last executing test programs: 9.743979661s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe800080ff00000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100"], 0x88}}, 0x0) 9.620063379s ago: executing program 0 (id=41): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) 9.567896396s ago: executing program 0 (id=42): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tes', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) 9.500269703s ago: executing program 0 (id=43): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 9.447880042s ago: executing program 0 (id=46): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) mknod(0x0, 0x20, 0x10001) syz_open_dev$ttys(0xc, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1ff) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x43e202, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x10, "3f7bba999681fe7d4ec3032aeac19261"}}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0xfffffffffffffe42, 0x223, 0x2, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0x3, 0x8, 0x3, 0x8000000000006, 0xffffffff, 0xffffffff00000001, 0x7}]}, 0x78) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) syz_clone(0x2000000, &(0x7f0000000240)="d02e75066e41313bb233259cb6a5aa95838027d94b024f2144a4c0fda0963087e284f683b16cc9dc8b217d82ced8410ea9100b54f2146b70048519e1f25f9d550633e92ec706d82aa2050c88c470378f135f730e090b9a30161a8e3812080a61ab306818094cc491a2fc45ab537a78798d2492f335f97d32dc760adf7d64b9fed91477ceb2416f4e1f5eefba8e38af8db3f5d77f5bb0b35c8845bbdd06754b777dd06a1d45f14389e8b5a9", 0xab, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f00000004c0)="291d4a8411f2f5cac9480e82e75d2661d33ce8e3edba4c90ff546c297298ecbfd7de30e5528c42799b6777eb6d4d6ec88311790399b6c6f12ecbb3861631fc556573ea145f90665c9b478a6bd6485e28ddec516decd15b8fa91b7bbe97186ed63e3df6a77ee79ada73d609f4304d54492e982b8e08d21f1568cacff52f2fe9a426fc3e60a2d71b443c14bf62a1ea4a1f87aa1d9af503fa3a259dce6fee529bf311ab1ef681f789c8a28f08b389ed30002b12d4a196314897391d5dc691d6cf39bf1eb85627cda32e9e0db5e5930e61cec7c0ab22") lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0), &(0x7f0000000380)={'U+', 0x81}, 0x16, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x280, 0x4) 9.376671166s ago: executing program 0 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="eb9cdf9de5010bf1fb53195188cdb86b776ef12398ae09b9da691cf738739f9433d29e416844440cea30f0", 0x2b) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x200080c1, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0x4f, "8faa3b6a848b6aa5174b37564282d5f48838aacb8ef7fc83532a7ca952d8f710faee8e4c2328d430dc5f02228aab90b0d3f24c94951eedc53955bd1ad6a728331411153dbcba6d5dcbe653a447992f"}}, 0x55) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) recvfrom(r0, &(0x7f0000000480)=""/230, 0xe6, 0x1, &(0x7f00000003c0)=@nfc={0x27, r3, 0x1, 0x3}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 3.259925691s ago: executing program 2 (id=169): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7fffffff]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x400000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x3}}, 0xe8) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 3.150271911s ago: executing program 2 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000100000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100"], 0x88}}, 0x0) 3.150127079s ago: executing program 2 (id=171): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x202, 0x104) read$proc_mixer(r2, &(0x7f0000000540)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r3, 0x9, "866aa0", "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"}}, 0x110) r4 = signalfd(r0, &(0x7f0000000100)={[0x378]}, 0x8) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f0000000240)={@my=0x1, 0x9}) 1.178183712s ago: executing program 1 (id=185): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (fail_nth: 18) 1.110067252s ago: executing program 1 (id=186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tes', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) 1.059669147s ago: executing program 1 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) (async) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) 970.395595ms ago: executing program 2 (id=188): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008009700b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 970.198487ms ago: executing program 2 (id=189): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 908.597087ms ago: executing program 1 (id=190): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x1000000, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=0x0}}) 801.809037ms ago: executing program 1 (id=191): mkdir(0x0, 0x0) chdir(0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x1, &(0x7f00000003c0)={0x0, 0x245a, 0x400, 0x1000001, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x1, &(0x7f00000003c0)={0x0, 0x245a, 0x400, 0x1000001, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0, 0xffffffffffffffe8}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000140)=0x1000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="01032cbd7000fedbdf254aa8ed5b949e1ced9c49e47b09f503c29ad681cbd18ad9f9fbe22d4ad59fa726b14c6e87ab60a957ecef2a514762000038679896dbe5a69dc318d193723cf3c1a84c370d3db391a22b5a504cee5429dba18092428d075a4f74fcca736c372150e080", @ANYRESHEX=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) (async) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="01032cbd7000fedbdf254aa8ed5b949e1ced9c49e47b09f503c29ad681cbd18ad9f9fbe22d4ad59fa726b14c6e87ab60a957ecef2a514762000038679896dbe5a69dc318d193723cf3c1a84c370d3db391a22b5a504cee5429dba18092428d075a4f74fcca736c372150e080", @ANYRESHEX=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) write$UHID_CREATE2(r2, &(0x7f0000000740)=ANY=[], 0x16d) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080), &(0x7f0000000080)=ANY=[@ANYBLOB="0000b794316e77632f6681500f7fedb9c94698dde1a52b054aab5498109225dbc49a275042e9a3e675f89fb1b9b6926953700db05662dc0ec8c86699124cf6a6478ca140373de7918e0d5bf797157ac671b56781f29a94a5c752117ce0c0c392c063cab975f52217b734404336e40000000000"], 0x2, 0x1) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x78) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40040, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000033d00)={0x6000004, 0x0, 0x0, 0x444cfd, 0x1}) close(r5) (async) close(r5) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 340.23205ms ago: executing program 3 (id=199): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (fail_nth: 19) 340.055087ms ago: executing program 3 (id=200): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063", @ANYBLOB="c47ca90b8eccca73f6fbfc7554caff7dd0294a246e00d391b33d3db8fa5c3bb4bbbb47b24970522aac3f3abc9fd79c70a692761b7164176f11bc5e8405a1c2057e3710bc4d81644f2d7a57b63b7e3b30dd61a9346a3949ceda72e4818342dfe8c5d5b75eea936630b8605c2ed491d5c9e7580403a9c94136e55abcbcb95f9abd68983316a89f23d6baf91db108f2e3bd8b1a9901372e44ef9725dd7bf2f55471ada7dc08ed077940f6051a145bfb89c3fffc843b20a28f78c7defb72fb0626ef687dd432a4752ebc8a3ab05355950b46259eac4927b28d2c6b2a"], 0x0, 0x52}, 0x28) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x6, 0x89, 0x0, @dev, @local}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 229.271581ms ago: executing program 3 (id=201): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x3, {0x0, 0xea60}, {0x2, 0xc, 0xd, 0x5, 0x4, 0x9, "a82658d9"}, 0x8, 0x1, {0x0}, 0x5}) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x4a000600) 150.167181ms ago: executing program 3 (id=202): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008009c00b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 150.024967ms ago: executing program 3 (id=203): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=0x0}}) (fail_nth: 8) 67.408545ms ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xe504, 0x0, 0x3, 0xa0, 0x7, 0x5}, 0x30, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x800, r0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 67.134472ms ago: executing program 1 (id=205): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tes', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) 0s ago: executing program 2 (id=206): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000500000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62537' (ED25519) to the list of known hosts. [ 40.236670][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.239870][ T43] audit: type=1400 audit(1788684729.656:138): avc: denied { name_bind } for pid=5716 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.275964][ T43] audit: type=1400 audit(1788684729.696:139): avc: denied { execute } for pid=5717 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.283125][ T43] audit: type=1400 audit(1788684729.706:140): avc: denied { execute_no_trans } for pid=5717 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.749095][ T43] audit: type=1400 audit(1788684732.166:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.759881][ T43] audit: type=1400 audit(1788684732.176:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.763880][ T5717] cgroup: Unknown subsys name 'net' [ 42.765665][ T43] audit: type=1400 audit(1788684732.186:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.926047][ T5717] cgroup: Unknown subsys name 'cpuset' [ 42.932547][ T5717] cgroup: Unknown subsys name 'rlimit' [ 43.086595][ T43] audit: type=1400 audit(1788684732.506:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.087322][ T43] audit: type=1400 audit(1788684732.506:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.087652][ T43] audit: type=1400 audit(1788684732.506:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.088987][ T43] audit: type=1400 audit(1788684732.506:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.146740][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.853718][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.582039][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 47.582121][ T43] audit: type=1400 audit(1788684737.006:156): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.810183][ T43] audit: type=1400 audit(1788684737.226:157): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.810284][ T43] audit: type=1400 audit(1788684737.226:158): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.810334][ T43] audit: type=1400 audit(1788684737.226:159): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.826335][ T43] audit: type=1400 audit(1788684737.246:160): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[7284]" dev="sockfs" ino=7284 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.842804][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.844348][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.845680][ T5729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.846433][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.848274][ T5729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.848719][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.852261][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.852691][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.852916][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.855281][ T5729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.858534][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.870950][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.872360][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.875227][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.879626][ T43] audit: type=1400 audit(1788684737.296:161): avc: denied { read } for pid=5727 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.880642][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.881245][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.882784][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.883082][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.883683][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.884264][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.889345][ T43] audit: type=1400 audit(1788684737.306:162): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.893568][ T43] audit: type=1400 audit(1788684737.306:163): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.915421][ T43] audit: type=1400 audit(1788684737.336:164): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.915470][ T43] audit: type=1400 audit(1788684737.336:165): avc: denied { module_request } for pid=5740 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.630168][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630239][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.630364][ T5740] bridge_slave_0: entered allmulticast mode [ 48.631212][ T5740] bridge_slave_0: entered promiscuous mode [ 48.634465][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.634528][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.634676][ T5740] bridge_slave_1: entered allmulticast mode [ 48.635438][ T5740] bridge_slave_1: entered promiscuous mode [ 48.636378][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.636439][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.636599][ T5734] bridge_slave_0: entered allmulticast mode [ 48.637291][ T5734] bridge_slave_0: entered promiscuous mode [ 48.645674][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.645755][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.646064][ T5734] bridge_slave_1: entered allmulticast mode [ 48.646927][ T5734] bridge_slave_1: entered promiscuous mode [ 48.670003][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.670162][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.670881][ T5727] bridge_slave_0: entered allmulticast mode [ 48.671713][ T5727] bridge_slave_0: entered promiscuous mode [ 48.702744][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.702848][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.702910][ T5727] bridge_slave_1: entered allmulticast mode [ 48.703758][ T5727] bridge_slave_1: entered promiscuous mode [ 48.727875][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.731005][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.750396][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.752296][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.783238][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.811850][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.812042][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.812128][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.812227][ T5728] bridge_slave_0: entered allmulticast mode [ 48.813054][ T5728] bridge_slave_0: entered promiscuous mode [ 48.825856][ T5734] team0: Port device team_slave_0 added [ 48.827465][ T5740] team0: Port device team_slave_0 added [ 48.851503][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.851626][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.851699][ T5728] bridge_slave_1: entered allmulticast mode [ 48.852879][ T5728] bridge_slave_1: entered promiscuous mode [ 48.856846][ T5734] team0: Port device team_slave_1 added [ 48.858489][ T5740] team0: Port device team_slave_1 added [ 48.873529][ T5727] team0: Port device team_slave_0 added [ 48.909543][ T5727] team0: Port device team_slave_1 added [ 48.922482][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.922549][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.922612][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.949787][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.949866][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.949920][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.951702][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.952220][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.952232][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.952244][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.962202][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.962215][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.962229][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.964370][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.965342][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.965352][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.965366][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.965941][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.965949][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.965961][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.020671][ T5728] team0: Port device team_slave_0 added [ 49.025448][ T5740] hsr_slave_0: entered promiscuous mode [ 49.026004][ T5740] hsr_slave_1: entered promiscuous mode [ 49.047926][ T5728] team0: Port device team_slave_1 added [ 49.065019][ T5727] hsr_slave_0: entered promiscuous mode [ 49.065850][ T5727] hsr_slave_1: entered promiscuous mode [ 49.066400][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 49.066485][ T5727] Cannot create hsr debugfs directory [ 49.087154][ T5734] hsr_slave_0: entered promiscuous mode [ 49.087936][ T5734] hsr_slave_1: entered promiscuous mode [ 49.088498][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.088519][ T5734] Cannot create hsr debugfs directory [ 49.140483][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.140891][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.140914][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.149399][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.149409][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.149422][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.321794][ T5728] hsr_slave_0: entered promiscuous mode [ 49.322522][ T5728] hsr_slave_1: entered promiscuous mode [ 49.322916][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.322930][ T5728] Cannot create hsr debugfs directory [ 49.549364][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.558532][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.566412][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.572726][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.573865][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.578794][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.595120][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.601992][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.643389][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.646184][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.646608][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.649912][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.657795][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.662302][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.665740][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.671181][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.747849][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.753821][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.757252][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.762157][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.766325][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.771240][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.776534][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.780676][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.830464][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.851381][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.856618][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.857830][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.862144][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.862894][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.866438][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.872085][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.876960][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.892067][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.914660][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.914780][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.940557][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.944377][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.944468][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.973886][ T5742] Bluetooth: hci1: command tx timeout [ 49.974058][ T5733] Bluetooth: hci0: command tx timeout [ 49.974170][ T5742] Bluetooth: hci3: command tx timeout [ 49.975299][ T5735] Bluetooth: hci2: command tx timeout [ 49.985992][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.999187][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.999312][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.008953][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.009031][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.038475][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.045680][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.083330][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.090454][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.090559][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.104832][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.116433][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.116548][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.124849][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.124990][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.138041][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.138175][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.404209][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.438275][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.460510][ T5727] veth0_vlan: entered promiscuous mode [ 50.476980][ T5727] veth1_vlan: entered promiscuous mode [ 50.501839][ T5740] veth0_vlan: entered promiscuous mode [ 50.508477][ T5740] veth1_vlan: entered promiscuous mode [ 50.516469][ T5727] veth0_macvtap: entered promiscuous mode [ 50.524270][ T5727] veth1_macvtap: entered promiscuous mode [ 50.545705][ T5740] veth0_macvtap: entered promiscuous mode [ 50.552613][ T5740] veth1_macvtap: entered promiscuous mode [ 50.556239][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.573111][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.592491][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.602033][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.610669][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.614667][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.651603][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.652057][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.652209][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.652339][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.671261][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.744347][ T5734] veth0_vlan: entered promiscuous mode [ 50.747705][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.747717][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.777785][ T5734] veth1_vlan: entered promiscuous mode [ 50.787532][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.787588][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.789712][ T5728] veth0_vlan: entered promiscuous mode [ 50.810913][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.831490][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.831574][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.836475][ T5728] veth1_vlan: entered promiscuous mode [ 50.847800][ T5734] veth0_macvtap: entered promiscuous mode [ 50.857517][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.857577][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.858102][ T5734] veth1_macvtap: entered promiscuous mode [ 50.871284][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.871339][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.886564][ T5728] veth0_macvtap: entered promiscuous mode [ 50.888857][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.904672][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.904981][ T5728] veth1_macvtap: entered promiscuous mode [ 50.916170][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.916288][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.916314][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.916331][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.921608][ T5740] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.931954][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.934794][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.030916][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.031988][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.032006][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.032127][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.037198][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.075314][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.075365][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.104069][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.104139][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.132889][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.132940][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.161266][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.341115][ T5883] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.342599][ T5883] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 51.412994][ T5898] syzkaller0: entered promiscuous mode [ 51.413048][ T5898] syzkaller0: entered allmulticast mode [ 51.414372][ T5898] 0: reclassify loop, rule prio 0, protocol 700 [ 51.414566][ T5898] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8'. [ 51.507838][ T5902] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 51.507990][ T5902] SELinux: failed to load policy [ 51.919533][ T5928] FAULT_INJECTION: forcing a failure. [ 51.919533][ T5928] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.919618][ T5928] CPU: 2 UID: 0 PID: 5928 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 51.919656][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.919684][ T5928] Call Trace: [ 51.919692][ T5928] [ 51.919699][ T5928] dump_stack_lvl+0x100/0x190 [ 51.919731][ T5928] should_fail_ex.cold+0x5/0xa [ 51.919805][ T5928] ? prepare_alloc_pages+0x16d/0x5b0 [ 51.919837][ T5928] should_fail_alloc_page+0xeb/0x140 [ 51.919862][ T5928] prepare_alloc_pages+0x1f0/0x5b0 [ 51.919888][ T5928] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 51.919918][ T5928] ? __pfx_get_page_from_freelist+0x10/0x10 [ 51.919946][ T5928] ? prepare_alloc_pages+0x1f0/0x5b0 [ 51.919967][ T5928] ? is_bpf_text_address+0x94/0x1a0 [ 51.919993][ T5928] ? rcu_is_watching+0x13/0xc0 [ 51.920017][ T5928] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 51.920048][ T5928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.920082][ T5928] ? stack_trace_save+0x8e/0xc0 [ 51.920109][ T5928] ? __pfx_stack_trace_save+0x10/0x10 [ 51.920147][ T5928] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 51.920176][ T5928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.920202][ T5928] ? is_bpf_text_address+0x94/0x1a0 [ 51.920231][ T5928] ? kasan_save_track+0x14/0x30 [ 51.920250][ T5928] ? __kasan_slab_alloc+0x89/0x90 [ 51.920270][ T5928] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 51.920288][ T5928] ? alloc_vmap_area+0x640/0x2bb0 [ 51.920306][ T5928] ? __get_vm_area_node+0x1ed/0x350 [ 51.920326][ T5928] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 51.920347][ T5928] ? __vmalloc_node_noprof+0xad/0xf0 [ 51.920368][ T5928] ? __vmalloc_noprof+0xa3/0x120 [ 51.920389][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.920409][ T5928] ? bpf_prog_alloc+0x3b/0x200 [ 51.920429][ T5928] ? bpf_prog_load+0x49e/0x2a80 [ 51.920451][ T5928] ? __sys_bpf+0x1f46/0x4a30 [ 51.920466][ T5928] ? __x64_sys_bpf+0xce/0x140 [ 51.920482][ T5928] ? do_syscall_64+0x123/0x790 [ 51.920504][ T5928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.920530][ T5928] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 51.920564][ T5928] ? policy_nodemask+0xed/0x4f0 [ 51.920591][ T5928] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 51.920634][ T5928] __kasan_populate_vmalloc+0xf0/0x210 [ 51.920659][ T5928] alloc_vmap_area+0x95d/0x2bb0 [ 51.920687][ T5928] ? kasan_save_track+0x14/0x30 [ 51.920706][ T5928] ? __kasan_kmalloc+0xaa/0xb0 [ 51.920725][ T5928] ? __pfx_alloc_vmap_area+0x10/0x10 [ 51.920747][ T5928] ? __get_vm_area_node+0x124/0x350 [ 51.920771][ T5928] __get_vm_area_node+0x1ed/0x350 [ 51.920798][ T5928] __vmalloc_node_range_noprof+0x268/0x1420 [ 51.920821][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.920846][ T5928] ? up_write+0x2dc/0x5b0 [ 51.920872][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.920894][ T5928] ? lock_acquire+0x1d1/0x380 [ 51.920915][ T5928] ? find_held_lock+0x2b/0x80 [ 51.920940][ T5928] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.920962][ T5928] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 51.920990][ T5928] ? avc_has_perm_noaudit+0x145/0x3b0 [ 51.921014][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.921035][ T5928] __vmalloc_node_noprof+0xad/0xf0 [ 51.921057][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.921082][ T5928] __vmalloc_noprof+0xa3/0x120 [ 51.921104][ T5928] ? __pfx___vmalloc_noprof+0x10/0x10 [ 51.921130][ T5928] ? rcu_is_watching+0x13/0xc0 [ 51.921164][ T5928] ? cap_capable+0x107/0x430 [ 51.921192][ T5928] bpf_prog_alloc_no_stats+0x59/0x690 [ 51.921213][ T5928] ? security_capable+0x80/0x260 [ 51.921240][ T5928] bpf_prog_alloc+0x3b/0x200 [ 51.921260][ T5928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.921282][ T5928] bpf_prog_load+0x49e/0x2a80 [ 51.921311][ T5928] ? __pfx_bpf_prog_load+0x10/0x10 [ 51.921357][ T5928] __sys_bpf+0x1f46/0x4a30 [ 51.921380][ T5928] ? __pfx___sys_bpf+0x10/0x10 [ 51.921397][ T5928] ? find_held_lock+0x2b/0x80 [ 51.921421][ T5928] ? get_pid_task+0xfc/0x250 [ 51.921444][ T5928] ? get_pid_task+0xfc/0x250 [ 51.921475][ T5928] ? find_held_lock+0x2b/0x80 [ 51.921505][ T5928] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.921530][ T5928] ? find_held_lock+0x2b/0x80 [ 51.921555][ T5928] ? ksys_write+0x190/0x250 [ 51.921573][ T5928] ? ksys_write+0x190/0x250 [ 51.921591][ T5928] ? lock_acquire+0x1d1/0x380 [ 51.921628][ T5928] ? fput+0x7c/0x100 [ 51.921652][ T5928] ? ksys_write+0x1ac/0x250 [ 51.921674][ T5928] ? __x64_sys_bpf+0xce/0x140 [ 51.921691][ T5928] __x64_sys_bpf+0xce/0x140 [ 51.921710][ T5928] ? do_syscall_64+0xae/0x790 [ 51.921735][ T5928] do_syscall_64+0x123/0x790 [ 51.921760][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.921780][ T5928] RIP: 0033:0x7fc95ad9e159 [ 51.921798][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.921816][ T5928] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.921837][ T5928] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 51.921850][ T5928] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 51.921862][ T5928] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 51.921874][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.921885][ T5928] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 51.921912][ T5928] [ 51.924459][ T5928] syz.2.14: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 51.924572][ T5928] CPU: 2 UID: 0 PID: 5928 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 51.924592][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.924603][ T5928] Call Trace: [ 51.924609][ T5928] [ 51.924617][ T5928] dump_stack_lvl+0x100/0x190 [ 51.924646][ T5928] warn_alloc.cold+0x9e/0xb2 [ 51.924667][ T5928] ? __pfx_warn_alloc+0x10/0x10 [ 51.924693][ T5928] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.924717][ T5928] ? __get_vm_area_node+0x2f0/0x350 [ 51.924744][ T5928] ? __get_vm_area_node+0x22b/0x350 [ 51.924770][ T5928] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 51.924797][ T5928] ? up_write+0x2dc/0x5b0 [ 51.924823][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.924846][ T5928] ? lock_acquire+0x1d1/0x380 [ 51.924866][ T5928] ? find_held_lock+0x2b/0x80 [ 51.924911][ T5928] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.924935][ T5928] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 51.924963][ T5928] ? avc_has_perm_noaudit+0x145/0x3b0 [ 51.924986][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.925008][ T5928] __vmalloc_node_noprof+0xad/0xf0 [ 51.925030][ T5928] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 51.925055][ T5928] __vmalloc_noprof+0xa3/0x120 [ 51.925077][ T5928] ? __pfx___vmalloc_noprof+0x10/0x10 [ 51.925102][ T5928] ? rcu_is_watching+0x13/0xc0 [ 51.925126][ T5928] ? cap_capable+0x107/0x430 [ 51.925158][ T5928] bpf_prog_alloc_no_stats+0x59/0x690 [ 51.925179][ T5928] ? security_capable+0x80/0x260 [ 51.925206][ T5928] bpf_prog_alloc+0x3b/0x200 [ 51.925226][ T5928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.925249][ T5928] bpf_prog_load+0x49e/0x2a80 [ 51.925277][ T5928] ? __pfx_bpf_prog_load+0x10/0x10 [ 51.925322][ T5928] __sys_bpf+0x1f46/0x4a30 [ 51.925346][ T5928] ? __pfx___sys_bpf+0x10/0x10 [ 51.925363][ T5928] ? find_held_lock+0x2b/0x80 [ 51.925386][ T5928] ? get_pid_task+0xfc/0x250 [ 51.925409][ T5928] ? get_pid_task+0xfc/0x250 [ 51.925441][ T5928] ? find_held_lock+0x2b/0x80 [ 51.925470][ T5928] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.925494][ T5928] ? find_held_lock+0x2b/0x80 [ 51.925517][ T5928] ? ksys_write+0x190/0x250 [ 51.925533][ T5928] ? ksys_write+0x190/0x250 [ 51.925549][ T5928] ? lock_acquire+0x1d1/0x380 [ 51.925583][ T5928] ? fput+0x7c/0x100 [ 51.925604][ T5928] ? ksys_write+0x1ac/0x250 [ 51.925624][ T5928] ? __x64_sys_bpf+0xce/0x140 [ 51.925639][ T5928] __x64_sys_bpf+0xce/0x140 [ 51.925657][ T5928] ? do_syscall_64+0xae/0x790 [ 51.925679][ T5928] do_syscall_64+0x123/0x790 [ 51.925703][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.925721][ T5928] RIP: 0033:0x7fc95ad9e159 [ 51.925737][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.925753][ T5928] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.925770][ T5928] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 51.925781][ T5928] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 51.925792][ T5928] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 51.925803][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.925814][ T5928] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 51.925838][ T5928] [ 51.925877][ T5928] Mem-Info: [ 51.925887][ T5928] active_anon:18234 inactive_anon:0 isolated_anon:0 [ 51.925887][ T5928] active_file:0 inactive_file:61191 isolated_file:0 [ 51.925887][ T5928] unevictable:1000 dirty:1935 writeback:0 [ 51.925887][ T5928] slab_reclaimable:11559 slab_unreclaimable:63976 [ 51.925887][ T5928] mapped:34431 shmem:12493 pagetables:1198 [ 51.925887][ T5928] sec_pagetables:293 bounce:0 [ 51.925887][ T5928] kernel_misc_reclaimable:0 [ 51.925887][ T5928] free:450041 free_pcp:12616 free_cma:0 [ 51.925927][ T5928] Node 0 active_anon:72936kB inactive_anon:0kB active_file:0kB inactive_file:244560kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:137724kB dirty:7700kB writeback:0kB shmem:47972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:4616kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.925970][ T5928] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.926011][ T5928] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.926056][ T5928] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 51.926086][ T5928] Node 0 DMA32 free:134968kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72936kB inactive_anon:0kB active_file:0kB inactive_file:244560kB unevictable:2000kB writepending:7700kB zspages:0kB present:2080628kB managed:1252968kB mlocked:0kB bounce:0kB free_pcp:48848kB local_pcp:13016kB free_cma:0kB [ 51.926238][ T5928] lowmem_reserve[]: 0 0 0 0 0 [ 51.926273][ T5928] Node 1 Normal free:1649836kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:40kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:1572kB local_pcp:1140kB free_cma:0kB [ 51.926321][ T5928] lowmem_reserve[]: 0 0 0 0 0 [ 51.926351][ T5928] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.926529][ T5928] Node 0 DMA32: 0*4kB 1*8kB (M) 2*16kB (ME) 0*32kB 0*64kB 2*128kB (ME) 2*256kB (U) 4*512kB (UME) 1*1024kB (U) 0*2048kB 32*4096kB (M) = 134952kB [ 51.926652][ T5928] Node 1 Normal: 3*4kB (UM) 2*8kB (U) 5*16kB (UM) 8*32kB (UM) 3*64kB (UM) 3*128kB (M) 1*256kB (U) 4*512kB (UM) 0*1024kB 2*2048kB (UM) 401*4096kB (M) = 1649836kB [ 51.926784][ T5928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.926798][ T5928] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.926812][ T5928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.926825][ T5928] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.926839][ T5928] 73742 total pagecache pages [ 51.926846][ T5928] 0 pages in swap cache [ 51.926852][ T5928] Free swap = 124996kB [ 51.926859][ T5928] Total swap = 124996kB [ 51.926866][ T5928] 1048443 pages RAM [ 51.926872][ T5928] 0 pages HighMem/MovableOnly [ 51.926878][ T5928] 285891 pages reserved [ 51.926884][ T5928] 0 pages cma reserved [ 52.051538][ T5735] Bluetooth: hci1: command tx timeout [ 52.061005][ T5733] Bluetooth: hci3: command tx timeout [ 52.061029][ T5733] Bluetooth: hci0: command tx timeout [ 52.061094][ T5735] Bluetooth: hci2: command tx timeout [ 52.297779][ T5932] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16'. [ 52.297797][ T5932] nbd: must specify at least one socket [ 52.298422][ T5932] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16'. [ 52.298435][ T5932] nbd: must specify at least one socket [ 52.298646][ T5933] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16'. [ 52.298658][ T5933] nbd: must specify at least one socket [ 52.725687][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 52.725765][ T43] audit: type=1400 audit(1788684742.146:234): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.783297][ T43] audit: type=1400 audit(1788684742.206:235): avc: denied { read } for pid=5953 comm="syz.1.22" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.784107][ T43] audit: type=1400 audit(1788684742.206:236): avc: denied { open } for pid=5953 comm="syz.1.22" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.784375][ T43] audit: type=1400 audit(1788684742.206:237): avc: denied { ioctl } for pid=5953 comm="syz.1.22" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.828783][ T43] audit: type=1400 audit(1788684742.246:238): avc: denied { sys_module } for pid=5953 comm="syz.1.22" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.864991][ T43] audit: type=1400 audit(1788684742.286:239): avc: denied { read } for pid=5961 comm="syz.3.25" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.865070][ T43] audit: type=1400 audit(1788684742.286:240): avc: denied { open } for pid=5961 comm="syz.3.25" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.910567][ T5966] FAULT_INJECTION: forcing a failure. [ 52.910567][ T5966] name failslab, interval 1, probability 0, space 0, times 1 [ 52.910636][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 52.910660][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.910668][ T5966] Call Trace: [ 52.910672][ T5966] [ 52.910677][ T5966] dump_stack_lvl+0x100/0x190 [ 52.910707][ T5966] should_fail_ex.cold+0x5/0xa [ 52.910724][ T5966] should_failslab+0xc2/0x120 [ 52.910738][ T5966] __kmalloc_node_noprof+0xff/0x880 [ 52.910749][ T5966] ? __get_vm_area_node+0x1ff/0x350 [ 52.910761][ T5966] ? __get_vm_area_node+0x22b/0x350 [ 52.910773][ T5966] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 52.910794][ T5966] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 52.910812][ T5966] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 52.910827][ T5966] ? find_held_lock+0x2b/0x80 [ 52.910843][ T5966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.910857][ T5966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 52.910873][ T5966] ? avc_has_perm_noaudit+0x145/0x3b0 [ 52.910886][ T5966] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 52.910899][ T5966] __vmalloc_node_noprof+0xad/0xf0 [ 52.910912][ T5966] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 52.910926][ T5966] __vmalloc_noprof+0xa3/0x120 [ 52.910939][ T5966] ? __pfx___vmalloc_noprof+0x10/0x10 [ 52.910954][ T5966] ? rcu_is_watching+0x13/0xc0 [ 52.910967][ T5966] ? cap_capable+0x107/0x430 [ 52.910983][ T5966] bpf_prog_alloc_no_stats+0x59/0x690 [ 52.910995][ T5966] ? security_capable+0x80/0x260 [ 52.911011][ T5966] bpf_prog_alloc+0x3b/0x200 [ 52.911023][ T5966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.911035][ T5966] bpf_prog_load+0x49e/0x2a80 [ 52.911052][ T5966] ? __pfx_bpf_prog_load+0x10/0x10 [ 52.911076][ T5966] __sys_bpf+0x1f46/0x4a30 [ 52.911089][ T5966] ? __pfx___sys_bpf+0x10/0x10 [ 52.911099][ T5966] ? find_held_lock+0x2b/0x80 [ 52.911113][ T5966] ? get_pid_task+0xfc/0x250 [ 52.911126][ T5966] ? get_pid_task+0xfc/0x250 [ 52.911144][ T5966] ? find_held_lock+0x2b/0x80 [ 52.911161][ T5966] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.911176][ T5966] ? find_held_lock+0x2b/0x80 [ 52.911190][ T5966] ? ksys_write+0x190/0x250 [ 52.911200][ T5966] ? ksys_write+0x190/0x250 [ 52.911209][ T5966] ? lock_acquire+0x1d1/0x380 [ 52.911228][ T5966] ? fput+0x7c/0x100 [ 52.911241][ T5966] ? ksys_write+0x1ac/0x250 [ 52.911252][ T5966] ? __x64_sys_bpf+0xce/0x140 [ 52.911261][ T5966] __x64_sys_bpf+0xce/0x140 [ 52.911272][ T5966] ? do_syscall_64+0xae/0x790 [ 52.911285][ T5966] do_syscall_64+0x123/0x790 [ 52.911299][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.911309][ T5966] RIP: 0033:0x7fd96179e159 [ 52.911318][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.911328][ T5966] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.911339][ T5966] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 52.911346][ T5966] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 52.911352][ T5966] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 52.911359][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.911365][ T5966] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 52.911378][ T5966] [ 53.136430][ T43] audit: type=1400 audit(1788684742.556:241): avc: denied { connect } for pid=5981 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.142888][ T5983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 53.276048][ T43] audit: type=1400 audit(1788684742.696:242): avc: denied { read write } for pid=5991 comm="syz.3.40" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.277026][ T43] audit: type=1400 audit(1788684742.696:243): avc: denied { open } for pid=5991 comm="syz.3.40" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.350418][ T5998] netlink: 'syz.0.41': attribute type 5 has an invalid length. [ 53.518663][ T6008] Zero length message leads to an empty skb [ 53.522077][ T6009] process 'syz.0.46' launched './file0' with NULL argv: empty string added [ 53.919768][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 53.920051][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 53.920144][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 53.920232][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 53.920365][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 53.920485][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 54.131032][ T5733] Bluetooth: hci3: command tx timeout [ 54.131124][ T5733] Bluetooth: hci1: command tx timeout [ 54.131250][ T5742] Bluetooth: hci0: command tx timeout [ 54.131306][ T5735] Bluetooth: hci2: command tx timeout [ 54.237297][ T6043] FAULT_INJECTION: forcing a failure. [ 54.237297][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 54.237390][ T6043] CPU: 3 UID: 0 PID: 6043 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 54.237424][ T6043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.237435][ T6043] Call Trace: [ 54.237441][ T6043] [ 54.237448][ T6043] dump_stack_lvl+0x100/0x190 [ 54.237477][ T6043] should_fail_ex.cold+0x5/0xa [ 54.237500][ T6043] should_failslab+0xc2/0x120 [ 54.237520][ T6043] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.237560][ T6043] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 54.237585][ T6043] bpf_prog_alloc_no_stats+0x161/0x690 [ 54.237608][ T6043] bpf_prog_alloc+0x3b/0x200 [ 54.237628][ T6043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.237650][ T6043] bpf_prog_load+0x49e/0x2a80 [ 54.237679][ T6043] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.237720][ T6043] __sys_bpf+0x1f46/0x4a30 [ 54.237744][ T6043] ? __pfx___sys_bpf+0x10/0x10 [ 54.237760][ T6043] ? find_held_lock+0x2b/0x80 [ 54.237781][ T6043] ? get_pid_task+0xfc/0x250 [ 54.237801][ T6043] ? get_pid_task+0xfc/0x250 [ 54.237828][ T6043] ? find_held_lock+0x2b/0x80 [ 54.237853][ T6043] ? rcu_read_lock_any_held+0x6a/0x90 [ 54.237875][ T6043] ? find_held_lock+0x2b/0x80 [ 54.237898][ T6043] ? ksys_write+0x190/0x250 [ 54.237913][ T6043] ? ksys_write+0x190/0x250 [ 54.237928][ T6043] ? lock_acquire+0x1d1/0x380 [ 54.237958][ T6043] ? fput+0x7c/0x100 [ 54.237978][ T6043] ? ksys_write+0x1ac/0x250 [ 54.237997][ T6043] ? __x64_sys_bpf+0xce/0x140 [ 54.238011][ T6043] __x64_sys_bpf+0xce/0x140 [ 54.238027][ T6043] ? do_syscall_64+0xae/0x790 [ 54.238049][ T6043] do_syscall_64+0x123/0x790 [ 54.238069][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.238085][ T6043] RIP: 0033:0x7fc95ad9e159 [ 54.238096][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.238128][ T6043] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.238140][ T6043] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 54.238147][ T6043] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 54.238153][ T6043] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 54.238159][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.238165][ T6043] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 54.238179][ T6043] [ 54.396081][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.716550][ T6089] FAULT_INJECTION: forcing a failure. [ 54.716550][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.716604][ T6089] CPU: 2 UID: 0 PID: 6089 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 54.716635][ T6089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.716644][ T6089] Call Trace: [ 54.716648][ T6089] [ 54.716653][ T6089] dump_stack_lvl+0x100/0x190 [ 54.716674][ T6089] should_fail_ex.cold+0x5/0xa [ 54.716691][ T6089] _copy_from_user+0x2e/0xd0 [ 54.716709][ T6089] bpf_prog_load+0x1490/0x2a80 [ 54.716728][ T6089] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.716754][ T6089] __sys_bpf+0x1f46/0x4a30 [ 54.716768][ T6089] ? __pfx___sys_bpf+0x10/0x10 [ 54.716778][ T6089] ? find_held_lock+0x2b/0x80 [ 54.716794][ T6089] ? get_pid_task+0xfc/0x250 [ 54.716809][ T6089] ? get_pid_task+0xfc/0x250 [ 54.716828][ T6089] ? find_held_lock+0x2b/0x80 [ 54.716846][ T6089] ? rcu_read_lock_any_held+0x6a/0x90 [ 54.716862][ T6089] ? find_held_lock+0x2b/0x80 [ 54.716877][ T6089] ? ksys_write+0x190/0x250 [ 54.716888][ T6089] ? ksys_write+0x190/0x250 [ 54.716899][ T6089] ? lock_acquire+0x1d1/0x380 [ 54.716919][ T6089] ? fput+0x7c/0x100 [ 54.716933][ T6089] ? ksys_write+0x1ac/0x250 [ 54.716945][ T6089] ? __x64_sys_bpf+0xce/0x140 [ 54.716967][ T6089] __x64_sys_bpf+0xce/0x140 [ 54.716980][ T6089] ? do_syscall_64+0xae/0x790 [ 54.716995][ T6089] do_syscall_64+0x123/0x790 [ 54.717009][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.717022][ T6089] RIP: 0033:0x7f4a5879e159 [ 54.717032][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.717042][ T6089] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.717054][ T6089] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 54.717061][ T6089] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 54.717067][ T6089] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.717074][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.717080][ T6089] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 54.717095][ T6089] [ 55.198509][ T6117] FAULT_INJECTION: forcing a failure. [ 55.198509][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 55.198604][ T6117] CPU: 3 UID: 0 PID: 6117 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 55.198642][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.198654][ T6117] Call Trace: [ 55.198661][ T6117] [ 55.198668][ T6117] dump_stack_lvl+0x100/0x190 [ 55.198700][ T6117] should_fail_ex.cold+0x5/0xa [ 55.198723][ T6117] should_failslab+0xc2/0x120 [ 55.198746][ T6117] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 55.198763][ T6117] ? lock_acquire+0x1d1/0x380 [ 55.198779][ T6117] ? kstrdup_const+0x63/0x80 [ 55.198806][ T6117] kstrdup+0x51/0xe0 [ 55.198828][ T6117] kstrdup_const+0x63/0x80 [ 55.198850][ T6117] alloc_vfsmnt+0xe5/0x710 [ 55.198873][ T6117] clone_mnt+0x4b/0x930 [ 55.198897][ T6117] copy_tree+0x329/0xbf0 [ 55.198920][ T6117] copy_mnt_ns+0x3fa/0x1180 [ 55.198962][ T6117] ? __pfx_copy_mnt_ns+0x10/0x10 [ 55.198990][ T6117] ? create_new_namespaces+0x30/0xac0 [ 55.199014][ T6117] create_new_namespaces+0xd3/0xac0 [ 55.199029][ T6117] ? bpf_lsm_capable+0x9/0x10 [ 55.199048][ T6117] ? security_capable+0x80/0x260 [ 55.199072][ T6117] unshare_nsproxy_namespaces+0xf2/0x220 [ 55.199091][ T6117] ksys_unshare+0x4a2/0xa70 [ 55.199111][ T6117] ? __pfx_ksys_unshare+0x10/0x10 [ 55.199145][ T6117] __x64_sys_unshare+0x31/0x40 [ 55.199164][ T6117] do_syscall_64+0x123/0x790 [ 55.199186][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.199205][ T6117] RIP: 0033:0x7fc95ad9e159 [ 55.199221][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.199235][ T6117] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 55.199254][ T6117] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 55.199266][ T6117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 55.199274][ T6117] RBP: 00007fc95ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 55.199284][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.199311][ T6117] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 55.199335][ T6117] [ 55.306246][ T6121] FAULT_INJECTION: forcing a failure. [ 55.306246][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.306322][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 55.306354][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.306366][ T6121] Call Trace: [ 55.306372][ T6121] [ 55.306379][ T6121] dump_stack_lvl+0x100/0x190 [ 55.306409][ T6121] should_fail_ex.cold+0x5/0xa [ 55.306434][ T6121] _copy_from_user+0x2e/0xd0 [ 55.306461][ T6121] bpf_prog_load+0x1490/0x2a80 [ 55.306490][ T6121] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.306532][ T6121] __sys_bpf+0x1f46/0x4a30 [ 55.306555][ T6121] ? __pfx___sys_bpf+0x10/0x10 [ 55.306571][ T6121] ? find_held_lock+0x2b/0x80 [ 55.306611][ T6121] ? get_pid_task+0xfc/0x250 [ 55.306632][ T6121] ? get_pid_task+0xfc/0x250 [ 55.306660][ T6121] ? find_held_lock+0x2b/0x80 [ 55.306687][ T6121] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.306711][ T6121] ? find_held_lock+0x2b/0x80 [ 55.306733][ T6121] ? ksys_write+0x190/0x250 [ 55.306750][ T6121] ? ksys_write+0x190/0x250 [ 55.306766][ T6121] ? lock_acquire+0x1d1/0x380 [ 55.306797][ T6121] ? fput+0x7c/0x100 [ 55.306819][ T6121] ? ksys_write+0x1ac/0x250 [ 55.306847][ T6121] ? __x64_sys_bpf+0xce/0x140 [ 55.306863][ T6121] __x64_sys_bpf+0xce/0x140 [ 55.306881][ T6121] ? do_syscall_64+0xae/0x790 [ 55.306904][ T6121] do_syscall_64+0x123/0x790 [ 55.306926][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.306943][ T6121] RIP: 0033:0x7fc95ad9e159 [ 55.306958][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.306975][ T6121] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.306993][ T6121] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 55.307005][ T6121] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 55.307015][ T6121] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 55.307026][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.307035][ T6121] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 55.307060][ T6121] [ 56.222115][ T5742] Bluetooth: hci0: command tx timeout [ 56.222143][ T5729] Bluetooth: hci1: command tx timeout [ 56.222193][ T5729] Bluetooth: hci3: command tx timeout [ 56.222361][ T5735] Bluetooth: hci2: command tx timeout [ 56.283657][ T6174] FAULT_INJECTION: forcing a failure. [ 56.283657][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 56.283739][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 56.283772][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.283783][ T6174] Call Trace: [ 56.283789][ T6174] [ 56.283796][ T6174] dump_stack_lvl+0x100/0x190 [ 56.283825][ T6174] should_fail_ex.cold+0x5/0xa [ 56.283849][ T6174] should_failslab+0xc2/0x120 [ 56.283870][ T6174] __kmalloc_noprof+0xfc/0x840 [ 56.283886][ T6174] ? cap_capable+0x107/0x430 [ 56.283908][ T6174] ? lsm_blob_alloc+0x68/0x90 [ 56.283931][ T6174] lsm_blob_alloc+0x68/0x90 [ 56.283951][ T6174] security_bpf_prog_load+0x5b/0x2f0 [ 56.283967][ T6174] ? bpf_vlog_init+0x118/0x150 [ 56.283992][ T6174] bpf_check+0x16dd/0xa7c0 [ 56.284014][ T6174] ? __css_rstat_updated+0x1ce/0x590 [ 56.284033][ T6174] ? __lock_acquire+0x4c5/0x1ec0 [ 56.284057][ T6174] ? __lock_acquire+0x4c5/0x1ec0 [ 56.284080][ T6174] ? __pfx_bpf_check+0x10/0x10 [ 56.284100][ T6174] ? lock_acquire+0x1d1/0x380 [ 56.284116][ T6174] ? bpf_prog_load+0x1a09/0x2a80 [ 56.284137][ T6174] ? find_held_lock+0x2b/0x80 [ 56.284157][ T6174] ? bpf_prog_load+0x1a09/0x2a80 [ 56.284181][ T6174] ? __asan_memset+0x23/0x50 [ 56.284209][ T6174] ? bpf_prog_load+0x1ac3/0x2a80 [ 56.284228][ T6174] bpf_prog_load+0x1ac3/0x2a80 [ 56.284253][ T6174] ? __pfx_bpf_prog_load+0x10/0x10 [ 56.284291][ T6174] __sys_bpf+0x1f46/0x4a30 [ 56.284312][ T6174] ? __pfx___sys_bpf+0x10/0x10 [ 56.284327][ T6174] ? find_held_lock+0x2b/0x80 [ 56.284347][ T6174] ? get_pid_task+0xfc/0x250 [ 56.284367][ T6174] ? get_pid_task+0xfc/0x250 [ 56.284394][ T6174] ? find_held_lock+0x2b/0x80 [ 56.284418][ T6174] ? rcu_read_lock_any_held+0x6a/0x90 [ 56.284441][ T6174] ? find_held_lock+0x2b/0x80 [ 56.284462][ T6174] ? ksys_write+0x190/0x250 [ 56.284477][ T6174] ? ksys_write+0x190/0x250 [ 56.284492][ T6174] ? lock_acquire+0x1d1/0x380 [ 56.284523][ T6174] ? fput+0x7c/0x100 [ 56.284542][ T6174] ? ksys_write+0x1ac/0x250 [ 56.284561][ T6174] ? __x64_sys_bpf+0xce/0x140 [ 56.284575][ T6174] __x64_sys_bpf+0xce/0x140 [ 56.284591][ T6174] ? do_syscall_64+0xae/0x790 [ 56.284611][ T6174] do_syscall_64+0x123/0x790 [ 56.284632][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.284648][ T6174] RIP: 0033:0x7fc95ad9e159 [ 56.284661][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.284676][ T6174] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.284692][ T6174] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 56.284702][ T6174] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 56.284712][ T6174] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 56.284721][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.284730][ T6174] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 56.284756][ T6174] [ 56.399483][ T6181] netlink: 'syz.2.105': attribute type 2 has an invalid length. [ 56.495886][ T6185] FAULT_INJECTION: forcing a failure. [ 56.495886][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 56.496674][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT(full) [ 56.496699][ T6185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.496711][ T6185] Call Trace: [ 56.496718][ T6185] [ 56.496726][ T6185] dump_stack_lvl+0x100/0x190 [ 56.496760][ T6185] should_fail_ex.cold+0x5/0xa [ 56.496787][ T6185] should_failslab+0xc2/0x120 [ 56.496810][ T6185] __kmalloc_noprof+0xfc/0x840 [ 56.496828][ T6185] ? rcu_is_watching+0x13/0xc0 [ 56.496852][ T6185] ? tomoyo_realpath_from_path+0xb6/0x690 [ 56.496878][ T6185] tomoyo_realpath_from_path+0xb6/0x690 [ 56.496904][ T6185] tomoyo_path_number_perm+0x23c/0x580 [ 56.496930][ T6185] ? tomoyo_path_number_perm+0x22e/0x580 [ 56.496959][ T6185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.496995][ T6185] ? __lock_acquire+0x4c5/0x1ec0 [ 56.497027][ T6185] ? __fget_files+0x34/0x3d0 [ 56.497049][ T6185] ? find_held_lock+0x2b/0x80 [ 56.497073][ T6185] ? hook_file_ioctl_common+0x140/0x440 [ 56.497101][ T6185] ? __fget_files+0x21f/0x3d0 [ 56.497127][ T6185] security_file_ioctl+0xd3/0x230 [ 56.497157][ T6185] __x64_sys_ioctl+0xb7/0x210 [ 56.497186][ T6185] do_syscall_64+0x123/0x790 [ 56.497211][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.497230][ T6185] RIP: 0033:0x7fd96179e159 [ 56.497246][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.497263][ T6185] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.497282][ T6185] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 56.497299][ T6185] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 56.497311][ T6185] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 56.497322][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.497332][ T6185] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 56.497349][ T6185] [ 56.497354][ T6185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.663826][ T6193] overlay: Unknown parameter 'mask' [ 57.416550][ T6211] FAULT_INJECTION: forcing a failure. [ 57.416550][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 57.422361][ T6211] CPU: 2 UID: 0 PID: 6211 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(full) [ 57.422396][ T6211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.422408][ T6211] Call Trace: [ 57.422415][ T6211] [ 57.422423][ T6211] dump_stack_lvl+0x100/0x190 [ 57.422450][ T6211] should_fail_ex.cold+0x5/0xa [ 57.422489][ T6211] should_failslab+0xc2/0x120 [ 57.422512][ T6211] __kmalloc_cache_node_noprof+0x94/0x720 [ 57.422534][ T6211] ? __get_vm_area_node+0x124/0x350 [ 57.422560][ T6211] __get_vm_area_node+0x124/0x350 [ 57.422578][ T6211] ? __sys_bpf+0x1f46/0x4a30 [ 57.422596][ T6211] __vmalloc_node_range_noprof+0x268/0x1420 [ 57.422614][ T6211] ? bpf_check+0x1800/0xa7c0 [ 57.422644][ T6211] ? bpf_check+0x1800/0xa7c0 [ 57.422680][ T6211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 57.422708][ T6211] ? avc_has_perm_noaudit+0x145/0x3b0 [ 57.422732][ T6211] ? bpf_check+0x1800/0xa7c0 [ 57.422751][ T6211] __vmalloc_node_noprof+0xad/0xf0 [ 57.422773][ T6211] ? bpf_check+0x1800/0xa7c0 [ 57.422798][ T6211] __vmalloc_noprof+0xa3/0x120 [ 57.422820][ T6211] ? __pfx___vmalloc_noprof+0x10/0x10 [ 57.422846][ T6211] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 57.422866][ T6211] ? security_bpf_prog_load+0x10f/0x2f0 [ 57.422882][ T6211] ? bpf_vlog_init+0x118/0x150 [ 57.422905][ T6211] bpf_check+0x1800/0xa7c0 [ 57.422929][ T6211] ? __css_rstat_updated+0x1ce/0x590 [ 57.422950][ T6211] ? __lock_acquire+0x4c5/0x1ec0 [ 57.422977][ T6211] ? __lock_acquire+0x4c5/0x1ec0 [ 57.423003][ T6211] ? __pfx_bpf_check+0x10/0x10 [ 57.423026][ T6211] ? lock_acquire+0x1d1/0x380 [ 57.423043][ T6211] ? bpf_prog_load+0x1a09/0x2a80 [ 57.423061][ T6211] ? find_held_lock+0x2b/0x80 [ 57.423084][ T6211] ? bpf_prog_load+0x1a09/0x2a80 [ 57.423111][ T6211] ? __asan_memset+0x23/0x50 [ 57.423143][ T6211] ? bpf_prog_load+0x1ac3/0x2a80 [ 57.423164][ T6211] bpf_prog_load+0x1ac3/0x2a80 [ 57.423192][ T6211] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.423236][ T6211] __sys_bpf+0x1f46/0x4a30 [ 57.423257][ T6211] ? __pfx___sys_bpf+0x10/0x10 [ 57.423274][ T6211] ? find_held_lock+0x2b/0x80 [ 57.423293][ T6211] ? get_pid_task+0xfc/0x250 [ 57.423312][ T6211] ? get_pid_task+0xfc/0x250 [ 57.423343][ T6211] ? find_held_lock+0x2b/0x80 [ 57.423373][ T6211] ? rcu_read_lock_any_held+0x6a/0x90 [ 57.423397][ T6211] ? find_held_lock+0x2b/0x80 [ 57.423417][ T6211] ? ksys_write+0x190/0x250 [ 57.423434][ T6211] ? ksys_write+0x190/0x250 [ 57.423446][ T6211] ? lock_acquire+0x1d1/0x380 [ 57.423480][ T6211] ? fput+0x7c/0x100 [ 57.423502][ T6211] ? ksys_write+0x1ac/0x250 [ 57.423523][ T6211] ? __x64_sys_bpf+0xce/0x140 [ 57.423537][ T6211] __x64_sys_bpf+0xce/0x140 [ 57.423554][ T6211] ? do_syscall_64+0xae/0x790 [ 57.423577][ T6211] do_syscall_64+0x123/0x790 [ 57.423601][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.423620][ T6211] RIP: 0033:0x7fc95ad9e159 [ 57.423636][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.423652][ T6211] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.423677][ T6211] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 57.423689][ T6211] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 57.423700][ T6211] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 57.423710][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.423720][ T6211] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 57.423743][ T6211] [ 57.591470][ T6197] ima: policy update failed [ 57.677389][ T6223] FAULT_INJECTION: forcing a failure. [ 57.677389][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 57.677472][ T6223] CPU: 3 UID: 0 PID: 6223 Comm: syz.3.122 Not tainted syzkaller #0 PREEMPT(full) [ 57.677508][ T6223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.677520][ T6223] Call Trace: [ 57.677527][ T6223] [ 57.677535][ T6223] dump_stack_lvl+0x100/0x190 [ 57.677569][ T6223] should_fail_ex.cold+0x5/0xa [ 57.677598][ T6223] should_failslab+0xc2/0x120 [ 57.677623][ T6223] __kmalloc_noprof+0xfc/0x840 [ 57.677643][ T6223] ? tomoyo_encode2+0xfb/0x3c0 [ 57.677669][ T6223] tomoyo_encode2+0xfb/0x3c0 [ 57.677693][ T6223] tomoyo_encode+0x29/0x50 [ 57.677710][ T6223] tomoyo_realpath_from_path+0x18c/0x690 [ 57.677737][ T6223] tomoyo_path_number_perm+0x23c/0x580 [ 57.677763][ T6223] ? tomoyo_path_number_perm+0x22e/0x580 [ 57.677798][ T6223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.677837][ T6223] ? __lock_acquire+0x4c5/0x1ec0 [ 57.677871][ T6223] ? __fget_files+0x34/0x3d0 [ 57.677894][ T6223] ? find_held_lock+0x2b/0x80 [ 57.677919][ T6223] ? hook_file_ioctl_common+0x140/0x440 [ 57.677950][ T6223] ? __fget_files+0x21f/0x3d0 [ 57.677977][ T6223] security_file_ioctl+0xd3/0x230 [ 57.678008][ T6223] __x64_sys_ioctl+0xb7/0x210 [ 57.678040][ T6223] do_syscall_64+0x123/0x790 [ 57.678067][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.678114][ T6223] RIP: 0033:0x7fd96179e159 [ 57.678132][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.678148][ T6223] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.678166][ T6223] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 57.678179][ T6223] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 57.678190][ T6223] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 57.678201][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.678211][ T6223] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 57.678236][ T6223] [ 57.678286][ T6223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.769899][ T6226] __nla_validate_parse: 30 callbacks suppressed [ 57.769918][ T6226] netlink: 830 bytes leftover after parsing attributes in process `syz.3.125'. [ 57.775553][ T6226] FAULT_INJECTION: forcing a failure. [ 57.775553][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 57.775582][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT(full) [ 57.775604][ T6226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.775616][ T6226] Call Trace: [ 57.775622][ T6226] [ 57.775630][ T6226] dump_stack_lvl+0x100/0x190 [ 57.775662][ T6226] should_fail_ex.cold+0x5/0xa [ 57.775693][ T6226] should_failslab+0xc2/0x120 [ 57.775716][ T6226] __kmalloc_noprof+0xfc/0x840 [ 57.775735][ T6226] ? usb_alloc_urb+0x66/0xa0 [ 57.775895][ T6226] usb_alloc_urb+0x66/0xa0 [ 57.775925][ T6226] usb_control_msg+0x1d3/0x4b0 [ 57.775946][ T6226] ? __pfx_usb_control_msg+0x10/0x10 [ 57.775966][ T6226] ? __lock_acquire+0xe15/0x1ec0 [ 57.775990][ T6226] hub_ext_port_status+0x14e/0x690 [ 57.776028][ T6226] hub_activate+0x6e5/0x1c40 [ 57.776054][ T6226] ? __pfx_hub_activate+0x10/0x10 [ 57.776072][ T6226] ? find_held_lock+0x2b/0x80 [ 57.776097][ T6226] ? trace_raw_output_contention_end+0xb0/0xe0 [ 57.776115][ T6226] ? __pfx_usbdev_mmap+0x10/0x10 [ 57.776139][ T6226] ? usb_generic_driver_resume+0x70/0xa0 [ 57.776156][ T6226] ? hcd_bus_resume+0x37b/0x810 [ 57.776183][ T6226] hub_resume+0xb0/0x400 [ 57.776203][ T6226] ? __pfx_hub_resume+0x10/0x10 [ 57.776228][ T6226] ? __pfx_hcd_bus_resume+0x10/0x10 [ 57.776261][ T6226] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 57.776290][ T6226] usb_resume_both+0x53a/0x7f0 [ 57.776334][ T6226] ? do_dentry_open+0x6ab/0x14d0 [ 57.776355][ T6226] ? __pfx_usb_resume_both+0x10/0x10 [ 57.776378][ T6226] ? __rpm_callback+0x272/0x620 [ 57.776398][ T6226] ? __pfx_usb_runtime_resume+0x10/0x10 [ 57.776424][ T6226] ? rcu_is_watching+0x13/0xc0 [ 57.776449][ T6226] ? __pfx_usb_runtime_resume+0x10/0x10 [ 57.776476][ T6226] __rpm_callback+0xc8/0x620 [ 57.776495][ T6226] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 57.776516][ T6226] ? __pfx_usb_runtime_resume+0x10/0x10 [ 57.776543][ T6226] rpm_callback+0x11f/0x150 [ 57.776561][ T6226] ? __pfx_usb_runtime_resume+0x10/0x10 [ 57.776596][ T6226] rpm_resume+0xd13/0x1320 [ 57.776615][ T6226] ? usbdev_open+0x1b1/0x870 [ 57.776640][ T6226] ? klist_put+0xcb/0x1d0 [ 57.776671][ T6226] ? __pfx_rpm_resume+0x10/0x10 [ 57.776690][ T6226] ? do_raw_spin_lock+0x128/0x260 [ 57.776714][ T6226] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.776738][ T6226] ? _raw_spin_lock_irqsave+0x52/0x60 [ 57.776763][ T6226] __pm_runtime_resume+0xb6/0x170 [ 57.776785][ T6226] usb_autoresume_device+0x23/0xe0 [ 57.776814][ T6226] usbdev_open+0x228/0x870 [ 57.776842][ T6226] ? do_raw_spin_lock+0x128/0x260 [ 57.776865][ T6226] ? __pfx_usbdev_open+0x10/0x10 [ 57.776889][ T6226] ? chrdev_open+0x589/0x6a0 [ 57.776907][ T6226] ? chrdev_open+0x589/0x6a0 [ 57.776931][ T6226] ? __pfx_usbdev_open+0x10/0x10 [ 57.776957][ T6226] chrdev_open+0x234/0x6a0 [ 57.776980][ T6226] ? __pfx_chrdev_open+0x10/0x10 [ 57.777003][ T6226] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 57.777036][ T6226] do_dentry_open+0x6ab/0x14d0 [ 57.777054][ T6226] ? __pfx_chrdev_open+0x10/0x10 [ 57.777081][ T6226] vfs_open+0x82/0x3f0 [ 57.777107][ T6226] path_openat+0x19fa/0x2440 [ 57.777133][ T6226] ? __pfx_path_openat+0x10/0x10 [ 57.777289][ T6226] do_file_open+0x20e/0x430 [ 57.777315][ T6226] ? __pfx_do_file_open+0x10/0x10 [ 57.777354][ T6226] ? _raw_spin_unlock+0x28/0x50 [ 57.777371][ T6226] ? alloc_fd+0x471/0x7a0 [ 57.777399][ T6226] do_sys_openat2+0x10f/0x1e0 [ 57.777420][ T6226] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.777446][ T6226] ? do_sock_setsockopt+0x101/0x1d0 [ 57.777467][ T6226] ? kfree+0x1e5/0x6d0 [ 57.777491][ T6226] ? selinux_socket_setsockopt+0x6a/0x80 [ 57.777528][ T6226] __x64_sys_openat+0x12d/0x210 [ 57.777555][ T6226] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.777590][ T6226] do_syscall_64+0x123/0x790 [ 57.777614][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.777634][ T6226] RIP: 0033:0x7fd96175e98e [ 57.777650][ T6226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.777668][ T6226] RSP: 002b:00007fd96264ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.777686][ T6226] RAX: ffffffffffffffda RBX: 00007fd96264b6c0 RCX: 00007fd96175e98e [ 57.777698][ T6226] RDX: 0000000000000000 RSI: 00007fd96264ac00 RDI: ffffffffffffff9c [ 57.777710][ T6226] RBP: 00007fd96264ac00 R08: 0000000000000000 R09: 0000000000000000 [ 57.777721][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 57.777732][ T6226] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 57.777758][ T6226] [ 57.852752][ T6229] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 57.886211][ T43] kauditd_printk_skb: 7077 callbacks suppressed [ 57.886224][ T43] audit: type=1400 audit(1788684747.306:7321): avc: denied { read write } for pid=6233 comm="syz.1.126" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.886683][ T43] audit: type=1400 audit(1788684747.306:7322): avc: denied { open } for pid=6233 comm="syz.1.126" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.903520][ T6229] bond1: entered promiscuous mode [ 57.903815][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.906811][ T43] audit: type=1400 audit(1788684747.326:7323): avc: denied { ioctl } for pid=6233 comm="syz.1.126" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.916943][ T43] audit: type=1400 audit(1788684747.336:7324): avc: denied { read } for pid=6233 comm="syz.1.126" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.916975][ T43] audit: type=1400 audit(1788684747.336:7325): avc: denied { open } for pid=6233 comm="syz.1.126" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.945998][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.946204][ T6229] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 57.946215][ T6229] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 57.972614][ T6229] bond1: (slave ip6gre1): making interface the new active one [ 57.972630][ T6229] ip6gre1: entered promiscuous mode [ 57.988464][ T6229] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 57.996171][ T43] audit: type=1400 audit(1788684747.416:7326): avc: denied { accept } for pid=6237 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.997070][ T43] audit: type=1400 audit(1788684747.416:7327): avc: denied { read } for pid=6237 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.029906][ T6241] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 58.031954][ T43] audit: type=1400 audit(1788684747.446:7328): avc: denied { ioctl } for pid=6233 comm="syz.1.126" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.049297][ T6245] FAULT_INJECTION: forcing a failure. [ 58.049297][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 58.049397][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 58.049422][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.049434][ T6245] Call Trace: [ 58.049459][ T6245] [ 58.049468][ T6245] dump_stack_lvl+0x100/0x190 [ 58.049520][ T6245] should_fail_ex.cold+0x5/0xa [ 58.049549][ T6245] should_failslab+0xc2/0x120 [ 58.049580][ T6245] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 58.049604][ T6245] ? alloc_vmap_area+0x640/0x2bb0 [ 58.049632][ T6245] alloc_vmap_area+0x640/0x2bb0 [ 58.049674][ T6245] ? kasan_save_track+0x14/0x30 [ 58.049695][ T6245] ? __kasan_kmalloc+0xaa/0xb0 [ 58.049717][ T6245] ? __pfx_alloc_vmap_area+0x10/0x10 [ 58.049743][ T6245] ? __get_vm_area_node+0x124/0x350 [ 58.049772][ T6245] __get_vm_area_node+0x1ed/0x350 [ 58.049804][ T6245] __vmalloc_node_range_noprof+0x268/0x1420 [ 58.049833][ T6245] ? bpf_check+0x1800/0xa7c0 [ 58.049872][ T6245] ? bpf_check+0x1800/0xa7c0 [ 58.049906][ T6245] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.049941][ T6245] ? avc_has_perm_noaudit+0x145/0x3b0 [ 58.049972][ T6245] ? bpf_check+0x1800/0xa7c0 [ 58.050000][ T6245] __vmalloc_node_noprof+0xad/0xf0 [ 58.050026][ T6245] ? bpf_check+0x1800/0xa7c0 [ 58.050056][ T6245] __vmalloc_noprof+0xa3/0x120 [ 58.050115][ T6245] ? __pfx___vmalloc_noprof+0x10/0x10 [ 58.050146][ T6245] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 58.050175][ T6245] ? security_bpf_prog_load+0x10f/0x2f0 [ 58.050195][ T6245] ? bpf_vlog_init+0x118/0x150 [ 58.050228][ T6245] bpf_check+0x1800/0xa7c0 [ 58.050256][ T6245] ? __css_rstat_updated+0x1ce/0x590 [ 58.050280][ T6245] ? __lock_acquire+0x4c5/0x1ec0 [ 58.050318][ T6245] ? __lock_acquire+0x4c5/0x1ec0 [ 58.050347][ T6245] ? __pfx_bpf_check+0x10/0x10 [ 58.050375][ T6245] ? lock_acquire+0x1d1/0x380 [ 58.050395][ T6245] ? bpf_prog_load+0x1a09/0x2a80 [ 58.050422][ T6245] ? find_held_lock+0x2b/0x80 [ 58.050451][ T6245] ? bpf_prog_load+0x1a09/0x2a80 [ 58.050483][ T6245] ? __asan_memset+0x23/0x50 [ 58.050521][ T6245] ? bpf_prog_load+0x1ac3/0x2a80 [ 58.050548][ T6245] bpf_prog_load+0x1ac3/0x2a80 [ 58.050583][ T6245] ? __pfx_bpf_prog_load+0x10/0x10 [ 58.050647][ T6245] __sys_bpf+0x1f46/0x4a30 [ 58.050675][ T6245] ? __pfx___sys_bpf+0x10/0x10 [ 58.050694][ T6245] ? find_held_lock+0x2b/0x80 [ 58.050721][ T6245] ? get_pid_task+0xfc/0x250 [ 58.050747][ T6245] ? get_pid_task+0xfc/0x250 [ 58.050784][ T6245] ? find_held_lock+0x2b/0x80 [ 58.050820][ T6245] ? rcu_read_lock_any_held+0x6a/0x90 [ 58.050850][ T6245] ? find_held_lock+0x2b/0x80 [ 58.050877][ T6245] ? ksys_write+0x190/0x250 [ 58.050897][ T6245] ? ksys_write+0x190/0x250 [ 58.050918][ T6245] ? lock_acquire+0x1d1/0x380 [ 58.050965][ T6245] ? fput+0x7c/0x100 [ 58.050992][ T6245] ? ksys_write+0x1ac/0x250 [ 58.051017][ T6245] ? __x64_sys_bpf+0xce/0x140 [ 58.051036][ T6245] __x64_sys_bpf+0xce/0x140 [ 58.051059][ T6245] ? do_syscall_64+0xae/0x790 [ 58.051095][ T6245] do_syscall_64+0x123/0x790 [ 58.051124][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.051148][ T6245] RIP: 0033:0x7fc95ad9e159 [ 58.051168][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.051188][ T6245] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.051210][ T6245] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 58.051229][ T6245] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 58.051242][ T6245] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 58.051255][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.051268][ T6245] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 58.051297][ T6245] [ 58.168901][ T43] audit: type=1400 audit(1788684747.586:7329): avc: denied { create } for pid=6248 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.183037][ T43] audit: type=1400 audit(1788684747.596:7330): avc: denied { setopt } for pid=6250 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.271806][ T6259] FAULT_INJECTION: forcing a failure. [ 58.271806][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.271874][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 58.271887][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.271894][ T6259] Call Trace: [ 58.271898][ T6259] [ 58.271902][ T6259] dump_stack_lvl+0x100/0x190 [ 58.271922][ T6259] should_fail_ex.cold+0x5/0xa [ 58.271937][ T6259] _copy_from_user+0x2e/0xd0 [ 58.271958][ T6259] video_usercopy+0xe71/0x1730 [ 58.271981][ T6259] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.271995][ T6259] ? __pfx_video_usercopy+0x10/0x10 [ 58.272016][ T6259] v4l2_ioctl+0x1bd/0x250 [ 58.272029][ T6259] ? __pfx_v4l2_ioctl+0x10/0x10 [ 58.272044][ T6259] __x64_sys_ioctl+0x18e/0x210 [ 58.272062][ T6259] do_syscall_64+0x123/0x790 [ 58.272077][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.272088][ T6259] RIP: 0033:0x7fd96179e159 [ 58.272098][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.272108][ T6259] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.272127][ T6259] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 58.272137][ T6259] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 58.272148][ T6259] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 58.272157][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.272165][ T6259] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 58.272183][ T6259] [ 58.494303][ T6269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.140'. [ 58.609877][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 58.648118][ T6279] FAULT_INJECTION: forcing a failure. [ 58.648118][ T6279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.648238][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) [ 58.648262][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.648270][ T6279] Call Trace: [ 58.648274][ T6279] [ 58.648279][ T6279] dump_stack_lvl+0x100/0x190 [ 58.648299][ T6279] should_fail_ex.cold+0x5/0xa [ 58.648313][ T6279] ? prepare_alloc_pages+0x16d/0x5b0 [ 58.648327][ T6279] should_fail_alloc_page+0xeb/0x140 [ 58.648341][ T6279] prepare_alloc_pages+0x1f0/0x5b0 [ 58.648354][ T6279] ? is_bpf_text_address+0x94/0x1a0 [ 58.648369][ T6279] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 58.648392][ T6279] ? stack_trace_save+0x8e/0xc0 [ 58.648409][ T6279] ? __pfx_stack_trace_save+0x10/0x10 [ 58.648425][ T6279] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.648442][ T6279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 58.648458][ T6279] ? is_bpf_text_address+0x94/0x1a0 [ 58.648473][ T6279] ? kasan_save_stack+0x3f/0x50 [ 58.648484][ T6279] ? kasan_save_stack+0x30/0x50 [ 58.648494][ T6279] ? kasan_save_track+0x14/0x30 [ 58.648505][ T6279] ? __kasan_slab_alloc+0x89/0x90 [ 58.648516][ T6279] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 58.648527][ T6279] ? alloc_vmap_area+0x640/0x2bb0 [ 58.648538][ T6279] ? __get_vm_area_node+0x1ed/0x350 [ 58.648549][ T6279] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 58.648562][ T6279] ? __vmalloc_node_noprof+0xad/0xf0 [ 58.648574][ T6279] ? __vmalloc_noprof+0xa3/0x120 [ 58.648586][ T6279] ? bpf_check+0x1800/0xa7c0 [ 58.648600][ T6279] ? bpf_prog_load+0x1ac3/0x2a80 [ 58.648612][ T6279] ? __sys_bpf+0x1f46/0x4a30 [ 58.648621][ T6279] ? __x64_sys_bpf+0xce/0x140 [ 58.648630][ T6279] ? do_syscall_64+0x123/0x790 [ 58.648643][ T6279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.648659][ T6279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.648672][ T6279] ? policy_nodemask+0xed/0x4f0 [ 58.648692][ T6279] alloc_pages_mpol+0x201/0x550 [ 58.648706][ T6279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 58.648729][ T6279] alloc_pages_noprof+0x1a/0x160 [ 58.648752][ T6279] get_free_pages_noprof+0x10/0xb0 [ 58.648772][ T6279] __kasan_populate_vmalloc+0xa0/0x210 [ 58.648795][ T6279] alloc_vmap_area+0x95d/0x2bb0 [ 58.648812][ T6279] ? kasan_save_track+0x14/0x30 [ 58.648823][ T6279] ? __kasan_kmalloc+0xaa/0xb0 [ 58.648834][ T6279] ? __pfx_alloc_vmap_area+0x10/0x10 [ 58.648847][ T6279] ? __get_vm_area_node+0x124/0x350 [ 58.648860][ T6279] __get_vm_area_node+0x1ed/0x350 [ 58.648875][ T6279] __vmalloc_node_range_noprof+0x268/0x1420 [ 58.648889][ T6279] ? bpf_check+0x1800/0xa7c0 [ 58.648906][ T6279] ? bpf_check+0x1800/0xa7c0 [ 58.648922][ T6279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.648938][ T6279] ? avc_has_perm_noaudit+0x145/0x3b0 [ 58.648953][ T6279] ? bpf_check+0x1800/0xa7c0 [ 58.648966][ T6279] __vmalloc_node_noprof+0xad/0xf0 [ 58.648979][ T6279] ? bpf_check+0x1800/0xa7c0 [ 58.648993][ T6279] __vmalloc_noprof+0xa3/0x120 [ 58.649006][ T6279] ? __pfx___vmalloc_noprof+0x10/0x10 [ 58.649022][ T6279] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 58.649036][ T6279] ? security_bpf_prog_load+0x10f/0x2f0 [ 58.649046][ T6279] ? bpf_vlog_init+0x118/0x150 [ 58.649061][ T6279] bpf_check+0x1800/0xa7c0 [ 58.649075][ T6279] ? __css_rstat_updated+0x1ce/0x590 [ 58.649087][ T6279] ? __lock_acquire+0x4c5/0x1ec0 [ 58.649102][ T6279] ? __lock_acquire+0x4c5/0x1ec0 [ 58.649117][ T6279] ? __pfx_bpf_check+0x10/0x10 [ 58.649130][ T6279] ? lock_acquire+0x1d1/0x380 [ 58.649140][ T6279] ? bpf_prog_load+0x1a09/0x2a80 [ 58.649154][ T6279] ? find_held_lock+0x2b/0x80 [ 58.649168][ T6279] ? bpf_prog_load+0x1a09/0x2a80 [ 58.649185][ T6279] ? __asan_memset+0x23/0x50 [ 58.649203][ T6279] ? bpf_prog_load+0x1ac3/0x2a80 [ 58.649216][ T6279] bpf_prog_load+0x1ac3/0x2a80 [ 58.649233][ T6279] ? __pfx_bpf_prog_load+0x10/0x10 [ 58.649257][ T6279] __sys_bpf+0x1f46/0x4a30 [ 58.649270][ T6279] ? __pfx___sys_bpf+0x10/0x10 [ 58.649280][ T6279] ? find_held_lock+0x2b/0x80 [ 58.649294][ T6279] ? get_pid_task+0xfc/0x250 [ 58.649308][ T6279] ? get_pid_task+0xfc/0x250 [ 58.649325][ T6279] ? find_held_lock+0x2b/0x80 [ 58.649343][ T6279] ? rcu_read_lock_any_held+0x6a/0x90 [ 58.649357][ T6279] ? find_held_lock+0x2b/0x80 [ 58.649371][ T6279] ? ksys_write+0x190/0x250 [ 58.649381][ T6279] ? ksys_write+0x190/0x250 [ 58.649390][ T6279] ? lock_acquire+0x1d1/0x380 [ 58.649409][ T6279] ? fput+0x7c/0x100 [ 58.649422][ T6279] ? ksys_write+0x1ac/0x250 [ 58.649433][ T6279] ? __x64_sys_bpf+0xce/0x140 [ 58.649442][ T6279] __x64_sys_bpf+0xce/0x140 [ 58.649453][ T6279] ? do_syscall_64+0xae/0x790 [ 58.649466][ T6279] do_syscall_64+0x123/0x790 [ 58.649479][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.649490][ T6279] RIP: 0033:0x7fd96179e159 [ 58.649500][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.649510][ T6279] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.649522][ T6279] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 58.649529][ T6279] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 58.649535][ T6279] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 58.649541][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.649547][ T6279] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 58.649560][ T6279] [ 58.882799][ T6290] FAULT_INJECTION: forcing a failure. [ 58.882799][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 58.882850][ T6290] CPU: 3 UID: 0 PID: 6290 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 58.882875][ T6290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.882883][ T6290] Call Trace: [ 58.882888][ T6290] [ 58.882892][ T6290] dump_stack_lvl+0x100/0x190 [ 58.882912][ T6290] should_fail_ex.cold+0x5/0xa [ 58.882929][ T6290] should_failslab+0xc2/0x120 [ 58.882954][ T6290] __kvmalloc_node_noprof+0x113/0x9b0 [ 58.882970][ T6290] ? video_usercopy+0x8a7/0x1730 [ 58.882986][ T6290] video_usercopy+0x8a7/0x1730 [ 58.883000][ T6290] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.883016][ T6290] ? __pfx_video_usercopy+0x10/0x10 [ 58.883038][ T6290] v4l2_ioctl+0x1bd/0x250 [ 58.883053][ T6290] ? __pfx_v4l2_ioctl+0x10/0x10 [ 58.883067][ T6290] __x64_sys_ioctl+0x18e/0x210 [ 58.883149][ T6290] do_syscall_64+0x123/0x790 [ 58.883171][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.883185][ T6290] RIP: 0033:0x7f4a5879e159 [ 58.883196][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.883207][ T6290] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.883219][ T6290] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 58.883226][ T6290] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 58.883232][ T6290] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.883239][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.883245][ T6290] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 58.883258][ T6290] [ 59.001042][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.032096][ T6298] Bluetooth: MGMT ver 1.23 [ 59.125037][ T6300] bond0: entered promiscuous mode [ 59.125089][ T6300] bond_slave_0: entered promiscuous mode [ 59.125198][ T6300] bond_slave_1: entered promiscuous mode [ 59.160856][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 59.164205][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.165879][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.165904][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.165917][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.165930][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.165942][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.165962][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.261791][ T6306] bridge_slave_0: left allmulticast mode [ 59.261881][ T6306] bridge_slave_0: left promiscuous mode [ 59.263641][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.277334][ T6306] bridge_slave_1: left allmulticast mode [ 59.277434][ T6306] bridge_slave_1: left promiscuous mode [ 59.277798][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.280545][ T6310] FAULT_INJECTION: forcing a failure. [ 59.280545][ T6310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.280572][ T6310] CPU: 3 UID: 0 PID: 6310 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 59.280592][ T6310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.280602][ T6310] Call Trace: [ 59.280608][ T6310] [ 59.280615][ T6310] dump_stack_lvl+0x100/0x190 [ 59.280650][ T6310] should_fail_ex.cold+0x5/0xa [ 59.280669][ T6310] ? prepare_alloc_pages+0x16d/0x5b0 [ 59.280690][ T6310] should_fail_alloc_page+0xeb/0x140 [ 59.280735][ T6310] prepare_alloc_pages+0x1f0/0x5b0 [ 59.280756][ T6310] ? is_bpf_text_address+0x94/0x1a0 [ 59.280782][ T6310] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 59.280816][ T6310] ? stack_trace_save+0x8e/0xc0 [ 59.280844][ T6310] ? __pfx_stack_trace_save+0x10/0x10 [ 59.280869][ T6310] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 59.280896][ T6310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.280921][ T6310] ? is_bpf_text_address+0x94/0x1a0 [ 59.280945][ T6310] ? kasan_save_stack+0x3f/0x50 [ 59.280963][ T6310] ? kasan_save_stack+0x30/0x50 [ 59.280980][ T6310] ? kasan_save_track+0x14/0x30 [ 59.280998][ T6310] ? __kasan_slab_alloc+0x89/0x90 [ 59.281016][ T6310] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 59.281034][ T6310] ? alloc_vmap_area+0x640/0x2bb0 [ 59.281050][ T6310] ? __get_vm_area_node+0x1ed/0x350 [ 59.281068][ T6310] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 59.281089][ T6310] ? __vmalloc_node_noprof+0xad/0xf0 [ 59.281109][ T6310] ? __vmalloc_noprof+0xa3/0x120 [ 59.281128][ T6310] ? bpf_check+0x1800/0xa7c0 [ 59.281149][ T6310] ? bpf_prog_load+0x1ac3/0x2a80 [ 59.281168][ T6310] ? __sys_bpf+0x1f46/0x4a30 [ 59.281181][ T6310] ? __x64_sys_bpf+0xce/0x140 [ 59.281202][ T6310] ? do_syscall_64+0x123/0x790 [ 59.281224][ T6310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.281252][ T6310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.281274][ T6310] ? policy_nodemask+0xed/0x4f0 [ 59.281296][ T6310] alloc_pages_mpol+0x201/0x550 [ 59.281319][ T6310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.281348][ T6310] alloc_pages_noprof+0x1a/0x160 [ 59.281374][ T6310] get_free_pages_noprof+0x10/0xb0 [ 59.281393][ T6310] __kasan_populate_vmalloc+0xa0/0x210 [ 59.281413][ T6310] alloc_vmap_area+0x95d/0x2bb0 [ 59.281440][ T6310] ? kasan_save_track+0x14/0x30 [ 59.281458][ T6310] ? __kasan_kmalloc+0xaa/0xb0 [ 59.281476][ T6310] ? __pfx_alloc_vmap_area+0x10/0x10 [ 59.281497][ T6310] ? __get_vm_area_node+0x124/0x350 [ 59.281520][ T6310] __get_vm_area_node+0x1ed/0x350 [ 59.281542][ T6310] __vmalloc_node_range_noprof+0x268/0x1420 [ 59.281565][ T6310] ? bpf_check+0x1800/0xa7c0 [ 59.281594][ T6310] ? bpf_check+0x1800/0xa7c0 [ 59.281621][ T6310] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.281645][ T6310] ? avc_has_perm_noaudit+0x145/0x3b0 [ 59.281667][ T6310] ? bpf_check+0x1800/0xa7c0 [ 59.281688][ T6310] __vmalloc_node_noprof+0xad/0xf0 [ 59.281709][ T6310] ? bpf_check+0x1800/0xa7c0 [ 59.281733][ T6310] __vmalloc_noprof+0xa3/0x120 [ 59.281755][ T6310] ? __pfx___vmalloc_noprof+0x10/0x10 [ 59.281778][ T6310] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 59.281800][ T6310] ? security_bpf_prog_load+0x10f/0x2f0 [ 59.281816][ T6310] ? bpf_vlog_init+0x118/0x150 [ 59.281842][ T6310] bpf_check+0x1800/0xa7c0 [ 59.281864][ T6310] ? __css_rstat_updated+0x1ce/0x590 [ 59.281884][ T6310] ? __lock_acquire+0x4c5/0x1ec0 [ 59.281906][ T6310] ? __lock_acquire+0x4c5/0x1ec0 [ 59.281930][ T6310] ? __pfx_bpf_check+0x10/0x10 [ 59.281952][ T6310] ? lock_acquire+0x1d1/0x380 [ 59.281969][ T6310] ? bpf_prog_load+0x1a09/0x2a80 [ 59.281991][ T6310] ? find_held_lock+0x2b/0x80 [ 59.282014][ T6310] ? bpf_prog_load+0x1a09/0x2a80 [ 59.282037][ T6310] ? __asan_memset+0x23/0x50 [ 59.282066][ T6310] ? bpf_prog_load+0x1ac3/0x2a80 [ 59.282113][ T6310] bpf_prog_load+0x1ac3/0x2a80 [ 59.282141][ T6310] ? __pfx_bpf_prog_load+0x10/0x10 [ 59.282182][ T6310] __sys_bpf+0x1f46/0x4a30 [ 59.282210][ T6310] ? __pfx___sys_bpf+0x10/0x10 [ 59.282226][ T6310] ? find_held_lock+0x2b/0x80 [ 59.282249][ T6310] ? get_pid_task+0xfc/0x250 [ 59.282271][ T6310] ? get_pid_task+0xfc/0x250 [ 59.282300][ T6310] ? find_held_lock+0x2b/0x80 [ 59.282326][ T6310] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.282351][ T6310] ? find_held_lock+0x2b/0x80 [ 59.282373][ T6310] ? ksys_write+0x190/0x250 [ 59.282389][ T6310] ? ksys_write+0x190/0x250 [ 59.282406][ T6310] ? lock_acquire+0x1d1/0x380 [ 59.282435][ T6310] ? fput+0x7c/0x100 [ 59.282455][ T6310] ? ksys_write+0x1ac/0x250 [ 59.282474][ T6310] ? __x64_sys_bpf+0xce/0x140 [ 59.282490][ T6310] __x64_sys_bpf+0xce/0x140 [ 59.282509][ T6310] ? do_syscall_64+0xae/0x790 [ 59.282530][ T6310] do_syscall_64+0x123/0x790 [ 59.282552][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.282568][ T6310] RIP: 0033:0x7f4a5879e159 [ 59.282584][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.282600][ T6310] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.282619][ T6310] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 59.282631][ T6310] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 59.282642][ T6310] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.282652][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.282663][ T6310] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 59.282685][ T6310] [ 59.298123][ T6306] bond0: (slave bond_slave_0): Releasing backup interface [ 59.327839][ T6306] bond0: (slave bond_slave_1): Releasing backup interface [ 59.347700][ T6306] team0: Port device team_slave_0 removed [ 59.356898][ T6306] team0: Port device team_slave_1 removed [ 59.357526][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.357538][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.367298][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.367312][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.375428][ T6306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.376227][ T6314] vlan0: entered promiscuous mode [ 59.396558][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 59.398902][ T10] usb 8-1: usb_control_msg returned -32 [ 59.398934][ T10] usbtmc 8-1:16.0: can't read capabilities [ 59.400619][ T6314] team0: Port device vlan0 added [ 59.426558][ T6311] team0: No ports can be present during mode change [ 59.426735][ T6306] tipc: Started in network mode [ 59.426749][ T6306] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 59.426838][ T6306] tipc: Enabled bearer , priority 0 [ 59.464884][ T6286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.549679][ T6327] FAULT_INJECTION: forcing a failure. [ 59.549679][ T6327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.549752][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(full) [ 59.549775][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.549784][ T6327] Call Trace: [ 59.549788][ T6327] [ 59.549795][ T6327] dump_stack_lvl+0x100/0x190 [ 59.549816][ T6327] should_fail_ex.cold+0x5/0xa [ 59.549832][ T6327] _copy_from_user+0x2e/0xd0 [ 59.549849][ T6327] video_usercopy+0x98e/0x1730 [ 59.549864][ T6327] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.549878][ T6327] ? __pfx_video_usercopy+0x10/0x10 [ 59.549900][ T6327] v4l2_ioctl+0x1bd/0x250 [ 59.549913][ T6327] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.549927][ T6327] __x64_sys_ioctl+0x18e/0x210 [ 59.549946][ T6327] do_syscall_64+0x123/0x790 [ 59.549961][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.549972][ T6327] RIP: 0033:0x7fc95ad9e159 [ 59.549981][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.549992][ T6327] RSP: 002b:00007fc95bb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.550003][ T6327] RAX: ffffffffffffffda RBX: 00007fc95b025fa0 RCX: 00007fc95ad9e159 [ 59.550010][ T6327] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 59.550016][ T6327] RBP: 00007fc95bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 59.550023][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.550029][ T6327] R13: 00007fc95b026038 R14: 00007fc95b025fa0 R15: 00007ffd58d9a9e8 [ 59.550044][ T6327] [ 59.705574][ T6340] vivid-000: ================= START STATUS ================= [ 59.705626][ T6340] vivid-000: Radio HW Seek Mode: Bounded [ 59.705697][ T6340] vivid-000: Radio Programmable HW Seek: false [ 59.705710][ T6340] vivid-000: RDS Rx I/O Mode: Block I/O [ 59.705720][ T6340] vivid-000: Generate RBDS Instead of RDS: false [ 59.705732][ T6340] vivid-000: RDS Reception: true [ 59.705742][ T6340] vivid-000: RDS Program Type: 0 inactive [ 59.705756][ T6340] vivid-000: RDS PS Name: inactive [ 59.705769][ T6340] vivid-000: RDS Radio Text: inactive [ 59.705787][ T6340] vivid-000: RDS Traffic Announcement: false inactive [ 59.705800][ T6340] vivid-000: RDS Traffic Program: false inactive [ 59.705813][ T6340] vivid-000: RDS Music: false inactive [ 59.705826][ T6340] vivid-000: ================== END STATUS ================== [ 59.923424][ T6348] usbtmc 8-1:16.0: control status returned 0 [ 60.332956][ T6355] FAULT_INJECTION: forcing a failure. [ 60.332956][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 60.333019][ T6355] CPU: 2 UID: 0 PID: 6355 Comm: syz.1.173 Not tainted syzkaller #0 PREEMPT(full) [ 60.333056][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.333065][ T6355] Call Trace: [ 60.333070][ T6355] [ 60.333077][ T6355] dump_stack_lvl+0x100/0x190 [ 60.333107][ T6355] should_fail_ex.cold+0x5/0xa [ 60.333133][ T6355] should_failslab+0xc2/0x120 [ 60.333153][ T6355] __kmalloc_node_noprof+0xff/0x880 [ 60.333171][ T6355] ? __get_vm_area_node+0x1ff/0x350 [ 60.333192][ T6355] ? __get_vm_area_node+0x22b/0x350 [ 60.333209][ T6355] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 60.333232][ T6355] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 60.333261][ T6355] ? bpf_check+0x1800/0xa7c0 [ 60.333286][ T6355] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.333310][ T6355] ? avc_has_perm_noaudit+0x145/0x3b0 [ 60.333332][ T6355] ? bpf_check+0x1800/0xa7c0 [ 60.333367][ T6355] __vmalloc_node_noprof+0xad/0xf0 [ 60.333388][ T6355] ? bpf_check+0x1800/0xa7c0 [ 60.333406][ T6355] __vmalloc_noprof+0xa3/0x120 [ 60.333425][ T6355] ? __pfx___vmalloc_noprof+0x10/0x10 [ 60.333449][ T6355] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 60.333471][ T6355] ? security_bpf_prog_load+0x10f/0x2f0 [ 60.333486][ T6355] ? bpf_vlog_init+0x118/0x150 [ 60.333508][ T6355] bpf_check+0x1800/0xa7c0 [ 60.333529][ T6355] ? __css_rstat_updated+0x1ce/0x590 [ 60.333548][ T6355] ? __lock_acquire+0x4c5/0x1ec0 [ 60.333571][ T6355] ? __lock_acquire+0x4c5/0x1ec0 [ 60.333591][ T6355] ? __pfx_bpf_check+0x10/0x10 [ 60.333627][ T6355] ? lock_acquire+0x1d1/0x380 [ 60.333642][ T6355] ? bpf_prog_load+0x1a09/0x2a80 [ 60.333662][ T6355] ? find_held_lock+0x2b/0x80 [ 60.333676][ T6355] ? bpf_prog_load+0x1a09/0x2a80 [ 60.333694][ T6355] ? __asan_memset+0x23/0x50 [ 60.333722][ T6355] ? bpf_prog_load+0x1ac3/0x2a80 [ 60.333742][ T6355] bpf_prog_load+0x1ac3/0x2a80 [ 60.333766][ T6355] ? __pfx_bpf_prog_load+0x10/0x10 [ 60.333792][ T6355] __sys_bpf+0x1f46/0x4a30 [ 60.333805][ T6355] ? __pfx___sys_bpf+0x10/0x10 [ 60.333819][ T6355] ? find_held_lock+0x2b/0x80 [ 60.333833][ T6355] ? get_pid_task+0xfc/0x250 [ 60.333847][ T6355] ? get_pid_task+0xfc/0x250 [ 60.333865][ T6355] ? find_held_lock+0x2b/0x80 [ 60.333882][ T6355] ? rcu_read_lock_any_held+0x6a/0x90 [ 60.333902][ T6355] ? find_held_lock+0x2b/0x80 [ 60.333922][ T6355] ? ksys_write+0x190/0x250 [ 60.333938][ T6355] ? ksys_write+0x190/0x250 [ 60.333953][ T6355] ? lock_acquire+0x1d1/0x380 [ 60.333978][ T6355] ? fput+0x7c/0x100 [ 60.333996][ T6355] ? ksys_write+0x1ac/0x250 [ 60.334060][ T6355] ? __x64_sys_bpf+0xce/0x140 [ 60.334109][ T6355] __x64_sys_bpf+0xce/0x140 [ 60.334128][ T6355] ? do_syscall_64+0xae/0x790 [ 60.334150][ T6355] do_syscall_64+0x123/0x790 [ 60.334167][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.334180][ T6355] RIP: 0033:0x7f4a5879e159 [ 60.334190][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.334205][ T6355] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.334229][ T6355] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 60.334241][ T6355] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 60.334251][ T6355] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.334260][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.334268][ T6355] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 60.334284][ T6355] [ 60.497010][ T6365] FAULT_INJECTION: forcing a failure. [ 60.497010][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.497071][ T6365] CPU: 3 UID: 0 PID: 6365 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 60.497096][ T6365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.497105][ T6365] Call Trace: [ 60.497109][ T6365] [ 60.497114][ T6365] dump_stack_lvl+0x100/0x190 [ 60.497136][ T6365] should_fail_ex.cold+0x5/0xa [ 60.497153][ T6365] _copy_to_user+0x32/0xd0 [ 60.497172][ T6365] ptr_to_user+0x23c/0x5c0 [ 60.497189][ T6365] ? __pfx_ptr_to_user+0x10/0x10 [ 60.497207][ T6365] ? __pfx_v4l2_ctrl_type_op_maximum+0x10/0x10 [ 60.497223][ T6365] v4l2_g_ext_ctrls_common+0xca1/0x1160 [ 60.497246][ T6365] ? __pfx_v4l2_g_ext_ctrls_common+0x10/0x10 [ 60.497273][ T6365] v4l2_g_ext_ctrls+0x66/0xc0 [ 60.497291][ T6365] v4l_g_ext_ctrls+0x202/0x2d0 [ 60.497305][ T6365] __video_do_ioctl+0xb2a/0xdf0 [ 60.497339][ T6365] ? __might_fault+0xc5/0x140 [ 60.497357][ T6365] ? __pfx___video_do_ioctl+0x10/0x10 [ 60.497376][ T6365] video_usercopy+0x47a/0x1730 [ 60.497391][ T6365] ? __pfx___video_do_ioctl+0x10/0x10 [ 60.497406][ T6365] ? __pfx_video_usercopy+0x10/0x10 [ 60.497430][ T6365] v4l2_ioctl+0x1bd/0x250 [ 60.497444][ T6365] ? __pfx_v4l2_ioctl+0x10/0x10 [ 60.497460][ T6365] __x64_sys_ioctl+0x18e/0x210 [ 60.497479][ T6365] do_syscall_64+0x123/0x790 [ 60.497496][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.497508][ T6365] RIP: 0033:0x7f4a5879e159 [ 60.497518][ T6365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.497529][ T6365] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.497541][ T6365] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 60.497548][ T6365] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 60.497555][ T6365] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.497562][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.497569][ T6365] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 60.497584][ T6365] [ 60.542278][ T10] tipc: Node number set to 11578026 [ 61.577173][ T1801] usb 8-1: USB disconnect, device number 2 [ 61.677660][ T6377] bridge0: port 3(ipvlan2) entered blocking state [ 61.680520][ T6377] bridge0: port 3(ipvlan2) entered disabled state [ 61.683106][ T6377] ipvlan2: entered allmulticast mode [ 61.685370][ T6377] bridge0: entered allmulticast mode [ 61.690450][ T6377] ipvlan2: left allmulticast mode [ 61.690851][ T6377] bridge0: left allmulticast mode [ 61.804343][ T6382] FAULT_INJECTION: forcing a failure. [ 61.804343][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 61.804418][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.1.185 Not tainted syzkaller #0 PREEMPT(full) [ 61.804452][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.804463][ T6382] Call Trace: [ 61.804470][ T6382] [ 61.804477][ T6382] dump_stack_lvl+0x100/0x190 [ 61.804509][ T6382] should_fail_ex.cold+0x5/0xa [ 61.804533][ T6382] should_failslab+0xc2/0x120 [ 61.804556][ T6382] __kmalloc_node_noprof+0xff/0x880 [ 61.804574][ T6382] ? __get_vm_area_node+0x1ff/0x350 [ 61.804594][ T6382] ? __get_vm_area_node+0x22b/0x350 [ 61.804615][ T6382] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 61.804639][ T6382] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 61.804670][ T6382] ? bpf_check+0x1800/0xa7c0 [ 61.804699][ T6382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.804727][ T6382] ? avc_has_perm_noaudit+0x145/0x3b0 [ 61.804753][ T6382] ? bpf_check+0x1800/0xa7c0 [ 61.804774][ T6382] __vmalloc_node_noprof+0xad/0xf0 [ 61.804797][ T6382] ? bpf_check+0x1800/0xa7c0 [ 61.804822][ T6382] __vmalloc_noprof+0xa3/0x120 [ 61.804845][ T6382] ? __pfx___vmalloc_noprof+0x10/0x10 [ 61.804870][ T6382] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 61.804894][ T6382] ? security_bpf_prog_load+0x10f/0x2f0 [ 61.804910][ T6382] ? bpf_vlog_init+0x118/0x150 [ 61.804935][ T6382] bpf_check+0x1800/0xa7c0 [ 61.804958][ T6382] ? __css_rstat_updated+0x1ce/0x590 [ 61.804977][ T6382] ? __lock_acquire+0x4c5/0x1ec0 [ 61.805002][ T6382] ? __lock_acquire+0x4c5/0x1ec0 [ 61.805027][ T6382] ? __pfx_bpf_check+0x10/0x10 [ 61.805049][ T6382] ? lock_acquire+0x1d1/0x380 [ 61.805064][ T6382] ? bpf_prog_load+0x1a09/0x2a80 [ 61.805086][ T6382] ? find_held_lock+0x2b/0x80 [ 61.805113][ T6382] ? bpf_prog_load+0x1a09/0x2a80 [ 61.805138][ T6382] ? __asan_memset+0x23/0x50 [ 61.805168][ T6382] ? bpf_prog_load+0x1ac3/0x2a80 [ 61.805187][ T6382] bpf_prog_load+0x1ac3/0x2a80 [ 61.805213][ T6382] ? __pfx_bpf_prog_load+0x10/0x10 [ 61.805268][ T6382] __sys_bpf+0x1f46/0x4a30 [ 61.805289][ T6382] ? __pfx___sys_bpf+0x10/0x10 [ 61.805306][ T6382] ? find_held_lock+0x2b/0x80 [ 61.805328][ T6382] ? get_pid_task+0xfc/0x250 [ 61.805348][ T6382] ? get_pid_task+0xfc/0x250 [ 61.805377][ T6382] ? find_held_lock+0x2b/0x80 [ 61.805404][ T6382] ? rcu_read_lock_any_held+0x6a/0x90 [ 61.805428][ T6382] ? find_held_lock+0x2b/0x80 [ 61.805448][ T6382] ? ksys_write+0x190/0x250 [ 61.805465][ T6382] ? ksys_write+0x190/0x250 [ 61.805479][ T6382] ? lock_acquire+0x1d1/0x380 [ 61.805511][ T6382] ? fput+0x7c/0x100 [ 61.805531][ T6382] ? ksys_write+0x1ac/0x250 [ 61.805548][ T6382] ? __x64_sys_bpf+0xce/0x140 [ 61.805564][ T6382] __x64_sys_bpf+0xce/0x140 [ 61.805580][ T6382] ? do_syscall_64+0xae/0x790 [ 61.805602][ T6382] do_syscall_64+0x123/0x790 [ 61.805623][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.805641][ T6382] RIP: 0033:0x7f4a5879e159 [ 61.805655][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.805671][ T6382] RSP: 002b:00007f4a5961f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.805689][ T6382] RAX: ffffffffffffffda RBX: 00007f4a58a25fa0 RCX: 00007f4a5879e159 [ 61.805700][ T6382] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 61.805709][ T6382] RBP: 00007f4a5961f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.805721][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.805730][ T6382] R13: 00007f4a58a26038 R14: 00007f4a58a25fa0 R15: 00007fffac519f18 [ 61.805752][ T6382] [ 61.890879][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 61.892552][ T5729] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.905176][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 61.958163][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 62.138597][ T6405] FAULT_INJECTION: forcing a failure. [ 62.138597][ T6405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.138694][ T6405] CPU: 3 UID: 0 PID: 6405 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) [ 62.138729][ T6405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.138742][ T6405] Call Trace: [ 62.138749][ T6405] [ 62.138756][ T6405] dump_stack_lvl+0x100/0x190 [ 62.138788][ T6405] should_fail_ex.cold+0x5/0xa [ 62.138813][ T6405] _copy_to_user+0x32/0xd0 [ 62.138849][ T6405] video_usercopy+0x61e/0x1730 [ 62.138877][ T6405] ? __pfx_video_usercopy+0x10/0x10 [ 