last executing test programs: 16.339828919s ago: executing program 2 (id=449): openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 16.337367333s ago: executing program 2 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000300)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x2404c081, &(0x7f0000000380)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cdg', 0x3) shutdown(r0, 0x1) 16.211449223s ago: executing program 2 (id=453): r0 = socket(0xa, 0x3, 0xff) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xc3}], 0x1, 0x18042, 0x0) 16.211211303s ago: executing program 2 (id=454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x0, 0x40054}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x8d44, 0x11, 0x100, 0x10000, 0xc, "000000e7080004000000000000006f00ff0700"}) 16.170373979s ago: executing program 2 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0xff) mount(0x0, &(0x7f0000000300)='./pipe\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0xb) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000004c0)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000009c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 16.114438272s ago: executing program 2 (id=458): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.522325734s ago: executing program 1 (id=727): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) read(r2, 0x0, 0x0) 2.462107771s ago: executing program 1 (id=728): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x300}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 1.626123293s ago: executing program 1 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x1ffe) 1.410698893s ago: executing program 1 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='100', 0x3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 1.286978782s ago: executing program 1 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1.145144805s ago: executing program 1 (id=745): capset(0x0, 0x0) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)) 1.095931716s ago: executing program 32 (id=458): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 502.144533ms ago: executing program 3 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000004c0), 0x2000, &(0x7f00000024c0)={&(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x9, 0x48b, 0xa, 0x400000000000004, 0x5, 0x9, 0x8, 0x104, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 437.693995ms ago: executing program 3 (id=764): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) 330.957553ms ago: executing program 0 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 330.826673ms ago: executing program 3 (id=767): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x20002f7}) 329.339512ms ago: executing program 0 (id=768): r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f0000000480)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000002580), &(0x7f00000025c0), &(0x7f0000002600)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000002640)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, &(0x7f00000026c0)=0x0, &(0x7f0000002700)=0x0, &(0x7f0000002740)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000002780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002800)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000002840)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000002880)={0x0, 0x6953, 0x3a, 0x0, 0x36f, 0x0, r0}, &(0x7f0000002900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc0d0, 0x800, 0x0, 0x3a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x279}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x121a, 0x2000, 0x2000002, 0x44}}], 0x1, &(0x7f0000002b80)={0x2e, 0x6, 0x4500, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0) 328.855496ms ago: executing program 3 (id=769): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x3, {0x0, 0x5, 0x83, 0x3, 0x79, 0x5, 0x2, 0x4}}, 0x11) 180.199962ms ago: executing program 0 (id=770): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 180.080863ms ago: executing program 3 (id=771): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) 179.818223ms ago: executing program 3 (id=772): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000580)={0x2, 0x100, 0x0, 0x2, 0x0, 0xfffffffc}) 72.220831ms ago: executing program 0 (id=773): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 71.903205ms ago: executing program 0 (id=774): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 0s ago: executing program 0 (id=775): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) ppoll(&(0x7f0000000280)=[{r0, 