last executing test programs: 1.310328931s ago: executing program 3 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x5c000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.297076701s ago: executing program 0 (id=629): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x4e55}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket$packet(0x11, 0x3, 0x300) 1.294346149s ago: executing program 3 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.220879167s ago: executing program 3 (id=634): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) 1.220296825s ago: executing program 3 (id=635): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x2000000, 0x0, 0x40001}, 0x0) 1.141246609s ago: executing program 3 (id=636): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000100106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) 990.985404ms ago: executing program 3 (id=637): socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vcsa(0x0, 0x1, 0x801) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}}, 0x880) r4 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0xf0, 0x258, 0xffffffff, 0x348, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000140), {[{{@ipv6={@mcast1, @mcast2, [0x80ffff80, 0xffffff00, 0xff, 0xffffff00], [0xff, 0xff, 0xffffff00], 'gre0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3a, 0x9, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@broadcast, @ipv4=@remote, @port=0x4e22, @gre_key=0x8}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x6], 0xa, 0x39, 0x2}}, @common=@hbh={{0x48}, {0x8001, 0x1, 0x1, [0x6, 0x0, 0x5, 0x1, 0x1, 0x6, 0x6, 0x1, 0x8, 0x401, 0x2, 0x8, 0x8, 0x5, 0xa, 0x6], 0x6}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@remote, @ipv4=@empty, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'pimreg1\x00', 'xfrm0\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}, @port=0x4e21, @gre_key=0x200}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xff], 'pim6reg1\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x2, 0x0, 0x4, 0x6c}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, @ipv6=@empty, @port=0x4e20, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) ioctl(r5, 0xc4c85513, &(0x7f0000000200)) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x24040085}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 990.645706ms ago: executing program 0 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f0000000640)={0x180, 0x0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x400e011}, 0x24000814) 919.556442ms ago: executing program 0 (id=640): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0xfff, 0x4) 919.33458ms ago: executing program 0 (id=641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x1000000b, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x9, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a623, 0x2, 0x1, 0x1, 0x2, 0x4005, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x4, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xfeff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 870.620153ms ago: executing program 0 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0/file1\x00', &(0x7f00000000c0)='befs\x00', 0x86, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f00003ae000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, 0x1000, 0x2}) rmdir(&(0x7f0000000200)='./file0/file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101000, 0x12, 0x19}, 0x18) 269.143509ms ago: executing program 2 (id=666): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 268.734865ms ago: executing program 2 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r0, &(0x7f0000000c00)=""/4096, 0x1000) read$qrtrtun(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE64(r1, 0x40104d14, &(0x7f0000000600)={0x0, 0x2000000}) 220.695832ms ago: executing program 1 (id=669): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f0000000640)={0x180, r0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x400e011}, 0x24000814) 220.599401ms ago: executing program 2 (id=671): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002280)={0x10, 0xffffffffffffffda}, 0x12) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 211.0246ms ago: executing program 1 (id=672): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) 210.917159ms ago: executing program 2 (id=673): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f0000000640)={0x18c, r0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400e011}, 0x24000814) 150.021789ms ago: executing program 1 (id=674): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi1\x00', 0x400, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0], 0xfffffffffffffc4b) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) lstat(&(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x2000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x8, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x9, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 149.473386ms ago: executing program 2 (id=675): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x545}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1c}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x20050891}, 0x10) r3 = socket(0xa, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xf) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'team0\x00'}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) getsockname$unix(r3, &(0x7f0000000400), &(0x7f0000000480)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) 149.225522ms ago: executing program 1 (id=676): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 148.801755ms ago: executing program 2 (id=677): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180)) r2 = creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(0xffffffffffffffff, 0xd, 0x2, 0x400001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000800)={0x1, 'lo\x00'}, 0x18) fcntl$addseals(r4, 0x409, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f0000000140)={0x0, 0x0, 0x7fff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@setneightbl={0x14, 0x43, 0x100, 0x70bd28, 0x25dfdbf3, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x44000) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x40000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x68}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0xfa00, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_generic(r3, 0x0, 0xc000) 89.934837ms ago: executing program 1 (id=678): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 89.329549ms ago: executing program 1 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000041100001c00b3e709000100626f6e64000000000c00028005001d0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={0x48, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000004500), 0xc00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x28002, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={r11, 0x1, 0x3, 0x2, &(0x7f0000000200)=[{0x0, 0x5, 0x9, 0xbc2}, {0x5, 0x6, 0x200, 0x4}]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000004c0)={r8, 0x0, r11, 0x49, 0x5, 0x7d, 0x7, 0x1, 0x644b, 0x5, 0x0, 0x7ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 0 (id=680): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0x32f901) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) kernel console output (not intermixed with test programs): `syz.2.9'. [ 40.448622][ T5905] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 40.632070][ T5912] process 'syz.3.12' launched './file0' with NULL argv: empty string added [ 40.651133][ T5912] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 40.703653][ T5920] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 40.709304][ T5920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 40.764397][ T5922] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 41.243622][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.305288][ T5948] netlink: 76 bytes leftover after parsing attributes in process `syz.1.21'. [ 41.491988][ T5955] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 41.599210][ T5960] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 41.620393][ T5735] Bluetooth: hci3: command tx timeout [ 41.620431][ T5735] Bluetooth: hci0: command tx timeout [ 41.620477][ T5733] Bluetooth: hci1: command tx timeout [ 42.105797][ T5735] Bluetooth: hci2: command tx timeout [ 42.273524][ T5987] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 42.313373][ T5991] netlink: 76 bytes leftover after parsing attributes in process `syz.3.35'. [ 42.467560][ T44] kauditd_printk_skb: 120 callbacks suppressed [ 42.467574][ T44] audit: type=1400 audit(1789379667.327:292): avc: denied { execmem } for pid=5993 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.468235][ T44] audit: type=1400 audit(1789379667.327:293): avc: denied { ioctl } for pid=5993 comm="syz.0.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11010 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.554263][ T6000] FAULT_INJECTION: forcing a failure. [ 42.554263][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 42.554283][ T6000] CPU: 3 UID: 0 PID: 6000 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 42.554295][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.554302][ T6000] Call Trace: [ 42.554306][ T6000] [ 42.554310][ T6000] dump_stack_lvl+0x100/0x190 [ 42.554331][ T6000] should_fail_ex.cold+0x5/0xa [ 42.554346][ T6000] ? __pfx_hci_acl_create_conn_sync+0x10/0x10 [ 42.554360][ T6000] should_failslab+0xc2/0x120 [ 42.554374][ T6000] ? __pfx_hci_acl_create_conn_sync+0x10/0x10 [ 42.554407][ T6000] __kmalloc_cache_noprof+0x91/0x6d0 [ 42.554425][ T6000] ? __mutex_unlock_slowpath+0x35d/0x930 [ 42.554441][ T6000] ? hci_cmd_sync_submit+0xbc/0x330 [ 42.554458][ T6000] ? __pfx_hci_acl_create_conn_sync_complete+0x10/0x10 [ 42.554475][ T6000] ? __pfx_hci_acl_create_conn_sync+0x10/0x10 [ 42.554488][ T6000] hci_cmd_sync_submit+0xbc/0x330 [ 42.554504][ T6000] ? __pfx_hci_acl_create_conn_sync+0x10/0x10 [ 42.554517][ T6000] ? __pfx_hci_acl_create_conn_sync_complete+0x10/0x10 [ 42.554534][ T6000] hci_cmd_sync_queue+0x79/0xa0 [ 42.554550][ T6000] ? __pfx_hci_acl_create_conn_sync+0x10/0x10 [ 42.554563][ T6000] hci_cmd_sync_queue_once+0x1c5/0x240 [ 42.554580][ T6000] ? __pfx_hci_acl_create_conn_sync_complete+0x10/0x10 [ 42.554604][ T6000] hci_connect_acl_sync+0x3b/0x90 [ 42.554616][ T6000] hci_connect_acl+0x424/0x7b0 [ 42.554634][ T6000] hci_connect_sco+0x58/0xef0 [ 42.554651][ T6000] sco_sock_connect+0x63a/0xf60 [ 42.554667][ T6000] ? __pfx_sco_sock_connect+0x10/0x10 [ 42.554682][ T6000] ? __local_bh_enable_ip+0xa5/0x120 [ 42.554693][ T6000] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.554707][ T6000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 42.554720][ T6000] ? __local_bh_enable_ip+0xa5/0x120 [ 42.554732][ T6000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 42.554744][ T6000] ? selinux_socket_connect+0x6b/0x80 [ 42.554764][ T6000] __sys_connect_file+0x146/0x1a0 [ 42.554777][ T6000] __sys_connect+0x141/0x170 [ 42.554789][ T6000] ? __pfx___sys_connect+0x10/0x10 [ 42.554799][ T6000] ? __fget_files+0x21f/0x3d0 [ 42.554817][ T6000] ? __pfx_ksys_write+0x10/0x10 [ 42.554832][ T6000] __x64_sys_connect+0x72/0xb0 [ 42.554842][ T6000] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.554856][ T6000] do_syscall_64+0x123/0x790 [ 42.554872][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.554884][ T6000] RIP: 0033:0x7f08eef9e159 [ 42.554893][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.554903][ T6000] RSP: 002b:00007f08efdca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 42.554914][ T6000] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 42.554921][ T6000] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000004 [ 42.554927][ T6000] RBP: 00007f08efdca090 R08: 0000000000000000 R09: 0000000000000000 [ 42.554934][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.554940][ T6000] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 42.554953][ T6000] [ 42.675526][ T6008] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 42.682326][ T6006] syzkaller0: entered promiscuous mode [ 42.682347][ T6006] syzkaller0: entered allmulticast mode [ 42.833508][ T44] audit: type=1400 audit(1789379667.687:294): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 42.860858][ T44] audit: type=1400 audit(1789379667.717:295): avc: denied { bind } for pid=6018 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.861285][ T6020] FAULT_INJECTION: forcing a failure. [ 42.861285][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 42.861302][ T6020] CPU: 2 UID: 0 PID: 6020 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) [ 42.861314][ T6020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.861320][ T6020] Call Trace: [ 42.861324][ T6020] [ 42.861328][ T6020] dump_stack_lvl+0x100/0x190 [ 42.861348][ T6020] should_fail_ex.cold+0x5/0xa [ 42.861364][ T6020] should_failslab+0xc2/0x120 [ 42.861379][ T6020] __kmalloc_noprof+0xfc/0x840 [ 42.861411][ T6020] ? __pfx_dynamic_dname+0x10/0x10 [ 42.861423][ T6020] ? tomoyo_encode2+0xfb/0x3c0 [ 42.861438][ T6020] tomoyo_encode2+0xfb/0x3c0 [ 42.861452][ T6020] tomoyo_encode+0x29/0x50 [ 42.861465][ T6020] tomoyo_realpath_from_path+0x18c/0x690 [ 42.861481][ T6020] tomoyo_path_number_perm+0x23c/0x580 [ 42.861491][ T6020] ? tomoyo_path_number_perm+0x22e/0x580 [ 42.861503][ T6020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 42.861518][ T6020] ? __lock_acquire+0x5c0/0x1f40 [ 42.861536][ T6020] ? __fget_files+0x34/0x3d0 [ 42.861549][ T6020] ? find_held_lock+0x2b/0x80 [ 42.861564][ T6020] ? hook_file_ioctl_common+0x140/0x440 [ 42.861581][ T6020] ? __fget_files+0x21f/0x3d0 [ 42.861597][ T6020] security_file_ioctl+0xd3/0x230 [ 42.861610][ T6020] __x64_sys_ioctl+0xb7/0x210 [ 42.861622][ T6020] do_syscall_64+0x123/0x790 [ 42.861639][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.861650][ T6020] RIP: 0033:0x7ff5d0b9e159 [ 42.861659][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.861669][ T6020] RSP: 002b:00007ff5d19d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.861681][ T6020] RAX: ffffffffffffffda RBX: 00007ff5d0e25fa0 RCX: 00007ff5d0b9e159 [ 42.861687][ T6020] RDX: 0000000000000000 RSI: 00000000800448d7 RDI: 0000000000000004 [ 42.861694][ T6020] RBP: 00007ff5d19d7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.861700][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.861706][ T6020] R13: 00007ff5d0e26038 R14: 00007ff5d0e25fa0 R15: 00007ffced3aff78 [ 42.861719][ T6020] [ 42.861729][ T6020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 42.872777][ T44] audit: type=1400 audit(1789379667.727:296): avc: denied { create } for pid=6017 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.873463][ T44] audit: type=1400 audit(1789379667.727:297): avc: denied { getopt } for pid=6017 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.995442][ T44] audit: type=1400 audit(1789379667.847:298): avc: denied { ioctl } for pid=6026 comm="syz.2.52" path="socket:[9946]" dev="sockfs" ino=9946 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.996478][ T44] audit: type=1400 audit(1789379667.857:299): avc: denied { write } for pid=6026 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 42.997318][ T44] audit: type=1400 audit(1789379667.857:300): avc: denied { read } for pid=6026 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 43.005161][ T6027] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 43.047721][ T44] audit: type=1400 audit(1789379667.907:301): avc: denied { write } for pid=6026 comm="syz.2.52" name="kcm" dev="proc" ino=4026533069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.049072][ T6031] 9p: Invalid gid '0x00000000ffffffff' [ 43.049418][ T6031] netlink: 116 bytes leftover after parsing attributes in process `syz.2.52'. [ 43.215463][ T6038] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 43.517083][ T6042] FAULT_INJECTION: forcing a failure. [ 43.517083][ T6042] name failslab, interval 1, probability 0, space 0, times 0 [ 43.517103][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 43.517115][ T6042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.517121][ T6042] Call Trace: [ 43.517125][ T6042] [ 43.517130][ T6042] dump_stack_lvl+0x100/0x190 [ 43.517150][ T6042] should_fail_ex.cold+0x5/0xa [ 43.517166][ T6042] should_failslab+0xc2/0x120 [ 43.517181][ T6042] __kmalloc_noprof+0xfc/0x840 [ 43.517192][ T6042] ? rcu_is_watching+0x13/0xc0 [ 43.517207][ T6042] ? tomoyo_realpath_from_path+0xb6/0x690 [ 43.517224][ T6042] tomoyo_realpath_from_path+0xb6/0x690 [ 43.517240][ T6042] tomoyo_path_number_perm+0x23c/0x580 [ 43.517250][ T6042] ? tomoyo_path_number_perm+0x22e/0x580 [ 43.517262][ T6042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 43.517277][ T6042] ? __lock_acquire+0x5c0/0x1f40 [ 43.517295][ T6042] ? __fget_files+0x34/0x3d0 [ 43.517325][ T6042] ? find_held_lock+0x2b/0x80 [ 43.517340][ T6042] ? hook_file_ioctl_common+0x140/0x440 [ 43.517357][ T6042] ? __fget_files+0x21f/0x3d0 [ 43.517372][ T6042] security_file_ioctl+0xd3/0x230 [ 43.517405][ T6042] __x64_sys_ioctl+0xb7/0x210 [ 43.517418][ T6042] do_syscall_64+0x123/0x790 [ 43.517434][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.517446][ T6042] RIP: 0033:0x7ff5d0b9e159 [ 43.517455][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.517465][ T6042] RSP: 002b:00007ff5d19d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.517476][ T6042] RAX: ffffffffffffffda RBX: 00007ff5d0e25fa0 RCX: 00007ff5d0b9e159 [ 43.517483][ T6042] RDX: 00002000000004c0 RSI: 0000000080104592 RDI: 0000000000000003 [ 43.517490][ T6042] RBP: 00007ff5d19d7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.517496][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.517502][ T6042] R13: 00007ff5d0e26038 R14: 00007ff5d0e25fa0 R15: 00007ffced3aff78 [ 43.517515][ T6042] [ 43.517554][ T6042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 43.705940][ T5084] Bluetooth: hci3: command tx timeout [ 43.705961][ T5084] Bluetooth: hci0: command 0x040f tx timeout [ 43.707026][ T65] Bluetooth: hci1: command 0x040f tx timeout [ 43.757430][ T6057] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 44.149788][ T6092] overlayfs: unescaped trailing colons in lowerdir mount option. [ 44.186273][ T5731] Bluetooth: hci2: command tx timeout [ 44.262369][ T6109] 9p: Bad value for 'version' [ 44.262381][ T6110] misc userio: Invalid payload size [ 44.263314][ T6109] syz_tun: entered allmulticast mode [ 44.287557][ T6107] syz_tun: left allmulticast mode [ 44.435641][ T6127] block nbd0: server does not support multiple connections per device. [ 44.438572][ T6127] block nbd0: shutting down sockets [ 44.588902][ T6147] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 44.588903][ T6145] binder_alloc: binder_alloc_mmap_handler: 6143 2000000a0000-2000000a2000 already mapped failed -16 [ 44.589646][ T6146] binder_alloc: binder_alloc_mmap_handler: 6143 2000000c0000-2000000c2000 already mapped failed -16 [ 44.592975][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 44.593180][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 44.594483][ T1168] IPVS: starting estimator thread 0... [ 44.598713][ T6145] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 44.601093][ T6146] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 44.617845][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.632443][ T6145] bond1: (slave gretap1): making interface the new active one [ 44.634625][ T6145] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 44.638800][ T6151] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.105'. [ 44.685879][ T6148] IPVS: using max 42 ests per chain, 100800 per kthread [ 45.004439][ T6161] netlink: 104 bytes leftover after parsing attributes in process `syz.0.109'. [ 45.184130][ T6177] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.114'. [ 45.486344][ T5733] Bluetooth: Frame is too long (len 12, expected len 4) [ 45.785853][ T5733] Bluetooth: hci1: command 0x040f tx timeout [ 45.785889][ T5733] Bluetooth: hci0: command 0x040f tx timeout [ 45.785910][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 45.944520][ T6216] misc userio: The device must be registered before sending interrupts [ 46.094604][ T6220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6220 comm=syz.0.129 [ 46.303637][ T6245] fuse: Bad value for 'group_id' [ 46.303648][ T6245] fuse: Bad value for 'group_id' [ 46.303821][ T6243] fuse: Bad value for 'group_id' [ 46.303829][ T6243] fuse: Bad value for 'group_id' [ 46.311968][ T6243] fuse: Unknown parameter '0x00000000000000100x0000000000000010ÿÿÿÿÿÿÿÿ18446744073709551615' [ 46.340675][ T6247] FAULT_INJECTION: forcing a failure. [ 46.340675][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 46.340694][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(full) [ 46.340706][ T6247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.340712][ T6247] Call Trace: [ 46.340717][ T6247] [ 46.340721][ T6247] dump_stack_lvl+0x100/0x190 [ 46.340753][ T6247] should_fail_ex.cold+0x5/0xa [ 46.340767][ T6247] ? __netlink_lookup+0x652/0x900 [ 46.340783][ T6247] should_failslab+0xc2/0x120 [ 46.340801][ T6247] kmem_cache_alloc_noprof+0x92/0x6a0 [ 46.340814][ T6247] ? skb_clone+0x190/0x400 [ 46.340829][ T6247] skb_clone+0x190/0x400 [ 46.340842][ T6247] netlink_deliver_tap+0xaed/0xcc0 [ 46.340856][ T6247] netlink_unicast+0x62b/0x850 [ 46.340870][ T6247] ? __pfx_netlink_unicast+0x10/0x10 [ 46.340885][ T6247] netlink_sendmsg+0x8b0/0xda0 [ 46.340899][ T6247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.340913][ T6247] ? selinux_socket_sendmsg+0x198/0x2f0 [ 46.340927][ T6247] ____sys_sendmsg+0xa4d/0xbe0 [ 46.340943][ T6247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.340956][ T6247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.340975][ T6247] ? lock_acquire+0x1d1/0x380 [ 46.340990][ T6247] ? get_pid_task+0x2a/0x250 [ 46.341008][ T6247] ___sys_sendmsg+0x190/0x1e0 [ 46.341032][ T6247] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.341054][ T6247] ? get_pid_task+0x106/0x250 [ 46.341074][ T6247] ? find_held_lock+0x2b/0x80 [ 46.341097][ T6247] __sys_sendmsg+0x160/0x210 [ 46.341111][ T6247] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.341130][ T6247] do_syscall_64+0x123/0x790 [ 46.341151][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.341162][ T6247] RIP: 0033:0x7f0d36d9e159 [ 46.341171][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.341181][ T6247] RSP: 002b:00007f0d37ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.341192][ T6247] RAX: ffffffffffffffda RBX: 00007f0d37025fa0 RCX: 00007f0d36d9e159 [ 46.341199][ T6247] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 46.341205][ T6247] RBP: 00007f0d37ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.341211][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.341217][ T6247] R13: 00007f0d37026038 R14: 00007f0d37025fa0 R15: 00007ffed5e18558 [ 46.341248][ T6247] [ 46.534314][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 46.560017][ T6264] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 46.594076][ T6268] comedi: valid board names for 8255 driver are: [ 46.594085][ T6268] 8255 [ 46.594089][ T6268] comedi: valid board names for vmk80xx driver are: [ 46.594094][ T6268] vmk80xx [ 46.594097][ T6268] comedi: valid board names for usbduxsigma driver are: [ 46.594102][ T6268] usbduxsigma [ 46.594106][ T6268] comedi: valid board names for usbduxfast driver are: [ 46.594110][ T6268] usbduxfast [ 46.594114][ T6268] comedi: valid board names for usbdux driver are: [ 46.594118][ T6268] usbdux [ 46.594122][ T6268] comedi: valid board names for ni6501 driver are: [ 46.594126][ T6268] ni6501 [ 46.594129][ T6268] comedi: valid board names for dt9812 driver are: [ 46.594133][ T6268] dt9812 [ 46.594137][ T6268] comedi: valid board names for ni_labpc_cs driver are: [ 46.594141][ T6268] ni_labpc_cs [ 46.594144][ T6268] comedi: valid board names for ni_daq_700 driver are: [ 46.594149][ T6268] ni_daq_700 [ 46.594152][ T6268] comedi: valid board names for labpc_pci driver are: [ 46.594156][ T6268] labpc_pci [ 46.594159][ T6268] comedi: valid board names for adl_pci9118 driver are: [ 46.594164][ T6268] pci9118dg [ 46.594167][ T6268] pci9118hg [ 46.594170][ T6268] pci9118hr [ 46.594173][ T6268] comedi: valid board names for 8255_pci driver are: [ 46.594178][ T6268] 8255_pci [ 46.594181][ T6268] comedi: valid board names for s526 driver are: [ 46.594185][ T6268] s526 [ 46.594188][ T6268] comedi: valid board names for multiq3 driver are: [ 46.594192][ T6268] multiq3 [ 46.594196][ T6268] comedi: valid board names for pcmuio driver are: [ 46.594200][ T6268] pcmuio48 [ 46.594203][ T6268] pcmuio96 [ 46.594207][ T6268] comedi: valid board names for pcmmio driver are: [ 46.594211][ T6268] pcmmio [ 46.594214][ T6268] comedi: valid board names for pcmda12 driver are: [ 46.594219][ T6268] pcmda12 [ 46.594222][ T6268] comedi: valid board names for pcmad driver are: [ 46.594226][ T6268] pcmad12 [ 46.594229][ T6268] pcmad16 [ 46.594233][ T6268] comedi: valid board names for ni_labpc driver are: [ 46.594237][ T6268] lab-pc-1200 [ 46.594240][ T6268] lab-pc-1200ai [ 46.594244][ T6268] lab-pc+ [ 46.594247][ T6268] comedi: valid board names for atmio16 driver are: [ 46.594251][ T6268] atmio16 [ 46.594254][ T6268] atmio16d [ 46.594257][ T6268] comedi: valid board names for ni_at_ao driver are: [ 46.594262][ T6268] at-ao-6 [ 46.594265][ T6268] at-ao-10 [ 46.594268][ T6268] comedi: valid board names for ni_at_a2150 driver are: [ 46.594272][ T6268] ni_at_a2150 [ 46.594276][ T6268] comedi: valid board names for adq12b driver are: [ 46.594280][ T6268] adq12b [ 46.594283][ T6268] comedi: valid board names for mpc624 driver are: [ 46.594287][ T6268] mpc624 [ 46.594290][ T6268] comedi: valid board names for c6xdigio driver are: [ 46.594295][ T6268] c6xdigio [ 46.594298][ T6268] comedi: valid board names for aio_iiro_16 driver are: [ 46.594302][ T6268] aio_iiro_16 [ 46.594305][ T6268] comedi: valid board names for aio_aio12_8 driver are: [ 46.594310][ T6268] aio_aio12_8 [ 46.594313][ T6268] aio_ai12_8 [ 46.594316][ T6268] aio_ao12_4 [ 46.594320][ T6268] comedi: valid board names for fl512 driver are: [ 46.594324][ T6268] fl512 [ 46.594327][ T6268] comedi: valid board names for dmm32at driver are: [ 46.594331][ T6268] dmm32at [ 46.594334][ T6268] comedi: valid board names for dt282x driver are: [ 46.594339][ T6268] dt2821 [ 46.594342][ T6268] dt2821-f [ 46.594345][ T6268] dt2821-g [ 46.594348][ T6268] dt2823 [ 46.594352][ T6268] dt2824-pgh [ 46.594355][ T6268] dt2824-pgl [ 46.594361][ T6268] dt2825 [ 46.594365][ T6268] dt2827 [ 46.594370][ T6268] dt2828 [ 46.594374][ T6268] dt2829 [ 46.594379][ T6268] dt21-ez [ 46.594384][ T6268] dt23-ez [ 46.594389][ T6268] dt24-ez [ 46.594393][ T6268] dt24-ez-pgl [ 46.594399][ T6268] comedi: valid board names for dt2817 driver are: [ 46.594405][ T6268] dt2817 [ 46.594410][ T6268] comedi: valid board names for dt2815 driver are: [ 46.594419][ T6268] dt2815 [ 46.594471][ T6268] comedi: valid board names for dt2814 driver are: [ 46.594478][ T6268] dt2814 [ 46.594483][ T6268] comedi: valid board names for dt2811 driver are: [ 46.594487][ T6268] dt2811-pgh [ 46.594491][ T6268] dt2811-pgl [ 46.594495][ T6268] comedi: valid board names for dt2801 driver are: [ 46.594499][ T6268] dt2801 [ 46.594503][ T6268] comedi: valid board names for das6402 driver are: [ 46.594507][ T6268] das6402-12 [ 46.594511][ T6268] das6402-16 [ 46.594514][ T6268] comedi: valid board names for das1800 driver are: [ 46.594519][ T6268] das-1701st [ 46.594522][ T6268] das-1701st-da [ 46.594526][ T6268] das-1702st [ 46.594530][ T6268] das-1702st-da [ 46.594534][ T6268] das-1702hr [ 46.594537][ T6268] das-1702hr-da [ 46.594542][ T6268] das-1701ao [ 46.594545][ T6268] das-1702ao [ 46.594548][ T6268] das-1801st [ 46.594552][ T6268] das-1801st-da [ 46.594555][ T6268] das-1802st [ 46.594559][ T6268] das-1802st-da [ 46.594563][ T6268] das-1802hr [ 46.594566][ T6268] das-1802hr-da [ 46.594570][ T6268] das-1801hc [ 46.594574][ T6268] das-1802hc [ 46.594578][ T6268] das-1801ao [ 46.594581][ T6268] das-1802ao [ 46.594585][ T6268] comedi: valid board names for das800 driver are: [ 46.594590][ T6268] das-800 [ 46.594593][ T6268] cio-das800 [ 46.594597][ T6268] das-801 [ 46.594601][ T6268] cio-das801 [ 46.594604][ T6268] das-802 [ 46.594608][ T6268] cio-das802 [ 46.594612][ T6268] cio-das802/16 [ 46.594616][ T6268] comedi: valid board names for isa-das08 driver are: [ 46.594620][ T6268] isa-das08 [ 46.594624][ T6268] das08-pgm [ 46.594627][ T6268] das08-pgh [ 46.594631][ T6268] das08-pgl [ 46.594635][ T6268] das08-aoh [ 46.594638][ T6268] das08-aol [ 46.594642][ T6268] das08-aom [ 46.594645][ T6268] das08/jr-ao [ 46.594649][ T6268] das08jr-16-ao [ 46.594653][ T6268] pc104-das08 [ 46.594657][ T6268] das08jr/16 [ 46.594661][ T6268] comedi: valid board names for das16m1 driver are: [ 46.594666][ T6268] das16m1 [ 46.594669][ T6268] comedi: valid board names for dac02 driver are: [ 46.594674][ T6268] dac02 [ 46.594677][ T6268] comedi: valid board names for rti802 driver are: [ 46.594681][ T6268] rti802 [ 46.594685][ T6268] comedi: valid board names for rti800 driver are: [ 46.594689][ T6268] rti800 [ 46.594693][ T6268] rti815 [ 46.594697][ T6268] comedi: valid board names for pcm3724 driver are: [ 46.594701][ T6268] pcm3724 [ 46.594705][ T6268] comedi: valid board names for pcl818 driver are: [ 46.594709][ T6268] pcl818l [ 46.594713][ T6268] pcl818h [ 46.594716][ T6268] pcl818hd [ 46.594719][ T6268] pcl818hg [ 46.594723][ T6268] pcl818 [ 46.594726][ T6268] pcl718 [ 46.594729][ T6268] pcm3718 [ 46.594732][ T6268] comedi: valid board names for pcl816 driver are: [ 46.594736][ T6268] pcl816 [ 46.594739][ T6268] pcl814b [ 46.594743][ T6268] comedi: valid board names for pcl812 driver are: [ 46.594747][ T6268] pcl812 [ 46.594750][ T6268] pcl812pg [ 46.594754][ T6268] acl8112pg [ 46.594757][ T6268] acl8112dg [ 46.594760][ T6268] acl8112hg [ 46.594763][ T6268] a821pgl [ 46.594766][ T6268] a821pglnda [ 46.594770][ T6268] a821pgh [ 46.594773][ T6268] a822pgl [ 46.594776][ T6268] a822pgh [ 46.594779][ T6268] a823pgl [ 46.594783][ T6268] a823pgh [ 46.594786][ T6268] pcl813 [ 46.594789][ T6268] pcl813b [ 46.594792][ T6268] acl8113 [ 46.594795][ T6268] iso813 [ 46.594799][ T6268] acl8216 [ 46.594802][ T6268] a826pg [ 46.594805][ T6268] comedi: valid board names for pcl730 driver are: [ 46.594809][ T6268] pcl730 [ 46.594813][ T6268] iso730 [ 46.594816][ T6268] acl7130 [ 46.594819][ T6268] pcm3730 [ 46.594822][ T6268] pcl725 [ 46.594825][ T6268] p8r8dio [ 46.594828][ T6268] acl7225b [ 46.594832][ T6268] p16r16dio [ 46.594835][ T6268] pcl733 [ 46.594838][ T6268] pcl734 [ 46.594841][ T6268] opmm-1616-xt [ 46.594844][ T6268] pearl-mm-p [ 46.594848][ T6268] ir104-pbf [ 46.594851][ T6268] comedi: valid board names for pcl726 driver are: [ 46.594856][ T6268] pcl726 [ 46.594859][ T6268] pcl727 [ 46.594862][ T6268] pcl728 [ 46.594865][ T6268] acl6126 [ 46.594869][ T6268] acl6128 [ 46.594872][ T6268] comedi: valid board names for pcl724 driver are: [ 46.594876][ T6268] pcl724 [ 46.594879][ T6268] pcl722 [ 46.594882][ T6268] pcl731 [ 46.594885][ T6268] acl7122 [ 46.594888][ T6268] acl7124 [ 46.594892][ T6268] pet48dio [ 46.594895][ T6268] pcmio48 [ 46.594898][ T6268] onyx-mm-dio [ 46.594901][ T6268] comedi: valid board names for pcl711 driver are: [ 46.594905][ T6268] pcl711 [ 46.594910][ T6268] pcl711b [ 46.594915][ T6268] acl8112hg [ 46.594919][ T6268] acl8112dg [ 46.594924][ T6268] comedi: valid board names for amplc_pc263 driver are: [ 46.594931][ T6268] pc263 [ 46.594936][ T6268] comedi: valid board names for amplc_pc236 driver are: [ 46.594942][ T6268] pc36at [ 46.594947][ T6268] comedi: valid board names for amplc_dio200 driver are: [ 46.594954][ T6268] pc212e [ 46.594959][ T6268] pc214e [ 46.594963][ T6268] pc215e [ 46.594969][ T6268] pc218e [ 46.594974][ T6268] pc272e [ 46.594986][ T6268] comedi: valid board names for comedi_parport driver are: [ 46.594993][ T6268] comedi_parport [ 46.594999][ T6268] comedi: valid board names for comedi_test driver are: [ 46.595007][ T6268] comedi_test [ 46.595012][ T6268] comedi: valid board names for comedi_bond driver are: [ 46.595020][ T6268] comedi_bond [ 46.847976][ T6284] nbd: must specify a device to rqemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. econfigure [ 46.917875][ T6290] 9pnet_virtio: no channels available for device syz [ 46.930534][ T6288] overlay: ./file0/file0 is not a directory [ 46.965388][ T6295] warning: `syz.2.