62.138915][ T6405] v4l2_ioctl+0x1bd/0x250 [ 62.138937][ T6405] ? __pfx_v4l2_ioctl+0x10/0x10 [ 62.138960][ T6405] __x64_sys_ioctl+0x18e/0x210 [ 62.138990][ T6405] do_syscall_64+0x123/0x790 [ 62.139013][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.139031][ T6405] RIP: 0033:0x7fd96179e159 [ 62.139046][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.139063][ T6405] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.139081][ T6405] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 62.139092][ T6405] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 62.139109][ T6405] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 62.139119][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.139129][ T6405] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 62.139153][ T6405] [ 62.228480][ T6409] macvtap1: entered allmulticast mode [ 62.228563][ T6409] bond0: entered allmulticast mode [ 62.228636][ T6409] bond_slave_0: entered allmulticast mode [ 62.228658][ T6409] bond_slave_1: entered allmulticast mode [ 62.228756][ T6409] bond_slave_0: entered promiscuous mode [ 62.228793][ T6409] bond_slave_1: entered promiscuous mode [ 62.230011][ T6409] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 62.234505][ T6409] bond0: left allmulticast mode [ 62.234520][ T6409] bond_slave_0: left allmulticast mode [ 62.234534][ T6409] bond_slave_1: left allmulticast mode [ 62.261562][ T1801] bond_slave_0: left promiscuous mode [ 62.261636][ T1801] bond_slave_1: left promiscuous mode [ 62.801340][ T1801] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.844415][ T6433] FAULT_INJECTION: forcing a failure. [ 62.844415][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.844474][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 62.844507][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.844520][ T6433] Call Trace: [ 62.844526][ T6433] [ 62.844533][ T6433] dump_stack_lvl+0x100/0x190 [ 62.844562][ T6433] should_fail_ex.cold+0x5/0xa [ 62.844598][ T6433] _copy_to_user+0x32/0xd0 [ 62.844630][ T6433] video_usercopy+0xece/0x1730 [ 62.844658][ T6433] ? __pfx_video_usercopy+0x10/0x10 [ 62.844694][ T6433] v4l2_ioctl+0x1bd/0x250 [ 62.844716][ T6433] ? __pfx_v4l2_ioctl+0x10/0x10 [ 62.844740][ T6433] __x64_sys_ioctl+0x18e/0x210 [ 62.844769][ T6433] do_syscall_64+0x123/0x790 [ 62.844794][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.844813][ T6433] RIP: 0033:0x7fd96179e159 [ 62.844828][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.844845][ T6433] RSP: 002b:00007fd96264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.844862][ T6433] RAX: ffffffffffffffda RBX: 00007fd961a25fa0 RCX: 00007fd96179e159 [ 62.844873][ T6433] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 62.844885][ T6433] RBP: 00007fd96264b090 R08: 0000000000000000 R09: 0000000000000000 [ 62.844895][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.844905][ T6433] R13: 00007fd961a26038 R14: 00007fd961a25fa0 R15: 00007ffd367782e8 [ 62.844928][ T6433] [ 62.904557][ T6435] macvtap1: entered allmulticast mode [ 62.904573][ T6435] bond0: entered allmulticast mode [ 62.904581][ T6435] bond_slave_0: entered allmulticast mode [ 62.904591][ T6435] bond_slave_1: entered allmulticast mode [ 62.904618][ T6435] bond_slave_0: entered promiscuous mode [ 62.904635][ T6435] bond_slave_1: entered promiscuous mode [ 62.911836][ T6435] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 62.955804][ T1801] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 62.957604][ T1801] usb 5-1: Dual-Role OTG device on HNP port [ 62.957881][ T1801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.971502][ T6435] bond0: left allmulticast mode [ 62.971583][ T6435] bond_slave_0: left allmulticast mode [ 62.971649][ T6435] bond_slave_1: left allmulticast mode [ 62.993544][ T1801] gspca_main: spca501-2.14.0 probing 0000:0000 [ 62.994327][ T1801] gspca_spca501: reg w ** replaying previous printk message ** [ 62.994327][ T1801] gspca_spca501: reg write: error -32 [ 62.994336][ T1801] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 62.994370][ T1801] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 62.998114][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 63.011126][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 63.014243][ C3] CPU: 3 UID: 0 PID: 1801 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 63.017271][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.020685][ C3] Workqueue: usb_hub_wq hub_event [ 63.022310][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 63.024260][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 63.030377][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 63.032277][ C3] RAX: dffffc0000000000 RBX: ffff888035a6c000 RCX: 0000000000000103 [ 63.034731][ C3] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff888035a6c128 [ 63.037311][ C3] RBP: ffff888035a6c128 R08: 0000000000000004 R09: 0000000000000020 [ 63.039878][ C3] R10: 0000000000000020 R11: 000000000000762b R12: ffff888035a6c0f0 [ 63.042471][ C3] R13: ffff888035a6c128 R14: ffff888035a6c740 R15: 0000000000000001 [ 63.045216][ C3] FS: 0000000000000000(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 63.048636][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.051138][ C3] CR2: 0000001b32d23ffc CR3: 0000000038848000 CR4: 0000000000352ef0 [ 63.054005][ C3] Call Trace: [ 63.055067][ C3] [ 63.055949][ C3] f_midi2_set_alt+0x444/0x5f0 [ 63.057386][ C3] composite_setup+0x16f8/0x9290 [ 63.059044][ C3] ? __lock_acquire+0x4c5/0x1ec0 [ 63.060619][ C3] ? kcov_remote_stop+0x27d/0x560 [ 63.062191][ C3] ? __pfx_composite_setup+0x10/0x10 [ 63.063929][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.065565][ C3] ? do_raw_spin_lock+0x128/0x260 [ 63.067258][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.069042][ C3] ? configfs_composite_setup+0xfb/0x130 [ 63.071169][ C3] configfs_composite_setup+0xfb/0x130 [ 63.073384][ C3] dummy_timer+0x2039/0x3700 [ 63.075098][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.077084][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 63.078922][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 63.080557][ C3] ? mark_held_locks+0x40/0x70 [ 63.082099][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.083889][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 63.085563][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 63.087295][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 63.088908][ C3] handle_softirqs+0x1e6/0x9d0 [ 63.090519][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 63.092194][ C3] ? _raw_spin_unlock+0x28/0x50 [ 63.093730][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 63.095527][ C3] __irq_exit_rcu+0x194/0x210 [ 63.097055][ C3] irq_exit_rcu+0x9/0x30 [ 63.098433][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 63.100324][ C3] [ 63.101249][ C3] [ 63.102202][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 63.104060][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 63.106027][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 3d 14 f6 48 89 df e8 4e 93 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 9a 03 f6 65 48 83 3d e4 14 b9 08 00 74 16 5b [ 63.112752][ C3] RSP: 0018:ffffc90006c7e880 EFLAGS: 00000246 [ 63.114855][ C3] RAX: 0000000000000002 RBX: ffff88802afcc000 RCX: 0000000000000040 [ 63.117362][ C3] RDX: 0000000000000001 RSI: ffffffff8e3ebe0c RDI: ffffffff8c621080 [ 63.120017][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 63.122522][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 63.125056][ C3] R13: ffff88802b5c1478 R14: 0000000000000000 R15: ffff88802b5c1400 [ 63.127798][ C3] dummy_urb_enqueue+0x56c/0x880 [ 63.129858][ C3] ? __device_attach_driver+0x1b1/0x320 [ 63.132396][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 63.134683][ C3] ? bus_for_each_drv+0x159/0x1e0 [ 63.136743][ C3] ? __device_attach+0x1e4/0x4d0 [ 63.138784][ C3] ? device_initial_probe+0xaf/0xd0 [ 63.140918][ C3] ? bus_probe_device+0x64/0x160 [ 63.142997][ C3] ? device_add+0x121d/0x1970 [ 63.145204][ C3] ? usb_new_device.part.0+0xcc2/0x1686 [ 63.147844][ C3] ? hub_event.cold+0x1e3/0xe90 [ 63.150235][ C3] usb_submit_urb+0x827/0x19b0 [ 63.152205][ C3] ? __init_swait_queue_head+0xca/0x150 [ 63.154519][ C3] usb_start_wait_urb+0x10e/0x580 [ 63.156589][ C3] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 63.158888][ C3] ? __asan_memset+0x23/0x50 [ 63.161025][ C3] usb_control_msg+0x328/0x4b0 [ 63.163670][ C3] ? __pfx_usb_control_msg+0x10/0x10 [ 63.166149][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.168380][ C3] usb_control_msg_send+0xca/0x130 [ 63.170640][ C3] usb_set_interface+0x9b6/0xe20 [ 63.172698][ C3] snd_usb_midi_v2_create+0x629/0x4070 [ 63.174977][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 63.177321][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 63.179639][ C3] ? snd_info_create_entry+0x6f/0x400 [ 63.181365][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 63.183117][ C3] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 63.185051][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 63.186929][ C3] ? snd_info_create_entry+0x314/0x400 [ 63.188883][ C3] ? usb_ifnum_to_if+0x16f/0x1d0 [ 63.190607][ C3] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 63.192520][ C3] usb_audio_probe+0xf0b/0x3b10 [ 63.194566][ C3] ? __pfx_usb_audio_probe+0x10/0x10 [ 63.196727][ C3] ? do_raw_spin_lock+0x128/0x260 [ 63.198845][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.201050][ C3] ? mark_held_locks+0x40/0x70 [ 63.202967][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 63.205078][ C3] ? find_held_lock+0x2b/0x80 [ 63.206820][ C3] ? mark_held_locks+0x40/0x70 [ 63.208521][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.210796][ C3] usb_probe_interface+0x386/0x9b0 [ 63.212376][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 63.214150][ C3] ? kernfs_put+0x3f/0x60 [ 63.215606][ C3] ? sysfs_create_link+0x68/0xc0 [ 63.217546][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 63.219918][ C3] really_probe+0x241/0xa60 [ 63.221625][ C3] __driver_probe_device+0x210/0x460 [ 63.223425][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.226105][ C3] driver_probe_device+0x4a/0x140 [ 63.228244][ C3] __device_attach_driver+0x1df/0x320 [ 63.230082][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 63.231912][ C3] bus_for_each_drv+0x159/0x1e0 [ 63.233447][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.235391][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.237540][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.239957][ C3] __device_attach+0x1e4/0x4d0 [ 63.242197][ C3] ? __pfx___device_attach+0x10/0x10 [ 63.244668][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.246788][ C3] device_initial_probe+0xaf/0xd0 [ 63.248544][ C3] bus_probe_device+0x64/0x160 [ 63.250174][ C3] device_add+0x121d/0x1970 [ 63.251660][ C3] ? __pfx_device_add+0x10/0x10 [ 63.253323][ C3] ? mark_held_locks+0x40/0x70 [ 63.254891][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.256696][ C3] usb_set_configuration+0xd97/0x1c60 [ 63.258487][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 63.260724][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 63.262584][ C3] usb_probe_device+0xef/0x400 [ 63.264383][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 63.266123][ C3] really_probe+0x241/0xa60 [ 63.267491][ C3] __driver_probe_device+0x210/0x460 [ 63.269086][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.270881][ C3] driver_probe_device+0x4a/0x140 [ 63.272421][ C3] __device_attach_driver+0x1df/0x320 [ 63.274220][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 63.276220][ C3] bus_for_each_drv+0x159/0x1e0 [ 63.277919][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.279808][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.281343][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.283082][ C3] __device_attach+0x1e4/0x4d0 [ 63.284550][ C3] ? __pfx___device_attach+0x10/0x10 [ 63.286317][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.287887][ C3] device_initial_probe+0xaf/0xd0 [ 63.289460][ C3] bus_probe_device+0x64/0x160 [ 63.290978][ C3] device_add+0x121d/0x1970 [ 63.292339][ C3] ? __pfx_device_add+0x10/0x10 [ 63.293832][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 63.295848][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 63.297540][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 63.299499][ C3] ? mark_held_locks+0x40/0x70 [ 63.301215][ C3] hub_event.cold+0x1e3/0xe90 [ 63.302838][ C3] ? __pfx_hub_event+0x10/0x10 [ 63.304296][ C3] ? print_usage_bug.part.0+0x1f0/0x340 [ 63.305986][ C3] ? lock_acquire+0x1d1/0x380 [ 63.307464][ C3] ? process_one_work+0xa2c/0x1b10 [ 63.309015][ C3] ? process_one_work+0x906/0x1b10 [ 63.310601][ C3] ? process_one_work+0x906/0x1b10 [ 63.312122][ C3] process_one_work+0xac7/0x1b10 [ 63.313703][ C3] ? __pfx_process_one_work+0x10/0x10 [ 63.315851][ C3] ? lock_acquire+0x1d1/0x380 [ 63.318152][ C3] ? __pfx_hub_event+0x10/0x10 [ 63.319654][ C3] worker_thread+0x5ef/0xe50 [ 63.321039][ C3] ? __pfx_worker_thread+0x10/0x10 [ 63.322554][ C3] ? kthread+0x13a/0x450 [ 63.323834][ C3] ? __pfx_worker_thread+0x10/0x10 [ 63.325337][ C3] kthread+0x373/0x450 [ 63.326574][ C3] ? __pfx_kthread+0x10/0x10 [ 63.328006][ C3] ret_from_fork+0x730/0xd60 [ 63.329418][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 63.330984][ C3] ? __switch_to+0x800/0x10f0 [ 63.332425][ C3] ? __pfx_kthread+0x10/0x10 [ 63.333790][ C3] ret_from_fork_asm+0x1a/0x30 [ 63.335395][ C3] [ 63.336529][ C3] Modules linked in: [ 63.337794][ C3] ---[ end trace 0000000000000000 ]--- [ 63.339787][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 63.339814][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 63.339827][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 63.339838][ C3] RAX: dffffc0000000000 RBX: ffff888035a6c000 RCX: 0000000000000103 [ 63.339847][ C3] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff888035a6c128 [ 63.339855][ C3] RBP: ffff888035a6c128 R08: 0000000000000004 R09: 0000000000000020 [ 63.339863][ C3] R10: 0000000000000020 R11: 000000000000762b R12: ffff888035a6c0f0 [ 63.339871][ C3] R13: ffff888035a6c128 R14: ffff888035a6c740 R15: 0000000000000001 [ 63.339880][ C3] FS: 0000000000000000(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 63.339906][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.339918][ C3] CR2: 0000001b32d23ffc CR3: 0000000038848000 CR4: 0000000000352ef0 [ 63.339928][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 63.372934][ C3] Kernel Offset: disabled [ 63.374558][ C3] Rebooting in 86400 seconds..