0xa362}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): BX: 0000000000000004 RCX: 0000000080002a00 [ 48.498561][ T6403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.498567][ T6403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.498573][ T6403] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.498579][ T6403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.498593][ T6403] [ 48.507346][ T5792] tipc: Node number set to 2886997162 [ 48.831333][ T6433] netlink: 148 bytes leftover after parsing attributes in process `syz.3.186'. [ 49.262939][ T6476] capability: warning: `syz.2.202' uses deprecated v2 capabilities in a way that may be insecure [ 49.295036][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.299437][ T6483] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.450731][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 49.450981][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 49.541285][ T6502] ceph: No mds server is up or the cluster is laggy [ 50.224071][ T6565] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.835264][ T6581] FAULT_INJECTION: forcing a failure. [ 50.835264][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 50.835285][ T6581] CPU: 3 UID: 0 PID: 6581 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 50.835297][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.835303][ T6581] Call Trace: [ 50.835307][ T6581] [ 50.835311][ T6581] dump_stack_lvl+0x100/0x190 [ 50.835330][ T6581] should_fail_ex.cold+0x5/0xa [ 50.835345][ T6581] should_failslab+0xc2/0x120 [ 50.835363][ T6581] __kmalloc_noprof+0xfc/0x840 [ 50.835379][ T6581] ? iovec_from_user+0x8d/0x140 [ 50.835400][ T6581] iovec_from_user+0x8d/0x140 [ 50.835418][ T6581] __import_iovec+0x81/0x640 [ 50.835435][ T6581] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.835451][ T6581] import_iovec+0x82/0xb0 [ 50.835469][ T6581] vfs_writev+0x197/0xdd0 [ 50.835487][ T6581] ? __pfx_vfs_writev+0x10/0x10 [ 50.835501][ T6581] ? __pfx_futex_wait+0x10/0x10 [ 50.835517][ T6581] ? lock_acquire+0x1d1/0x380 [ 50.835532][ T6581] ? __fget_files+0x34/0x3d0 [ 50.835552][ T6581] ? __fget_files+0x21f/0x3d0 [ 50.835569][ T6581] ? do_pwritev+0x1ac/0x270 [ 50.835582][ T6581] do_pwritev+0x1ac/0x270 [ 50.835596][ T6581] ? __pfx_do_pwritev+0x10/0x10 [ 50.835610][ T6581] ? find_held_lock+0x2b/0x80 [ 50.835621][ T6581] ? __might_fault+0xc5/0x140 [ 50.835632][ T6581] ? __might_fault+0xc5/0x140 [ 50.835646][ T6581] __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 50.835664][ T6581] __do_fast_syscall_32+0x14b/0x8c0 [ 50.835678][ T6581] do_fast_syscall_32+0x32/0x70 [ 50.835689][ T6581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.835702][ T6581] RIP: 0023:0xf7f17fbc [ 50.835711][ T6581] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 50.835721][ T6581] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000017b [ 50.835732][ T6581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 50.835739][ T6581] RDX: 000000000000001c RSI: 0000000000000a00 RDI: 0000000000000000 [ 50.835746][ T6581] RBP: 0000000000000022 R08: 0000000000000000 R09: 0000000000000000 [ 50.835753][ T6581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.835759][ T6581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.835773][ T6581] [ 50.853070][ T6584] FAULT_INJECTION: forcing a failure. [ 50.853070][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 50.853089][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 50.853101][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.853127][ T6584] Call Trace: [ 50.853132][ T6584] [ 50.853137][ T6584] dump_stack_lvl+0x100/0x190 [ 50.853156][ T6584] should_fail_ex.cold+0x5/0xa [ 50.853172][ T6584] should_failslab+0xc2/0x120 [ 50.853183][ T6584] __kmalloc_cache_noprof+0x91/0x6d0 [ 50.853199][ T6584] ? isofs_init_fs_context+0x43/0x370 [ 50.853219][ T6584] isofs_init_fs_context+0x43/0x370 [ 50.853236][ T6584] alloc_fs_context+0x607/0xf40 [ 50.853250][ T6584] __ia32_sys_fsopen+0x16d/0x2d0 [ 50.853264][ T6584] __do_fast_syscall_32+0x14b/0x8c0 [ 50.853278][ T6584] do_fast_syscall_32+0x32/0x70 [ 50.853289][ T6584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.853309][ T6584] RIP: 0023:0xf7fd3fbc [ 50.853319][ T6584] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 50.853330][ T6584] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 50.853341][ T6584] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 0000000000000000 [ 50.853348][ T6584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.853354][ T6584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.853360][ T6584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.853367][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.853381][ T6584] [ 51.023249][ T6599] FAULT_INJECTION: forcing a failure. [ 51.023249][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 51.023269][ T6599] CPU: 2 UID: 0 PID: 6599 Comm: syz.2.245 Not tainted syzkaller #0 PREEMPT(full) [ 51.023281][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.023288][ T6599] Call Trace: [ 51.023292][ T6599] [ 51.023296][ T6599] dump_stack_lvl+0x100/0x190 [ 51.023315][ T6599] should_fail_ex.cold+0x5/0xa [ 51.023330][ T6599] should_failslab+0xc2/0x120 [ 51.023341][ T6599] __kvmalloc_node_noprof+0x113/0x9b0 [ 51.023357][ T6599] ? trace_contention_end+0x126/0x160 [ 51.023374][ T6599] ? io_rsrc_data_alloc+0x2c/0xa0 [ 51.023393][ T6599] io_rsrc_data_alloc+0x2c/0xa0 [ 51.023411][ T6599] io_alloc_file_tables+0x27/0xb0 [ 51.023426][ T6599] io_sqe_files_register+0x186/0x970 [ 51.023441][ T6599] ? __pfx_io_sqe_files_register+0x10/0x10 [ 51.023458][ T6599] __do_sys_io_uring_register+0x1204/0x1c10 [ 51.023472][ T6599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.023491][ T6599] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 51.023506][ T6599] ? lock_acquire+0x1d1/0x380 [ 51.023520][ T6599] ? __might_fault+0xc5/0x140 [ 51.023532][ T6599] ? find_held_lock+0x2b/0x80 [ 51.023543][ T6599] ? __might_fault+0xc5/0x140 [ 51.023554][ T6599] ? __might_fault+0xc5/0x140 [ 51.023570][ T6599] __do_fast_syscall_32+0x14b/0x8c0 [ 51.023583][ T6599] do_fast_syscall_32+0x32/0x70 [ 51.023593][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.023607][ T6599] RIP: 0023:0xf7f17fbc [ 51.023616][ T6599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.023626][ T6599] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 51.023636][ T6599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000002 [ 51.023643][ T6599] RDX: 0000000080002d40 RSI: 0000000000000020 RDI: 0000000000000000 [ 51.023649][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.023655][ T6599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.023661][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.023674][ T6599] [ 51.087816][ T6607] FAULT_INJECTION: forcing a failure. [ 51.087816][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 51.087836][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT(full) [ 51.087848][ T6607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.087854][ T6607] Call Trace: [ 51.087858][ T6607] [ 51.087862][ T6607] dump_stack_lvl+0x100/0x190 [ 51.087880][ T6607] should_fail_ex.cold+0x5/0xa [ 51.087896][ T6607] should_failslab+0xc2/0x120 [ 51.087908][ T6607] __kmalloc_noprof+0xfc/0x840 [ 51.087924][ T6607] ? __memcg_list_lru_alloc+0x418/0x680 [ 51.087939][ T6607] __memcg_list_lru_alloc+0x418/0x680 [ 51.087951][ T6607] ? xa_load+0x149/0x2c0 [ 51.087966][ T6607] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 51.087981][ T6607] ? rcu_read_unlock+0x17/0x60 [ 51.087998][ T6607] memcg_list_lru_alloc+0xd3/0x100 [ 51.088012][ T6607] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 51.088029][ T6607] ? kasan_save_track+0x14/0x30 [ 51.088046][ T6607] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 51.088061][ T6607] ? alloc_inode+0x183/0x250 [ 51.088077][ T6607] alloc_inode+0x183/0x250 [ 51.088089][ T6607] alloc_anon_inode+0x28/0x3b0 [ 51.088105][ T6607] ? alloc_fd+0x471/0x7a0 [ 51.088120][ T6607] anon_inode_make_secure_inode+0x2f/0x140 [ 51.088135][ T6607] secretmem_file_create.isra.0+0x43/0x470 [ 51.088148][ T6607] __ia32_sys_memfd_secret+0xd7/0x170 [ 51.088159][ T6607] __do_fast_syscall_32+0x14b/0x8c0 [ 51.088172][ T6607] do_fast_syscall_32+0x32/0x70 [ 51.088183][ T6607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.088196][ T6607] RIP: 0023:0xf7f17fbc [ 51.088205][ T6607] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.088214][ T6607] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf [ 51.088225][ T6607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 51.088231][ T6607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.088237][ T6607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.088243][ T6607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.088248][ T6607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.088261][ T6607] [ 51.129642][ T6611] FAULT_INJECTION: forcing a failure. [ 51.129642][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 51.129660][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 