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.157608][ T6314] netlink: 200 bytes leftover after parsing attributes in process `syz.2.164'. [ 47.363846][ T6324] block nbd0: server does not support multiple connections per device. [ 47.366524][ T6324] block nbd0: shutting down sockets [ 47.559613][ T44] kauditd_printk_skb: 50 callbacks suppressed [ 47.559626][ T44] audit: type=1400 audit(1789379672.417:352): avc: denied { create } for pid=6329 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.560320][ T44] audit: type=1400 audit(1789379672.417:353): avc: denied { bind } for pid=6329 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.610805][ T44] audit: type=1400 audit(1789379672.467:354): avc: denied { setopt } for pid=6329 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.611486][ T44] audit: type=1400 audit(1789379672.467:355): avc: denied { accept } for pid=6329 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.613719][ T44] audit: type=1400 audit(1789379672.467:356): avc: denied { write } for pid=6329 comm="syz.1.172" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 47.614033][ T44] audit: type=1400 audit(1789379672.467:357): avc: denied { open } for pid=6329 comm="syz.1.172" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 47.614588][ T44] audit: type=1400 audit(1789379672.467:358): avc: denied { ioctl } for pid=6329 comm="syz.1.172" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 47.812835][ T44] audit: type=1400 audit(1789379672.667:359): avc: denied { read } for pid=6350 comm="syz.1.177" name="2:0:0:0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.813033][ T44] audit: type=1400 audit(1789379672.667:360): avc: denied { open } for pid=6350 comm="syz.1.177" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.821198][ T44] audit: type=1400 audit(1789379672.677:361): avc: denied { ioctl } for pid=6350 comm="syz.1.177" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=727 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.856152][ T5731] Bluetooth: hci3: command 0x0419 tx timeout [ 47.856176][ T5731] Bluetooth: hci0: command 0x040f tx timeout [ 47.856202][ T5733] Bluetooth: hci1: command 0x040f tx timeout [ 47.864535][ T6357] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 48.286028][ T6382] FAULT_INJECTION: forcing a failure. [ 48.286028][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.286048][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 48.286061][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.286067][ T6382] Call Trace: [ 48.286071][ T6382] [ 48.286076][ T6382] dump_stack_lvl+0x100/0x190 [ 48.286106][ T6382] should_fail_ex.cold+0x5/0xa [ 48.286122][ T6382] _copy_to_user+0x32/0xd0 [ 48.286138][ T6382] simple_read_from_buffer+0xcb/0x170 [ 48.286153][ T6382] proc_fail_nth_read+0x1af/0x230 [ 48.286168][ T6382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.286182][ T6382] ? rw_verify_area+0xce/0x6d0 [ 48.286198][ T6382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.286211][ T6382] vfs_read+0x1e4/0xb40 [ 48.286222][ T6382] ? lock_acquire+0x1d1/0x380 [ 48.286233][ T6382] ? __fget_files+0x34/0x3d0 [ 48.286247][ T6382] ? __pfx_vfs_read+0x10/0x10 [ 48.286256][ T6382] ? find_held_lock+0x2b/0x80 [ 48.286272][ T6382] ? __fget_files+0x215/0x3d0 [ 48.286287][ T6382] ? __fget_files+0x21f/0x3d0 [ 48.286304][ T6382] ksys_read+0x12a/0x250 [ 48.286314][ T6382] ? __pfx_ksys_read+0x10/0x10 [ 48.286329][ T6382] do_syscall_64+0x123/0x790 [ 48.286348][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.286360][ T6382] RIP: 0033:0x7fe8a755e98e [ 48.286369][ T6382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.286379][ T6382] RSP: 002b:00007fe8a83c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.286391][ T6382] RAX: ffffffffffffffda RBX: 00007fe8a83ca6c0 RCX: 00007fe8a755e98e [ 48.286398][ T6382] RDX: 000000000000000f RSI: 00007fe8a83ca0a0 RDI: 0000000000000004 [ 48.286404][ T6382] RBP: 00007fe8a83ca090 R08: 0000000000000000 R09: 0000000000000000 [ 48.286410][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.286417][ T6382] R13: 00007fe8a7826038 R14: 00007fe8a7825fa0 R15: 00007fff17f351d8 [ 48.286430][ T6382] [ 48.379148][ T6386] FAULT_INJECTION: forcing a failure. [ 48.379148][ T6386] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.379168][ T6386] CPU: 2 UID: 0 PID: 6386 Comm: syz.3.189 Not tainted syzkaller #0 PREEMPT(full) [ 48.379180][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.379186][ T6386] Call Trace: [ 48.379190][ T6386] [ 48.379195][ T6386] dump_stack_lvl+0x100/0x190 [ 48.379215][ T6386] should_fail_ex.cold+0x5/0xa [ 48.379229][ T6386] ? prepare_alloc_pages+0x16d/0x5b0 [ 48.379244][ T6386] should_fail_alloc_page+0xeb/0x140 [ 48.379259][ T6386] prepare_alloc_pages+0x1f0/0x5b0 [ 48.379273][ T6386] ? is_bpf_text_address+0x94/0x1a0 [ 48.379289][ T6386] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 48.379313][ T6386] ? stack_trace_save+0x8e/0xc0 [ 48.379323][ T6386] ? __pfx_stack_trace_save+0x10/0x10 [ 48.379332][ T6386] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 48.379349][ T6386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 48.379366][ T6386] ? is_bpf_text_address+0x94/0x1a0 [ 48.379383][ T6386] ? kasan_save_stack+0x3f/0x50 [ 48.379394][ T6386] ? kasan_save_stack+0x30/0x50 [ 48.379405][ T6386] ? kasan_save_track+0x14/0x30 [ 48.379417][ T6386] ? __kasan_slab_alloc+0x89/0x90 [ 48.379429][ T6386] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 48.379441][ T6386] ? alloc_vmap_area+0x1814/0x2bb0 [ 48.379453][ T6386] ? __get_vm_area_node+0x1ed/0x350 [ 48.379465][ T6386] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 48.379479][ T6386] ? __vmalloc_node_noprof+0xad/0xf0 [ 48.379509][ T6386] ? copy_process+0x803/0x8370 [ 48.379521][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.379532][ T6386] ? __do_sys_clone+0xd9/0x120 [ 48.379543][ T6386] ? do_syscall_64+0x123/0x790 [ 48.379557][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.379577][ T6386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 48.379590][ T6386] ? policy_nodemask+0xed/0x4f0 [ 48.379606][ T6386] alloc_pages_mpol+0x201/0x550 [ 48.379621][ T6386] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 48.379638][ T6386] alloc_pages_noprof+0x1a/0x160 [ 48.379655][ T6386] get_free_pages_noprof+0x10/0xb0 [ 48.379667][ T6386] __kasan_populate_vmalloc+0xa0/0x210 [ 48.379682][ T6386] alloc_vmap_area+0x95d/0x2bb0 [ 48.379698][ T6386] ? kasan_save_track+0x14/0x30 [ 48.379710][ T6386] ? __kasan_kmalloc+0xaa/0xb0 [ 48.379721][ T6386] ? __pfx_alloc_vmap_area+0x10/0x10 [ 48.379735][ T6386] ? __get_vm_area_node+0x124/0x350 [ 48.379749][ T6386] __get_vm_area_node+0x1ed/0x350 [ 48.379765][ T6386] __vmalloc_node_range_noprof+0x268/0x1420 [ 48.379780][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.379791][ T6386] ? lock_acquire+0x1d1/0x380 [ 48.379802][ T6386] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 48.379813][ T6386] ? find_held_lock+0x2b/0x80 [ 48.379828][ T6386] ? rcu_read_unlock+0x17/0x60 [ 48.379846][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.379860][ T6386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 48.379876][ T6386] ? rcu_is_watching+0x13/0xc0 [ 48.379891][ T6386] ? trace_kmem_cache_alloc+0xdd/0x100 [ 48.379906][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.379917][ T6386] __vmalloc_node_noprof+0xad/0xf0 [ 48.379931][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.379944][ T6386] copy_process+0x803/0x8370 [ 48.379957][ T6386] ? __lock_acquire+0x5c0/0x1f40 [ 48.379974][ T6386] ? __pfx_copy_process+0x10/0x10 [ 48.379987][ T6386] ? find_held_lock+0x2b/0x80 [ 48.380007][ T6386] kernel_clone+0x176/0x9d0 [ 48.380018][ T6386] ? find_held_lock+0x2b/0x80 [ 48.380034][ T6386] ? __pfx_kernel_clone+0x10/0x10 [ 48.380048][ T6386] ? ksys_write+0x190/0x250 [ 48.380064][ T6386] ? lock_acquire+0x1d1/0x380 [ 48.380077][ T6386] __do_sys_clone+0xd9/0x120 [ 48.380090][ T6386] ? __pfx___do_sys_clone+0x10/0x10 [ 48.380101][ T6386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 48.380122][ T6386] ? ksys_write+0x1ac/0x250 [ 48.380132][ T6386] ? __pfx_ksys_write+0x10/0x10 [ 48.380147][ T6386] do_syscall_64+0x123/0x790 [ 48.380163][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.380174][ T6386] RIP: 0033:0x7f08eef9e159 [ 48.380183][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.380193][ T6386] RSP: 002b:00007f08efdc9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.380204][ T6386] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 48.380211][ T6386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 48.380217][ T6386] RBP: 00007f08efdca090 R08: 0000000000000000 R09: 0000000000000000 [ 48.380223][ T6386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 48.380229][ T6386] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 48.380242][ T6386] [ 48.380385][ T6386] syz.3.189: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 48.380448][ T6386] CPU: 2 UID: 0 PID: 6386 Comm: syz.3.189 Not tainted syzkaller #0 PREEMPT(full) [ 48.380460][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.380466][ T6386] Call Trace: [ 48.380469][ T6386] [ 48.380473][ T6386] dump_stack_lvl+0x100/0x190 [ 48.380509][ T6386] warn_alloc.cold+0x9e/0xb2 [ 48.380521][ T6386] ? __pfx_warn_alloc+0x10/0x10 [ 48.380537][ T6386] ? lockdep_hardirqs_on+0x7d/0x110 [ 48.380554][ T6386] ? __get_vm_area_node+0x2f0/0x350 [ 48.380570][ T6386] ? __get_vm_area_node+0x22b/0x350 [ 48.380585][ T6386] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 48.380600][ T6386] ? lock_acquire+0x1d1/0x380 [ 48.380611][ T6386] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 48.380622][ T6386] ? find_held_lock+0x2b/0x80 [ 48.380637][ T6386] ? rcu_read_unlock+0x17/0x60 [ 48.380654][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.380669][ T6386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 48.380685][ T6386] ? rcu_is_watching+0x13/0xc0 [ 48.380699][ T6386] ? trace_kmem_cache_alloc+0xdd/0x100 [ 48.380714][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.380726][ T6386] __vmalloc_node_noprof+0xad/0xf0 [ 48.380740][ T6386] ? kernel_clone+0x176/0x9d0 [ 48.380753][ T6386] copy_process+0x803/0x8370 [ 48.380765][ T6386] ? __lock_acquire+0x5c0/0x1f40 [ 48.380782][ T6386] ? __pfx_copy_process+0x10/0x10 [ 48.380794][ T6386] ? find_held_lock+0x2b/0x80 [ 48.380814][ T6386] kernel_clone+0x176/0x9d0 [ 48.380825][ T6386] ? find_held_lock+0x2b/0x80 [ 48.380841][ T6386] ? __pfx_kernel_clone+0x10/0x10 [ 48.380856][ T6386] ? ksys_write+0x190/0x250 [ 48.380867][ T6386] ? lock_acquire+0x1d1/0x380 [ 48.380880][ T6386] __do_sys_clone+0xd9/0x120 [ 48.380893][ T6386] ? __pfx___do_sys_clone+0x10/0x10 [ 48.380904][ T6386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 48.380924][ T6386] ? ksys_write+0x1ac/0x250 [ 48.380935][ T6386] ? __pfx_ksys_write+0x10/0x10 [ 48.380949][ T6386] do_syscall_64+0x123/0x790 [ 48.380965][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.380975][ T6386] RIP: 0033:0x7f08eef9e159 [ 48.380984][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.380994][ T6386] RSP: 002b:00007f08efdc9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.381003][ T6386] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 48.381010][ T6386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 48.381016][ T6386] RBP: 00007f08efdca090 R08: 0000000000000000 R09: 0000000000000000 [ 48.381035][ T6386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 48.381042][ T6386] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 48.381055][ T6386] [ 48.381109][ T6386] Mem-Info: [ 48.381116][ T6386] active_anon:33791 inactive_anon:0 isolated_anon:0 [ 48.381116][ T6386] active_file:0 inactive_file:63251 isolated_file:0 [ 48.381116][ T6386] unevictable:1000 dirty:2220 writeback:0 [ 48.381116][ T6386] slab_reclaimable:11849 slab_unreclaimable:65774 [ 48.381116][ T6386] mapped:30017 shmem:24789 pagetables:1272 [ 48.381116][ T6386] sec_pagetables:294 bounce:0 [ 48.381116][ T6386] kernel_misc_reclaimable:0 [ 48.381116][ T6386] free:419476 free_pcp:13854 free_cma:0 [ 48.381141][ T6386] Node 0 active_anon:135164kB inactive_anon:0kB active_file:0kB inactive_file:252800kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:119944kB dirty:8880kB writeback:0kB shmem:97156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:13216kB pagetables:4876kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 48.381168][ T6386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 48.381194][ T6386] Node 0 DMA free:5852kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6832kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:436kB local_pcp:132kB free_cma:0kB [ 48.381222][ T6386] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 48.381241][ T6386] Node 0 DMA32 free:37244kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:128468kB inactive_anon:0kB active_file:0kB inactive_file:252800kB unevictable:2000kB writepending:8880kB zspages:0kB present:2080628kB managed:1253288kB mlocked:0kB bounce:0kB free_pcp:49208kB local_pcp:14576kB free_cma:0kB [ 48.381270][ T6386] lowmem_reserve[]: 0 0 0 0 0 [ 48.381288][ T6386] Node 1 Normal free:1634684kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:3152kB free_cma:0kB [ 48.381316][ T6386] lowmem_reserve[]: 0 0 0 0 0 [ 48.381334][ T6386] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 1*16kB (E) 2*32kB (ME) 1*64kB (E) 2*128kB (ME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 5792kB [ 48.381434][ T6386] Node 0 DMA32: 95*4kB (UE) 205*8kB (UE) 387*16kB (UME) 184*32kB (UE) 66*64kB (UME) 18*128kB (UE) 5*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 1*4096kB (U) = 36244kB [ 48.381518][ T6386] Node 1 Normal: 5*4kB (UM) 5*8kB (U) 8*16kB (UM) 10*32kB (UM) 4*64kB (UM) 3*128kB (M) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 397*4096kB (M) = 1634684kB [ 48.381600][ T6386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.381608][ T6386] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 48.381616][ T6386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.381623][ T6386] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 48.381631][ T6386] 88036 total pagecache pages [ 48.381635][ T6386] 0 pages in swap cache [ 48.381638][ T6386] Free swap = 124996kB [ 48.381642][ T6386] Total swap = 124996kB [ 48.381646][ T6386] 1048443 pages RAM [ 48.381649][ T6386] 0 pages HighMem/MovableOnly [ 48.381653][ T6386] 285811 pages reserved [ 48.381656][ T6386] 0 pages cma reserved [ 48.519519][ T6399] tipc: Started in network mode [ 48.519544][ T6399] tipc: Node identity d25fbe9a896f, cluster identity 4711 [ 48.519711][ T6399] tipc: Enabled bearer , priority 0 [ 48.529125][ T6399] tipc: Disabling bearer [ 48.806294][ T6409] jffs2: notice: (6409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 48.878060][ T6416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 48.878621][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 48.878637][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.881621][ T6416] tipc: Started in network mode [ 48.881631][ T6416] tipc: Node identity 1000001, cluster identity 4369 [ 48.881637][ T6416] tipc: Node number set to 16777217 [ 48.882090][ T6416] tipc: Cannot configure node identity twice [ 48.882945][ T6418] netlink: 200 bytes leftover after parsing attributes in process `syz.3.201'. [ 48.883001][ T6416] tipc: New replicast peer: 127.0.0.1 [ 48.883872][ T6416] tipc: Enabled bearer , priority 10 [ 48.888488][ T6416] ip6erspan0: entered allmulticast mode [ 49.000548][ T6428] FAULT_INJECTION: forcing a failure. [ 49.000548][ T6428] name fail_futex, interval 1, probability 0, space 0, times 1 [ 49.000569][ T6428] CPU: 2 UID: 0 PID: 6428 Comm: syz.3.204 Not tainted syzkaller #0 PREEMPT(full) [ 49.000582][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.000589][ T6428] Call Trace: [ 49.000593][ T6428] [ 49.000598][ T6428] dump_stack_lvl+0x100/0x190 [ 49.000617][ T6428] should_fail_ex.cold+0x5/0xa [ 49.000634][ T6428] get_futex_key+0x1d0/0x14f0 [ 49.000658][ T6428] ? __pfx_get_futex_key+0x10/0x10 [ 49.000680][ T6428] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 49.000705][ T6428] futex_wait_setup+0x91/0x540 [ 49.000730][ T6428] __futex_wait+0x19f/0x300 [ 49.000749][ T6428] ? __pfx___futex_wait+0x10/0x10 [ 49.000764][ T6428] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.000784][ T6428] ? futex_hash+0x311/0x400 [ 49.000808][ T6428] ? __pfx_futex_wake_mark+0x10/0x10 [ 49.000839][ T6428] ? find_held_lock+0x2b/0x80 [ 49.000862][ T6428] ? futex_wake+0x4ea/0x5e0 [ 49.000896][ T6428] futex_wait+0xe6/0x370 [ 49.000914][ T6428] ? __pfx_futex_wait+0x10/0x10 [ 49.000944][ T6428] do_futex+0x265/0x440 [ 49.000968][ T6428] ? __pfx_do_futex+0x10/0x10 [ 49.000992][ T6428] ? rcu_is_watching+0x13/0xc0 [ 49.001016][ T6428] ? do_sock_setsockopt+0x101/0x1d0 [ 49.001048][ T6428] ? kfree+0x1e5/0x6d0 [ 49.001078][ T6428] __x64_sys_futex+0x34f/0x4d0 [ 49.001130][ T6428] ? __pfx___x64_sys_futex+0x10/0x10 [ 49.001192][ T6428] ? __sys_setsockopt+0x1b5/0x220 [ 49.001226][ T6428] do_syscall_64+0x123/0x790 [ 49.001278][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.001298][ T6428] RIP: 0033:0x7f08eef9e159 [ 49.001314][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.001330][ T6428] RSP: 002b:00007f08efda90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.001342][ T6428] RAX: ffffffffffffffda RBX: 00007f08ef226098 RCX: 00007f08eef9e159 [ 49.001350][ T6428] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08ef226098 [ 49.001376][ T6428] RBP: 00007f08ef226090 R08: 0000000000000000 R09: 0000000000000000 [ 49.001383][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.001390][ T6428] R13: 00007f08ef226128 R14: 00007ffd31885360 R15: 00007ffd31885448 [ 49.001405][ T6428] [ 49.002043][ T57] IPVS: starting estimator thread 0... [ 49.017520][ T6431] tipc: Failed to obtain node identity [ 49.017541][ T6431] tipc: Enabling of bearer rejected, failed to enable media [ 49.095779][ T6429] IPVS: using max 42 ests per chain, 100800 per kthread [ 49.270052][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.210'. [ 49.357216][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 49.380852][ T6452] tipc: Started in network mode [ 49.380879][ T6452] tipc: Node identity 00000003000000000000000000000001, cluster identity 4711 [ 49.380921][ T6452] tipc: Enabling of bearer rejected, failed to enable media [ 49.399866][ T6452] netlink: 164 bytes leftover after parsing attributes in process `syz.2.213'. [ 49.519514][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 49.519534][ T43] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 49.520367][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.521847][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.521859][ T43] usb 5-1: Product: syz [ 49.521866][ T43] usb 5-1: Manufacturer: syz [ 49.521873][ T43] usb 5-1: SerialNumber: syz [ 49.534703][ T43] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 49.534942][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 49.534974][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 49.537425][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 49.546295][ T43] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 49.552580][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 49.554601][ T6461] FAULT_INJECTION: forcing a failure. [ 49.554601][ T6461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.554620][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 49.554632][ T6461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.554653][ T6461] Call Trace: [ 49.554658][ T6461] [ 49.554663][ T6461] dump_stack_lvl+0x100/0x190 [ 49.554682][ T6461] should_fail_ex.cold+0x5/0xa [ 49.554696][ T6461] ? prepare_alloc_pages+0x16d/0x5b0 [ 49.554712][ T6461] should_fail_alloc_page+0xeb/0x140 [ 49.554728][ T6461] prepare_alloc_pages+0x1f0/0x5b0 [ 49.554744][ T6461] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 49.554766][ T6461] ? stack_trace_save+0x8e/0xc0 [ 49.554776][ T6461] ? __pfx_stack_trace_save+0x10/0x10 [ 49.554787][ T6461] ? stack_depot_save_flags+0x27/0x9f0 [ 49.554801][ T6461] ? kasan_save_stack+0x3f/0x50 [ 49.554812][ T6461] ? kasan_save_stack+0x30/0x50 [ 49.554824][ T6461] ? kasan_save_track+0x14/0x30 [ 49.554841][ T6461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.554861][ T6461] ? __lock_acquire+0x5c0/0x1f40 [ 49.554874][ T6461] ? _copy_to_user+0x9f/0xd0 [ 49.554884][ T6461] ? put_itimerspec64+0xbd/0x1e0 [ 49.554895][ T6461] ? __x64_sys_timerfd_gettime+0x142/0x180 [ 49.554909][ T6461] ? do_syscall_64+0x123/0x790 [ 49.554923][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.554939][ T6461] ? __lock_acquire+0x5c0/0x1f40 [ 49.554950][ T6461] ? find_held_lock+0x2b/0x80 [ 49.554971][ T6461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.554985][ T6461] ? policy_nodemask+0xed/0x4f0 [ 49.555001][ T6461] alloc_pages_mpol+0x201/0x550 [ 49.555016][ T6461] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 49.555029][ T6461] ? find_held_lock+0x2b/0x80 [ 49.555044][ T6461] ? __anon_vma_prepare+0x2d7/0x5e0 [ 49.555060][ T6461] ? __anon_vma_prepare+0x2d7/0x5e0 [ 49.555077][ T6461] folio_alloc_mpol_noprof+0x36/0x260 [ 49.555094][ T6461] vma_alloc_folio_noprof+0xed/0x1d0 [ 49.555111][ T6461] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 49.555131][ T6461] do_anonymous_page+0xac9/0x2050 [ 49.555148][ T6461] ? find_held_lock+0x2b/0x80 [ 49.555164][ T6461] ? __pfx_do_anonymous_page+0x10/0x10 [ 49.555179][ T6461] ? do_raw_spin_unlock+0x145/0x1e0 [ 49.555195][ T6461] ? _raw_spin_unlock+0x28/0x50 [ 49.555207][ T6461] ? __pmd_alloc+0x3fb/0x950 [ 49.555221][ T6461] __handle_mm_fault+0x1ff3/0x2f60 [ 49.555240][ T6461] ? __pfx___handle_mm_fault+0x10/0x10 [ 49.555255][ T6461] ? __pfx_mt_find+0x10/0x10 [ 49.555285][ T6461] ? find_vma+0xbf/0x140 [ 49.555300][ T6461] ? __pfx_find_vma+0x10/0x10 [ 49.555318][ T6461] handle_mm_fault+0x363/0xa20 [ 49.555345][ T6461] do_user_addr_fault+0x745/0x12f0 [ 49.555373][ T6461] exc_page_fault+0x6f/0xd0 [ 49.555395][ T6461] asm_exc_page_fault+0x26/0x30 [ 49.555411][ T6461] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 49.555428][ T6461] Code: 89 ee 48 89 ef e8 31 74 e1 fc 4d 85 ff 75 26 e8 47 7a e1 fc 89 de 4c 89 e7 e8 fd c1 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 21 7a e1 fc 48 89 d8 5b 5d 41 [ 49.555442][ T6461] RSP: 0018:ffffc90002957d98 EFLAGS: 00050246 [ 49.555457][ T6461] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 49.555466][ T6461] RDX: 0000000000000001 RSI: ffffc90002957df0 RDI: 0000200000000040 [ 49.555476][ T6461] RBP: 0000200000000040 R08: 0000000000000000 R09: fffff5200052afbf [ 49.555486][ T6461] R10: ffffc90002957dff R11: 0000000000000000 R12: ffffc90002957df0 [ 49.555496][ T6461] R13: 0000200000000050 R14: 00007ffffffff000 R15: 0000000000000000 [ 49.555518][ T6461] ? _copy_to_user+0x93/0xd0 [ 49.555536][ T6461] put_itimerspec64+0xbd/0x1e0 [ 49.555554][ T6461] ? __pfx_put_itimerspec64+0x10/0x10 [ 49.555573][ T6461] ? do_timerfd_gettime+0x24b/0x3c0 [ 49.555595][ T6461] __x64_sys_timerfd_gettime+0x142/0x180 [ 49.555616][ T6461] ? __pfx___x64_sys_timerfd_gettime+0x10/0x10 [ 49.555644][ T6461] do_syscall_64+0x123/0x790 [ 49.555667][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.555683][ T6461] RIP: 0033:0x7fe8a759e159 [ 49.555696][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.555710][ T6461] RSP: 002b:00007fe8a83ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 49.555725][ T6461] RAX: ffffffffffffffda RBX: 00007fe8a7825fa0 RCX: 00007fe8a759e159 [ 49.555735][ T6461] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 49.555745][ T6461] RBP: 00007fe8a83ca090 R08: 0000000000000000 R09: 0000000000000000 [ 49.555754][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.555763][ T6461] R13: 00007fe8a7826038 R14: 00007fe8a7825fa0 R15: 00007fff17f351d8 [ 49.555786][ T6461] [ 49.570890][ T43] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 49.572208][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 49.575607][ T43] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 49.578700][ T43] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 49.580407][ T43] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 49.678015][ T6473] FAULT_INJECTION: forcing a failure. [ 49.678015][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.678034][ T6473] CPU: 2 UID: 0 PID: 6473 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT(full) [ 49.678046][ T6473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.678052][ T6473] Call Trace: [ 49.678062][ T6473] [ 49.678066][ T6473] dump_stack_lvl+0x100/0x190 [ 49.678092][ T6473] should_fail_ex.cold+0x5/0xa [ 49.678108][ T6473] _copy_to_user+0x32/0xd0 [ 49.678124][ T6473] simple_read_from_buffer+0xcb/0x170 [ 49.678139][ T6473] proc_fail_nth_read+0x1af/0x230 [ 49.678154][ T6473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.678168][ T6473] ? rw_verify_area+0xce/0x6d0 [ 49.678185][ T6473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.678198][ T6473] vfs_read+0x1e4/0xb40 [ 49.678208][ T6473] ? lock_acquire+0x1d1/0x380 [ 49.678220][ T6473] ? __fget_files+0x34/0x3d0 [ 49.678233][ T6473] ? __pfx_vfs_read+0x10/0x10 [ 49.678242][ T6473] ? find_held_lock+0x2b/0x80 [ 49.678258][ T6473] ? __fget_files+0x215/0x3d0 [ 49.678274][ T6473] ? __fget_files+0x21f/0x3d0 [ 49.678290][ T6473] ksys_read+0x12a/0x250 [ 49.678301][ T6473] ? __pfx_ksys_read+0x10/0x10 [ 49.678315][ T6473] do_syscall_64+0x123/0x790 [ 49.678335][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.678346][ T6473] RIP: 0033:0x7f0d36d5e98e [ 49.678355][ T6473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.678365][ T6473] RSP: 002b:00007f0d37ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.678379][ T6473] RAX: ffffffffffffffda RBX: 00007f0d37ca76c0 RCX: 00007f0d36d5e98e [ 49.678385][ T6473] RDX: 000000000000000f RSI: 00007f0d37ca70a0 RDI: 0000000000000003 [ 49.678392][ T6473] RBP: 00007f0d37ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.678398][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.678404][ T6473] R13: 00007f0d37026038 R14: 00007f0d37025fa0 R15: 00007ffed5e18558 [ 49.678417][ T6473] [ 49.742712][ T6441] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 49.889410][ T25] usb 5-1: USB disconnect, device number 2 [ 49.894630][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 49.896777][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 49.898017][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 49.899211][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 49.899550][ T25] keyspan 5-1:1.0: device disconnected [ 49.919941][ T6487] FAULT_INJECTION: forcing a failure. [ 49.919941][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 49.919959][ T6487] CPU: 3 UID: 0 PID: 6487 Comm: syz.1.225 Not tainted syzkaller #0 PREEMPT(full) [ 49.919972][ T6487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.919978][ T6487] Call Trace: [ 49.919982][ T6487] [ 49.919986][ T6487] dump_stack_lvl+0x100/0x190 [ 49.920006][ T6487] should_fail_ex.cold+0x5/0xa [ 49.920022][ T6487] should_failslab+0xc2/0x120 [ 49.920037][ T6487] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 49.920050][ T6487] ? __alloc_skb+0x140/0x710 [ 49.920071][ T6487] __alloc_skb+0x140/0x710 [ 49.920082][ T6487] ? __alloc_skb+0x5b7/0x710 [ 49.920094][ T6487] ? __pfx___alloc_skb+0x10/0x10 [ 49.920109][ T6487] wireless_send_event+0x2c1/0xc10 [ 49.920127][ T6487] ? __pfx_wireless_send_event+0x10/0x10 [ 49.920140][ T6487] ? __kmalloc_noprof+0x350/0x840 [ 49.920151][ T6487] ? rcu_is_watching+0x13/0xc0 [ 49.920166][ T6487] ? ioctl_standard_iw_point+0x3e9/0xc90 [ 49.920182][ T6487] ioctl_standard_iw_point+0x674/0xc90 [ 49.920197][ T6487] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 49.920211][ T6487] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 49.920227][ T6487] ? dev_load+0x2a/0x240 [ 49.920241][ T6487] ? dev_load+0x8e/0x240 [ 49.920253][ T6487] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 49.920266][ T6487] ioctl_standard_call+0x167/0x1d0 [ 49.920294][ T6487] ? __pfx_ioctl_standard_call+0x10/0x10 [ 49.920308][ T6487] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 49.920320][ T6487] wext_ioctl_dispatch.constprop.0+0x30f/0x3d0 [ 49.920337][ T6487] wext_handle_ioctl+0x105/0x1b0 [ 49.920352][ T6487] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 49.920366][ T6487] ? do_vfs_ioctl+0x226/0x13e0 [ 49.920378][ T6487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 49.920387][ T6487] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 49.920403][ T6487] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.920418][ T6487] sock_ioctl+0x2d4/0x6b0 [ 49.920435][ T6487] ? __pfx_sock_ioctl+0x10/0x10 [ 49.920455][ T6487] ? selinux_file_ioctl+0x13b/0x290 [ 49.920466][ T6487] ? selinux_file_ioctl+0xb6/0x290 [ 49.920479][ T6487] ? __pfx_sock_ioctl+0x10/0x10 [ 49.920496][ T6487] __x64_sys_ioctl+0x18e/0x210 [ 49.920508][ T6487] do_syscall_64+0x123/0x790 [ 49.920524][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.920535][ T6487] RIP: 0033:0x7fe8a759e159 [ 49.920545][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.920555][ T6487] RSP: 002b:00007fe8a83ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.920566][ T6487] RAX: ffffffffffffffda RBX: 00007fe8a7825fa0 RCX: 00007fe8a759e159 [ 49.920573][ T6487] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 49.920579][ T6487] RBP: 00007fe8a83ca090 R08: 0000000000000000 R09: 0000000000000000 [ 49.920585][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.920591][ T6487] R13: 00007fe8a7826038 R14: 00007fe8a7825fa0 R15: 00007fff17f351d8 [ 49.920609][ T6487] [ 49.936436][ T65] Bluetooth: hci1: command 0x040f tx timeout [ 49.936459][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 49.945848][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 50.099781][ T6504] FAULT_INJECTION: forcing a failure. [ 50.099781][ T6504] name fail_futex, interval 1, probability 0, space 0, times 0 [ 50.099802][ T6504] CPU: 2 UID: 0 PID: 6504 Comm: syz.1.229 Not tainted syzkaller #0 PREEMPT(full) [ 50.099815][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.099821][ T6504] Call Trace: [ 50.099825][ T6504] [ 50.099831][ T6504] dump_stack_lvl+0x100/0x190 [ 50.099850][ T6504] should_fail_ex.cold+0x5/0xa [ 50.099866][ T6504] get_futex_key+0x1d0/0x14f0 [ 50.099883][ T6504] ? __pfx_get_futex_key+0x10/0x10 [ 50.099898][ T6504] ? __pfx___schedule+0x10/0x10 [ 50.099914][ T6504] futex_wait_setup+0x91/0x540 [ 50.099929][ T6504] __futex_wait+0x19f/0x300 [ 50.099941][ T6504] ? __pfx___futex_wait+0x10/0x10 [ 50.099951][ T6504] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.099964][ T6504] ? futex_hash+0x311/0x400 [ 50.099978][ T6504] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.099996][ T6504] ? find_held_lock+0x2b/0x80 [ 50.100011][ T6504] ? futex_wake+0x4ea/0x5e0 [ 50.100036][ T6504] futex_wait+0xe6/0x370 [ 50.100047][ T6504] ? __pfx_futex_wait+0x10/0x10 [ 50.100064][ T6504] do_futex+0x265/0x440 [ 50.100079][ T6504] ? __pfx_do_futex+0x10/0x10 [ 50.100094][ T6504] ? rcu_is_watching+0x13/0xc0 [ 50.100109][ T6504] ? do_sock_setsockopt+0x101/0x1d0 [ 50.100125][ T6504] ? kfree+0x1e5/0x6d0 [ 50.100141][ T6504] __x64_sys_futex+0x34f/0x4d0 [ 50.100158][ T6504] ? __pfx___x64_sys_futex+0x10/0x10 [ 50.100177][ T6504] do_syscall_64+0x123/0x790 [ 50.100193][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.100204][ T6504] RIP: 0033:0x7fe8a759e159 [ 50.100213][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.100225][ T6504] RSP: 002b:00007fe8a83a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.100236][ T6504] RAX: ffffffffffffffda RBX: 00007fe8a7826098 RCX: 00007fe8a759e159 [ 50.100243][ T6504] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8a7826098 [ 50.100249][ T6504] RBP: 00007fe8a7826090 R08: 0000000000000000 R09: 0000000000000000 [ 50.100256][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.100262][ T6504] R13: 00007fe8a7826128 R14: 00007fff17f350f0 R15: 00007fff17f351d8 [ 50.100274][ T6504] [ 50.101540][ T224] IPVS: starting estimator thread 0... [ 50.119845][ T6507] FAULT_INJECTION: forcing a failure. [ 50.119845][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.119865][ T6507] CPU: 3 UID: 0 PID: 6507 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 50.119878][ T6507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.119884][ T6507] Call Trace: [ 50.119888][ T6507] [ 50.119893][ T6507] dump_stack_lvl+0x100/0x190 [ 50.119912][ T6507] should_fail_ex.cold+0x5/0xa [ 50.119928][ T6507] _copy_to_user+0x32/0xd0 [ 50.119940][ T6507] do_sock_getsockopt+0x631/0x6e0 [ 50.119959][ T6507] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 50.119977][ T6507] ? __fget_files+0x34/0x3d0 [ 50.119990][ T6507] ? find_held_lock+0x2b/0x80 [ 50.120009][ T6507] ? __fget_files+0x21f/0x3d0 [ 50.120025][ T6507] __sys_getsockopt+0x148/0x260 [ 50.120042][ T6507] ? __x64_sys_getsockopt+0xbd/0x160 [ 50.120054][ T6507] __x64_sys_getsockopt+0xbd/0x160 [ 50.120066][ T6507] ? do_syscall_64+0xae/0x790 [ 50.120081][ T6507] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.120095][ T6507] do_syscall_64+0x123/0x790 [ 50.120110][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.120122][ T6507] RIP: 0033:0x7f08eef9e159 [ 50.120131][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.120141][ T6507] RSP: 002b:00007f08efdca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 50.120152][ T6507] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 50.120159][ T6507] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000004 [ 50.120165][ T6507] RBP: 00007f08efdca090 R08: 0000200000000080 R09: 0000000000000000 [ 50.120171][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.120177][ T6507] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 50.120190][ T6507] [ 50.185821][ T6505] IPVS: using max 42 ests per chain, 100800 per kthread [ 50.696593][ T6537] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 50.811989][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.245'. [ 51.605652][ T6547] Process accounting resumed [ 52.031567][ T6610] openvswitch: netlink: Tunnel attr 5387 