last executing test programs: 4.217760717s ago: executing program 0 (id=358): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804100}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x224, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_DESC={0xa4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x19b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x22399924}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff441}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15c}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0xac, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xde}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcf}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}]}]}], {0x14}}, 0x2d0}, 0x1, 0x0, 0x0, 0x4094}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 4.154674431s ago: executing program 0 (id=360): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r7}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 4.07950362s ago: executing program 0 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 9) 4.021310597s ago: executing program 0 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1004, &(0x7f0000000c00)=ANY=[@ANYRES32]) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75700261746520646566612a405e2c202e2400"], 0x1c, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x0, 0x10488, 0x2}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x202400, 0x2b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10d2c0, 0x1c5) 3.640065869s ago: executing program 0 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x2f, &(0x7f0000000600)={&(0x7f0000000140)=@deltaction={0x68, 0x31, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX}]}]}, 0x68}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03030800030016000c004557005c006700000611"], 0x66) 3.39140229s ago: executing program 0 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) (fail_nth: 9) 3.272105369s ago: executing program 32 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) (fail_nth: 9) 1.530218059s ago: executing program 1 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) setns(0xc9, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/173, &(0x7f0000000140)=0xad) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) 668.469787ms ago: executing program 1 (id=412): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x2, 0x0, 0x8002, 0x80000, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e000f0000000000000000000a0000001400cb00fe8000000000000000000000000000bb"], 0x28}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000002c0000001400040076657468305f6d616376746170000000040017"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x92b2}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="04000000020000") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x4) shutdown(r3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x0, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff00836fe49228ff194fd26a2b1100f1d211a4"], 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x0, @remote, 0x4e22, 0x3, 'sh\x00', 0x30, 0x80006, 0x6b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) 649.124326ms ago: executing program 3 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1, 0x0, 0x300}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="bb5bbedc986f2389"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 541.744681ms ago: executing program 3 (id=415): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 541.248783ms ago: executing program 2 (id=416): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=r0]) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000300)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0xe46ba41facdaa635, 0x5, 0xfffb, 0x1, 0x800, 0x0, 0x0, 0x2, 0x4000003}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x9, {0x3, 0x10f2a8, 0x0, {0x6, 0x5, 0x8000000a, 0x80000001, 0xfff, 0x1, 0x9e9, 0x35741066, 0x10000, 0x8000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xa3c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000200)='./file0\x00', 0x80) 470.205989ms ago: executing program 1 (id=417): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000007c0)=""/4132, 0x1024) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) fsmount(r4, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f2030203120312072") r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000002800)={&(0x7f0000001800)=""/4096, 0x8000, 0x1800, 0xfffffff9, 0x2}, 0x20) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='\f\xe3\xb4\\\x00wG[\xa4\xf6\xf8U\x89\xcd=:\xf5\x96\x00\x00', 0x0, r6) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="1401000037000100000000000000000001"], 0x114}], 0x1}, 0x0) 469.877628ms ago: executing program 2 (id=418): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x62) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000002000)={0xa, 0x4e1e, 0x7579cf98, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x103}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000240)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x9a0000, 0xbca, 0xd, r2, 0x0, &(0x7f0000000040)={0x10004, 0x1, '\x00', @ptr=0x28b}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x82) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "b36819df", "400af91000008700"}, 0x38) write(r4, &(0x7f0000000580)="ffffffffff275d42b20f22da0500000000eafc8c", 0x14) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="bb5bbedc986f2389"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 411.347261ms ago: executing program 3 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="08000100010001", 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) close(0x3) 339.264536ms ago: executing program 1 (id=420): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0xc00, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 271.407996ms ago: executing program 1 (id=421): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r7}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 198.883473ms ago: executing program 2 (id=422): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 190.307061ms ago: executing program 3 (id=423): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 189.582982ms ago: executing program 1 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r3 = dup(r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) getpeername$inet6(r5, 0x0, &(0x7f0000000240)) getdents(r4, &(0x7f0000000240)=""/32, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0x8, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 189.26912ms ago: executing program 2 (id=425): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0, 0x190) r3 = openat(r2, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r3, &(0x7f00000003c0)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x400c0930, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) 91.669667ms ago: executing program 2 (id=426): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 91.233671ms ago: executing program 3 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001180)=""/4082, &(0x7f00000010c0)=0xff2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x4005004}, 0x0) 676.401µs ago: executing program 3 (id=428): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 2 (id=429): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000140)={0x12}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000080)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000140)=[r4, r4], &(0x7f0000000180)=[0xffff], 0x1, 0x2, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f00000000c0)={r2}) kernel console output (not intermixed with test programs): ck_lvl+0x100/0x190 [ 51.445787][ T5920] should_fail_ex.cold+0x5/0xa [ 51.445810][ T5920] should_failslab+0xc2/0x120 [ 51.445835][ T5920] __kvmalloc_node_noprof+0x113/0x9b0 [ 51.445856][ T5920] ? bucket_table_alloc.isra.0+0x88/0x460 [ 51.445885][ T5920] bucket_table_alloc.isra.0+0x88/0x460 [ 51.445910][ T5920] __rhashtable_init_noprof+0x43a/0x890 [ 51.445936][ T5920] __rhltable_init_noprof+0x28/0x70 [ 51.445961][ T5920] nf_tables_newtable+0xf30/0x1a90 [ 51.445992][ T5920] ? __pfx_nf_tables_newtable+0x10/0x10 [ 51.446012][ T5920] ? net_generic+0x25/0x2a0 [ 51.446037][ T5920] ? __nla_parse+0x40/0x60 [ 51.446064][ T5920] nfnetlink_rcv_batch+0x1410/0x2880 [ 51.446097][ T5920] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 51.446122][ T5920] ? lock_acquire+0x1d1/0x380 [ 51.446139][ T5920] ? avc_has_perm_noaudit+0x56/0x3b0 [ 51.446170][ T5920] ? avc_has_perm_noaudit+0x145/0x3b0 [ 51.446213][ T5920] ? __nla_parse+0x40/0x60 [ 51.446238][ T5920] nfnetlink_rcv+0x3bd/0x440 [ 51.446260][ T5920] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 51.446288][ T5920] netlink_unicast+0x585/0x850 [ 51.446310][ T5920] ? __pfx_netlink_unicast+0x10/0x10 [ 51.446335][ T5920] netlink_sendmsg+0x8b0/0xda0 [ 51.446357][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.446376][ T5920] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.446398][ T5920] ____sys_sendmsg+0xa4d/0xbe0 [ 51.446441][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.446482][ T5920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.446512][ T5920] ? lock_acquire+0x1d1/0x380 [ 51.446528][ T5920] ? get_pid_task+0x2a/0x250 [ 51.446553][ T5920] ___sys_sendmsg+0x190/0x1e0 [ 51.446579][ T5920] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.446603][ T5920] ? get_pid_task+0x106/0x250 [ 51.446644][ T5920] ? find_held_lock+0x2b/0x80 [ 51.446681][ T5920] __sys_sendmsg+0x160/0x210 [ 51.446702][ T5920] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.446735][ T5920] do_syscall_64+0x123/0x790 [ 51.446765][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.446783][ T5920] RIP: 0033:0x7f62d7f9e159 [ 51.446797][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.446812][ T5920] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.446829][ T5920] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 51.446840][ T5920] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 51.446850][ T5920] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.446859][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.446869][ T5920] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 51.446891][ T5920] [ 51.448407][ T5920] netlink: 316 bytes leftover after parsing attributes in process `syz.0.14'. [ 51.448423][ T5920] netlink: 316 bytes leftover after parsing attributes in process `syz.0.14'. [ 51.635004][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 51.652486][ T5926] FAULT_INJECTION: forcing a failure. [ 51.652486][ T5926] name failslab, interval 1, probability 0, space 0, times 0 [ 51.652518][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 51.652539][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.652550][ T5926] Call Trace: [ 51.652557][ T5926] [ 51.652564][ T5926] dump_stack_lvl+0x100/0x190 [ 51.652596][ T5926] should_fail_ex.cold+0x5/0xa [ 51.652624][ T5926] should_failslab+0xc2/0x120 [ 51.652655][ T5926] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 51.652679][ T5926] ? __alloc_skb+0x140/0x710 [ 51.652706][ T5926] __alloc_skb+0x140/0x710 [ 51.652725][ T5926] ? __alloc_skb+0x5b7/0x710 [ 51.652745][ T5926] ? __pfx___alloc_skb+0x10/0x10 [ 51.652767][ T5926] ? if_nlmsg_size+0x4b/0xdc0 [ 51.652797][ T5926] rtmsg_ifinfo_build_skb+0x81/0x260 [ 51.652829][ T5926] rtmsg_ifinfo+0xa4/0x1b0 [ 51.652860][ T5926] netif_state_change+0x17f/0x380 [ 51.652887][ T5926] ? __pfx_netif_state_change+0x10/0x10 [ 51.652918][ T5926] ? dev_change_xdp_fd+0x1b0/0x300 [ 51.652945][ T5926] do_setlink.isra.0+0x34c6/0x3e60 [ 51.652977][ T5926] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 51.653004][ T5926] ? __lock_acquire+0x5c0/0x1f40 [ 51.653031][ T5926] ? do_raw_spin_lock+0x128/0x260 [ 51.653056][ T5926] ? find_held_lock+0x2b/0x80 [ 51.653082][ T5926] ? debug_mutex_remove_waiter+0xa0/0x320 [ 51.653108][ T5926] ? debug_mutex_remove_waiter+0xa0/0x320 [ 51.653140][ T5926] ? __mutex_lock+0x829/0x1bd0 [ 51.653165][ T5926] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.653190][ T5926] ? __mutex_lock+0x829/0x1bd0 [ 51.653214][ T5926] ? __mutex_lock+0x26c/0x1bd0 [ 51.653240][ T5926] ? rtnl_newlink+0xac3/0x2620 [ 51.653284][ T5926] ? __pfx___mutex_lock+0x10/0x10 [ 51.653311][ T5926] ? rcu_is_watching+0x13/0xc0 [ 51.653336][ T5926] ? cap_capable+0x107/0x430 [ 51.653380][ T5926] rtnl_newlink+0x1dc4/0x2620 [ 51.653413][ T5926] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.653436][ T5926] ? avc_has_perm_noaudit+0x56/0x3b0 [ 51.653463][ T5926] ? find_held_lock+0x2b/0x80 [ 51.653488][ T5926] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 51.653512][ T5926] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 51.653551][ T5926] ? __lock_acquire+0x5c0/0x1f40 [ 51.653581][ T5926] ? lock_acquire+0x1d1/0x380 [ 51.653601][ T5926] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 51.653626][ T5926] ? find_held_lock+0x2b/0x80 [ 51.653657][ T5926] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 51.653680][ T5926] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 51.653706][ T5926] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.653730][ T5926] rtnetlink_rcv_msg+0x95e/0xe90 [ 51.653758][ T5926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.653789][ T5926] ? ref_tracker_free+0x37e/0x6c0 [ 51.653818][ T5926] netlink_rcv_skb+0x159/0x420 [ 51.653840][ T5926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.653867][ T5926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.653898][ T5926] ? netlink_deliver_tap+0x1ae/0xcc0 [ 51.653921][ T5926] netlink_unicast+0x585/0x850 [ 51.653947][ T5926] ? __pfx_netlink_unicast+0x10/0x10 [ 51.653976][ T5926] netlink_sendmsg+0x8b0/0xda0 [ 51.654002][ T5926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.654027][ T5926] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.654051][ T5926] ____sys_sendmsg+0xa4d/0xbe0 [ 51.654077][ T5926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.654101][ T5926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.654134][ T5926] ? lock_acquire+0x1d1/0x380 [ 51.654153][ T5926] ? get_pid_task+0x2a/0x250 [ 51.654181][ T5926] ___sys_sendmsg+0x190/0x1e0 [ 51.654211][ T5926] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.654239][ T5926] ? get_pid_task+0x106/0x250 [ 51.654273][ T5926] ? find_held_lock+0x2b/0x80 [ 51.654316][ T5926] __sys_sendmsg+0x160/0x210 [ 51.654341][ T5926] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.654378][ T5926] do_syscall_64+0x123/0x790 [ 51.654406][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.654427][ T5926] RIP: 0033:0x7fbe1d39e159 [ 51.654444][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.654484][ T5926] RSP: 002b:00007fbe1e309028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.654503][ T5926] RAX: ffffffffffffffda RBX: 00007fbe1d625fa0 RCX: 00007fbe1d39e159 [ 51.654515][ T5926] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 51.654527][ T5926] RBP: 00007fbe1e309090 R08: 0000000000000000 R09: 0000000000000000 [ 51.654539][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.654549][ T5926] R13: 00007fbe1d626038 R14: 00007fbe1d625fa0 R15: 00007ffebf760258 [ 51.654576][ T5926] [ 51.656831][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 51.656846][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 51.658566][ T5926] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 51.690879][ T5931] veth3: entered allmulticast mode [ 51.693469][ T5931] team0: Port device veth3 added [ 51.897841][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.897867][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.933848][ T5947] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 51.966910][ T5742] Bluetooth: hci1: command tx timeout [ 51.966943][ T5742] Bluetooth: hci3: command tx timeout [ 51.967018][ T5741] Bluetooth: hci0: command tx timeout [ 51.968160][ T5741] Bluetooth: hci2: command tx timeout [ 52.325735][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 52.595005][ T5990] capability: warning: `syz.1.42' uses 32-bit capabilities (legacy support in use) [ 52.814650][ T6008] ======================================================= [ 52.814650][ T6008] WARNING: The mand mount option has been deprecated and [ 52.814650][ T6008] and is ignored by this kernel. Remove the mand [ 52.814650][ T6008] option from the mount to silence this warning. [ 52.814650][ T6008] ======================================================= [ 52.822938][ T5996] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 53.087056][ T5735] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 53.524611][ T6047] batman_adv: batadv0: Adding interface: dummy0 [ 53.524624][ T6047] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.524640][ T6047] batman_adv: batadv0: Interface activated: dummy0 [ 53.534854][ T6047] batadv0: mtu less than device minimum [ 53.536028][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.537335][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.537901][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.538376][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.538975][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.539822][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.540722][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.541732][ T6047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.544799][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 53.586642][ T6050] FAULT_INJECTION: forcing a failure. [ 53.586642][ T6050] name failslab, interval 1, probability 0, space 0, times 0 [ 53.586671][ T6050] CPU: 3 UID: 0 PID: 6050 Comm: syz.3.62 Not tainted syzkaller #0 PREEMPT(full) [ 53.586691][ T6050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.586701][ T6050] Call Trace: [ 53.586707][ T6050] [ 53.586713][ T6050] dump_stack_lvl+0x100/0x190 [ 53.586744][ T6050] should_fail_ex.cold+0x5/0xa [ 53.586769][ T6050] should_failslab+0xc2/0x120 [ 53.586791][ T6050] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.586818][ T6050] ? rcu_is_watching+0x13/0xc0 [ 53.586841][ T6050] ? vhost_task_create+0xee/0x370 [ 53.586870][ T6050] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 53.586897][ T6050] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 53.586924][ T6050] vhost_task_create+0xee/0x370 [ 53.586952][ T6050] ? __pfx_vhost_task_create+0x10/0x10 [ 53.586987][ T6050] ? __pfx_vhost_task_fn+0x10/0x10 [ 53.587016][ T6050] ? register_lock_class+0x3f/0x7b0 [ 53.587034][ T6050] ? rcu_is_watching+0x13/0xc0 [ 53.587057][ T6050] ? trace_contention_end+0x126/0x160 [ 53.587081][ T6050] kvm_mmu_post_init_vm+0x1b3/0x360 [ 53.587103][ T6050] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 53.587125][ T6050] ? __pfx___mutex_lock+0x10/0x10 [ 53.587148][ T6050] ? kasan_quarantine_put+0x104/0x240 [ 53.587170][ T6050] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.587191][ T6050] ? lock_acquire+0x1d1/0x380 [ 53.587209][ T6050] ? do_raw_write_lock+0x11e/0x260 [ 53.587231][ T6050] ? find_held_lock+0x2b/0x80 [ 53.587254][ T6050] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.587276][ T6050] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 53.587305][ T6050] kvm_vcpu_ioctl+0x730/0x1700 [ 53.587331][ T6050] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.587356][ T6050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.587378][ T6050] ? do_vfs_ioctl+0x226/0x13e0 [ 53.587396][ T6050] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 53.587412][ T6050] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 53.587436][ T6050] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.587459][ T6050] ? __fget_files+0x34/0x3d0 [ 53.587492][ T6050] ? selinux_file_ioctl+0x13b/0x290 [ 53.587509][ T6050] ? selinux_file_ioctl+0xb6/0x290 [ 53.587529][ T6050] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.587554][ T6050] __x64_sys_ioctl+0x18e/0x210 [ 53.587573][ T6050] do_syscall_64+0x123/0x790 [ 53.587599][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.587622][ T6050] RIP: 0033:0x7f994c39e159 [ 53.587636][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.587652][ T6050] RSP: 002b:00007f994d2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.587669][ T6050] RAX: ffffffffffffffda RBX: 00007f994c625fa0 RCX: 00007f994c39e159 [ 53.587680][ T6050] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.587690][ T6050] RBP: 00007f994d2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 53.587700][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.587709][ T6050] R13: 00007f994c626038 R14: 00007f994c625fa0 R15: 00007ffd6f6c5578 [ 53.587734][ T6050] [ 53.613686][ T6048] veth3: entered allmulticast mode [ 53.668413][ T6056] bpf: Bad value for 'gid' [ 53.874931][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.874949][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.046608][ T5741] Bluetooth: hci1: command tx timeout [ 54.056780][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 54.056870][ T5742] Bluetooth: hci3: command tx timeout [ 54.057792][ T5735] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.120858][ T5821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.191058][ T5821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.226268][ T5821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.316166][ T5821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.469753][ T6078] netlink: 'syz.1.77': attribute type 4 has an invalid length. [ 54.486737][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.488087][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.488875][ T6078] netlink: 'syz.1.77': attribute type 4 has an invalid length. [ 54.488912][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.490792][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.492132][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.507148][ T5821] bridge_slave_1: left allmulticast mode [ 54.507186][ T5821] bridge_slave_1: left promiscuous mode [ 54.507928][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.519557][ T5821] bridge_slave_0: left allmulticast mode [ 54.519579][ T5821] bridge_slave_0: left promiscuous mode [ 54.519756][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.604299][ T6088] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.605260][ T6088] CIFS: Attempting to mount //127.0.0.1/share [ 54.611334][ T6088] CIFS: VFS: Error connecting to socket. Aborting operation. [ 54.611405][ T6088] CIFS: VFS: cifs_mount failed w/return code = -101 [ 54.683569][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.685752][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.689361][ T5821] bond0 (unregistering): Released all slaves [ 54.905638][ T6111] FAULT_INJECTION: forcing a failure. [ 54.905638][ T6111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.905668][ T6111] CPU: 2 UID: 0 PID: 6111 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 54.905687][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.905697][ T6111] Call Trace: [ 54.905703][ T6111] [ 54.905710][ T6111] dump_stack_lvl+0x100/0x190 [ 54.905750][ T6111] should_fail_ex.cold+0x5/0xa [ 54.905776][ T6111] _copy_to_user+0x32/0xd0 [ 54.905802][ T6111] simple_read_from_buffer+0xcb/0x170 [ 54.905826][ T6111] proc_fail_nth_read+0x1af/0x230 [ 54.905842][ T6111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.905857][ T6111] ? rw_verify_area+0xce/0x6d0 [ 54.905875][ T6111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.905889][ T6111] vfs_read+0x1e4/0xb40 [ 54.905900][ T6111] ? lock_acquire+0x1d1/0x380 [ 54.905912][ T6111] ? __fget_files+0x34/0x3d0 [ 54.905926][ T6111] ? __pfx_vfs_read+0x10/0x10 [ 54.905937][ T6111] ? find_held_lock+0x2b/0x80 [ 54.905953][ T6111] ? __fget_files+0x215/0x3d0 [ 54.905969][ T6111] ? __fget_files+0x21f/0x3d0 [ 54.905987][ T6111] ksys_read+0x12a/0x250 [ 54.905998][ T6111] ? __pfx_ksys_read+0x10/0x10 [ 54.906014][ T6111] do_syscall_64+0x123/0x790 [ 54.906036][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.906048][ T6111] RIP: 0033:0x7f62d7f5e98e [ 54.906058][ T6111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.906069][ T6111] RSP: 002b:00007f62d8ef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.906081][ T6111] RAX: ffffffffffffffda RBX: 00007f62d8ef76c0 RCX: 00007f62d7f5e98e [ 54.906088][ T6111] RDX: 000000000000000f RSI: 00007f62d8ef70a0 RDI: 0000000000000003 [ 54.906095][ T6111] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.906101][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.906108][ T6111] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 54.906124][ T6111] [ 54.913347][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.957418][ T6115] FAULT_INJECTION: forcing a failure. [ 54.957418][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 54.957436][ T6115] CPU: 3 UID: 0 PID: 6115 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 54.957448][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.957454][ T6115] Call Trace: [ 54.957459][ T6115] [ 54.957464][ T6115] dump_stack_lvl+0x100/0x190 [ 54.957484][ T6115] should_fail_ex.cold+0x5/0xa [ 54.957500][ T6115] should_failslab+0xc2/0x120 [ 54.957514][ T6115] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.957526][ T6115] ? __lock_acquire+0x5c0/0x1f40 [ 54.957537][ T6115] ? dst_alloc+0x99/0x1a0 [ 54.957558][ T6115] dst_alloc+0x99/0x1a0 [ 54.957571][ T6115] rt_dst_alloc+0x35/0x3a0 [ 54.957593][ T6115] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 54.957609][ T6115] ip_route_output_key_hash+0x118/0x2b0 [ 54.957621][ T6115] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 54.957632][ T6115] ? __vlan_get_protocol_offset+0x256/0x350 [ 54.957651][ T6115] ip_route_output_flow+0x27/0x150 [ 54.957663][ T6115] ip_tunnel_xmit+0xf27/0x3210 [ 54.957683][ T6115] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 54.957698][ T6115] ? kernel_text_address+0x8d/0x100 [ 54.957715][ T6115] ? __kernel_text_address+0xd/0x30 [ 54.957740][ T6115] __gre_xmit+0x91a/0xc90 [ 54.957755][ T6115] ? __pfx___gre_xmit+0x10/0x10 [ 54.957772][ T6115] ipgre_xmit+0x80f/0xbe0 [ 54.957787][ T6115] ? __pfx_ipgre_xmit+0x10/0x10 [ 54.957804][ T6115] dev_hard_start_xmit+0x121/0x760 [ 54.957818][ T6115] __dev_queue_xmit+0x1bbf/0x4970 [ 54.957833][ T6115] ? rcu_is_watching+0x13/0xc0 [ 54.957848][ T6115] ? __pfx___dev_queue_xmit+0x10/0x10 [ 54.957859][ T6115] ? __kasan_kmalloc+0xaa/0xb0 [ 54.957872][ T6115] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 54.957885][ T6115] ? pskb_expand_head+0x249/0x10e0 [ 54.957900][ T6115] ? skb_release_data+0x6ca/0x8e0 [ 54.957913][ T6115] ? kmalloc_reserve+0xf9/0x350 [ 54.957929][ T6115] ? skb_headers_offset_update+0x129/0x260 [ 54.957945][ T6115] ? pskb_expand_head+0x5c4/0x10e0 [ 54.957962][ T6115] ? __pfx_pskb_expand_head+0x10/0x10 [ 54.957976][ T6115] ? __asan_memcpy+0x3c/0x60 [ 54.957988][ T6115] __bpf_redirect+0x989/0xf90 [ 54.958007][ T6115] bpf_clone_redirect+0x37b/0x500 [ 54.958025][ T6115] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 54.958038][ T6115] ? __lock_acquire+0x5c0/0x1f40 [ 54.958051][ T6115] ? __lock_acquire+0x5c0/0x1f40 [ 54.958064][ T6115] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.958080][ T6115] ? lock_acquire+0x1d1/0x380 [ 54.958091][ T6115] ? bpf_test_timer_enter+0xf7/0x2c0 [ 54.958108][ T6115] ? find_held_lock+0x2b/0x80 [ 54.958123][ T6115] ? bpf_test_timer_enter+0xf7/0x2c0 [ 54.958141][ T6115] ? ktime_get+0x22c/0x320 [ 54.958153][ T6115] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.958168][ T6115] ? ktime_get+0x23e/0x320 [ 54.958180][ T6115] ? __pfx___cant_migrate+0x10/0x10 [ 54.958197][ T6115] ? bpf_test_timer_enter+0xf7/0x2c0 [ 54.958214][ T6115] bpf_test_run+0x39c/0xa40 [ 54.958232][ T6115] ? bpf_test_run+0x1c6/0xa40 [ 54.958251][ T6115] ? __pfx_bpf_test_run+0x10/0x10 [ 54.958278][ T6115] ? eth_type_trans+0x2e3/0x720 [ 54.958293][ T6115] bpf_prog_test_run_skb+0x15b3/0x3530 [ 54.958307][ T6115] ? lock_acquire+0x1d1/0x380 [ 54.958325][ T6115] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 54.958338][ T6115] ? fput+0x7c/0x100 [ 54.958353][ T6115] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 54.958365][ T6115] __sys_bpf+0x2265/0x4a30 [ 54.958380][ T6115] ? __pfx___sys_bpf+0x10/0x10 [ 54.958390][ T6115] ? find_held_lock+0x2b/0x80 [ 54.958405][ T6115] ? get_pid_task+0xfc/0x250 [ 54.958420][ T6115] ? get_pid_task+0xfc/0x250 [ 54.958476][ T6115] ? find_held_lock+0x2b/0x80 [ 54.958495][ T6115] ? rcu_read_lock_any_held+0x6a/0x90 [ 54.958511][ T6115] ? find_held_lock+0x2b/0x80 [ 54.958526][ T6115] ? ksys_write+0x190/0x250 [ 54.958536][ T6115] ? ksys_write+0x190/0x250 [ 54.958547][ T6115] ? lock_acquire+0x1d1/0x380 [ 54.958568][ T6115] ? fput+0x7c/0x100 [ 54.958586][ T6115] ? ksys_write+0x1ac/0x250 [ 54.958599][ T6115] ? __x64_sys_bpf+0xce/0x140 [ 54.958609][ T6115] __x64_sys_bpf+0xce/0x140 [ 54.958621][ T6115] ? do_syscall_64+0xae/0x790 [ 54.958636][ T6115] do_syscall_64+0x123/0x790 [ 54.958652][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.958664][ T6115] RIP: 0033:0x7f62d7f9e159 [ 54.958675][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.958685][ T6115] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.958696][ T6115] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 54.958703][ T6115] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 54.958709][ T6115] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.958716][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.958722][ T6115] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 54.958736][ T6115] [ 55.330252][ T5821] hsr_slave_0: left promiscuous mode [ 55.336631][ T5821] hsr_slave_1: left promiscuous mode [ 55.338020][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.338041][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.354663][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.354678][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.372517][ T5821] veth1_macvtap: left promiscuous mode [ 55.372557][ T5821] veth0_macvtap: left promiscuous mode [ 55.372613][ T5821] veth1_vlan: left promiscuous mode [ 55.372659][ T5821] veth0_vlan: left promiscuous mode [ 55.439712][ T5735] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 55.439837][ T6137] FAULT_INJECTION: forcing a failure. [ 55.439837][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.439856][ T6137] CPU: 3 UID: 0 PID: 6137 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 55.439868][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.439874][ T6137] Call Trace: [ 55.439878][ T6137] [ 55.439882][ T6137] dump_stack_lvl+0x100/0x190 [ 55.439901][ T6137] should_fail_ex.cold+0x5/0xa [ 55.439917][ T6137] _copy_from_user+0x2e/0xd0 [ 55.439929][ T6137] video_usercopy+0xe71/0x1730 [ 55.439965][ T6137] ? __pfx___video_do_ioctl+0x10/0x10 [ 55.439983][ T6137] ? __pfx_video_usercopy+0x10/0x10 [ 55.440007][ T6137] v4l2_ioctl+0x1bd/0x250 [ 55.440022][ T6137] ? __pfx_v4l2_ioctl+0x10/0x10 [ 55.440038][ T6137] __x64_sys_ioctl+0x18e/0x210 [ 55.440050][ T6137] do_syscall_64+0x123/0x790 [ 55.440067][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.440078][ T6137] RIP: 0033:0x7f62d7f9e159 [ 55.440087][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.440097][ T6137] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.440108][ T6137] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 55.440115][ T6137] RDX: 00002000000002c0 RSI: 0000000040045613 RDI: 0000000000000003 [ 55.440121][ T6137] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.440128][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.440134][ T6137] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 55.440152][ T6137] [ 55.600145][ T6146] trusted_key: encrypted_key: insufficient parameters specified [ 55.604823][ T43] kauditd_printk_skb: 169 callbacks suppressed [ 