51.129672][ T6611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.129679][ T6611] Call Trace: [ 51.129683][ T6611] [ 51.129687][ T6611] dump_stack_lvl+0x100/0x190 [ 51.129706][ T6611] should_fail_ex.cold+0x5/0xa [ 51.129721][ T6611] should_failslab+0xc2/0x120 [ 51.129733][ T6611] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.129747][ T6611] ? alloc_mnt_ns+0xc9/0x510 [ 51.129764][ T6611] alloc_mnt_ns+0xc9/0x510 [ 51.129781][ T6611] vfs_open_tree+0x4df/0xb60 [ 51.129792][ T6611] ? _raw_spin_unlock+0x28/0x50 [ 51.129807][ T6611] ? __pfx_vfs_open_tree+0x10/0x10 [ 51.129822][ T6611] __ia32_sys_open_tree+0xbd/0x150 [ 51.129834][ T6611] __do_fast_syscall_32+0x14b/0x8c0 [ 51.129846][ T6611] do_fast_syscall_32+0x32/0x70 [ 51.129857][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.129870][ T6611] RIP: 0023:0xf7f17fbc [ 51.129881][ T6611] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.129894][ T6611] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ac [ 51.129909][ T6611] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 51.129918][ T6611] RDX: 0000000000089901 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.129927][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.129936][ T6611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.129946][ T6611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.129969][ T6611] [ 51.420436][ T6621] FAULT_INJECTION: forcing a failure. [ 51.420436][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 51.420457][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 51.420469][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.420475][ T6621] Call Trace: [ 51.420480][ T6621] [ 51.420484][ T6621] dump_stack_lvl+0x100/0x190 [ 51.420502][ T6621] should_fail_ex.cold+0x5/0xa [ 51.420518][ T6621] should_failslab+0xc2/0x120 [ 51.420530][ T6621] __kvmalloc_node_noprof+0x113/0x9b0 [ 51.420547][ T6621] ? listxattr+0x89/0x190 [ 51.420564][ T6621] listxattr+0x89/0x190 [ 51.420580][ T6621] path_listxattrat+0x2b3/0x370 [ 51.420597][ T6621] ? __pfx_path_listxattrat+0x10/0x10 [ 51.420616][ T6621] __do_fast_syscall_32+0x14b/0x8c0 [ 51.420630][ T6621] do_fast_syscall_32+0x32/0x70 [ 51.420640][ T6621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.420654][ T6621] RIP: 0023:0xf7fd3fbc [ 51.420663][ T6621] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.420673][ T6621] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ea [ 51.420690][ T6621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 51.420697][ T6621] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000000 [ 51.420704][ T6621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.420710][ T6621] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.420717][ T6621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.420730][ T6621] [ 51.485753][ T6625] netlink: 27 bytes leftover after parsing attributes in process `syz.2.259'. [ 51.609186][ T6635] FAULT_INJECTION: forcing a failure. [ 51.609186][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 51.609206][ T6635] CPU: 2 UID: 0 PID: 6635 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 51.609219][ T6635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.609225][ T6635] Call Trace: [ 51.609229][ T6635] [ 51.609233][ T6635] dump_stack_lvl+0x100/0x190 [ 51.609271][ T6635] should_fail_ex.cold+0x5/0xa [ 51.609287][ T6635] should_failslab+0xc2/0x120 [ 51.609299][ T6635] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.609314][ T6635] ? do_getname+0x238/0x390 [ 51.609329][ T6635] do_getname+0x238/0x390 [ 51.609343][ T6635] __ia32_sys_symlink+0x56/0xb0 [ 51.609359][ T6635] __do_fast_syscall_32+0x14b/0x8c0 [ 51.609379][ T6635] do_fast_syscall_32+0x32/0x70 [ 51.609396][ T6635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.609417][ T6635] RIP: 0023:0xf7f17fbc [ 51.609432][ T6635] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.609448][ T6635] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 51.609465][ T6635] RAX: ffffffffffffffda RBX: 0000000080000700 RCX: 0000000000000000 [ 51.609476][ T6635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.609486][ T6635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.609495][ T6635] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.609505][ T6635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.609528][ T6635] [ 51.677507][ T6640] Zero length message leads to an empty skb [ 51.753306][ T6649] FAULT_INJECTION: forcing a failure. [ 51.753306][ T6649] name failslab, interval 1, probability 0, space 0, times 0 [ 51.753326][ T6649] CPU: 2 UID: 0 PID: 6649 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 51.753339][ T6649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.753345][ T6649] Call Trace: [ 51.753350][ T6649] [ 51.753355][ T6649] dump_stack_lvl+0x100/0x190 [ 51.753372][ T6649] should_fail_ex.cold+0x5/0xa [ 51.753388][ T6649] should_failslab+0xc2/0x120 [ 51.753399][ T6649] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.753413][ T6649] ? file_f_owner_allocate+0x84/0x130 [ 51.753427][ T6649] file_f_owner_allocate+0x84/0x130 [ 51.753439][ T6649] f_setown+0x74/0x290 [ 51.753451][ T6649] do_fcntl+0xfe2/0x16c0 [ 51.753462][ T6649] ? __pfx_do_fcntl+0x10/0x10 [ 51.753474][ T6649] ? __fget_files+0x215/0x3d0 [ 51.753495][ T6649] ? tomoyo_file_fcntl+0x6c/0xc0 [ 51.753509][ T6649] do_compat_fcntl64+0x66d/0x720 [ 51.753522][ T6649] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 51.753535][ T6649] ? lock_acquire+0x1d1/0x380 [ 51.753549][ T6649] ? __might_fault+0xc5/0x140 [ 51.753561][ T6649] ? find_held_lock+0x2b/0x80 [ 51.753578][ T6649] __do_fast_syscall_32+0x14b/0x8c0 [ 51.753592][ T6649] do_fast_syscall_32+0x32/0x70 [ 51.753603][ T6649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.753617][ T6649] RIP: 0023:0xf7fd3fbc [ 51.753626][ T6649] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.753639][ T6649] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037 [ 51.753650][ T6649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000008 [ 51.753656][ T6649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.753662][ T6649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.753668][ T6649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.753674][ T6649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.753687][ T6649] [ 52.095068][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 53.060584][ T6703] FAULT_INJECTION: forcing a failure. [ 53.060584][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 53.060604][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 53.060616][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.060624][ T6703] Call Trace: [ 53.060630][ T6703] [ 53.060650][ T6703] dump_stack_lvl+0x100/0x190 [ 53.060679][ T6703] should_fail_ex.cold+0x5/0xa [ 53.060703][ T6703] should_failslab+0xc2/0x120 [ 53.060720][ T6703] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.060739][ T6703] ? cred_alloc_blank+0x1c/0xa0 [ 53.060756][ T6703] cred_alloc_blank+0x1c/0xa0 [ 53.060769][ T6703] keyctl_session_to_parent+0x55/0xae0 [ 53.060783][ T6703] ? __might_fault+0xc5/0x140 [ 53.060797][ T6703] __ia32_compat_sys_keyctl+0x34c/0x550 [ 53.060815][ T6703] __do_fast_syscall_32+0x14b/0x8c0 [ 53.060828][ T6703] do_fast_syscall_32+0x32/0x70 [ 53.060839][ T6703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.060854][ T6703] RIP: 0023:0xf7f17fbc [ 53.060868][ T6703] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.060882][ T6703] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 53.060899][ T6703] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000000000000 [ 53.060911][ T6703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.060920][ T6703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.060931][ T6703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.060941][ T6703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.060964][ T6703] [ 53.145154][ T6705] FAULT_INJECTION: forcing a failure. [ 53.145154][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 53.145174][ T6705] CPU: 3 UID: 0 PID: 6705 Comm: syz.2.290 Not tainted syzkaller #0 PREEMPT(full) [ 53.145187][ T6705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.145194][ T6705] Call Trace: [ 53.145199][ T6705] [ 53.145204][ T6705] dump_stack_lvl+0x100/0x190 [ 53.145224][ T6705] should_fail_ex.cold+0x5/0xa [ 53.145239][ T6705] should_failslab+0xc2/0x120 [ 53.145250][ T6705] __kmalloc_noprof+0xfc/0x840 [ 53.145266][ T6705] ? trace_kmalloc+0xeb/0x110 [ 53.145276][ T6705] ? lsm_blob_alloc+0x68/0x90 [ 53.145291][ T6705] lsm_blob_alloc+0x68/0x90 [ 53.145304][ T6705] security_sk_alloc+0x2d/0x290 [ 53.145319][ T6705] sk_prot_alloc+0x12a/0x2a0 [ 53.145336][ T6705] sk_alloc+0x36/0xe80 [ 53.145348][ T6705] __netlink_create+0x5e/0x2c0 [ 53.145366][ T6705] __netlink_kernel_create+0xed/0x750 [ 53.145378][ T6705] ? __kasan_kmalloc+0xaa/0xb0 [ 53.145394][ T6705] ? __pfx___netlink_kernel_create+0x10/0x10 [ 53.145421][ T6705] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 53.145435][ T6705] ? uevent_net_init+0xd3/0x330 [ 53.145454][ T6705] uevent_net_init+0xf8/0x330 [ 