out of range max 16 [ 52.245907][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.417617][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 52.417643][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.418422][ T35] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 52.418433][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.418451][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.420062][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.420074][ T35] usb 7-1: Product: syz [ 52.420081][ T35] usb 7-1: Manufacturer: syz [ 52.420087][ T35] usb 7-1: SerialNumber: syz [ 52.577099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.632458][ T35] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 52.632729][ T35] cdc_ncm 7-1:1.0: bind() failure [ 52.639875][ T35] usb 7-1: USB disconnect, device number 2 [ 52.689783][ T44] kauditd_printk_skb: 47 callbacks suppressed [ 52.689797][ T44] audit: type=1401 audit(1789379677.547:409): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 52.704374][ T6674] 9pnet_virtio: no channels available for device syz [ 53.087823][ T44] audit: type=1400 audit(1789379677.947:410): avc: denied { ioctl } for pid=6691 comm="syz.3.295" path="socket:[17450]" dev="sockfs" ino=17450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.088599][ T44] audit: type=1400 audit(1789379677.947:411): avc: denied { bind } for pid=6691 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.180556][ T57] IPVS: starting estimator thread 0... [ 53.275904][ T6705] IPVS: using max 27 ests per chain, 64800 per kthread [ 53.297981][ T6710] FAULT_INJECTION: forcing a failure. [ 53.297981][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 53.298000][ T6710] CPU: 1 UID: 0 PID: 6710 Comm: syz.2.300 Not tainted syzkaller #0 PREEMPT(full) [ 53.298018][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.298024][ T6710] Call Trace: [ 53.298028][ T6710] [ 53.298033][ T6710] dump_stack_lvl+0x100/0x190 [ 53.298062][ T6710] should_fail_ex.cold+0x5/0xa [ 53.298079][ T6710] should_failslab+0xc2/0x120 [ 53.298096][ T6710] __kmalloc_noprof+0xfc/0x840 [ 53.298107][ T6710] ? rcu_is_watching+0x13/0xc0 [ 53.298123][ T6710] ? tomoyo_realpath_from_path+0xb6/0x690 [ 53.298139][ T6710] tomoyo_realpath_from_path+0xb6/0x690 [ 53.298156][ T6710] tomoyo_path_number_perm+0x23c/0x580 [ 53.298166][ T6710] ? tomoyo_path_number_perm+0x22e/0x580 [ 53.298177][ T6710] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.298193][ T6710] ? __lock_acquire+0x5c0/0x1f40 [ 53.298211][ T6710] ? __fget_files+0x34/0x3d0 [ 53.298225][ T6710] ? find_held_lock+0x2b/0x80 [ 53.298239][ T6710] ? hook_file_ioctl_common+0x140/0x440 [ 53.298257][ T6710] ? __fget_files+0x21f/0x3d0 [ 53.298272][ T6710] security_file_ioctl+0xd3/0x230 [ 53.298285][ T6710] __x64_sys_ioctl+0xb7/0x210 [ 53.298297][ T6710] do_syscall_64+0x123/0x790 [ 53.298317][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.298328][ T6710] RIP: 0033:0x7f0d36d9e159 [ 53.298338][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.298348][ T6710] RSP: 002b:00007f0d37ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.298359][ T6710] RAX: ffffffffffffffda RBX: 00007f0d37025fa0 RCX: 00007f0d36d9e159 [ 53.298366][ T6710] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.298372][ T6710] RBP: 00007f0d37ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.298378][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.298384][ T6710] R13: 00007f0d37026038 R14: 00007f0d37025fa0 R15: 00007ffed5e18558 [ 53.298398][ T6710] [ 53.298402][ T6710] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.395771][ T44] audit: type=1400 audit(1789379678.247:412): avc: denied { read write } for pid=6716 comm="syz.2.303" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.395809][ T44] audit: type=1400 audit(1789379678.247:413): avc: denied { open } for pid=6716 comm="syz.2.303" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.397032][ T44] audit: type=1400 audit(1789379678.257:414): avc: denied { map } for pid=6716 comm="syz.2.303" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.397201][ T44] audit: type=1400 audit(1789379678.257:415): avc: denied { execute } for pid=6716 comm="syz.2.303" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.402286][ T44] audit: type=1400 audit(1789379678.257:416): avc: denied { append } for pid=6716 comm="syz.2.303" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.555851][ T44] audit: type=1401 audit(1789379678.417:417): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 53.715631][ T6732] FAULT_INJECTION: forcing a failure. [ 53.715631][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 53.715651][ T6732] CPU: 2 UID: 0 PID: 6732 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 53.715664][ T6732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.715670][ T6732] Call Trace: [ 53.715674][ T6732] [ 53.715679][ T6732] dump_stack_lvl+0x100/0x190 [ 53.715726][ T6732] should_fail_ex.cold+0x5/0xa [ 53.715742][ T6732] should_failslab+0xc2/0x120 [ 53.715760][ T6732] __kmalloc_noprof+0xfc/0x840 [ 53.715771][ T6732] ? up_write+0x2dc/0x5b0 [ 53.715785][ T6732] ? __blkdev_direct_IO_simple+0x112/0x8c0 [ 53.715800][ T6732] __blkdev_direct_IO_simple+0x112/0x8c0 [ 53.715815][ T6732] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 53.715834][ T6732] ? __lock_acquire+0x5c0/0x1f40 [ 53.715846][ T6732] ? lock_acquire+0x1d1/0x380 [ 53.715863][ T6732] blkdev_direct_IO+0xbee/0x2030 [ 53.715875][ T6732] ? filemap_range_has_writeback+0x507/0x790 [ 53.715892][ T6732] ? filemap_range_has_writeback+0xdb/0x790 [ 53.715908][ T6732] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 53.715923][ T6732] ? _kstrtoull+0x144/0x200 [ 53.715940][ T6732] blkdev_read_iter+0x225/0x4f0 [ 53.715955][ T6732] do_iter_readv_writev+0x616/0x930 [ 53.715973][ T6732] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 53.715989][ T6732] ? avc_policy_seqno+0x9/0x20 [ 53.716004][ T6732] ? selinux_file_permission+0x8f/0x6d0 [ 53.716017][ T6732] ? bpf_lsm_file_permission+0x9/0x10 [ 53.716033][ T6732] ? security_file_permission+0x76/0x210 [ 53.716047][ T6732] ? rw_verify_area+0xce/0x6d0 [ 53.716064][ T6732] vfs_readv+0x4d3/0x8d0 [ 53.716082][ T6732] ? __lock_acquire+0x5c0/0x1f40 [ 53.716095][ T6732] ? __pfx_vfs_readv+0x10/0x10 [ 53.716110][ T6732] ? find_held_lock+0x2b/0x80 [ 53.716128][ T6732] ? lock_acquire+0x1d1/0x380 [ 53.716139][ T6732] ? __fget_files+0x34/0x3d0 [ 53.716158][ T6732] ? __fget_files+0x21f/0x3d0 [ 53.716174][ T6732] ? do_preadv+0x1ac/0x270 [ 53.716183][ T6732] do_preadv+0x1ac/0x270 [ 53.716193][ T6732] ? __pfx_do_preadv+0x10/0x10 [ 53.716203][ T6732] ? ksys_write+0x1ac/0x250 [ 53.716214][ T6732] ? __pfx_ksys_write+0x10/0x10 [ 53.716227][ T6732] __x64_sys_preadv2+0xef/0x160 [ 53.716240][ T6732] do_syscall_64+0x123/0x790 [ 53.716260][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.716272][ T6732] RIP: 0033:0x7f08eef9e159 [ 53.716283][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.716294][ T6732] RSP: 002b:00007f08efdca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 53.716305][ T6732] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 53.716312][ T6732] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000004 [ 53.716318][ T6732] RBP: 00007f08efdca090 R08: 0000000000000000 R09: 000000000000001f [ 53.716325][ T6732] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 53.716331][ T6732] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 53.716345][ T6732] [ 53.800387][ T6736] Zero length message leads to an empty skb [ 53.879690][ T44] audit: type=1400 audit(1789379678.737:418): avc: denied { write } for pid=6737 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 53.946903][ T6738] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.285816][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.436756][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 54.437891][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.437912][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.437931][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.439822][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.439841][ T9] usb 6-1: Product: syz [ 54.439853][ T9] usb 6-1: Manufacturer: syz [ 54.439865][ T9] usb 6-1: SerialNumber: syz [ 54.448613][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 54.448634][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 54.661258][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 54.894731][ T6799] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 54.895376][ T6800] block nbd2: Unsupported socket: should be TCP or UNIX. [ 54.920306][ T6799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.989884][ T6811] No such timeout policy "9p" [ 54.989895][ T6811] netlink: Failed to associated timeout policy '9p' [ 55.087672][ T6757] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 55.155497][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 55.238508][ T6757] usb 6-1: device firmware changed [ 55.242797][ T25] usb 6-1: USB disconnect, device number 2 [ 55.246920][ T25] usblp0: removed [ 55.313273][ T6818] netlink: 92 bytes leftover after parsing attributes in process `syz.2.340'. [ 55.371809][ T6826] xt_esp: unknown flags DD [ 55.375939][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.397770][ T6828] openvswitch: netlink: EtherType 50a is less than min 600 [ 55.447841][ T6832] gfs2: error -5 reading superblock [ 55.529663][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 55.530902][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.530917][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.530928][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.533243][ T25] usb 6-1: string descriptor 0 read error: -22 [ 55.533299][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.538909][ T25] hub 6-1:1.0: bad descriptor, ignoring hub [ 55.538922][ T25] hub 6-1:1.0: probe with driver hub failed with error -5 [ 55.667691][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 55.694054][ T6847] FAULT_INJECTION: forcing a failure. [ 55.694054][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 55.694077][ T6847] CPU: 1 UID: 0 PID: 6847 Comm: syz.2.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.694091][ T6847] Tainted: [L]=SOFTLOCKUP [ 55.694095][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.694102][ T6847] Call Trace: [ 55.694106][ T6847] [ 55.694110][ T6847] dump_stack_lvl+0x100/0x190 [ 55.694141][ T6847] should_fail_ex.cold+0x5/0xa [ 55.694157][ T6847] should_failslab+0xc2/0x120 [ 55.694176][ T6847] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 55.694189][ T6847] ? sock_alloc_inode+0x26/0x2c0 [ 55.694209][ T6847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 55.694224][ T6847] sock_alloc_inode+0x26/0x2c0 [ 55.694239][ T6847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 55.694253][ T6847] alloc_inode+0x68/0x250 [ 55.694264][ T6847] sock_alloc+0x44/0x280 [ 55.694278][ T6847] do_accept+0xf9/0x530 [ 55.694289][ T6847] ? do_raw_spin_lock+0x128/0x260 [ 55.694304][ T6847] ? __pfx_do_accept+0x10/0x10 [ 55.694322][ T6847] __sys_accept4+0x108/0x200 [ 55.694334][ T6847] ? __pfx___sys_accept4+0x10/0x10 [ 55.694344][ T6847] ? ksys_write+0x1ac/0x250 [ 55.694375][ T6847] ? __pfx_ksys_write+0x10/0x10 [ 55.694391][ T6847] __x64_sys_accept+0x74/0xb0 [ 55.694402][ T6847] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.694421][ T6847] do_syscall_64+0x123/0x790 [ 55.694437][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.694449][ T6847] RIP: 0033:0x7f0d36d9e159 [ 55.694461][ T6847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.694471][ T6847] RSP: 002b:00007f0d37c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 55.694483][ T6847] RAX: ffffffffffffffda RBX: 00007f0d37026090 RCX: 00007f0d36d9e159 [ 55.694490][ T6847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 55.694496][ T6847] RBP: 00007f0d37c86090 R08: 0000000000000000 R09: 0000000000000000 [ 55.694503][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.694509][ T6847] R13: 00007f0d37026128 R14: 00007f0d37026090 R15: 00007ffed5e18558 [ 55.694523][ T6847] [ 55.720899][ T6850] ======================================================= [ 55.720899][ T6850] WARNING: The mand mount option has been deprecated and [ 55.720899][ T6850] and is ignored by this kernel. Remove the mand [ 55.720899][ T6850] option from the mount to silence this warning. [ 55.720899][ T6850] ======================================================= [ 55.760339][ T6757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.760488][ T6757] block device autoloading is deprecated and will be removed. [ 55.766072][ T25] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 55.786009][ T25] usb 6-1: USB disconnect, device number 3 [ 55.789184][ T25] usblp0: removed [ 56.297232][ T6855] loop5: detected capacity change from 0 to 4095 [ 56.308153][ T6469] Buffer I/O error on dev loop5, logical block 511, async page read [ 56.391797][ T6856] Buffer I/O error on dev loop5, logical block 511, async page read [ 56.553400][ T6864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.928538][ T6880] syz.2.364 uses obsolete (PF_INET,SOCK_PACKET) [ 57.215578][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 57.249531][ T6899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.371'. [ 57.261722][ T6901] overlayfs: workdir and upperdir must be separate subtrees [ 57.310166][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6907 comm=syz.2.375 [ 57.327529][ T6909] xt_hashlimit: size too large, truncated to 1048576 [ 57.365572][ T6911] kvm [6910]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 57.426878][ T65] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 57.548100][ T6930] FAULT_INJECTION: forcing a failure. [ 57.548100][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 57.548128][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.1.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.548147][ T6930] Tainted: [L]=SOFTLOCKUP [ 57.548153][ T6930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.548161][ T6930] Call Trace: [ 57.548166][ T6930] [ 57.548172][ T6930] dump_stack_lvl+0x100/0x190 [ 57.548197][ T6930] should_fail_ex.cold+0x5/0xa [ 57.548218][ T6930] should_failslab+0xc2/0x120 [ 57.548237][ T6930] __kmalloc_noprof+0xfc/0x840 [ 57.548251][ T6930] ? rcu_is_watching+0x13/0xc0 [ 57.548271][ T6930] ? tomoyo_realpath_from_path+0xb6/0x690 [ 57.548293][ T6930] tomoyo_realpath_from_path+0xb6/0x690 [ 57.548315][ T6930] tomoyo_path_number_perm+0x23c/0x580 [ 57.548329][ T6930] ? tomoyo_path_number_perm+0x22e/0x580 [ 57.548345][ T6930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.548367][ T6930] ? __lock_acquire+0x5c0/0x1f40 [ 57.548392][ T6930] ? __fget_files+0x34/0x3d0 [ 57.548410][ T6930] ? find_held_lock+0x2b/0x80 [ 57.548430][ T6930] ? hook_file_ioctl_common+0x140/0x440 [ 57.548454][ T6930] ? __fget_files+0x21f/0x3d0 [ 57.548475][ T6930] security_file_ioctl+0xd3/0x230 [ 57.548492][ T6930] __x64_sys_ioctl+0xb7/0x210 [ 57.548510][ T6930] do_syscall_64+0x123/0x790 [ 57.548533][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.548548][ T6930] RIP: 0033:0x7fe8a759e159 [ 57.548560][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.548573][ T6930] RSP: 002b:00007fe8a83ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.548588][ T6930] RAX: ffffffffffffffda RBX: 00007fe8a7825fa0 RCX: 00007fe8a759e159 [ 57.548598][ T6930] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000005 [ 57.548606][ T6930] RBP: 00007fe8a83ca090 R08: 0000000000000000 R09: 0000000000000000 [ 57.548615][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.548623][ T6930] R13: 00007fe8a7826038 R14: 00007fe8a7825fa0 R15: 00007fff17f351d8 [ 57.548642][ T6930] [ 57.548648][ T6930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.623098][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 58.331899][ T44] kauditd_printk_skb: 23 callbacks suppressed [ 58.331914][ T44] audit: type=1400 audit(1789379683.187:442): avc: denied { append } for pid=6970 comm="syz.2.405" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.363061][ T44] audit: type=1400 audit(1789379683.217:443): avc: denied { mount } for pid=6973 comm="syz.3.406" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 58.366100][ T44] audit: type=1807 audit(1789379683.217:444): action=measure uid>1 res=1 [ 58.368985][ T44] audit: type=1804 audit(1789379683.227:445): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.3.406" name="ima_policy_written" res=0 errno=-17 [ 58.369062][ T44] audit: type=1807 audit(1789379683.227:446): action=measure uid>1 res=1 [ 58.369498][ T44] audit: type=1400 audit(1789379683.227:447): avc: denied { mounton } for pid=6973 comm="syz.3.406" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.370282][ T6974] SQUASHFS error: Failed to read block 0x0: -5 [ 58.370307][ T6974] unable to read squashfs_super_block [ 58.370510][ T6973] ima: policy update completed [ 58.370578][ T44] audit: type=1802 audit(1789379683.227:448): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.3.406" res=1 errno=0 [ 58.383264][ T44] audit: type=1400 audit(1789379683.237:449): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 58.457581][ T65] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 58.502872][ T44] audit: type=1400 audit(1789379683.357:450): avc: denied { create } for pid=6993 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 58.558625][ T7003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=7003 comm=syz.3.414 [ 58.579436][ T6996] FAULT_INJECTION: forcing a failure. [ 58.579436][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 58.579459][ T6996] CPU: 3 UID: 0 PID: 6996 Comm: syz.2.