55.604834][ T43] audit: type=1400 audit(1789522364.656:347): avc: denied { getopt } for pid=6145 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.620378][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 55.629622][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 55.693871][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.697957][ T2180] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.803063][ T43] audit: type=1400 audit(1789522364.856:348): avc: denied { write } for pid=6152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.827291][ T2180] usb 8-1: device descriptor read/64, error -71 [ 55.858025][ T6158] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 55.864745][ T6158] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 55.870705][ T43] audit: type=1400 audit(1789522364.926:349): avc: denied { write } for pid=6160 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.919486][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.933066][ T6165] CIFS: Attempting to mount //127.0.0.1/share [ 55.934475][ T6165] CIFS: VFS: Error connecting to socket. Aborting operation. [ 55.934494][ T6165] CIFS: VFS: cifs_mount failed w/return code = -111 [ 55.987163][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.987234][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.987295][ T6079] bridge_slave_0: entered allmulticast mode [ 55.988039][ T6079] bridge_slave_0: entered promiscuous mode [ 55.989439][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.989510][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.989566][ T6079] bridge_slave_1: entered allmulticast mode [ 55.990561][ T6079] bridge_slave_1: entered promiscuous mode [ 56.010771][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.015688][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.033760][ T6079] team0: Port device team_slave_0 added [ 56.034943][ T6169] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 56.035159][ T6079] team0: Port device team_slave_1 added [ 56.035914][ T43] audit: type=1400 audit(1789522365.086:350): avc: denied { create } for pid=6168 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.053305][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.053317][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.053329][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.054924][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.054932][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.054944][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.076691][ T6079] hsr_slave_0: entered promiscuous mode [ 56.077270][ T6079] hsr_slave_1: entered promiscuous mode [ 56.077547][ T6079] debugfs: 'hsr0' already exists in 'hsr' [ 56.077558][ T6079] Cannot create hsr debugfs directory [ 56.093771][ T2180] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.124315][ T43] audit: type=1400 audit(1789522365.176:351): avc: denied { write } for pid=6172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.127041][ T5735] Bluetooth: hci3: command tx timeout [ 56.154493][ T6176] syz_tun: entered allmulticast mode [ 56.160251][ T6175] syz_tun: left allmulticast mode [ 56.189365][ T43] audit: type=1400 audit(1789522365.246:352): avc: denied { write } for pid=6177 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.229222][ T2180] usb 8-1: device descriptor read/64, error -71 [ 56.260991][ T6183] x_tables: duplicate underflow at hook 1 [ 56.283563][ T6183] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 56.283576][ T6183] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 56.283583][ T6183] __nla_validate_parse: 6 callbacks suppressed [ 56.283588][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 56.283595][ T6183] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 56.283601][ T6183] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 56.283607][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 56.283613][ T6183] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 56.337321][ T2180] usb usb8-port1: attempt power cycle [ 56.339660][ T43] audit: type=1400 audit(1789522365.396:353): avc: denied { write } for pid=6184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.413638][ T43] audit: type=1400 audit(1789522365.466:354): avc: denied { write } for pid=6189 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.515119][ T43] audit: type=1400 audit(1789522365.566:355): avc: denied { write } for pid=6191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.526890][ T5742] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 56.527213][ T5735] Bluetooth: hci2: command tx timeout [ 56.551658][ T6079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.554818][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.555453][ T6079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.559406][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.560041][ T6079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.568029][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.569235][ T6079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.577180][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.581926][ T43] audit: type=1400 audit(1789522365.636:356): avc: denied { write } for pid=6196 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.596286][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.596345][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.596903][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.596953][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.643602][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.654536][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.655484][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.672226][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.680882][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.680966][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.687381][ T2180] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.688929][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.689012][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.697196][ T5733] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 56.701284][ T5733] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 56.718072][ T2180] usb 8-1: device descriptor read/8, error -71 [ 56.959094][ T5733] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 56.977770][ T2180] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.000570][ T2180] usb 8-1: device descriptor read/8, error -71 [ 57.023457][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.075552][ T6079] veth0_vlan: entered promiscuous mode [ 57.090004][ T6079] veth1_vlan: entered promiscuous mode [ 57.106987][ T2180] usb usb8-port1: unable to enumerate USB device [ 57.117731][ T6079] veth0_macvtap: entered promiscuous mode [ 57.124001][ T6079] veth1_macvtap: entered promiscuous mode [ 57.160374][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.171453][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.188861][ T6241] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 57.188881][ T6241] netlink: 84 bytes leftover after parsing attributes in process `syz.1.103'. [ 57.188895][ T6241] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 57.188906][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 57.246700][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.246966][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.253426][ T6243] FAULT_INJECTION: forcing a failure. [ 57.253426][ T6243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.253462][ T6243] CPU: 0 UID: 0 PID: 6243 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 57.253481][ T6243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.253491][ T6243] Call Trace: [ 57.253497][ T6243] [ 57.253503][ T6243] dump_stack_lvl+0x100/0x190 [ 57.253534][ T6243] should_fail_ex.cold+0x5/0xa [ 57.253559][ T6243] _copy_from_iter+0x1f4/0x1690 [ 57.253585][ T6243] ? __pfx__copy_from_iter+0x10/0x10 [ 57.253604][ T6243] ? trace_kmalloc+0xeb/0x110 [ 57.253625][ T6243] ? __kasan_kmalloc+0xaa/0xb0 [ 57.253647][ T6243] ? __kmalloc_noprof+0x350/0x840 [ 57.253667][ T6243] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 57.253692][ T6243] kernfs_fop_write_iter+0x186/0x5f0 [ 57.253714][ T6243] vfs_write+0x6af/0x1050 [ 57.253734][ T6243] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 57.253756][ T6243] ? __pfx_vfs_write+0x10/0x10 [ 57.253772][ T6243] ? find_held_lock+0x2b/0x80 [ 57.253814][ T6243] ksys_write+0x12a/0x250 [ 57.253832][ T6243] ? __pfx_ksys_write+0x10/0x10 [ 57.253857][ T6243] do_syscall_64+0x123/0x790 [ 57.253883][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.253902][ T6243] RIP: 0033:0x7fd05b99e159 [ 57.253916][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.253932][ T6243] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.253949][ T6243] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 57.253961][ T6243] RDX: 000000000000002f RSI: 0000200000000600 RDI: 0000000000000003 [ 57.253970][ T6243] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.253979][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.253989][ T6243] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 57.254011][ T6243] [ 57.273650][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.273668][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.277256][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277292][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333704][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.333723][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.413400][ T6249] net_ratelimit: 12 callbacks suppressed [ 57.413419][ T6249] ip_tables: iptables: counters copy to user failed while replacing table [ 57.436072][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 57.467304][ T25] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 57.731860][ T6209] ceph: No mds server is up or the cluster is laggy [ 58.055369][ T6261] tmpfs: Bad value for 'mpol' [ 58.064784][ T6261] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 58.064810][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.068182][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 58.229598][ T6272] ip_tables: iptables: counters copy to user failed while replacing table [ 58.231556][ T6272] tipc: Started in network mode [ 58.231570][ T6272] tipc: Node identity ac1414aa, cluster identity 4711 [ 58.231580][ T6272] FAULT_INJECTION: forcing a failure. [ 58.231580][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 58.231594][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT(full) [ 58.231606][ T6272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.231612][ T6272] Call Trace: [ 58.231616][ T6272] [ 58.231620][ T6272] dump_stack_lvl+0x100/0x190 [ 58.231641][ T6272] should_fail_ex.cold+0x5/0xa [ 58.231657][ T6272] should_failslab+0xc2/0x120 [ 58.231671][ T6272] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 58.231684][ T6272] ? lock_acquire+0x1d1/0x380 [ 58.231696][ T6272] ? sock_alloc_inode+0x26/0x2c0 [ 58.231716][ T6272] ? __pfx_sock_alloc_inode+0x10/0x10 [ 58.231733][ T6272] sock_alloc_inode+0x26/0x2c0 [ 58.231748][ T6272] ? __pfx_sock_alloc_inode+0x10/0x10 [ 58.231762][ T6272] alloc_inode+0x68/0x250 [ 58.231773][ T6272] sock_alloc+0x44/0x280 [ 58.231786][ T6272] ? security_socket_create+0x7f/0x250 [ 58.231805][ T6272] __sock_create+0xc2/0x860 [ 58.231824][ T6272] udp_sock_create4+0xa6/0x450 [ 58.231838][ T6272] ? __pfx_udp_sock_create4+0x10/0x10 [ 58.231851][ T6272] ? find_held_lock+0x2b/0x80 [ 58.231866][ T6272] ? net_generic+0xea/0x2a0 [ 58.231881][ T6272] ? net_generic+0xea/0x2a0 [ 58.231897][ T6272] ? __asan_memcpy+0x3c/0x60 [ 58.231909][ T6272] tipc_udp_enable+0xd6a/0x1010 [ 58.231926][ T6272] ? __pfx_tipc_udp_enable+0x10/0x10 [ 58.231941][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.231971][ T6272] ? tipc_enable_bearer+0x772/0xe60 [ 58.231988][ T6272] tipc_enable_bearer+0x857/0xe60 [ 58.232006][ T6272] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 58.232021][ T6272] ? lock_acquire+0x1d1/0x380 [ 58.232056][ T6272] ? __nla_parse+0x40/0x60 [ 58.232076][ T6272] __tipc_nl_bearer_enable+0x332/0x420 [ 58.232093][ T6272] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 58.232109][ T6272] ? __pfx___mutex_lock+0x10/0x10 [ 58.232124][ T6272] ? rcu_is_watching+0x13/0xc0 [ 58.232148][ T6272] tipc_nl_bearer_enable+0x21/0x40 [ 58.232164][ T6272] genl_family_rcv_msg_doit+0x214/0x300 [ 58.232183][ T6272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 58.232202][ T6272] ? bpf_lsm_capable+0x9/0x10 [ 58.232218][ T6272] ? security_capable+0x80/0x260 [ 58.232235][ T6272] ? ns_capable+0xd2/0xf0 [ 58.232247][ T6272] genl_rcv_msg+0x560/0x800 [ 58.232262][ T6272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.232275][ T6272] ? __lock_acquire+0x5c0/0x1f40 [ 58.232287][ T6272] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 58.232307][ T6272] netlink_rcv_skb+0x159/0x420 [ 58.232319][ T6272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.232334][ T6272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.232351][ T6272] ? netlink_deliver_tap+0x1ae/0xcc0 [ 58.232365][ T6272] genl_rcv+0x28/0x40 [ 58.232377][ T6272] netlink_unicast+0x585/0x850 [ 58.232391][ T6272] ? __pfx_netlink_unicast+0x10/0x10 [ 58.232407][ T6272] netlink_sendmsg+0x8b0/0xda0 [ 58.232421][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.232435][ T6272] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.232449][ T6272] ____sys_sendmsg+0xa4d/0xbe0 [ 58.232464][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.232477][ T6272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.232496][ T6272] ? lock_acquire+0x1d1/0x380 [ 58.232507][ T6272] ? get_pid_task+0x2a/0x250 [ 58.232523][ T6272] ___sys_sendmsg+0x190/0x1e0 [ 58.232541][ T6272] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.232558][ T6272] ? get_pid_task+0x106/0x250 [ 58.232577][ T6272] ? find_held_lock+0x2b/0x80 [ 58.232601][ T6272] __sys_sendmsg+0x160/0x210 [ 58.232615][ T6272] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.232642][ T6272] do_syscall_64+0x123/0x790 [ 58.232664][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.232679][ T6272] RIP: 0033:0x7fd05b99e159 [ 58.232691][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.232705][ T6272] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.232720][ T6272] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 58.232727][ T6272] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 58.232733][ T6272] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.232739][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.232745][ T6272] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 58.232760][ T6272] [ 58.232791][ T6272] socket: no more sockets [ 58.232813][ T6272] tipc: Enabling of bearer rejected, failed to enable media [ 58.319784][ T6278] openvswitch: netlink: EtherType 50a is less than min 600 [ 58.357100][ T6280] FAULT_INJECTION: forcing a failure. [ 58.357100][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 58.357127][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) [ 58.357147][ T6280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.357158][ T6280] Call Trace: [ 58.357164][ T6280] [ 58.357171][ T6280] dump_stack_lvl+0x100/0x190 [ 58.357200][ T6280] should_fail_ex.cold+0x5/0xa [ 58.357226][ T6280] should_failslab+0xc2/0x120 [ 58.357250][ T6280] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.357276][ T6280] ? once_disable_jump+0x46/0x200 [ 58.357300][ T6280] once_disable_jump+0x46/0x200 [ 58.357318][ T6280] __rds_conn_create+0x1426/0x25a0 [ 58.357369][ T6280] ? __pfx___rds_conn_create+0x10/0x10 [ 58.357395][ T6280] ? trace_kmalloc+0xeb/0x110 [ 58.357414][ T6280] ? __kasan_kmalloc+0xaa/0xb0 [ 58.357436][ T6280] ? lockdep_init_map_type+0x5c/0x250 [ 58.357459][ T6280] rds_conn_create_outgoing+0x44/0x60 [ 58.357487][ T6280] rds_sendmsg+0x10da/0x34d0 [ 58.357505][ T6280] ? __pfx___up_read+0x10/0x10 [ 58.357525][ T6280] ? do_user_addr_fault+0x7d7/0x12f0 [ 58.357549][ T6280] ? do_user_addr_fault+0x7d7/0x12f0 [ 58.357578][ T6280] ? __pfx_rds_sendmsg+0x10/0x10 [ 58.357609][ T6280] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.357632][ T6280] ? ____sys_sendmsg+0xa4d/0xbe0 [ 58.357665][ T6280] ____sys_sendmsg+0xa4d/0xbe0 [ 58.357687][ T6280] ? __pfx_rds_sendmsg+0x10/0x10 [ 58.357706][ T6280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.357734][ T6280] ? lock_acquire+0x1d1/0x380 [ 58.357753][ T6280] ? get_pid_task+0x2a/0x250 [ 58.357779][ T6280] ___sys_sendmsg+0x190/0x1e0 [ 58.357806][ T6280] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.357834][ T6280] ? get_pid_task+0x106/0x250 [ 58.357881][ T6280] ? find_held_lock+0x2b/0x80 [ 58.357921][ T6280] __sys_sendmsg+0x160/0x210 [ 58.357942][ T6280] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.357976][ T6280] do_syscall_64+0x123/0x790 [ 58.358002][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.358021][ T6280] RIP: 0033:0x7fd05b99e159 [ 58.358034][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.358049][ T6280] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.358069][ T6280] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 58.358080][ T6280] RDX: 0000000008000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 58.358089][ T6280] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.358098][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.358107][ T6280] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 58.358130][ T6280] [ 58.419428][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 58.420463][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 58.421926][ T6284] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 58.421936][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.121'. [ 58.477575][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 58.581666][ T6291] overlayfs: statfs failed on './file0' [ 58.607150][ T5735] Bluetooth: hci2: command tx timeout [ 58.847955][ T62] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 58.960244][ T6304] syzkaller0: entered promiscuous mode [ 58.960264][ T6304] syzkaller0: entered allmulticast mode [ 59.110137][ T62] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 59.181105][ T6310] Bluetooth: MGMT ver 1.23 [ 59.294413][ T6312] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 59.373459][ T6317] FAULT_INJECTION: forcing a failure. [ 59.373459][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 59.373490][ T6317] CPU: 3 UID: 0 PID: 6317 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT(full) [ 59.373508][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.373519][ T6317] Call Trace: [ 59.373525][ T6317] [ 59.373532][ T6317] dump_stack_lvl+0x100/0x190 [ 59.373565][ T6317] should_fail_ex.cold+0x5/0xa [ 59.373591][ T6317] should_failslab+0xc2/0x120 [ 59.373615][ T6317] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.373636][ T6317] ? sk_prot_alloc+0x60/0x2a0 [ 59.373667][ T6317] sk_prot_alloc+0x60/0x2a0 [ 59.373695][ T6317] sk_alloc+0x36/0xe80 [ 59.373717][ T6317] inet_create+0x3a0/0x1060 [ 59.373744][ T6317] ? inet_create+0x94/0x1060 [ 59.373775][ T6317] __sock_create+0x339/0x860 [ 59.373809][ T6317] __sys_socket+0x14d/0x260 [ 59.373828][ T6317] ? __pfx___sys_socket+0x10/0x10 [ 59.373845][ T6317] ? __sys_setsockopt+0x1b5/0x220 [ 59.373872][ T6317] __x64_sys_socket+0x72/0xb0 [ 59.373888][ T6317] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.373913][ T6317] do_syscall_64+0x123/0x790 [ 59.373940][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.373959][ T6317] RIP: 0033:0x7f62d7f9e159 [ 59.373981][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.373999][ T6317] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 59.374019][ T6317] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 59.374031][ T6317] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 59.374043][ T6317] RBP: 00007f62d803506b R08: 0000000000000000 R09: 0000000000000000 [ 59.374055][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.374066][ T6317] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 59.374092][ T6317] [ 59.618884][ T62] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 59.780633][ T6346] syz.2.145 (6346): /proc/6345/oom_adj is deprecated, please use /proc/6345/oom_score_adj instead. [ 59.886686][ T6299] ceph: No mds server is up or the cluster is laggy [ 59.970562][ T6365] xt_hashlimit: size too large, truncated to 1048576 [ 60.168943][ T6379] overlayfs: empty lowerdir [ 60.178357][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.200727][ T6379] smpboot: CPU 1 is now offline [ 60.296884][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 60.308345][ T6382] syzkaller0: entered promiscuous mode [ 60.308374][ T6382] syzkaller0: entered allmulticast mode [ 60.314200][ T6382] TC_ACT_REPEAT abuse ? [ 60.326722][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 60.328187][ T62] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.332540][ T62] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 60.332562][ T62] usb 7-1: config 0 has no interface number 0 [ 60.332753][ T62] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.332787][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.339268][ T62] usb 7-1: config 0 descriptor?? [ 60.431717][ T62] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 60.469009][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 60.470094][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 60.470113][ T10] usb 5-1: config 0 has no interface number 0 [ 60.472053][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.472072][ T10] usb 5-1: Product: syz [ 60.472083][ T10] usb 5-1: Manufacturer: syz [ 60.472095][ T10] usb 5-1: SerialNumber: syz [ 60.484997][ T10] usb 5-1: config 0 descriptor?? [ 60.506228][ T10] usb 5-1: selecting invalid altsetting 1 [ 60.508627][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 60.508719][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 60.616340][ T43] kauditd_printk_skb: 134 callbacks suppressed [ 60.616363][ T43] audit: type=1400 audit(1789522369.666:491): avc: denied { read } for pid=6360 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.616992][ T10] DVB: Unable to find symbol stv0299_attach() [ 60.621644][ T43] audit: type=1400 audit(1789522369.676:492): avc: denied { ioctl } for pid=6383 comm="syz.3.160" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14592 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.621692][ T43] audit: type=1400 audit(1789522369.676:493): avc: denied { ioctl } for pid=6360 comm="syz.2.151" path="socket:[15604]" dev="sockfs" ino=15604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.656578][ T10] DVB: Unable to find symbol tda8083_attach() [ 60.656593][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 60.687744][ T5735] Bluetooth: hci2: command tx timeout [ 60.747336][ T43] audit: type=1400 audit(1789522369.806:494): avc: denied { execmem } for pid=6370 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.749374][ T43] audit: type=1400 audit(1789522369.806:495): avc: denied { mmap_zero } for pid=6370 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 60.775981][ T35] usb 5-1: USB disconnect, device number 2 [ 61.559491][ T43] audit: type=1400 audit(1789522370.616:496): avc: denied { connect } for pid=6397 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.739735][ T43] audit: type=1400 audit(1789522370.796:497): avc: denied { create } for pid=6401 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.745036][ T43] audit: type=1400 audit(1789522370.796:498): avc: denied { bind } for pid=6401 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.745277][ T43] audit: type=1400 audit(1789522370.796:499): avc: denied { name_bind } for pid=6401 comm="syz.0.164" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 61.745456][ T43] audit: type=1400 audit(1789522370.796:500): avc: denied { node_bind } for pid=6401 comm="syz.0.164" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.039001][ T5881] usb 7-1: USB disconnect, device number 2 [ 62.423531][ T6424] syzkaller0: entered promiscuous mode [ 62.423553][ T6424] syzkaller0: entered allmulticast mode [ 62.573580][ T6431] __nla_validate_parse: 5 callbacks suppressed [ 62.573600][ T6431] netlink: 108 bytes leftover after parsing attributes in process `syz.3.173'. [ 62.635724][ T6430] syzkaller0: entered promiscuous mode [ 62.635741][ T6430] syzkaller0: entered allmulticast mode [ 62.642640][ T6430] TC_ACT_REPEAT abuse ? [ 62.770517][ T5735] Bluetooth: hci2: command tx timeout [ 62.854754][ T6439] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 63.669609][ T6455] FAULT_INJECTION: forcing a failure. [ 63.669609][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 63.669668][ T6455] CPU: 2 UID: 0 PID: 6455 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 63.669688][ T6455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.669699][ T6455] Call Trace: [ 63.669705][ T6455] [ 63.669712][ T6455] dump_stack_lvl+0x100/0x190 [ 63.669743][ T6455] should_fail_ex.cold+0x5/0xa [ 63.669768][ T6455] should_failslab+0xc2/0x120 [ 63.669792][ T6455] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 63.669814][ T6455] ? sock_alloc_inode+0x26/0x2c0 [ 63.669840][ T6455] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.669866][ T6455] sock_alloc_inode+0x26/0x2c0 [ 63.669889][ T6455] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.669911][ T6455] alloc_inode+0x68/0x250 [ 63.669929][ T6455] sock_alloc+0x44/0x280 [ 63.669949][ T6455] ? security_socket_create+0x7f/0x250 [ 63.669979][ T6455] __sock_create+0xc2/0x860 [ 63.670011][ T6455] l2tp_tunnel_sock_create+0x23c/0xab0 [ 63.670041][ T6455] ? __pfx_l2tp_tunnel_sock_create+0x10/0x10 [ 63.670067][ T6455] ? node_tag_clear+0x110/0x270 [ 63.670111][ T6455] ? __local_bh_enable_ip+0xa5/0x120 [ 63.670135][ T6455] l2tp_tunnel_register+0x498/0xc10 [ 63.670159][ T6455] ? __pfx___debug_object_init+0x10/0x10 [ 63.670182][ T6455] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 63.670206][ T6455] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 63.670238][ T6455] ? lockdep_init_map_type+0x5c/0x250 [ 63.670260][ T6455] ? l2tp_tunnel_create+0x2cf/0x460 [ 63.670274][ T6455] ? l2tp_tunnel_create+0x37d/0x460 [ 63.670294][ T6455] l2tp_nl_cmd_tunnel_create+0x44e/0x990 [ 63.670322][ T6455] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 63.670350][ T6455] ? __nla_parse+0x40/0x60 [ 63.670379][ T6455] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 63.670426][ T6455] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 63.670456][ T6455] genl_family_rcv_msg_doit+0x214/0x300 [ 63.670481][ T6455] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.670512][ T6455] ? bpf_lsm_capable+0x9/0x10 [ 63.670536][ T6455] ? security_capable+0x80/0x260 [ 63.670565][ T6455] ? ns_capable+0xd2/0xf0 [ 63.670585][ T6455] genl_rcv_msg+0x560/0x800 [ 63.670611][ T6455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.670633][ T6455] ? __lock_acquire+0x5c0/0x1f40 [ 63.670651][ T6455] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 63.670688][ T6455] netlink_rcv_skb+0x159/0x420 [ 63.670708][ T6455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.670739][ T6455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.670769][ T6455] ? netlink_deliver_tap+0x1ae/0xcc0 [ 63.670791][ T6455] genl_rcv+0x28/0x40 [ 63.670810][ T6455] netlink_unicast+0x585/0x850 [ 63.670833][ T6455] ? __pfx_netlink_unicast+0x10/0x10 [ 63.670860][ T6455] netlink_sendmsg+0x8b0/0xda0 [ 63.670883][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.670906][ T6455] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.670929][ T6455] ____sys_sendmsg+0xa4d/0xbe0 [ 63.670953][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.670974][ T6455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.671006][ T6455] ? lock_acquire+0x1d1/0x380 [ 63.671025][ T6455] ? get_pid_task+0x2a/0x250 [ 63.671051][ T6455] ___sys_sendmsg+0x190/0x1e0 [ 63.671080][ T6455] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.671112][ T6455] ? get_pid_task+0x106/0x250 [ 63.671146][ T6455] ? find_held_lock+0x2b/0x80 [ 63.671188][ T6455] __sys_sendmsg+0x160/0x210 [ 63.671212][ T6455] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.671249][ T6455] do_syscall_64+0x123/0x790 [ 63.671276][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.671295][ T6455] RIP: 0033:0x7fd05b99e159 [ 63.671310][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.671327][ T6455] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.671346][ T6455] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 63.671357][ T6455] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 63.671368][ T6455] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.671378][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.671388][ T6455] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 63.671412][ T6455] [ 63.671521][ T6455] socket: no more sockets [ 64.506610][ T6484] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.512046][ T6486] syzkaller0: entered promiscuous mode [ 64.512060][ T6486] syzkaller0: entered allmulticast mode [ 65.220241][ T6531] xt_hashlimit: size too large, truncated to 1048576 [ 65.264591][ T6531] Cannot find add_set index 1 as target [ 65.318061][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 65.402865][ T6543] FAULT_INJECTION: forcing a failure. [ 65.402865][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 65.402896][ T6543] CPU: 2 UID: 0 PID: 6543 Comm: syz.0.218 Not tainted syzkaller #0 PREEMPT(full) [ 65.402915][ T6543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.402926][ T6543] Call Trace: [ 65.402932][ T6543] [ 65.402939][ T6543] dump_stack_lvl+0x100/0x190 [ 65.402985][ T6543] should_fail_ex.cold+0x5/0xa [ 65.403034][ T6543] should_failslab+0xc2/0x120 [ 65.403064][ T6543] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.403084][ T6543] ? skb_clone+0x190/0x400 [ 65.403115][ T6543] skb_clone+0x190/0x400 [ 65.403137][ T6543] netlink_deliver_tap+0xaed/0xcc0 [ 65.403167][ T6543] netlink_unicast+0x6a5/0x850 [ 65.403191][ T6543] ? __pfx_netlink_unicast+0x10/0x10 [ 65.403219][ T6543] netlink_ack+0x655/0xb80 [ 65.403247][ T6543] netlink_rcv_skb+0x333/0x420 [ 65.403266][ T6543] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 65.403292][ T6543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.403323][ T6543] ? ns_capable+0xd2/0xf0 [ 65.403344][ T6543] nfnetlink_rcv+0x1b3/0x440 [ 65.403368][ T6543] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 65.403391][ T6543] ? netlink_deliver_tap+0x1ae/0xcc0 [ 65.403416][ T6543] netlink_unicast+0x585/0x850 [ 65.403439][ T6543] ? __pfx_netlink_unicast+0x10/0x10 [ 65.403467][ T6543] netlink_sendmsg+0x8b0/0xda0 [ 65.403491][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.403513][ T6543] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.403538][ T6543] ____sys_sendmsg+0xa4d/0xbe0 [ 65.403562][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.403583][ T6543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.403615][ T6543] ? lock_acquire+0x1d1/0x380 [ 65.403634][ T6543] ? get_pid_task+0x2a/0x250 [ 65.403659][ T6543] ___sys_sendmsg+0x190/0x1e0 [ 65.403687][ T6543] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.403713][ T6543] ? get_pid_task+0x106/0x250 [ 65.403747][ T6543] ? find_held_lock+0x2b/0x80 [ 65.403788][ T6543] __sys_sendmsg+0x160/0x210 [ 65.403811][ T6543] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.403846][ T6543] do_syscall_64+0x123/0x790 [ 65.403877][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.403896][ T6543] RIP: 0033:0x7f62d7f9e159 [ 65.403912][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.403927][ T6543] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.403945][ T6543] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 65.403957][ T6543] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 65.403967][ T6543] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.403977][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.403988][ T6543] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 65.404018][ T6543] [ 65.593170][ T6551] capability: warning: `syz.2.222' uses deprecated v2 capabilities in a way that may be insecure [ 65.661630][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 65.661651][ T43] audit: type=1400 audit(1789522374.716:545): avc: denied { mount } for pid=6556 comm="syz.1.224" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 65.682297][ T43] audit: type=1400 audit(1789522374.726:546): avc: denied { read write } for pid=6556 comm="syz.1.224" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.682351][ T43] audit: type=1400 audit(1789522374.726:547): avc: denied { open } for pid=6556 comm="syz.1.224" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.706997][ T43] audit: type=1400 audit(1789522374.766:548): avc: denied { read } for pid=6560 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.707334][ T43] audit: type=1400 audit(1789522374.766:549): avc: denied { read open } for pid=6560 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.707643][ T43] audit: type=1400 audit(1789522374.766:550): avc: denied { getattr } for pid=6560 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.721236][ T43] audit: type=1400 audit(1789522374.776:551): avc: denied { write } for pid=6558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.721281][ T43] audit: type=1400 audit(1789522374.776:552): avc: denied { add_name } for pid=6558 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.721316][ T43] audit: type=1400 audit(1789522374.776:553): avc: denied { create } for pid=6558 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.721354][ T43] audit: type=1400 audit(1789522374.776:554): avc: denied { write } for pid=6558 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=3029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.802203][ T6562] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 65.915798][ T6576] FAULT_INJECTION: forcing a failure. [ 65.915798][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.915828][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 65.915850][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.915861][ T6576] Call Trace: [ 65.915868][ T6576] [ 65.915876][ T6576] dump_stack_lvl+0x100/0x190 [ 65.915910][ T6576] should_fail_ex.cold+0x5/0xa [ 65.915938][ T6576] _copy_to_user+0x32/0xd0 [ 65.915962][ T6576] simple_read_from_buffer+0xcb/0x170 [ 65.915996][ T6576] proc_fail_nth_read+0x1af/0x230 [ 65.916021][ T6576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.916046][ T6576] ? rw_verify_area+0xce/0x6d0 [ 65.916074][ T6576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.916098][ T6576] vfs_read+0x1e4/0xb40 [ 65.916118][ T6576] ? lock_acquire+0x1d1/0x380 [ 65.916154][ T6576] ? __fget_files+0x34/0x3d0 [ 65.916178][ T6576] ? __pfx_vfs_read+0x10/0x10 [ 65.916196][ T6576] ? find_held_lock+0x2b/0x80 [ 65.916223][ T6576] ? __fget_files+0x215/0x3d0 [ 65.916251][ T6576] ? __fget_files+0x21f/0x3d0 [ 65.916282][ T6576] ksys_read+0x12a/0x250 [ 65.916301][ T6576] ? __pfx_ksys_read+0x10/0x10 [ 65.916329][ T6576] do_syscall_64+0x123/0x790 [ 65.916358][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.916378][ T6576] RIP: 0033:0x7f41f935e98e [ 65.916393][ T6576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.916411][ T6576] RSP: 002b:00007f41fa348fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.916430][ T6576] RAX: ffffffffffffffda RBX: 00007f41fa3496c0 RCX: 00007f41f935e98e [ 65.916443][ T6576] RDX: 000000000000000f RSI: 00007f41fa3490a0 RDI: 0000000000000004 [ 65.916455][ T6576] RBP: 00007f41fa349090 R08: 0000000000000000 R09: 0000000000000000 [ 65.916465][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.916476][ T6576] R13: 00007f41f9626038 R14: 00007f41f9625fa0 R15: 00007ffe9cadeac8 [ 65.916502][ T6576] [ 66.064529][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.253776][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 66.267961][ T6602] FAULT_INJECTION: forcing a failure. [ 66.267961][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 66.267991][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 66.268012][ T6602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.268030][ T6602] Call Trace: [ 66.268038][ T6602] [ 66.268045][ T6602] dump_stack_lvl+0x100/0x190 [ 66.268090][ T6602] should_fail_ex.cold+0x5/0xa [ 66.268118][ T6602] should_failslab+0xc2/0x120 [ 66.268149][ T6602] __kmalloc_noprof+0xfc/0x840 [ 66.268172][ T6602] ? tomoyo_encode2+0xfb/0x3c0 [ 66.268201][ T6602] tomoyo_encode2+0xfb/0x3c0 [ 66.268228][ T6602] tomoyo_encode+0x29/0x50 [ 66.268250][ T6602] tomoyo_realpath_from_path+0x18c/0x690 [ 66.268279][ T6602] tomoyo_path_number_perm+0x23c/0x580 [ 66.268298][ T6602] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.268321][ T6602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.268351][ T6602] ? __lock_acquire+0x5c0/0x1f40 [ 66.268385][ T6602] ? __fget_files+0x34/0x3d0 [ 66.268409][ T6602] ? find_held_lock+0x2b/0x80 [ 66.268436][ T6602] ? hook_file_ioctl_common+0x140/0x440 [ 66.268466][ T6602] ? __fget_files+0x21f/0x3d0 [ 66.268495][ T6602] security_file_ioctl+0xd3/0x230 [ 66.268517][ T6602] __x64_sys_ioctl+0xb7/0x210 [ 66.268539][ T6602] do_syscall_64+0x123/0x790 [ 66.268571][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.268591][ T6602] RIP: 0033:0x7f41f939e159 [ 66.268608][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.268625][ T6602] RSP: 002b:00007f41fa349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.268646][ T6602] RAX: ffffffffffffffda RBX: 00007f41f9625fa0 RCX: 00007f41f939e159 [ 66.268659][ T6602] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 66.268672][ T6602] RBP: 00007f41fa349090 R08: 0000000000000000 R09: 0000000000000000 [ 66.268684][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.268695][ T6602] R13: 00007f41f9626038 R14: 00007f41f9625fa0 R15: 00007ffe9cadeac8 [ 66.268721][ T6602] [ 66.268739][ T6602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.268782][ T6602] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 66.464336][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 66.598733][ T6621] FAULT_INJECTION: forcing a failure. [ 66.598733][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.598765][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) [ 66.598788][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.598799][ T6621] Call Trace: [ 66.598806][ T6621] [ 66.598813][ T6621] dump_stack_lvl+0x100/0x190 [ 66.598846][ T6621] should_fail_ex.cold+0x5/0xa [ 66.598874][ T6621] _copy_from_iter+0x1f4/0x1690 [ 66.598899][ T6621] ? _copy_from_iter+0x270/0x1690 [ 66.598920][ T6621] ? __pfx__copy_from_iter+0x10/0x10 [ 66.598944][ T6621] ? __pfx__copy_from_iter+0x10/0x10 [ 66.598965][ T6621] ? _copy_from_iter+0x270/0x1690 [ 66.598990][ T6621] copy_page_from_iter+0x238/0x300 [ 66.599013][ T6621] skb_copy_datagram_from_iter+0x399/0x720 [ 66.599052][ T6621] tun_get_user+0x1866/0x3cc0 [ 66.599084][ T6621] ? __lock_acquire+0x5c0/0x1f40 [ 66.599105][ T6621] ? __pfx_tun_get_user+0x10/0x10 [ 66.599144][ T6621] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 66.599178][ T6621] ? find_held_lock+0x2b/0x80 [ 66.599205][ T6621] ? tun_get+0x191/0x370 [ 66.599224][ T6621] ? tun_get+0x191/0x370 [ 66.599250][ T6621] tun_chr_write_iter+0xdc/0x200 [ 66.599274][ T6621] vfs_write+0x6af/0x1050 [ 66.599296][ T6621] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 66.599321][ T6621] ? __pfx_vfs_write+0x10/0x10 [ 66.599339][ T6621] ? find_held_lock+0x2b/0x80 [ 66.599380][ T6621] ksys_write+0x12a/0x250 [ 66.599401][ T6621] ? __pfx_ksys_write+0x10/0x10 [ 66.599427][ T6621] do_syscall_64+0x123/0x790 [ 66.599457][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.599479][ T6621] RIP: 0033:0x7f62d7f9e159 [ 66.599495][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.599514][ T6621] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.599534][ T6621] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 66.599547][ T6621] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 66.599559][ T6621] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.599578][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.599589][ T6621] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 66.599615][ T6621] [ 66.678653][ T6628] device-mapper: ioctl: Target spec extends beyond end of parameters [ 66.678662][ T6628] device-mapper: ioctl: unable to find target [ 66.858120][ T2180] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 66.911769][ T6644] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 67.118635][ T2180] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 67.331435][ T6665] device-mapper: ioctl: Target spec extends beyond end of parameters [ 67.331450][ T6665] device-mapper: ioctl: unable to find target [ 67.627585][ T2180] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 67.748920][ T6682] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 67.757708][ T6682] romfs: unable to set blocksize [ 67.757708][ T6682] [ 67.774721][ T6685] FAULT_INJECTION: forcing a failure. [ 67.774721][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.774751][ T6685] CPU: 2 UID: 0 PID: 6685 Comm: syz.3.269 Not tainted syzkaller #0 PREEMPT(full) [ 67.774769][ T6685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.774780][ T6685] Call Trace: [ 67.774786][ T6685] [ 67.774794][ T6685] dump_stack_lvl+0x100/0x190 [ 67.774826][ T6685] should_fail_ex.cold+0x5/0xa [ 67.774853][ T6685] _copy_from_user+0x2e/0xd0 [ 67.774873][ T6685] kstrtouint_from_user+0xd6/0x1d0 [ 67.774898][ T6685] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 67.774928][ T6685] ? lock_acquire+0x1d1/0x380 [ 67.774960][ T6685] proc_fail_nth_write+0x83/0x220 [ 67.774985][ T6685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.775016][ T6685] vfs_write+0x2aa/0x1050 [ 67.775052][ T6685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.775074][ T6685] ? lock_acquire+0x1d1/0x380 [ 67.775094][ T6685] ? __fget_files+0x34/0x3d0 [ 67.775115][ T6685] ? __pfx_vfs_write+0x10/0x10 [ 67.775132][ T6685] ? find_held_lock+0x2b/0x80 [ 67.775158][ T6685] ? __fget_files+0x215/0x3d0 [ 67.775183][ T6685] ? __fget_files+0x21f/0x3d0 [ 67.775212][ T6685] ksys_write+0x12a/0x250 [ 67.775226][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 67.775252][ T6685] do_syscall_64+0x123/0x790 [ 67.775279][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.775299][ T6685] RIP: 0033:0x7f994c35e98e [ 67.775315][ T6685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.775332][ T6685] RSP: 002b:00007f994d2b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.775350][ T6685] RAX: ffffffffffffffda RBX: 00007f994d2b36c0 RCX: 00007f994c35e98e [ 67.775360][ T6685] RDX: 0000000000000001 RSI: 00007f994d2b3090 RDI: 0000000000000005 [ 67.775371][ T6685] RBP: 00007f994d2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 67.775383][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 67.775393][ T6685] R13: 00007f994c626038 R14: 00007f994c625fa0 R15: 00007ffd6f6c5578 [ 67.775420][ T6685] [ 67.897649][ T6640] ceph: No mds server is up or the cluster is laggy [ 67.942823][ T6690] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 67.942995][ T6689] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 68.265361][ T6704] syzkaller0: entered promiscuous mode [ 68.265382][ T6704] syzkaller0: entered allmulticast mode [ 68.274729][ T6702] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.442105][ T6706] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.442129][ T6706] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.444616][ T6706] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.444638][ T6706] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 68.548733][ T6710] TC_ACT_REPEAT abuse ? [ 68.604287][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.282'. [ 68.712210][ T6722] syzkaller0: entered promiscuous mode [ 68.712227][ T6722] syzkaller0: entered allmulticast mode [ 68.777493][ T6725] syzkaller0: entered promiscuous mode [ 68.777514][ T6725] syzkaller0: entered allmulticast mode [ 68.922686][ T5880] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 68.923136][ T5880] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 69.068021][ T6743] binder: 6730:6743 ioctl c0306201 200000000080 returned -14 [ 69.122667][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 69.146285][ T6746] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 69.179252][ T5880] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 69.209132][ T6750] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 69.245787][ T6752] syzkaller0: entered promiscuous mode [ 69.245808][ T6752] syzkaller0: entered allmulticast mode [ 69.486080][ T6758] nvme_fcloop: unknown parameter or missing value ';e' [ 69.606143][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 69.613092][ T6760] xfrm1: entered promiscuous mode [ 69.613106][ T6760] xfrm1: entered allmulticast mode [ 69.635208][ T6762] ip_tables: iptables: counters copy to user failed while replacing table [ 69.698903][ T62] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 69.728828][ T6769] sctp: [Deprecated]: syz.2.301 (pid 6769) Use of int in max_burst socket option. [ 69.728828][ T6769] Use struct sctp_assoc_value instead [ 69.753987][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 69.763784][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 69.763808][ T6772] FAULT_INJECTION: forcing a failure. [ 69.763808][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 69.763829][ T6772] CPU: 3 UID: 0 PID: 6772 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 69.763847][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.763856][ T6772] Call Trace: [ 69.763861][ T6772] [ 69.763868][ T6772] dump_stack_lvl+0x100/0x190 [ 69.763910][ T6772] should_fail_ex.cold+0x5/0xa [ 69.763932][ T6772] should_failslab+0xc2/0x120 [ 69.763957][ T6772] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.763975][ T6772] ? __alloc_skb+0x5b7/0x710 [ 69.763997][ T6772] ? __alloc_skb+0x140/0x710 [ 69.764018][ T6772] __alloc_skb+0x140/0x710 [ 69.764033][ T6772] ? __alloc_skb+0x5b7/0x710 [ 69.764056][ T6772] ? __pfx___alloc_skb+0x10/0x10 [ 69.764072][ T6772] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 69.764097][ T6772] netlink_ack+0x117/0xb80 [ 69.764115][ T6772] ? __lock_acquire+0x5c0/0x1f40 [ 69.764138][ T6772] netlink_rcv_skb+0x333/0x420 [ 69.764155][ T6772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.764178][ T6772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.764202][ T6772] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.764223][ T6772] netlink_unicast+0x585/0x850 [ 69.764243][ T6772] ? __pfx_netlink_unicast+0x10/0x10 [ 69.764260][ T6772] ? __pfx_sock_has_perm+0x10/0x10 [ 69.764290][ T6772] netlink_sendmsg+0x8b0/0xda0 [ 69.764311][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.764331][ T6772] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.764352][ T6772] ____sys_sendmsg+0xa4d/0xbe0 [ 69.764373][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.764393][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.764419][ T6772] ? rcu_is_watching+0x13/0xc0 [ 69.764439][ T6772] ? ___sys_sendmsg+0x19d/0x1e0 [ 69.764461][ T6772] ? kfree+0x1e5/0x6d0 [ 69.764486][ T6772] ___sys_sendmsg+0x190/0x1e0 [ 69.764512][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.764544][ T6772] ? __fget_files+0x34/0x3d0 [ 69.764572][ T6772] ? __pfx___might_resched+0x10/0x10 [ 69.764594][ T6772] __sys_sendmmsg+0x20c/0x440 [ 69.764617][ T6772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.764636][ T6772] ? ksys_write+0x190/0x250 [ 69.764672][ T6772] ? fput+0x7c/0x100 [ 69.764694][ T6772] ? ksys_write+0x1ac/0x250 [ 69.764711][ T6772] ? __pfx_ksys_write+0x10/0x10 [ 69.764733][ T6772] __x64_sys_sendmmsg+0x9c/0x100 [ 69.764754][ T6772] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.764783][ T6772] do_syscall_64+0x123/0x790 [ 69.764808][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.764827][ T6772] RIP: 0033:0x7f994c39e159 [ 69.764863][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.764880][ T6772] RSP: 002b:00007f994d2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.764898][ T6772] RAX: ffffffffffffffda RBX: 00007f994c625fa0 RCX: 00007f994c39e159 [ 69.764910][ T6772] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 69.764922][ T6772] RBP: 00007f994d2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 69.764931][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.764941][ T6772] R13: 00007f994c626038 R14: 00007f994c625fa0 R15: 00007ffd6f6c5578 [ 69.764964][ T6772] [ 69.981577][ T6729] ceph: No mds server is up or the cluster is laggy [ 70.149719][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'. [ 70.225274][ T6787] syzkaller0: entered promiscuous mode [ 70.225293][ T6787] syzkaller0: entered allmulticast mode [ 71.262241][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.384490][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 71.461037][ T43] kauditd_printk_skb: 111 callbacks suppressed [ 71.461055][ T43] audit: type=1400 audit(1789522380.516:666): avc: denied { mount } for pid=6799 comm="syz.3.311" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.500455][ T6800] syzkaller0: entered promiscuous mode [ 71.500481][ T6800] syzkaller0: entered allmulticast mode [ 71.595228][ T43] audit: type=1400 audit(1789522380.646:667): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.649147][ T43] audit: type=1400 audit(1789522380.706:668): avc: denied { ioctl } for pid=6803 comm="syz.2.314" path="socket:[17328]" dev="sockfs" ino=17328 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.654398][ T43] audit: type=1400 audit(1789522380.706:669): avc: denied { setopt } for pid=6805 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.654442][ T43] audit: type=1400 audit(1789522380.706:670): avc: denied { name_connect } for pid=6805 comm="syz.3.313" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.956571][ T62] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.107631][ T62] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 72.108780][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.317458][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.317748][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.324765][ T62] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 72.575503][ T62] usb 7-1: USB disconnect, device number 3 [ 72.632891][ T6762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.756815][ T5733] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.773245][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 72.773561][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 72.867437][ T43] audit: type=1400 audit(1789522381.926:671): avc: denied { create } for pid=6829 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.867859][ T43] audit: type=1400 audit(1789522381.926:672): avc: denied { write } for pid=6829 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.923078][ T5733] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 72.924262][ T5733] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.924283][ T5733] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 72.924315][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.942715][ T5733] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 72.966796][ T6834] fuse: Unknown parameter 'r’' [ 72.966941][ T43] audit: type=1400 audit(1789522382.026:673): avc: denied { mounton } for pid=6829 comm="syz.0.322" path="/87/file0" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.101375][ T6848] FAULT_INJECTION: forcing a failure. [ 73.101375][ T6848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.101396][ T6848] CPU: 2 UID: 0 PID: 6848 Comm: syz.1.326 Not tainted syzkaller #0 PREEMPT(full) [ 73.101410][ T6848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.101417][ T6848] Call Trace: [ 73.101421][ T6848] [ 73.101426][ T6848] dump_stack_lvl+0x100/0x190 [ 73.101447][ T6848] should_fail_ex.cold+0x5/0xa [ 73.101467][ T6848] _copy_to_user+0x32/0xd0 [ 73.101481][ T6848] simple_read_from_buffer+0xcb/0x170 [ 73.101497][ T6848] proc_fail_nth_read+0x1af/0x230 [ 73.101513][ T6848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.101528][ T6848] ? rw_verify_area+0xce/0x6d0 [ 73.101546][ T6848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.101560][ T6848] vfs_read+0x1e4/0xb40 [ 73.101572][ T6848] ? lock_acquire+0x1d1/0x380 [ 73.101584][ T6848] ? __fget_files+0x34/0x3d0 [ 73.101599][ T6848] ? __pfx_vfs_read+0x10/0x10 [ 73.101609][ T6848] ? find_held_lock+0x2b/0x80 [ 73.101626][ T6848] ? __fget_files+0x215/0x3d0 [ 73.101642][ T6848] ? __fget_files+0x21f/0x3d0 [ 73.101661][ T6848] ksys_read+0x12a/0x250 [ 73.101676][ T6848] ? __pfx_ksys_read+0x10/0x10 [ 73.101691][ T6848] do_syscall_64+0x123/0x790 [ 73.101710][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.101722][ T6848] RIP: 0033:0x7fd05b95e98e [ 73.101732][ T6848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.101744][ T6848] RSP: 002b:00007fd05c77efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.101756][ T6848] RAX: ffffffffffffffda RBX: 00007fd05c77f6c0 RCX: 00007fd05b95e98e [ 73.101763][ T6848] RDX: 000000000000000f RSI: 00007fd05c77f0a0 RDI: 0000000000000007 [ 73.101770][ T6848] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.101776][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.101783][ T6848] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 73.101798][ T6848] [ 73.231041][ T6859] FAULT_INJECTION: forcing a failure. [ 73.231041][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 73.231063][ T6859] CPU: 2 UID: 0 PID: 6859 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 73.231076][ T6859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.231082][ T6859] Call Trace: [ 73.231087][ T6859] [ 73.231091][ T6859] dump_stack_lvl+0x100/0x190 [ 73.231110][ T6859] should_fail_ex.cold+0x5/0xa [ 73.231126][ T6859] should_failslab+0xc2/0x120 [ 73.231141][ T6859] __kvmalloc_node_noprof+0x113/0x9b0 [ 73.231155][ T6859] ? bucket_table_alloc.isra.0+0x88/0x460 [ 73.231175][ T6859] bucket_table_alloc.isra.0+0x88/0x460 [ 73.231193][ T6859] __rhashtable_init_noprof+0x43a/0x890 [ 73.231211][ T6859] __rhltable_init_noprof+0x28/0x70 [ 73.231229][ T6859] nf_tables_newtable+0xf70/0x1a90 [ 73.231248][ T6859] ? __pfx_nf_tables_newtable+0x10/0x10 [ 73.231262][ T6859] ? net_generic+0x25/0x2a0 [ 73.231279][ T6859] ? __nla_parse+0x40/0x60 [ 73.231297][ T6859] nfnetlink_rcv_batch+0x1410/0x2880 [ 73.231320][ T6859] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 73.231337][ T6859] ? lock_acquire+0x1d1/0x380 [ 73.231349][ T6859] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.231370][ T6859] ? avc_has_perm_noaudit+0x145/0x3b0 [ 73.231401][ T6859] ? __nla_parse+0x40/0x60 [ 73.231419][ T6859] nfnetlink_rcv+0x3bd/0x440 [ 73.231434][ T6859] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 73.231453][ T6859] netlink_unicast+0x585/0x850 [ 73.231468][ T6859] ? __pfx_netlink_unicast+0x10/0x10 [ 73.231484][ T6859] netlink_sendmsg+0x8b0/0xda0 [ 73.231498][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.231511][ T6859] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.231525][ T6859] ____sys_sendmsg+0xa4d/0xbe0 [ 73.231541][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.231554][ T6859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.231574][ T6859] ? lock_acquire+0x1d1/0x380 [ 73.231584][ T6859] ? get_pid_task+0x2a/0x250 [ 73.231601][ T6859] ___sys_sendmsg+0x190/0x1e0 [ 73.231619][ T6859] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.231635][ T6859] ? get_pid_task+0x106/0x250 [ 73.231655][ T6859] ? find_held_lock+0x2b/0x80 [ 73.231679][ T6859] __sys_sendmsg+0x160/0x210 [ 73.231693][ T6859] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.231713][ T6859] do_syscall_64+0x123/0x790 [ 73.231730][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.231742][ T6859] RIP: 0033:0x7fd05b99e159 [ 73.231751][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.231762][ T6859] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.231773][ T6859] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 73.231780][ T6859] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 73.231786][ T6859] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.231793][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.231799][ T6859] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 73.231813][ T6859] [ 73.471250][ T43] audit: type=1400 audit(1789522382.526:674): avc: denied { read } for pid=6874 comm="syz.1.333" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.471283][ T43] audit: type=1400 audit(1789522382.526:675): avc: denied { open } for pid=6874 comm="syz.1.333" path="/114/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.472528][ T6875] FAULT_INJECTION: forcing a failure. [ 73.472528][ T6875] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.472546][ T6875] CPU: 3 UID: 0 PID: 6875 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(full) [ 73.472559][ T6875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.472565][ T6875] Call Trace: [ 73.472569][ T6875] [ 73.472574][ T6875] dump_stack_lvl+0x100/0x190 [ 73.472593][ T6875] should_fail_ex.cold+0x5/0xa [ 73.472607][ T6875] ? prepare_alloc_pages+0x16d/0x5b0 [ 73.472622][ T6875] should_fail_alloc_page+0xeb/0x140 [ 73.472638][ T6875] prepare_alloc_pages+0x1f0/0x5b0 [ 73.472655][ T6875] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 73.472668][ T6875] ? stack_trace_save+0x8e/0xc0 [ 73.472679][ T6875] ? __pfx_stack_trace_save+0x10/0x10 [ 73.472692][ T6875] ? check_noncircular+0x97/0x160 [ 73.472705][ T6875] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 73.472721][ T6875] ? __lock_acquire+0x5c0/0x1f40 [ 73.472751][ T6875] ? __lock_acquire+0x5c0/0x1f40 [ 73.472764][ T6875] ? __css_rstat_updated+0x1ce/0x590 [ 73.472781][ T6875] ? lock_acquire+0x1d1/0x380 [ 73.472792][ T6875] ? page_table_check_set+0x11d/0x580 [ 73.472809][ T6875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.472823][ T6875] ? policy_nodemask+0xed/0x4f0 [ 73.472839][ T6875] alloc_pages_mpol+0x201/0x550 [ 73.472854][ T6875] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 73.472869][ T6875] ? __page_table_check_ptes_set+0x1d5/0x530 [ 73.472887][ T6875] folio_alloc_mpol_noprof+0x36/0x260 [ 73.472904][ T6875] vma_alloc_folio_noprof+0xed/0x1d0 [ 73.472921][ T6875] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 73.472937][ T6875] ? rcu_read_unlock+0x2d/0xb0 [ 73.472957][ T6875] do_anonymous_page+0xac9/0x2050 [ 73.472977][ T6875] ? __pfx_do_anonymous_page+0x10/0x10 [ 73.472992][ T6875] ? rcu_read_unlock+0x2d/0xb0 [ 73.473007][ T6875] ? rcu_read_unlock+0x2d/0xb0 [ 73.473023][ T6875] ? __pte_offset_map+0x179/0x310 [ 73.473038][ T6875] __handle_mm_fault+0x1ff3/0x2f60 [ 73.473061][ T6875] ? __pfx___handle_mm_fault+0x10/0x10 [ 73.473077][ T6875] ? __pfx_mt_find+0x10/0x10 [ 73.473101][ T6875] ? find_vma+0xbf/0x140 [ 73.473113][ T6875] ? __pfx_find_vma+0x10/0x10 [ 73.473126][ T6875] handle_mm_fault+0x363/0xa20 [ 73.473145][ T6875] do_user_addr_fault+0x745/0x12f0 [ 73.473163][ T6875] exc_page_fault+0x6f/0xd0 [ 73.473178][ T6875] asm_exc_page_fault+0x26/0x30 [ 73.473189][ T6875] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 73.473202][ T6875] Code: 00 00 00 00 e9 4d ff ff ff e8 00 da e3 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 f0 22 57 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 73.473215][ T6875] RSP: 0018:ffffc9000652f7f8 EFLAGS: 00050246 [ 73.473225][ T6875] RAX: 0000000000000001 RBX: 00002000000024b0 RCX: 0000000000000260 [ 73.473232][ T6875] RDX: 0000000000000001 RSI: ffff888028195b50 RDI: 0000200000004000 [ 73.473239][ T6875] RBP: ffffc9000652fd88 R08: 0000000000000000 R09: ffffed1005032bb5 [ 73.473245][ T6875] R10: ffff888028195daf R11: 0000000000000000 R12: 0000200000004260 [ 73.473252][ T6875] R13: 00007ffffffff000 R14: ffff888028194000 R15: 0000000000001db0 [ 73.473266][ T6875] ? _copy_to_iter+0x380/0x1720 [ 73.473278][ T6875] ? rcu_is_watching+0x13/0xc0 [ 73.473294][ T6875] ? __pfx__copy_to_iter+0x10/0x10 [ 73.473305][ T6875] ? trace_kmalloc+0xeb/0x110 [ 73.473317][ T6875] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 73.473331][ T6875] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.473347][ T6875] ? __asan_memcpy+0x3c/0x60 [ 73.473358][ T6875] ? append_kcore_note+0x17c/0x220 [ 73.473372][ T6875] read_kcore_iter+0x580/0x1800 [ 73.473383][ T6875] ? is_bpf_text_address+0x94/0x1a0 [ 73.473402][ T6875] ? __pfx_read_kcore_iter+0x10/0x10 [ 73.473417][ T6875] ? _parse_integer_limit+0x1ac/0x220 [ 73.473438][ T6875] ? __might_fault+0xc5/0x140 [ 73.473454][ T6875] ? look_up_lock_class+0x55/0x120 [ 73.473484][ T6875] ? avc_policy_seqno+0x9/0x20 [ 73.473498][ T6875] ? selinux_file_permission+0x8f/0x6d0 [ 73.473515][ T6875] ? proc_reg_read_iter+0x11b/0x310 [ 73.473530][ T6875] proc_reg_read_iter+0x11b/0x310 [ 73.473545][ T6875] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 73.473562][ T6875] vfs_read+0x82e/0xb40 [ 73.473575][ T6875] ? __pfx_vfs_read+0x10/0x10 [ 73.473585][ T6875] ? find_held_lock+0x2b/0x80 [ 73.473609][ T6875] ksys_read+0x12a/0x250 [ 73.473620][ T6875] ? __pfx_ksys_read+0x10/0x10 [ 73.473635][ T6875] do_syscall_64+0x123/0x790 [ 73.473652][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.473663][ T6875] RIP: 0033:0x7fd05b99e159 [ 73.473672][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.473682][ T6875] RSP: 002b:00007fd05c77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.473692][ T6875] RAX: ffffffffffffffda RBX: 00007fd05bc25fa0 RCX: 00007fd05b99e159 [ 73.473698][ T6875] RDX: 0000000000002020 RSI: 0000200000002240 RDI: 0000000000000003 [ 73.473705][ T6875] RBP: 00007fd05c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.473711][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.473717][ T6875] R13: 00007fd05bc26038 R14: 00007fd05bc25fa0 R15: 00007ffd74629df8 [ 73.473732][ T6875] [ 73.485049][ T6876] FAULT_INJECTION: forcing a failure. [ 73.485049][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 73.485067][ T6876] CPU: 3 UID: 0 PID: 6876 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 73.485080][ T6876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.485086][ T6876] Call Trace: [ 73.485091][ T6876] [ 73.485095][ T6876] dump_stack_lvl+0x100/0x190 [ 73.485114][ T6876] should_fail_ex.cold+0x5/0xa [ 73.485130][ T6876] should_failslab+0xc2/0x120 [ 73.485165][ T6876] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.485179][ T6876] ? security_file_alloc+0x34/0x2c0 [ 73.485195][ T6876] security_file_alloc+0x34/0x2c0 [ 73.485209][ T6876] init_file+0x95/0x480 [ 73.485223][ T6876] alloc_empty_file+0x79/0x1c0 [ 73.485239][ T6876] path_openat+0xdb/0x2440 [ 73.485255][ T6876] ? __pfx_path_openat+0x10/0x10 [ 73.485272][ T6876] do_file_open+0x20e/0x430 [ 73.485287][ T6876] ? __pfx_do_file_open+0x10/0x10 [ 73.485310][ T6876] ? _raw_spin_unlock+0x28/0x50 [ 73.485324][ T6876] ? alloc_fd+0x471/0x7a0 [ 73.485341][ T6876] do_sys_openat2+0x10f/0x1e0 [ 73.485357][ T6876] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.485372][ T6876] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.485389][ T6876] ? __fget_files+0x21f/0x3d0 [ 73.485404][ T6876] __x64_sys_openat+0x12d/0x210 [ 73.485419][ T6876] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.485434][ T6876] ? ksys_write+0x1ac/0x250 [ 73.485449][ T6876] do_syscall_64+0x123/0x790 [ 73.485470][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.485482][ T6876] RIP: 0033:0x7f994c35e98e [ 73.485491][ T6876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.485502][ T6876] RSP: 002b:00007f994d291b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.485513][ T6876] RAX: ffffffffffffffda RBX: 00007f994d2926c0 RCX: 00007f994c35e98e [ 73.485520][ T6876] RDX: 0000000000000002 RSI: 00007f994d291c00 RDI: ffffffffffffff9c [ 73.485526][ T6876] RBP: 00007f994d292090 R08: 0000000000000000 R09: 0000000000000000 [ 73.485533][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.485539][ T6876] R13: 00007f994c626128 R14: 00007f994c626090 R15: 00007ffd6f6c5578 [ 73.485553][ T6876] [ 73.587742][ T6883] can0: slcan on ttyS3. [ 73.684445][ T6884] can0 (unregistered): slcan off ttyS3. [ 73.721329][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 73.904044][ T6902] FAULT_INJECTION: forcing a failure. [ 73.904044][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 73.904068][ T6902] CPU: 3 UID: 0 PID: 6902 Comm: syz.0.