53.145469][ T6705] ? __pfx_uevent_net_init+0x10/0x10 [ 53.145484][ T6705] ? __kasan_kmalloc+0xaa/0xb0 [ 53.145501][ T6705] ? __pfx_uevent_net_rcv+0x10/0x10 [ 53.145520][ T6705] ? __pfx_uevent_net_init+0x10/0x10 [ 53.145535][ T6705] ops_init+0x1e2/0x5f0 [ 53.145549][ T6705] setup_net+0x118/0x3a0 [ 53.145563][ T6705] ? __pfx_setup_net+0x10/0x10 [ 53.145577][ T6705] ? bpf_lsm_namespace_init+0x9/0x10 [ 53.145593][ T6705] copy_net_ns+0x340/0x7a0 [ 53.145610][ T6705] create_new_namespaces+0x3ea/0xac0 [ 53.145629][ T6705] unshare_nsproxy_namespaces+0xf6/0x210 [ 53.145646][ T6705] ksys_unshare+0x44f/0x980 [ 53.145662][ T6705] ? __pfx_ksys_unshare+0x10/0x10 [ 53.145679][ T6705] ? __might_fault+0xc5/0x140 [ 53.145696][ T6705] __ia32_sys_unshare+0x30/0x40 [ 53.145711][ T6705] __do_fast_syscall_32+0x14b/0x8c0 [ 53.145724][ T6705] do_fast_syscall_32+0x32/0x70 [ 53.145735][ T6705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.145749][ T6705] RIP: 0023:0xf7f17fbc [ 53.145758][ T6705] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.145768][ T6705] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 53.145786][ T6705] RAX: ffffffffffffffda RBX: 000000004c000680 RCX: 0000000000000000 [ 53.145793][ T6705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.145800][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.145807][ T6705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.145814][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.145829][ T6705] [ 53.145929][ T6705] kobject_uevent: unable to create netlink socket! [ 53.229128][ T6711] FAULT_INJECTION: forcing a failure. [ 53.229128][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 53.229147][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.3.292 Not tainted syzkaller #0 PREEMPT(full) [ 53.229160][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.229167][ T6711] Call Trace: [ 53.229171][ T6711] [ 53.229175][ T6711] dump_stack_lvl+0x100/0x190 [ 53.229193][ T6711] should_fail_ex.cold+0x5/0xa [ 53.229209][ T6711] should_failslab+0xc2/0x120 [ 53.229220][ T6711] __kmalloc_noprof+0xfc/0x840 [ 53.229236][ T6711] ? get_callchain_buffers+0x123/0x380 [ 53.229254][ T6711] get_callchain_buffers+0x123/0x380 [ 53.229268][ T6711] ? bpf_lsm_capable+0x9/0x10 [ 53.229279][ T6711] ? security_capable+0x80/0x260 [ 53.229295][ T6711] stack_map_alloc+0x316/0x610 [ 53.229309][ T6711] map_create+0x874/0x30d0 [ 53.229322][ T6711] ? __lock_acquire+0x5c0/0x1f40 [ 53.229340][ T6711] ? __pfx_map_create+0x10/0x10 [ 53.229352][ T6711] ? lock_acquire+0x1d1/0x380 [ 53.229366][ T6711] ? __might_fault+0xc5/0x140 [ 53.229379][ T6711] ? __might_fault+0xc5/0x140 [ 53.229397][ T6711] __sys_bpf+0x12a0/0x4a30 [ 53.229413][ T6711] ? __pfx___sys_bpf+0x10/0x10 [ 53.229439][ T6711] ? find_held_lock+0x2b/0x80 [ 53.229452][ T6711] ? futex_wake+0x4ea/0x5e0 [ 53.229476][ T6711] ? rcu_read_lock_any_held+0x6a/0x90 [ 53.229488][ T6711] ? find_held_lock+0x2b/0x80 [ 53.229499][ T6711] ? ksys_write+0x190/0x250 [ 53.229513][ T6711] ? ksys_write+0x190/0x250 [ 53.229538][ T6711] ? lock_acquire+0x1d1/0x380 [ 53.229552][ T6711] ? __might_fault+0xc5/0x140 [ 53.229565][ T6711] ? find_held_lock+0x2b/0x80 [ 53.229580][ T6711] ? __ia32_sys_bpf+0xcc/0x170 [ 53.229593][ T6711] __ia32_sys_bpf+0xcc/0x170 [ 53.229607][ T6711] ? __might_fault+0x111/0x140 [ 53.229619][ T6711] __do_fast_syscall_32+0x14b/0x8c0 [ 53.229632][ T6711] do_fast_syscall_32+0x32/0x70 [ 53.229643][ T6711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.229656][ T6711] RIP: 0023:0xf7f47fbc [ 53.229666][ T6711] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.229675][ T6711] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 53.229686][ T6711] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000300 [ 53.229692][ T6711] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.229704][ T6711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.229711][ T6711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.229717][ T6711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.229732][ T6711] [ 53.405896][ T42] audit: type=1804 audit(1792762379.946:2): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.299" name="/newroot/91/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2550 res=1 errno=0 [ 53.447248][ T6729] loop0: detected capacity change from 0 to 1 [ 53.510399][ T6734] FAULT_INJECTION: forcing a failure. [ 53.510399][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.510420][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(full) [ 