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.579474][ T6996] Tainted: [L]=SOFTLOCKUP [ 58.579479][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.579485][ T6996] Call Trace: [ 58.579489][ T6996] [ 58.579494][ T6996] dump_stack_lvl+0x100/0x190 [ 58.579514][ T6996] should_fail_ex.cold+0x5/0xa [ 58.579530][ T6996] should_failslab+0xc2/0x120 [ 58.579545][ T6996] __kmalloc_noprof+0xfc/0x840 [ 58.579556][ T6996] ? rcu_is_watching+0x13/0xc0 [ 58.579571][ T6996] ? tomoyo_realpath_from_path+0xb6/0x690 [ 58.579588][ T6996] tomoyo_realpath_from_path+0xb6/0x690 [ 58.579605][ T6996] tomoyo_path_number_perm+0x23c/0x580 [ 58.579615][ T6996] ? tomoyo_path_number_perm+0x22e/0x580 [ 58.579627][ T6996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.579643][ T6996] ? __lock_acquire+0x5c0/0x1f40 [ 58.579661][ T6996] ? __fget_files+0x34/0x3d0 [ 58.579674][ T6996] ? find_held_lock+0x2b/0x80 [ 58.579689][ T6996] ? hook_file_ioctl_common+0x140/0x440 [ 58.579708][ T6996] ? __fget_files+0x21f/0x3d0 [ 58.579723][ T6996] security_file_ioctl+0xd3/0x230 [ 58.579736][ T6996] __x64_sys_ioctl+0xb7/0x210 [ 58.579749][ T6996] do_syscall_64+0x123/0x790 [ 58.579779][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.579793][ T6996] RIP: 0033:0x7f0d36d9e159 [ 58.579802][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.579813][ T6996] RSP: 002b:00007f0d37ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.579824][ T6996] RAX: ffffffffffffffda RBX: 00007f0d37025fa0 RCX: 00007f0d36d9e159 [ 58.579831][ T6996] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 58.579838][ T6996] RBP: 00007f0d37ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.579844][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.579851][ T6996] R13: 00007f0d37026038 R14: 00007f0d37025fa0 R15: 00007ffed5e18558 [ 58.579865][ T6996] [ 58.579933][ T6996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.939313][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 58.939340][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 58.956535][ T44] audit: type=1400 audit(1789379683.817:451): avc: denied { read write } for pid=7020 comm="syz.2.423" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.060445][ T7033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=7033 comm=syz.1.430 [ 59.062429][ T7033] syz_tun: entered allmulticast mode [ 59.062674][ T7033] syz_tun: left allmulticast mode [ 59.257874][ T7042] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 59.372457][ T7051] binder: 7050:7051 ioctl 80585882 2000000000c0 returned -22 [ 59.537614][ T7065] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 59.640373][ T7077] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 59.712583][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.441'. [ 59.758346][ T7089] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 59.758378][ T7089] FAULT_INJECTION: forcing a failure. [ 59.758378][ T7089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.758402][ T7089] CPU: 2 UID: 0 PID: 7089 Comm: syz.0.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.758425][ T7089] Tainted: [L]=SOFTLOCKUP [ 59.758432][ T7089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.758442][ T7089] Call Trace: [ 59.758448][ T7089] [ 59.758455][ T7089] dump_stack_lvl+0x100/0x190 [ 59.758497][ T7089] should_fail_ex.cold+0x5/0xa [ 59.758522][ T7089] _copy_to_user+0x32/0xd0 [ 59.758548][ T7089] simple_read_from_buffer+0xcb/0x170 [ 59.758573][ T7089] proc_fail_nth_read+0x1af/0x230 [ 59.758596][ T7089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.758621][ T7089] ? rw_verify_area+0xce/0x6d0 [ 59.758646][ T7089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.758669][ T7089] vfs_read+0x1e4/0xb40 [ 59.758688][ T7089] ? lock_acquire+0x1d1/0x380 [ 59.758706][ T7089] ? __fget_files+0x34/0x3d0 [ 59.758726][ T7089] ? __pfx_vfs_read+0x10/0x10 [ 59.758741][ T7089] ? find_held_lock+0x2b/0x80 [ 59.758767][ T7089] ? __fget_files+0x215/0x3d0 [ 59.758790][ T7089] ? __fget_files+0x21f/0x3d0 [ 59.758817][ T7089] ksys_read+0x12a/0x250 [ 59.758834][ T7089] ? __pfx_ksys_read+0x10/0x10 [ 59.758849][ T7089] do_syscall_64+0x123/0x790 [ 59.758872][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.758884][ T7089] RIP: 0033:0x7ff5d0b5e98e [ 59.758893][ T7089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.758908][ T7089] RSP: 002b:00007ff5d19d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.758919][ T7089] RAX: ffffffffffffffda RBX: 00007ff5d19d76c0 RCX: 00007ff5d0b5e98e [ 59.758927][ T7089] RDX: 000000000000000f RSI: 00007ff5d19d70a0 RDI: 0000000000000004 [ 59.758934][ T7089] RBP: 00007ff5d19d7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.758940][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.758947][ T7089] R13: 00007ff5d0e26038 R14: 00007ff5d0e25fa0 R15: 00007ffced3aff78 [ 59.758966][ T7089] [ 59.819641][ T7103] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 59.918289][ T7108] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 59.930348][ T7108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.948012][ T7108] bond1: (slave gretap1): making interface the new active one [ 59.951022][ T7108] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 60.318639][ T7155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.463'. [ 60.323924][ T7155] block nbd3: not configured, cannot reconfigure [ 60.701858][ T7185] netlink: 5516 bytes leftover after parsing attributes in process `syz.1.475'. [ 60.753771][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.800590][ T7196] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.480'. [ 60.853546][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 60.986841][ T66] block nbd0: Receive control failed (result -32) [ 60.987154][ T7209] block nbd0: Receive control failed (result -32) [ 61.050477][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 61.050991][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.485'. [ 61.051232][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.485'. [ 61.051647][ T7216] netlink: 'syz.1.485': attribute type 32 has an invalid length. [ 61.051657][ T7216] netlink: 492 bytes leftover after parsing attributes in process `syz.1.485'. [ 61.140559][ T7224] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.490'. [ 61.323849][ T7233] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 61.323977][ T7233] SELinux: failed to load policy [ 61.415869][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.565852][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 61.566553][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.567540][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 61.567563][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 61.567581][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.567599][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.567627][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.670067][ T65] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 61.693523][ T7290] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 61.775296][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 61.775320][ T35] usbtmc 6-1:16.0: can't read capabilities [ 61.923111][ T7306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7306 comm=syz.3.503 [ 61.945969][ T7309] ima: Unable to open file: / (-22) [ 61.946205][ T7308] ima: policy update failed [ 61.963772][ T7311] FAULT_INJECTION: forcing a failure. [ 61.963772][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.963803][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.3.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.963825][ T7311] Tainted: [L]=SOFTLOCKUP [ 61.963831][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.963840][ T7311] Call Trace: [ 61.963844][ T7311] [ 61.963848][ T7311] dump_stack_lvl+0x100/0x190 [ 61.963889][ T7311] should_fail_ex.cold+0x5/0xa [ 61.963914][ T7311] _copy_from_user+0x2e/0xd0 [ 61.963938][ T7311] memdup_user_nul+0x6c/0x120 [ 61.963950][ T7311] ima_write_policy+0x122/0x480 [ 61.963967][ T7311] ? __pfx_ima_write_policy+0x10/0x10 [ 61.963982][ T7311] ? ksys_write+0x12a/0x250 [ 61.964001][ T7311] vfs_write+0x2aa/0x1050 [ 61.964020][ T7311] ? __pfx_ima_write_policy+0x10/0x10 [ 61.964043][ T7311] ? lock_acquire+0x1d1/0x380 [ 61.964061][ T7311] ? __fget_files+0x34/0x3d0 [ 61.964077][ T7311] ? __pfx_vfs_write+0x10/0x10 [ 61.964087][ T7311] ? find_held_lock+0x2b/0x80 [ 61.964109][ T7311] ? __fget_files+0x215/0x3d0 [ 61.964133][ T7311] ? __fget_files+0x21f/0x3d0 [ 61.964161][ T7311] ksys_write+0x12a/0x250 [ 61.964178][ T7311] ? __pfx_ksys_write+0x10/0x10 [ 61.964202][ T7311] do_syscall_64+0x123/0x790 [ 61.964230][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.964249][ T7311] RIP: 0033:0x7f08eef9e159 [ 61.964263][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.964295][ T7311] RSP: 002b:00007f08efdca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.964308][ T7311] RAX: ffffffffffffffda RBX: 00007f08ef225fa0 RCX: 00007f08eef9e159 [ 61.964315][ T7311] RDX: 0000000000000010 RSI: 0000200000002280 RDI: 0000000000000003 [ 61.964321][ T7311] RBP: 00007f08efdca090 R08: 0000000000000000 R09: 0000000000000000 [ 61.964328][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.964334][ T7311] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 61.964349][ T7311] [ 61.965136][ T7310] ima: policy update failed [ 61.978534][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.978936][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.985572][ T30] usb 6-1: USB disconnect, device number 4 [ 62.009264][ T7315] bridge_slave_0: left allmulticast mode [ 62.009288][ T7315] bridge_slave_0: left promiscuous mode [ 62.009495][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.020571][ T7315] bridge_slave_1: left allmulticast mode [ 62.020587][ T7315] bridge_slave_1: left promiscuous mode [ 62.020701][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.050468][ T7315] bond0: (slave bond_slave_0): Releasing backup interface [ 62.071461][ T7315] bond0: (slave bond_slave_1): Releasing backup interface [ 62.075355][ T7315] team0: Port device team_slave_0 removed [ 62.080637][ T7315] team0: Port device team_slave_1 removed [ 62.081235][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.081247][ T7315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.084114][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.084125][ T7315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.088553][ T7315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.692322][ T7351] program syz.1.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.692381][ T7351] ata1.00: non-matching transfer count (32/0) [ 62.907990][ T7363] netlink: 76 bytes leftover after parsing attributes in process `syz.2.523'. [ 63.058276][ T7375] team0: Device vlan2 is already an upper device of the team interface [ 63.110574][ T7377] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 63.110574][ T7377] Please contact the netfilter-devel mailing list or update your nftables rules. [ 63.258653][ T7391] bridge_slave_0: left allmulticast mode [ 63.258680][ T7391] bridge_slave_0: left promiscuous mode [ 63.260769][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.272554][ T7391] bridge_slave_1: left promiscuous mode [ 63.272687][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.286770][ T7391] bond0: (slave bond_slave_0): Releasing backup interface [ 63.292537][ T7391] bond0: (slave bond_slave_1): Releasing backup interface [ 63.306920][ T7391] team0: Port device team_slave_0 removed [ 63.312531][ T7391] team0: Port device team_slave_1 removed [ 63.313237][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.313255][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.317107][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.317119][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.328034][ T7391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.424188][ T7396] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 63.504121][ T7414] loop7: detected capacity change from 0 to 7 [ 63.513258][ T6469] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.513538][ T6469] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.513749][ T6469] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.513964][ T6469] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.514198][ T6469] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.559273][ T7422] FAULT_INJECTION: forcing a failure. [ 63.559273][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.559294][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.559309][ T7422] Tainted: [L]=SOFTLOCKUP [ 63.559313][ T7422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.559319][ T7422] Call Trace: [ 63.559323][ T7422] [ 63.559328][ T7422] dump_stack_lvl+0x100/0x190 [ 63.559349][ T7422] should_fail_ex.cold+0x5/0xa [ 63.559365][ T7422] _copy_from_user+0x2e/0xd0 [ 63.559378][ T7422] ucma_destroy_id+0xb6/0x2a0 [ 63.559400][ T7422] ? __pfx_ucma_destroy_id+0x10/0x10 [ 63.559417][ T7422] ? __pfx_ucma_destroy_id+0x10/0x10 [ 63.559431][ T7422] ucma_write+0x1fb/0x330 [ 63.559443][ T7422] ? __pfx_ucma_write+0x10/0x10 [ 63.559454][ T7422] ? bpf_lsm_file_permission+0x9/0x10 [ 63.559468][ T7422] ? security_file_permission+0x76/0x210 [ 63.559484][ T7422] ? rw_verify_area+0xce/0x6d0 [ 63.559519][ T7422] vfs_write+0x2aa/0x1050 [ 63.559531][ T7422] ? __pfx_ucma_write+0x10/0x10 [ 63.559542][ T7422] ? lock_acquire+0x1d1/0x380 [ 63.559554][ T7422] ? __fget_files+0x34/0x3d0 [ 63.559567][ T7422] ? __pfx_vfs_write+0x10/0x10 [ 63.559577][ T7422] ? find_held_lock+0x2b/0x80 [ 63.559592][ T7422] ? __fget_files+0x215/0x3d0 [ 63.559604][ T7422] ? __fget_files+0x215/0x3d0 [ 63.559619][ T7422] ? __fget_files+0x21f/0x3d0 [ 63.559636][ T7422] ksys_write+0x1f8/0x250 [ 63.559647][ T7422] ? __pfx_ksys_write+0x10/0x10 [ 63.559662][ T7422] do_syscall_64+0x123/0x790 [ 63.559678][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.559690][ T7422] RIP: 0033:0x7fe8a759e159 [ 63.559699][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.559711][ T7422] RSP: 002b:00007fe8a83ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.559722][ T7422] RAX: ffffffffffffffda RBX: 00007fe8a7825fa0 RCX: 00007fe8a759e159 [ 63.559729][ T7422] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000003 [ 63.559735][ T7422] RBP: 00007fe8a83ca090 R08: 0000000000000000 R09: 0000000000000000 [ 63.559741][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.559748][ T7422] R13: 00007fe8a7826038 R14: 00007fe8a7825fa0 R15: 00007fff17f351d8 [ 63.559762][ T7422] [ 63.620733][ T44] kauditd_printk_skb: 58 callbacks suppressed [ 63.620749][ T44] audit: type=1400 audit(1789379688.477:510): avc: denied { audit_write } for pid=7425 comm="syz.3.550" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.643370][ T44] audit: type=1400 audit(1789379688.497:511): avc: denied { bind } for pid=7427 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 63.645374][ T44] audit: type=1400 audit(1789379688.497:512): avc: denied { write } for pid=7427 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 63.650781][ T7428] Falling back ldisc for ttyS3. [ 63.654917][ T44] audit: type=1400 audit(1789379688.517:513): avc: denied { append } for pid=7427 comm="syz.1.551" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.769851][ T44] audit: type=1400 audit(1789379688.627:514): avc: denied { watch } for pid=7425 comm="syz.3.550" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=17212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.806505][ T7432] bridge_slave_0: left allmulticast mode [ 63.806521][ T7432] bridge_slave_0: left promiscuous mode [ 63.806648][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.813699][ T7432] bridge_slave_1: left allmulticast mode [ 63.813716][ T7432] bridge_slave_1: left promiscuous mode [ 63.813832][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.826356][ T7432] bond0: (slave bond_slave_0): Releasing backup interface [ 63.840222][ T7432] bond0: (slave bond_slave_1): Releasing backup interface [ 63.851739][ T7432] team0: Port device team_slave_0 removed [ 63.854732][ T7432] team0: Port device team_slave_1 removed [ 63.855299][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.855311][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.856708][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.856718][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.856986][ T7438] PKCS7: Unsupported SignedData version [ 63.858149][ T44] audit: type=1400 audit(1789379688.717:515): avc: denied { sqpoll } for pid=7436 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.859691][ T7432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.912193][ T7437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.958316][ T7443] netlink: zone id is out of range [ 63.958334][ T7443] netlink: zone id is out of range [ 64.069443][ T7448] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.073322][ T7448] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 64.181840][ T7443] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 64.185196][ T44] audit: type=1400 audit(1789379689.037:516): avc: denied { read } for pid=5122 comm="acpid" name="mouse2" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.186812][ T44] audit: type=1400 audit(1789379689.037:517): avc: denied { open } for pid=5122 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.186850][ T44] audit: type=1400 audit(1789379689.047:518): avc: denied { ioctl } for pid=5122 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2884 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.440837][ T44] audit: type=1400 audit(1789379689.297:519): avc: denied { read } for pid=7460 comm="syz.3.562" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.565945][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 64.718745][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 64.718775][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 64.720398][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.722426][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.722446][ T25] usb 5-1: Product: syz [ 64.722458][ T25] usb 5-1: Manufacturer: syz [ 64.722470][ T25] usb 5-1: SerialNumber: syz [ 64.730363][ T25] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 64.730585][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 64.730639][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 64.731855][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 64.733615][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 64.735573][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 64.739881][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 64.741681][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 64.743543][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 64.745786][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 64.747619][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 64.897944][ T7473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.939320][ T7478] input: syz0 as /devices/virtual/input/input6 [ 65.057373][ T43] usb 5-1: USB disconnect, device number 3 [ 65.059166][ T43] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 65.061363][ T43] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 65.070265][ T43] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 65.074286][ T43] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 65.074693][ T43] keyspan 5-1:1.0: device disconnected [ 65.394757][ T7495] nfs: Unknown parameter '' [ 65.528577][ T7508] 9pnet_virtio: no channels available for device syz [ 65.545322][ T7508] overlayfs: missing 'lowerdir' [ 65.821451][ T7531] overlayfs: failed lookup in lower (newroot/121, name='file0', err=-40): overlapping layers [ 65.822257][ T7531] overlay: filesystem on ./file1 not supported as upperdir [ 65.878231][ T7533] __nla_validate_parse: 3 callbacks suppressed [ 65.878251][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 65.878266][ T7533] openvswitch: netlink: Flow key attr not present in new flow. [ 66.005806][ T35] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 66.006538][ T7540] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 66.155866][ T3265] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.180535][ T35] usb 6-1: not running at top speed; connect to a high speed hub [ 66.180555][ T35] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 66.181789][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.183703][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.183715][ T35] usb 6-1: Product: syz [ 66.183723][ T35] usb 6-1: Manufacturer: syz [ 66.183730][ T35] usb 6-1: SerialNumber: syz [ 66.194982][ T35] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 66.196291][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 66.196343][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 66.197031][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 66.198109][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 66.199234][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 66.200009][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 66.200714][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 66.201484][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 66.203233][ T35] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 66.204304][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 66.325808][ T3265] usb 7-1: Using ep0 maxpacket: 8 [ 66.326470][ T3265] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.332179][ T3265] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 66.332202][ T3265] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 66.332218][ T3265] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.332238][ T3265] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.332272][ T3265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.397946][ T7528] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 66.517820][ T5876] usb 6-1: USB disconnect, device number 5 [ 66.522836][ T5876] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 66.524257][ T5876] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 66.525549][ T5876] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 66.527203][ T5876] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 66.527502][ T5876] keyspan 6-1:1.0: device disconnected [ 66.614209][ T3265] usb 7-1: GET_CAPABILITIES returned 0 [ 66.614233][ T3265] usbtmc 7-1:16.0: can't read capabilities [ 66.816949][ T7535] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 66.874545][ T5876] usb 7-1: USB disconnect, device number 3 [ 67.080675][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.080815][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.080950][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081155][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081330][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081468][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081599][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081730][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081867][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.081995][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082127][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082324][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082458][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082593][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082723][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082855][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.082985][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083117][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083225][ T7577] syzkaller1: entered promiscuous mode [ 67.083237][ T7577] syzkaller1: entered allmulticast mode [ 67.083292][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083425][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083558][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083687][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083816][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.083966][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.084098][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.084276][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.084494][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.084628][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.084774][ T7579] 9pnet_virtio: no channels available for device ./file0 [ 67.088971][ T7578] overlayfs: workdir and upperdir must reside under the same mount [ 67.338658][ T7601] ALSA: mixer_oss: invalid OSS volume '' [ 67.338669][ T7601] ALSA: mixer_oss: invalid OSS volume '@' [ 67.338675][ T7601] ALSA: mixer_oss: invalid OSS volume '|' [ 67.339160][ T7601] ALSA: mixer_oss: invalid OSS volume '' [ 67.359026][ T7595] FAULT_INJECTION: forcing a failure. [ 67.359026][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 67.359048][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.0.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.359064][ T7595] Tainted: [L]=SOFTLOCKUP [ 67.359068][ T7595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.359074][ T7595] Call Trace: [ 67.359078][ T7595] [ 67.359083][ T7595] dump_stack_lvl+0x100/0x190 [ 67.359102][ T7595] should_fail_ex.cold+0x5/0xa [ 67.359118][ T7595] should_failslab+0xc2/0x120 [ 67.359138][ T7595] __kmalloc_noprof+0xfc/0x840 [ 67.359150][ T7595] ? rcu_is_watching+0x13/0xc0 [ 67.359165][ T7595] ? tomoyo_encode2+0xfb/0x3c0 [ 67.359182][ T7595] tomoyo_encode2+0xfb/0x3c0 [ 67.359196][ T7595] tomoyo_encode+0x29/0x50 [ 67.359209][ T7595] tomoyo_realpath_from_path+0x18c/0x690 [ 67.359225][ T7595] tomoyo_path_number_perm+0x23c/0x580 [ 67.359236][ T7595] ? tomoyo_path_number_perm+0x22e/0x580 [ 67.359248][ T7595] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.359265][ T7595] ? __lock_acquire+0x5c0/0x1f40 [ 67.359283][ T7595] ? __fget_files+0x34/0x3d0 [ 67.359297][ T7595] ? find_held_lock+0x2b/0x80 [ 67.359312][ T7595] ? hook_file_ioctl_common+0x140/0x440 [ 67.359330][ T7595] ? __fget_files+0x21f/0x3d0 [ 67.359345][ T7595] security_file_ioctl+0xd3/0x230 [ 67.359362][ T7595] __x64_sys_ioctl+0xb7/0x210 [ 67.359375][ T7595] do_syscall_64+0x123/0x790 [ 67.359391][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.359402][ T7595] RIP: 0033:0x7ff5d0b9e159 [ 67.359412][ T7595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.359423][ T7595] RSP: 002b:00007ff5d19d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.359434][ T7595] RAX: ffffffffffffffda RBX: 00007ff5d0e25fa0 RCX: 00007ff5d0b9e159 [ 67.359441][ T7595] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000004 [ 67.359447][ T7595] RBP: 00007ff5d19d7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.359454][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.359460][ T7595] R13: 00007ff5d0e26038 R14: 00007ff5d0e25fa0 R15: 00007ffced3aff78 [ 67.359474][ T7595] [ 67.359484][ T7595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.560772][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 67.566973][ T7621] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.621'. [ 67.689611][ T7645] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.634'. [ 67.749508][ T7653] capability: warning: `syz.3.636' uses 32-bit capabilities (legacy support in use) [ 67.763609][ T7654] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 67.872581][ T7654] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.910895][ T7657] FAULT_INJECTION: forcing a failure. [ 67.910895][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 67.910926][ T7657] CPU: 2 UID: 0 PID: 7657 Comm: syz.3.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.910948][ T7657] Tainted: [L]=SOFTLOCKUP [ 67.910954][ T7657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.910964][ T7657] Call Trace: [ 67.910970][ T7657] [ 67.910978][ T7657] dump_stack_lvl+0x100/0x190 [ 67.911012][ T7657] should_fail_ex.cold+0x5/0xa [ 67.911036][ T7657] should_failslab+0xc2/0x120 [ 67.911058][ T7657] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.911077][ T7657] ? __send_signal_locked+0x155/0x12d0 [ 67.911104][ T7657] __send_signal_locked+0x155/0x12d0 [ 67.911135][ T7657] send_signal_locked+0x15e/0xa00 [ 67.911156][ T7657] ? __pfx_send_signal_locked+0x10/0x10 [ 67.911172][ T7657] ? do_raw_spin_lock+0x128/0x260 [ 67.911197][ T7657] ? _raw_spin_lock_irqsave+0x52/0x60 [ 67.911222][ T7657] force_sig_info_to_task+0x450/0x660 [ 67.911246][ T7657] force_sig_fault+0xc3/0x100 [ 67.911266][ T7657] ? __pfx_force_sig_fault+0x10/0x10 [ 67.911290][ T7657] ? __pfx___up_read+0x10/0x10 [ 67.911309][ T7657] ? fixup_vdso_exception+0x2d1/0x370 [ 67.911331][ T7657] __bad_area_nosemaphore+0x31b/0x3f0 [ 67.911353][ T7657] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 67.911377][ T7657] do_user_addr_fault+0x8ca/0x12f0 [ 67.911405][ T7657] exc_page_fault+0x6f/0xd0 [ 67.911429][ T7657] asm_exc_page_fault+0x26/0x30 [ 67.911445][ T7657] RIP: 0033:0x7f08eef877a1 [ 67.911459][ T7657] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 67.911474][ T7657] RSP: 002b:00007f08efdc9bd8 EFLAGS: 00010283 [ 67.911489][ T7657] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 67.911499][ T7657] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f08efdc9c00 [ 67.911509][ T7657] RBP: 00007f08efdc9c00 R08: 0000000000000000 R09: 0000000000000000 [ 67.911518][ T7657] R10: 0000000000000000 R11: 0000000000000801 R12: cccccccccccccccd [ 67.911528][ T7657] R13: 00007f08ef226038 R14: 00007f08ef225fa0 R15: 00007ffd31885448 [ 67.911550][ T7657] [ 67.993715][ T7665] binder: 7664:7665 ioctl 4018620d 0 returned -22 [ 68.069127][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 68.069141][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 68.069396][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 68.069404][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 68.147289][ T7680] netlink: ct_mark mask cannot be 0 [ 68.147305][ T7680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.178449][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.336692][ T35] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 68.337495][ T35] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 68.337508][ T35] usb 8-1: config 1 has no interface number 0 [ 68.338997][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.339009][ T35] usb 8-1: Product: syz [ 68.339016][ T35] usb 8-1: Manufacturer: syz [ 68.339023][ T35] usb 8-1: SerialNumber: syz [ 68.352937][ T35] usb 8-1: 3:1 : does not exist [ 68.352951][ T35] usb 8-1: 3:2 : does not exist [ 68.443701][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 68.443716][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 68.570445][ T7717] Falling back ldisc for ttyS3. [ 68.576266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.691970][ T44] kauditd_printk_skb: 87 callbacks suppressed [ 68.691983][ T44] audit: type=1807 audit(1789379693.547:552): UNKNOWN= res=0 [ 68.692086][ T44] audit: type=1802 audit(1789379693.547:553): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.671" res=0 errno=0 [ 68.692233][ T7734] ima: policy update failed [ 68.692293][ T44] audit: type=1802 audit(1789379693.547:554): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.671" res=0 errno=0 [ 68.758684][ T7744] Falling back ldisc for ttyS3. [ 68.887601][ T7755] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 68.887812][ T7753] IPVS: stopping master sync thread 7755 ... [ 68.903955][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.906997][ T7752] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 68.924536][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.924558][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.924592][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.924612][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.924618][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.924628][ T7751] Call Trace: [ 68.924634][ T7751] [ 68.924640][ T7751] dump_stack_lvl+0x100/0x190 [ 68.924659][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.924677][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.924692][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.924709][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.924724][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.924740][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.924755][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.924769][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.924783][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.924805][ T7751] packet_release+0x839/0xd70 [ 68.924820][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.924833][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.924852][ T7751] __sock_release+0xb3/0x260 [ 68.924865][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.924878][ T7751] sock_close+0x1c/0x30 [ 68.924891][ T7751] __fput+0x3ff/0xb50 [ 68.924908][ T7751] task_work_run+0x150/0x240 [ 68.924925][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.924944][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.924957][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.924973][ T7751] do_syscall_64+0x661/0x790 [ 68.924995][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.925007][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.925017][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.925028][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.925040][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.925047][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.925053][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.925060][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.925066][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.925079][ T7751] [ 68.925171][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.925180][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.925199][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.925212][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.925216][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.925222][ T7751] Call Trace: [ 68.925225][ T7751] [ 68.925229][ T7751] dump_stack_lvl+0x100/0x190 [ 68.925245][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.925282][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.925298][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.925315][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.925330][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.925346][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.925360][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.925374][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.925387][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.925409][ T7751] packet_release+0x839/0xd70 [ 68.925423][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.925436][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.925454][ T7751] __sock_release+0xb3/0x260 [ 68.925467][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.925481][ T7751] sock_close+0x1c/0x30 [ 68.925493][ T7751] __fput+0x3ff/0xb50 [ 68.925509][ T7751] task_work_run+0x150/0x240 [ 68.925526][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.925545][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.925558][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.925574][ T7751] do_syscall_64+0x661/0x790 [ 68.925589][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.925600][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.925608][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.925618][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.925629][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.925635][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.925641][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.925648][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.925654][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.925668][ T7751] [ 68.927656][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.927669][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.927744][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.927761][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.927765][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.927771][ T7751] Call Trace: [ 68.927776][ T7751] [ 68.927780][ T7751] dump_stack_lvl+0x100/0x190 [ 68.927798][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.927817][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.927832][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.927850][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.927880][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.927897][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.927912][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.927927][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.927941][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.927964][ T7751] packet_release+0x839/0xd70 [ 68.927980][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.928000][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.928019][ T7751] __sock_release+0xb3/0x260 [ 68.928033][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.928047][ T7751] sock_close+0x1c/0x30 [ 68.928060][ T7751] __fput+0x3ff/0xb50 [ 68.928078][ T7751] task_work_run+0x150/0x240 [ 68.928096][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.928117][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.928131][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.928147][ T7751] do_syscall_64+0x661/0x790 [ 68.928164][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.928176][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.928186][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.928197][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.928208][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.928216][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.928222][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.928229][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.928236][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.928250][ T7751] [ 68.928379][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.928389][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.928458][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.928474][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.928478][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.928484][ T7751] Call Trace: [ 68.928488][ T7751] [ 68.928492][ T7751] dump_stack_lvl+0x100/0x190 [ 68.928509][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.928526][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.928541][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.928558][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.928587][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.928622][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.928638][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.928652][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.928666][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.928690][ T7751] packet_release+0x839/0xd70 [ 68.928705][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.928719][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.928739][ T7751] __sock_release+0xb3/0x260 [ 68.928753][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.928767][ T7751] sock_close+0x1c/0x30 [ 68.928780][ T7751] __fput+0x3ff/0xb50 [ 68.928798][ T7751] task_work_run+0x150/0x240 [ 68.928815][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.928837][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.928850][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.928867][ T7751] do_syscall_64+0x661/0x790 [ 68.928883][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.928895][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.928903][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.928914][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.928925][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.928932][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.928938][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.928945][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.928952][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.928966][ T7751] [ 68.930109][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.930122][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.930143][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.930158][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.930162][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.930168][ T7751] Call Trace: [ 68.930171][ T7751] [ 68.930175][ T7751] dump_stack_lvl+0x100/0x190 [ 68.930192][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.930223][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.930237][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.930254][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.930269][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.930285][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.930299][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.930313][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.930327][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.930349][ T7751] packet_release+0x839/0xd70 [ 68.930363][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.930377][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.930395][ T7751] __sock_release+0xb3/0x260 [ 68.930409][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.930422][ T7751] sock_close+0x1c/0x30 [ 68.930434][ T7751] __fput+0x3ff/0xb50 [ 68.930451][ T7751] task_work_run+0x150/0x240 [ 68.930470][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.930490][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.930506][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.930522][ T7751] do_syscall_64+0x661/0x790 [ 68.930537][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.930548][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.930558][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.930568][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.930579][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.930586][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.930592][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.930599][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.930605][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.930618][ T7751] [ 68.930725][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.930735][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.930753][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.930767][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.930770][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.930789][ T7751] Call Trace: [ 68.930793][ T7751] [ 68.930797][ T7751] dump_stack_lvl+0x100/0x190 [ 68.930813][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.930830][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.930843][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.930860][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.930875][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.930891][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.930906][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.930919][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.930933][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.930955][ T7751] packet_release+0x839/0xd70 [ 68.930974][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.930987][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.931006][ T7751] __sock_release+0xb3/0x260 [ 68.931019][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.931032][ T7751] sock_close+0x1c/0x30 [ 68.931045][ T7751] __fput+0x3ff/0xb50 [ 68.931061][ T7751] task_work_run+0x150/0x240 [ 68.931078][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.931098][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.931111][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.931126][ T7751] do_syscall_64+0x661/0x790 [ 68.931142][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.931153][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.931161][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.931171][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.931181][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.931188][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.931194][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.931200][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.931207][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.931220][ T7751] [ 68.931345][ T7751] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.679/7751 [ 68.931354][ T7751] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.931372][ T7751] CPU: 3 UID: 0 PID: 7751 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.931399][ T7751] Tainted: [L]=SOFTLOCKUP [ 68.931403][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.931409][ T7751] Call Trace: [ 68.931412][ T7751] [ 68.931416][ T7751] dump_stack_lvl+0x100/0x190 [ 68.931432][ T7751] check_preemption_disabled+0xd2/0xe0 [ 68.931449][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.931463][ T7751] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 68.931482][ T7751] ? skb_queue_purge_reason+0x2aa/0x420 [ 68.931497][ T7751] trace_kfree_skb+0x18b/0x230 [ 68.931513][ T7751] sk_skb_reason_drop+0xb7/0x1b0 [ 68.931527][ T7751] skb_queue_purge_reason+0x2aa/0x420 [ 68.931541][ T7751] ? synchronize_rcu_expedited+0x3c3/0x450 [ 68.931554][ T7751] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 68.931576][ T7751] packet_release+0x839/0xd70 [ 68.931591][ T7751] ? __pfx_packet_release+0x10/0x10 [ 68.931604][ T7751] ? __pfx_down_write+0x10/0x10 [ 68.931622][ T7751] __sock_release+0xb3/0x260 [ 68.931635][ T7751] ? __pfx_sock_close+0x10/0x10 [ 68.931649][ T7751] sock_close+0x1c/0x30 [ 68.931661][ T7751] __fput+0x3ff/0xb50 [ 68.931678][ T7751] task_work_run+0x150/0x240 [ 68.931694][ T7751] ? __pfx_task_work_run+0x10/0x10 [ 68.931714][ T7751] exit_to_user_mode_loop+0x1d8/0x700 [ 68.931727][ T7751] ? rcu_is_watching+0x13/0xc0 [ 68.931742][ T7751] do_syscall_64+0x661/0x790 [ 68.931758][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.931768][ T7751] RIP: 0033:0x7fe8a759e159 [ 68.931777][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.931787][ T7751] RSP: 002b:00007fff17f35338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.931796][ T7751] RAX: 0000000000000000 RBX: 00007fff17f35420 RCX: 00007fe8a759e159 [ 68.931803][ T7751] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.931809][ T7751] RBP: 0000000000010c7f R08: 0000000000000001 R09: 0000000000000000 [ 68.931815][ T7751] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fff17f35460 [ 68.931821][ T7751] R13: 00007fe8a7825fac R14: 0000000000010cf9 R15: 00007fe8a7825fa0 [ 68.931834][ T7751] [ 68.961582][ T7761] FAULT_INJECTION: forcing a failure. [ 68.961582][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 68.961612][ T7761] CPU: 2 UID: 0 PID: 7761 Comm: syz.0.680 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.961635][ T7761] Tainted: [L]=SOFTLOCKUP [ 68.961641][ T7761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.961650][ T7761] Call Trace: [ 68.961657][ T7761] [ 68.961664][ T7761] dump_stack_lvl+0x100/0x190 [ 68.961692][ T7761] should_fail_ex.cold+0x5/0xa [ 68.961716][ T7761] should_failslab+0xc2/0x120 [ 68.961739][ T7761] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.961757][ T7761] ? do_getname+0x35/0x390 [ 68.961786][ T7761] do_getname+0x35/0x390 [ 68.961812][ T7761] do_sys_openat2+0xc7/0x1e0 [ 68.961834][ T7761] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.961857][ T7761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.961887][ T7761] __x64_sys_openat+0x12d/0x210 [ 68.961910][ T7761] ? __pfx___x64_sys_openat+0x10/0x10 [ 68.961931][ T7761] ? ksys_write+0x1ac/0x250 [ 68.961962][ T7761] do_syscall_64+0x123/0x790 [ 68.961988][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.962007][ T7761] RIP: 0033:0x7ff5d0b9e159 [ 68.962022][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.962037][ T7761] RSP: 002b:00007ff5d19b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.962055][ T7761] RAX: ffffffffffffffda RBX: 00007ff5d0e26090 RCX: 00007ff5d0b9e159 [ 68.962066][ T7761] RDX: 0000000000000001 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 68.962076][ T7761] RBP: 00007ff5d0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 68.962086][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.962095][ T7761] R13: 00007ff5d0e26128 R14: 00007ff5d0e26090 R15: 00007ffced3aff78 [ 68.962117][ T7761] [ 71.140141][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.140900][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.151204][ T10] cfg80211: failed to load regulatory.db [ 73.955304][ T50] usb 8-1: USB disconnect, device number 2