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.904100][ T6902] Tainted: [L]=SOFTLOCKUP [ 73.904105][ T6902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.904111][ T6902] Call Trace: [ 73.904115][ T6902] [ 73.904120][ T6902] dump_stack_lvl+0x100/0x190 [ 73.904140][ T6902] should_fail_ex.cold+0x5/0xa [ 73.904156][ T6902] should_failslab+0xc2/0x120 [ 73.904171][ T6902] __kvmalloc_node_noprof+0x113/0x9b0 [ 73.904186][ T6902] ? bucket_table_alloc.isra.0+0x88/0x460 [ 73.904206][ T6902] bucket_table_alloc.isra.0+0x88/0x460 [ 73.904225][ T6902] __rhashtable_init_noprof+0x43a/0x890 [ 73.904244][ T6902] __rhltable_init_noprof+0x28/0x70 [ 73.904262][ T6902] nf_tables_newtable+0xf30/0x1a90 [ 73.904281][ T6902] ? __pfx_nf_tables_newtable+0x10/0x10 [ 73.904296][ T6902] ? net_generic+0x25/0x2a0 [ 73.904313][ T6902] ? __nla_parse+0x40/0x60 [ 73.904332][ T6902] nfnetlink_rcv_batch+0x1410/0x2880 [ 73.904355][ T6902] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 73.904373][ T6902] ? lock_acquire+0x1d1/0x380 [ 73.904385][ T6902] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.904407][ T6902] ? avc_has_perm_noaudit+0x145/0x3b0 [ 73.904436][ T6902] ? __nla_parse+0x40/0x60 [ 73.904465][ T6902] nfnetlink_rcv+0x3bd/0x440 [ 73.904482][ T6902] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 73.904502][ T6902] netlink_unicast+0x585/0x850 [ 73.904517][ T6902] ? __pfx_netlink_unicast+0x10/0x10 [ 73.904533][ T6902] netlink_sendmsg+0x8b0/0xda0 [ 73.904548][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.904562][ T6902] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.904576][ T6902] ____sys_sendmsg+0xa4d/0xbe0 [ 73.904592][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.904605][ T6902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.904625][ T6902] ? lock_acquire+0x1d1/0x380 [ 73.904636][ T6902] ? get_pid_task+0x2a/0x250 [ 73.904654][ T6902] ___sys_sendmsg+0x190/0x1e0 [ 73.904672][ T6902] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.904689][ T6902] ? get_pid_task+0x106/0x250 [ 73.904709][ T6902] ? find_held_lock+0x2b/0x80 [ 73.904734][ T6902] __sys_sendmsg+0x160/0x210 [ 73.904748][ T6902] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.904769][ T6902] do_syscall_64+0x123/0x790 [ 73.904787][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.904799][ T6902] RIP: 0033:0x7f62d7f9e159 [ 73.904808][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.904819][ T6902] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.904831][ T6902] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 73.904838][ T6902] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 73.904845][ T6902] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.904851][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.904877][ T6902] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 73.904892][ T6902] [ 74.431614][ T6934] syzkaller0: entered promiscuous mode [ 74.431638][ T6934] syzkaller0: entered allmulticast mode [ 74.433238][ T6936] openvswitch: netlink: IP tunnel dst address not specified [ 74.593699][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 74.712825][ T6950] FAULT_INJECTION: forcing a failure. [ 74.712825][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 74.712850][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.0.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.712867][ T6950] Tainted: [L]=SOFTLOCKUP [ 74.712871][ T6950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.712878][ T6950] Call Trace: [ 74.712882][ T6950] [ 74.712887][ T6950] dump_stack_lvl+0x100/0x190 [ 74.712926][ T6950] should_fail_ex.cold+0x5/0xa [ 74.712980][ T6950] should_failslab+0xc2/0x120 [ 74.712997][ T6950] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.713011][ T6950] ? skb_clone+0x190/0x400 [ 74.713028][ T6950] skb_clone+0x190/0x400 [ 74.713042][ T6950] netlink_deliver_tap+0xaed/0xcc0 [ 74.713058][ T6950] netlink_unicast+0x6a5/0x850 [ 74.713073][ T6950] ? __pfx_netlink_unicast+0x10/0x10 [ 74.713085][ T6950] ? genl_rcv_msg+0x4be/0x800 [ 74.713103][ T6950] netlink_ack+0x655/0xb80 [ 74.713120][ T6950] netlink_rcv_skb+0x333/0x420 [ 74.713133][ T6950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.713151][ T6950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.713174][ T6950] genl_rcv+0x28/0x40 [ 74.713187][ T6950] netlink_unicast+0x585/0x850 [ 74.713202][ T6950] ? __pfx_netlink_unicast+0x10/0x10 [ 74.713219][ T6950] netlink_sendmsg+0x8b0/0xda0 [ 74.713236][ T6950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.713250][ T6950] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.713266][ T6950] ____sys_sendmsg+0xa4d/0xbe0 [ 74.713282][ T6950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.713296][ T6950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.713317][ T6950] ? lock_acquire+0x1d1/0x380 [ 74.713329][ T6950] ? get_pid_task+0x2a/0x250 [ 74.713346][ T6950] ___sys_sendmsg+0x190/0x1e0 [ 74.713365][ T6950] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.713382][ T6950] ? get_pid_task+0x106/0x250 [ 74.713404][ T6950] ? find_held_lock+0x2b/0x80 [ 74.713429][ T6950] __sys_sendmsg+0x160/0x210 [ 74.713446][ T6950] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.713468][ T6950] do_syscall_64+0x123/0x790 [ 74.713485][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.713498][ T6950] RIP: 0033:0x7f62d7f9e159 [ 74.713508][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.713519][ T6950] RSP: 002b:00007f62d8ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.713531][ T6950] RAX: ffffffffffffffda RBX: 00007f62d8225fa0 RCX: 00007f62d7f9e159 [ 74.713540][ T6950] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 74.713547][ T6950] RBP: 00007f62d8ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.713554][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.713561][ T6950] R13: 00007f62d8226038 R14: 00007f62d8225fa0 R15: 00007ffd9b9d2bd8 [ 74.713576][ T6950] [ 74.785265][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.786320][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.790715][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.794118][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.794522][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.796251][ T6952] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 74.797136][ T6952] trusted_key: encrypted_key: insufficient parameters specified [ 74.869598][ T6958] overlayfs: failed lookup in lower (newroot/103, name='bus', err=-40): overlapping layers [ 74.931912][ T6961] syzkaller0: entered promiscuous mode [ 74.931926][ T6961] syzkaller0: entered allmulticast mode [ 75.079456][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 75.107705][ T5729] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 75.107790][ T5729] overlayfs: failed lookup in lower (newroot/103, name='file0', err=-40): overlapping layers [ 75.187003][ T6976] Failed to get privilege flags for destination (handle=0x2:0x0) [ 75.480144][ T5821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.562531][ T6995] openvswitch: netlink: Duplicate or invalid key (type 0). [ 75.565658][ T35] usb 8-1: USB disconnect, device number 6 [ 75.584127][ T35] idmouse 8-1:1.0: disconnected [ 75.600715][ T5821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.630004][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.631783][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.632361][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.632739][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.632979][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.659272][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.380'. [ 75.696662][ T6998] FAULT_INJECTION: forcing a failure. [ 75.696662][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 75.696696][ T6998] CPU: 3 UID: 0 PID: 6998 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.696720][ T6998] Tainted: [L]=SOFTLOCKUP [ 75.696727][ T6998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.696738][ T6998] Call Trace: [ 75.696744][ T6998] [ 75.696752][ T6998] dump_stack_lvl+0x100/0x190 [ 75.696782][ T6998] should_fail_ex.cold+0x5/0xa [ 75.696807][ T6998] should_failslab+0xc2/0x120 [ 75.696831][ T6998] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.696850][ T6998] ? skb_clone+0x190/0x400 [ 75.696874][ T6998] skb_clone+0x190/0x400 [ 75.696896][ T6998] netlink_deliver_tap+0xaed/0xcc0 [ 75.696921][ T6998] netlink_unicast+0x6a5/0x850 [ 75.696941][ T6998] ? __pfx_netlink_unicast+0x10/0x10 [ 75.696958][ T6998] ? genl_rcv_msg+0x4be/0x800 [ 75.696984][ T6998] netlink_ack+0x655/0xb80 [ 75.697010][ T6998] netlink_rcv_skb+0x333/0x420 [ 75.697029][ T6998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.697052][ T6998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.697081][ T6998] ? netlink_deliver_tap+0x1ae/0xcc0 [ 75.697103][ T6998] genl_rcv+0x28/0x40 [ 75.697121][ T6998] netlink_unicast+0x585/0x850 [ 75.697143][ T6998] ? __pfx_netlink_unicast+0x10/0x10 [ 75.697161][ T6998] ? __pfx_sock_has_perm+0x10/0x10 [ 75.697194][ T6998] netlink_sendmsg+0x8b0/0xda0 [ 75.697215][ T6998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.697238][ T6998] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.697260][ T6998] ____sys_sendmsg+0xa4d/0xbe0 [ 75.697285][ T6998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.697306][ T6998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.697337][ T6998] ? lock_acquire+0x1d1/0x380 [ 75.697355][ T6998] ? get_pid_task+0x2a/0x250 [ 75.697380][ T6998] ___sys_sendmsg+0x190/0x1e0 [ 75.697408][ T6998] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.697442][ T6998] ? get_pid_task+0x106/0x250 [ 75.697475][ T6998] ? find_held_lock+0x2b/0x80 [ 75.697516][ T6998] __sys_sendmsg+0x160/0x210 [ 75.697539][ T6998] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.697574][ T6998] do_syscall_64+0x123/0x790 [ 75.697600][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.697619][ T6998] RIP: 0033:0x7f41f939e159 [ 75.697634][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.697650][ T6998] RSP: 002b:00007f41fa349028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.697669][ T6998] RAX: ffffffffffffffda RBX: 00007f41f9625fa0 RCX: 00007f41f939e159 [ 75.697680][ T6998] RDX: 0000000004004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 75.697692][ T6998] RBP: 00007f41fa349090 R08: 0000000000000000 R09: 0000000000000000 [ 75.697702][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.697713][ T6998] R13: 00007f41f9626038 R14: 00007f41f9625fa0 R15: 00007ffe9cadeac8 [ 75.697738][ T6998] [ 75.757819][ T5821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.862468][ T5821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.961033][ T7018] FAULT_INJECTION: forcing a failure. [ 75.961033][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 75.961054][ T7018] CPU: 0 UID: 0 PID: 7018 Comm: syz.3.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.961069][ T7018] Tainted: [L]=SOFTLOCKUP [ 75.961074][ T7018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.961080][ T7018] Call Trace: [ 75.961084][ T7018] [ 75.961088][ T7018] dump_stack_lvl+0x100/0x190 [ 75.961108][ T7018] should_fail_ex.cold+0x5/0xa [ 75.961124][ T7018] should_failslab+0xc2/0x120 [ 75.961139][ T7018] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.961156][ T7018] ? nfnetlink_rcv_batch+0x780/0x2880 [ 75.961175][ T7018] nfnetlink_rcv_batch+0x780/0x2880 [ 75.961197][ T7018] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 75.961215][ T7018] ? lock_acquire+0x1d1/0x380 [ 75.961228][ T7018] ? avc_has_perm_noaudit+0x56/0x3b0 [ 75.961249][ T7018] ? avc_has_perm_noaudit+0x145/0x3b0 [ 75.961295][ T7018] ? __nla_parse+0x40/0x60 [ 75.961315][ T7018] nfnetlink_rcv+0x3bd/0x440 [ 75.961331][ T7018] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 75.961350][ T7018] netlink_unicast+0x585/0x850 [ 75.961364][ T7018] ? __pfx_netlink_unicast+0x10/0x10 [ 75.961376][ T7018] ? __pfx_sock_has_perm+0x10/0x10 [ 75.961397][ T7018] netlink_sendmsg+0x8b0/0xda0 [ 75.961411][ T7018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.961425][ T7018] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.961449][ T7018] ____sys_sendmsg+0xa4d/0xbe0 [ 75.961468][ T7018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.961481][ T7018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.961500][ T7018] ? lock_acquire+0x1d1/0x380 [ 75.961511][ T7018] ? get_pid_task+0x2a/0x250 [ 75.961528][ T7018] ___sys_sendmsg+0x190/0x1e0 [ 75.961545][ T7018] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.961562][ T7018] ? get_pid_task+0x106/0x250 [ 75.961582][ T7018] ? find_held_lock+0x2b/0x80 [ 75.961606][ T7018] __sys_sendmsg+0x160/0x210 [ 75.961620][ T7018] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.961641][ T7018] do_syscall_64+0x123/0x790 [ 75.961658][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.961669][ T7018] RIP: 0033:0x7f994c39e159 [ 75.961678][ T7018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.961689][ T7018] RSP: 002b:00007f994d2b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.961700][ T7018] RAX: ffffffffffffffda RBX: 00007f994c625fa0 RCX: 00007f994c39e159 [ 75.961707][ T7018] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 75.961714][ T7018] RBP: 00007f994d2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 75.961720][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.961726][ T7018] R13: 00007f994c626038 R14: 00007f994c625fa0 R15: 00007ffd6f6c5578 [ 75.961740][ T7018] [ 76.109737][ T5821] bridge_slave_1: left promiscuous mode [ 76.109919][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.116067][ T5821] bridge_slave_0: left allmulticast mode [ 76.116091][ T5821] bridge_slave_0: left promiscuous mode [ 76.116258][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.305503][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.312340][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.313964][ T5821] bond0 (unregistering): Released all slaves [ 76.361630][ T7025] syzkaller0: entered promiscuous mode [ 76.361653][ T7025] syzkaller0: entered allmulticast mode [ 76.415557][ T1041] cfg80211: failed to load regulatory.db [ 76.560208][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 76.560226][ T43] audit: type=1400 audit(1789522385.616:698): avc: denied { read } for pid=7036 comm="syz.3.389" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.561240][ T43] audit: type=1400 audit(1789522385.616:699): avc: denied { open } for pid=7036 comm="syz.3.389" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.562776][ T43] audit: type=1400 audit(1789522385.616:700): avc: denied { write } for pid=7034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.685706][ T43] audit: type=1400 audit(1789522385.736:701): avc: denied { write } for