7497] software_resume+0x6f/0x330 [ 86.855482][ T7497] resume_store+0x248/0x460 [ 86.857141][ T7497] ? __pfx_resume_store+0x10/0x10 [ 86.859009][ T7497] ? find_held_lock+0x2b/0x80 [ 86.860783][ T7497] ? sysfs_file_kobj+0xe4/0x290 [ 86.862760][ T7497] ? sysfs_file_kobj+0xe4/0x290 [ 86.864849][ T7497] ? __pfx_resume_store+0x10/0x10 [ 86.867164][ T7497] kobj_attr_store+0x58/0x80 [ 86.868958][ T7497] ? __pfx_kobj_attr_store+0x10/0x10 [ 86.870956][ T7497] sysfs_kf_write+0xf2/0x150 [ 86.872658][ T7497] kernfs_fop_write_iter+0x3e0/0x5f0 [ 86.874599][ T7497] ? __pfx_sysfs_kf_write+0x10/0x10 [ 86.876631][ T7497] vfs_write+0x6af/0x1050 [ 86.878587][ T7497] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 86.881129][ T7497] ? __pfx_vfs_write+0x10/0x10 [ 86.882937][ T7497] ? find_held_lock+0x2b/0x80 [ 86.884659][ T7497] ksys_write+0x12a/0x250 [ 86.886236][ T7497] ? __pfx_ksys_write+0x10/0x10 [ 86.888037][ T7497] do_syscall_64+0x123/0x790 [ 86.889729][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.891882][ T7497] RIP: 0033:0x7f828259e159 [ 86.893512][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.899990][ T7497] RSP: 002b:00007f8283447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.903184][ T7497] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 86.906322][ T7497] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003 [ 86.909534][ T7497] RBP: 00007f828263503b R08: 0000000000000000 R09: 0000000000000000 [ 86.912443][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.915339][ T7497] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffd22660288 [ 86.918181][ T7497] [ 86.932822][ T7497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.932841][ T7497] PM: Image not found (code -6)