pid=7041 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.743276][ T5821] hsr_slave_0: left promiscuous mode [ 76.744174][ T5821] hsr_slave_1: left promiscuous mode [ 76.744856][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.744873][ T5821] batadv0: mtu less than device minimum [ 76.745918][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.748312][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.749341][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.750376][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.751392][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.752408][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.753419][ T5821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.769368][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.799730][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.806815][ T7024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.807271][ T7024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.823820][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.824925][ T7024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.828355][ T5821] batman_adv: batadv0: Interface deactivated: dummy0 [ 76.828376][ T5821] batman_adv: batadv0: Removing interface: dummy0 [ 76.829689][ T7024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.829746][ T7024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.846282][ T7024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.848088][ T5821] veth1_macvtap: left promiscuous mode [ 76.848123][ T5821] veth0_macvtap: left promiscuous mode [ 76.848232][ T5821] veth1_vlan: left promiscuous mode [ 76.848294][ T5821] veth0_vlan: left promiscuous mode [ 76.867836][ T7024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.867872][ T7024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.873453][ T7024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.876332][ T7024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.881080][ T7024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.892847][ T7024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.093807][ T43] audit: type=1400 audit(1789522386.146:702): avc: denied { shutdown } for pid=7053 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.094774][ T43] audit: type=1400 audit(1789522386.146:703): avc: denied { getopt } for pid=7053 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.183206][ T7062] comedi comedi0: Minor 3 could not be opened [ 77.301494][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 77.325715][ T43] audit: type=1400 audit(1789522386.376:704): avc: denied { setopt } for pid=7067 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.336207][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 77.345285][ T7068] nfs4: Unknown parameter '/file0' [ 77.439223][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.448925][ T7069] warning: `syz.1.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.514467][ T43] audit: type=1400 audit(1789522386.566:705): avc: denied { append } for pid=7070 comm="syz.2.400" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.603982][ T43] audit: type=1400 audit(1789522386.656:706): avc: denied { write } for pid=7076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.701804][ T43] audit: type=1400 audit(1789522386.746:707): avc: denied { write } for pid=7085 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.841836][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.901795][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.901886][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.901942][ T6997] bridge_slave_0: entered allmulticast mode [ 77.902750][ T6997] bridge_slave_0: entered promiscuous mode [ 77.913959][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.914034][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.914125][ T6997] bridge_slave_1: entered allmulticast mode [ 77.915290][ T6997] bridge_slave_1: entered promiscuous mode [ 77.972257][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.978813][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.033929][ T6997] team0: Port device team_slave_0 added [ 78.039838][ T6997] team0: Port device team_slave_1 added [ 78.086840][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.086856][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.086877][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.088343][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.088355][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.093636][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.171189][ T6997] hsr_slave_0: entered promiscuous mode [ 78.175303][ T6997] hsr_slave_1: entered promiscuous mode [ 78.241717][ T7120] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 78.278742][ T7126] fuse: Bad value for 'fd' [ 78.357125][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.423384][ T6997] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.433672][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.434089][ T6997] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.446926][ T5735] Bluetooth: hci0: command 0x040f tx timeout [ 78.453989][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.454479][ T6997] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.459875][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.461669][ T6997] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.463391][ T7135] Bluetooth: MGMT ver 1.23 [ 78.475920][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.622936][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.629707][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.641910][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.648896][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.648939][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.657016][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.657098][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.846825][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.847905][ T7182] ------------[ cut here ]------------ [ 78.847913][ T7182] 1 [ 78.847916][ T7182] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#3: syz.2.429/7182 [ 78.855762][ T7182] Modules linked in: [ 78.857728][ T7182] CPU: 3 UID: 0 PID: 7182 Comm: syz.2.429 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 78.861444][ T7182] Tainted: [L]=SOFTLOCKUP [ 78.863465][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.867040][ T7182] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 78.869143][ T7182] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d a2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 95 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 78.875694][ T7182] RSP: 0018:ffffc90004a27718 EFLAGS: 00010246 [ 78.877929][ T7182] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.880432][ T7182] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 78.883238][ T7182] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000009 [ 78.886072][ T7182] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 78.888846][ T7182] R13: 1ffff92000944f3f R14: 0000000000000000 R15: 1ffff92000944efd [ 78.891549][ T7182] FS: 00007f41fa3496c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 78.894472][ T7182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.897161][ T7182] CR2: 00002000000001e4 CR3: 00000000363b3000 CR4: 0000000000352ef0 [ 78.899804][ T7182] Call Trace: [ 78.900913][ T7182] [ 78.901927][ T7182] ? lock_acquire+0x1d1/0x380 [ 78.903489][ T7182] ? is_bpf_text_address+0x25/0x1a0 [ 78.905186][ T7182] ? find_held_lock+0x2b/0x80 [ 78.906825][ T7182] ? is_bpf_text_address+0x8a/0x1a0 [ 78.908625][ T7182] ? is_bpf_text_address+0x8a/0x1a0 [ 78.910304][ T7182] ? bpf_ksym_find+0x128/0x1c0 [ 78.912339][ T7182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.914344][ T7182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 78.916335][ T7182] ? kernel_text_address+0x8d/0x100 [ 78.918206][ T7182] ? __kernel_text_address+0xd/0x30 [ 78.919901][ T7182] ? unwind_get_return_address+0x59/0xa0 [ 78.921716][ T7182] ? arch_stack_walk+0xa6/0xf0 [ 78.923280][ T7182] ? tomoyo_path_number_perm+0x46d/0x580 [ 78.925066][ T7182] ? __pfx_stack_trace_save+0x10/0x10 [ 78.927092][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.927172][ T5735] Bluetooth: hci1: command 0x041b tx timeout [ 78.931588][ T7182] ? stack_depot_save_flags+0x27/0x9f0 [ 78.933625][ T7182] ? __lock_acquire+0x5c0/0x1f40 [ 78.935380][ T7182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.937454][ T7182] ? policy_nodemask+0xed/0x4f0 [ 78.939243][ T7182] alloc_pages_mpol+0x201/0x550 [ 78.940972][ T7182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 78.942725][ T7182] ? lock_acquire+0x1d1/0x380 [ 78.944226][ T7182] ? avc_has_extended_perms+0x201/0x1080 [ 78.946078][ T7182] ___kmalloc_large_node+0xe8/0x130 [ 78.948157][ T7182] __kmalloc_large_node_noprof+0x1c/0x70 [ 78.950081][ T7182] __kmalloc_noprof+0x5a8/0x840 [ 78.951670][ T7182] ? drm_syncobj_array_find+0x34/0x3a0 [ 78.953503][ T7182] drm_syncobj_array_find+0x34/0x3a0 [ 78.955176][ T7182] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 78.957257][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 78.959461][ T7182] ? find_held_lock+0x2b/0x80 [ 78.960992][ T7182] ? drm_dev_exit+0x41/0x60 [ 78.962480][ T7182] ? drm_dev_exit+0x41/0x60 [ 78.963934][ T7182] drm_ioctl_kernel+0x1f3/0x3e0 [ 78.965715][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 78.968050][ T7182] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 78.969825][ T7182] drm_ioctl+0x5e6/0xc60 [ 78.971252][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 78.973406][ T7182] ? __pfx_drm_ioctl+0x10/0x10 [ 78.974915][ T7182] ? __fget_files+0x34/0x3d0 [ 78.976374][ T7182] ? selinux_file_ioctl+0x13b/0x290 [ 78.978099][ T7182] ? selinux_file_ioctl+0xb6/0x290 [ 78.979923][ T7182] ? __pfx_drm_ioctl+0x10/0x10 [ 78.981519][ T7182] __x64_sys_ioctl+0x18e/0x210 [ 78.983519][ T7182] do_syscall_64+0x123/0x790 [ 78.985541][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.988135][ T7182] RIP: 0033:0x7f41f939e159 [ 78.990067][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.997922][ T7182] RSP: 002b:00007f41fa349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.001115][ T7182] RAX: ffffffffffffffda RBX: 00007f41f9625fa0 RCX: 00007f41f939e159 [ 79.003666][ T7182] RDX: 00002000000001c0 RSI: 00000000c03064ca RDI: 0000000000000005 [ 79.006207][ T7182] RBP: 00007f41f943506b R08: 0000000000000000 R09: 0000000000000000 [ 79.009085][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.012992][ T7182] R13: 00007f41f9626038 R14: 00007f41f9625fa0 R15: 00007ffe9cadeac8 [ 79.016182][ T7182] [ 79.017504][ T7182] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.020386][ T7182] CPU: 3 UID: 0 PID: 7182 Comm: syz.2.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.024607][ T7182] Tainted: [L]=SOFTLOCKUP [ 79.026318][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.030295][ T7182] Call Trace: [ 79.031645][ T7182] [ 79.032831][ T7182] dump_stack_lvl+0x100/0x190 [ 79.034741][ T7182] vpanic+0x553/0x970 [ 79.036103][ T7182] ? __pfx_vpanic+0x10/0x10 [ 79.037549][ T7182] panic+0xd1/0xe0 [ 79.038751][ T7182] ? __pfx_panic+0x10/0x10 [ 79.040166][ T7182] check_panic_on_warn.cold+0x19/0x34 [ 79.041918][ T7182] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 79.043885][ T7182] __warn.cold+0x191/0x318 [ 79.045264][ T7182] __report_bug+0x30f/0x440 [ 79.046745][ T7182] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 79.048663][ T7182] ? __pfx___report_bug+0x10/0x10 [ 79.050251][ T7182] ? __lock_acquire+0x5c0/0x1f40 [ 79.051854][ T7182] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 79.053797][ T7182] report_bug+0xb3/0x220 [ 79.055158][ T7182] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 79.057074][ T7182] handle_bug+0x16a/0x2a0 [ 79.058447][ T7182] exc_invalid_op+0x17/0x50 [ 79.059899][ T7182] asm_exc_invalid_op+0x1a/0x20 [ 79.061439][ T7182] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 79.063602][ T7182] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d a2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 95 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 79.069641][ T7182] RSP: 0018:ffffc90004a27718 EFLAGS: 00010246 [ 79.071589][ T7182] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 79.074084][ T7182] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 79.076604][ T7182] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000009 [ 79.079146][ T7182] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 79.081627][ T7182] R13: 1ffff92000944f3f R14: 0000000000000000 R15: 1ffff92000944efd [ 79.084150][ T7182] ? lock_acquire+0x1d1/0x380 [ 79.085637][ T7182] ? is_bpf_text_address+0x25/0x1a0 [ 79.087315][ T7182] ? find_held_lock+0x2b/0x80 [ 79.088798][ T7182] ? is_bpf_text_address+0x8a/0x1a0 [ 79.090435][ T7182] ? is_bpf_text_address+0x8a/0x1a0 [ 79.092086][ T7182] ? bpf_ksym_find+0x128/0x1c0 [ 79.093658][ T7182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.095623][ T7182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 79.097673][ T7182] ? kernel_text_address+0x8d/0x100 [ 79.099385][ T7182] ? __kernel_text_address+0xd/0x30 [ 79.101099][ T7182] ? unwind_get_return_address+0x59/0xa0 [ 79.102975][ T7182] ? arch_stack_walk+0xa6/0xf0 [ 79.104558][ T7182] ? tomoyo_path_number_perm+0x46d/0x580 [ 79.106389][ T7182] ? __pfx_stack_trace_save+0x10/0x10 [ 79.108086][ T7182] ? stack_depot_save_flags+0x27/0x9f0 [ 79.109822][ T7182] ? __lock_acquire+0x5c0/0x1f40 [ 79.111439][ T7182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.113369][ T7182] ? policy_nodemask+0xed/0x4f0 [ 79.114925][ T7182] alloc_pages_mpol+0x201/0x550 [ 79.116483][ T7182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.118217][ T7182] ? lock_acquire+0x1d1/0x380 [ 79.119714][ T7182] ? avc_has_extended_perms+0x201/0x1080 [ 79.121505][ T7182] ___kmalloc_large_node+0xe8/0x130 [ 79.123210][ T7182] __kmalloc_large_node_noprof+0x1c/0x70 [ 79.124975][ T7182] __kmalloc_noprof+0x5a8/0x840 [ 79.126516][ T7182] ? drm_syncobj_array_find+0x34/0x3a0 [ 79.128234][ T7182] drm_syncobj_array_find+0x34/0x3a0 [ 79.129897][ T7182] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 79.131851][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 79.133952][ T7182] ? find_held_lock+0x2b/0x80 [ 79.135441][ T7182] ? drm_dev_exit+0x41/0x60 [ 79.136889][ T7182] ? drm_dev_exit+0x41/0x60 [ 79.138364][ T7182] drm_ioctl_kernel+0x1f3/0x3e0 [ 79.139913][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 79.142025][ T7182] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 79.143745][ T7182] drm_ioctl+0x5e6/0xc60 [ 79.145086][ T7182] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 79.147112][ T7182] ? __pfx_drm_ioctl+0x10/0x10 [ 79.148621][ T7182] ? __fget_files+0x34/0x3d0 [ 79.150092][ T7182] ? selinux_file_ioctl+0x13b/0x290 [ 79.151750][ T7182] ? selinux_file_ioctl+0xb6/0x290 [ 79.153395][ T7182] ? __pfx_drm_ioctl+0x10/0x10 [ 79.154917][ T7182] __x64_sys_ioctl+0x18e/0x210 [ 79.156439][ T7182] do_syscall_64+0x123/0x790 [ 79.157909][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.159766][ T7182] RIP: 0033:0x7f41f939e159 [ 79.161190][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.167193][ T7182] RSP: 002b:00007f41fa349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.169803][ T7182] RAX: ffffffffffffffda RBX: 00007f41f9625fa0 RCX: 00007f41f939e159 [ 79.172285][ T7182] RDX: 00002000000001c0 RSI: 00000000c03064ca RDI: 0000000000000005 [ 79.174802][ T7182] RBP: 00007f41f943506b R08: 0000000000000000 R09: 0000000000000000 [ 79.177355][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.179830][ T7182] R13: 00007f41f9626038 R14: 00007f41f9625fa0 R15: 00007ffe9cadeac8 [ 79.182346][ T7182] [ 79.183981][ T7182] Kernel Offset: disabled [ 79.185338][ T7182] Rebooting in 86400 seconds..