53.510433][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.510440][ T6734] Call Trace: [ 53.510444][ T6734] [ 53.510449][ T6734] dump_stack_lvl+0x100/0x190 [ 53.510467][ T6734] should_fail_ex.cold+0x5/0xa [ 53.510482][ T6734] _copy_from_user+0x2e/0xd0 [ 53.510499][ T6734] copy_from_buffer+0x7f/0xc0 [ 53.510515][ T6734] copy_uabi_to_xstate+0x3bb/0x650 [ 53.510534][ T6734] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 53.510550][ T6734] ? __might_fault+0xc5/0x140 [ 53.510565][ T6734] ? restore_from_ia32_fxstate+0x295/0x800 [ 53.510581][ T6734] ? x86_task_fpu+0x5f/0x90 [ 53.510594][ T6734] restore_from_ia32_fxstate+0x2f2/0x800 [ 53.510612][ T6734] ? __pfx_restore_from_ia32_fxstate+0x10/0x10 [ 53.510636][ T6734] fpu__restore_sig+0x525/0xe20 [ 53.510651][ T6734] ? lock_acquire+0x1d1/0x380 [ 53.510666][ T6734] ? __might_fault+0xc5/0x140 [ 53.510678][ T6734] ? __pfx_fpu__restore_sig+0x10/0x10 [ 53.510697][ T6734] ? __might_fault+0xc5/0x140 [ 53.510709][ T6734] ? __might_fault+0xc5/0x140 [ 53.510727][ T6734] ia32_restore_sigcontext+0x456/0x620 [ 53.510745][ T6734] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 53.510761][ T6734] ? recalc_sigpending+0x1f9/0x280 [ 53.510774][ T6734] ? rcu_is_watching+0x13/0xc0 [ 53.510786][ T6734] ? _raw_spin_unlock_irq+0x23/0x50 [ 53.510801][ T6734] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.510819][ T6734] __do_compat_sys_sigreturn+0x187/0x260 [ 53.510830][ T6734] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 53.510846][ T6734] do_int80_emulation+0x166/0x650 [ 53.510858][ T6734] asm_int80_emulation+0x1a/0x20 [ 53.510869][ T6734] RIP: 0023:0xf7f17fbc [ 53.510878][ T6734] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.510889][ T6734] RSP: 002b:00000000f53c650c EFLAGS: 00000292 [ 53.510898][ T6734] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000080000600 [ 53.510905][ T6734] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.510911][ T6734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.510916][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.510922][ T6734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.510935][ T6734] [ 53.597000][ T6729] ldm_validate_privheads(): Disk read failed. [ 53.597034][ T6729] loop0: [ 53.597045][ T6729] loop0: partition table partially beyond EOD, truncated [ 54.175143][ T6769] FAULT_INJECTION: forcing a failure. [ 54.175143][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 54.175163][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.2.319 Not tainted syzkaller #0 PREEMPT(full) [ 54.175175][ T6769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.175182][ T6769] Call Trace: [ 54.175186][ T6769] [ 54.175190][ T6769] dump_stack_lvl+0x100/0x190 [ 54.175209][ T6769] should_fail_ex.cold+0x5/0xa [ 54.175224][ T6769] should_failslab+0xc2/0x120 [ 54.175236][ T6769] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.175251][ T6769] ? mas_preallocate+0xc22/0xee0 [ 54.175267][ T6769] mas_preallocate+0xc22/0xee0 [ 54.175281][ T6769] ? __pfx_mas_preallocate+0x10/0x10 [ 54.175294][ T6769] ? rcu_is_watching+0x13/0xc0 [ 54.175310][ T6769] ? vm_area_alloc+0x1f/0x160 [ 54.175321][ T6769] ? lockdep_init_map_type+0x5c/0x250 [ 54.175339][ T6769] __mmap_region+0x139f/0x32e0 [ 54.175355][ T6769] ? __pfx___mmap_region+0x10/0x10 [ 54.175375][ T6769] ? find_held_lock+0x2b/0x80 [ 54.175387][ T6769] ? process_measurement+0x4c8/0x2350 [ 54.175403][ T6769] ? down_write+0x141/0x1f0 [ 54.175414][ T6769] ? __css_rstat_updated+0x1ce/0x590 [ 54.175445][ T6769] ? __lock_acquire+0x5c0/0x1f40 [ 54.175468][ T6769] ? lock_acquire+0x1d1/0x380 [ 54.175482][ T6769] ? finish_task_switch.isra.0+0x149/0x10d0 [ 54.175499][ T6769] ? find_held_lock+0x2b/0x80 [ 54.175510][ T6769] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 54.175552][ T6769] mmap_region+0x3db/0x6d0 [ 54.175567][ T6769] ? rcu_is_watching+0x13/0xc0 [ 54.175579][ T6769] ? __pfx_mmap_region+0x10/0x10 [ 54.175595][ T6769] ? cap_mmap_addr+0x4b/0x120 [ 54.175608][ T6769] ? bpf_lsm_mmap_addr+0x9/0x30 [ 54.175618][ T6769] ? security_mmap_addr+0x71/0x1e0 [ 54.175634][ T6769] ? __get_unmapped_area+0x255/0x3e0 [ 54.175651][ T6769] do_mmap+0x12c7/0x1c30 [ 54.175670][ T6769] ? lock_acquire+0x1d1/0x380 [ 54.175684][ T6769] ? __pfx_do_mmap+0x10/0x10 [ 54.175701][ T6769] ? futex_wait+0x11e/0x370 [ 54.175718][ T6769] ? __pfx_down_write_killable+0x10/0x10 [ 54.175732][ T6769] vm_mmap_pgoff+0x28d/0x470 [ 54.175750][ T6769] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 54.175772][ T6769] ksys_mmap_pgoff+0xe4/0x610 [ 54.175793][ T6769] ? find_held_lock+0x2b/0x80 [ 54.175805][ T6769] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 54.175827][ T6769] __do_fast_syscall_32+0x14b/0x8c0 [ 54.175841][ T6769] do_fast_syscall_32+0x32/0x70 [ 54.175852][ T6769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.175869][ T6769] RIP: 0023:0xf7f17fbc [ 54.175879][ T6769] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 54.175889][ T6769] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 54.175900][ T6769] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000c00000 [ 54.175907][ T6769] RDX: 0000000002000007 RSI: 000000000401d031 RDI: 00000000ffffffff [ 54.175913][ T6769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.175919][ T6769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.175925][ T6769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.175939][ T6769] [ 54.522895][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.539113][ T6798] input: syz1 as /devices/virtual/input/input5 [ 54.673598][ T29] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 54.675353][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.682448][ T29] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 54.688186][ T29] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 54.688208][ T29] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 55.301702][ T6808] bond0: entered promiscuous mode [ 55.301718][ T6808] bond_slave_0: entered promiscuous mode [ 55.301818][ T6808] bond_slave_1: entered promiscuous mode [ 55.523251][ T42] audit: type=1800 audit(1792762382.056:3): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.340" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 55.574051][ T6826] FAULT_INJECTION: forcing a failure. [ 55.574051][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 55.574070][ T6826] CPU: 2 UID: 0 PID: 6826 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 55.574083][ T6826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.574089][ T6826] Call Trace: [ 55.574093][ T6826] [ 55.574097][ T6826] dump_stack_lvl+0x100/0x190 [ 55.574116][ T6826] should_fail_ex.cold+0x5/0xa [ 55.574132][ T6826] should_failslab+0xc2/0x120 [ 55.574144][ T6826] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 55.574162][ T6826] ? landlock_restrict_sibling_threads+0x4d2/0x14c0 [ 55.574178][ T6826] krealloc_node_align_noprof+0x321/0x3e0 [ 55.574196][ T6826] landlock_restrict_sibling_threads+0x4d2/0x14c0 [ 55.574219][ T6826] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 55.574245][ T6826] ? apparmor_cred_prepare+0x173/0x370 [ 55.574262][ T6826] ? bpf_lsm_cred_prepare+0x9/0x10 [ 55.574274][ T6826] ? security_prepare_creds+0xa8/0x290 [ 55.574288][ T6826] __do_sys_landlock_restrict_self+0x9ba/0x10a0 [ 55.574309][ T6826] __do_fast_syscall_32+0x14b/0x8c0 [ 55.574323][ T6826] do_fast_syscall_32+0x32/0x70 [ 55.574334][ T6826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.574347][ T6826] RIP: 0023:0xf7fd3fbc [ 55.574357][ T6826] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 55.574367][ T6826] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 55.574377][ T6826] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000000000c [ 55.574384][ T6826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.574390][ T6826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.574396][ T6826] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.574402][ T6826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.574415][ T6826] [ 55.642534][ T6830] FAULT_INJECTION: forcing a failure. [ 55.642534][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 55.642553][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 55.642565][ T6830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.642572][ T6830] Call Trace: [ 55.642576][ T6830] [ 55.642580][ T6830] dump_stack_lvl+0x100/0x190 [ 55.642616][ T6830] should_fail_ex.cold+0x5/0xa [ 55.642631][ T6830] should_failslab+0xc2/0x120 [ 55.642642][ T6830] __kmalloc_noprof+0xfc/0x840 [ 55.642658][ T6830] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 55.642676][ T6830] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 55.642693][ T6830] x509_note_issuer+0xf9/0x210 [ 55.642708][ T6830] asn1_ber_decoder+0xd0c/0x2170 [ 55.642729][ T6830] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 55.642745][ T6830] ? kasan_save_track+0x14/0x30 [ 55.642760][ T6830] ? __kasan_kmalloc+0xaa/0xb0 [ 55.642776][ T6830] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 55.642789][ T6830] ? x509_cert_parse+0x162/0x910 [ 55.642805][ T6830] x509_cert_parse+0x1c9/0x910 [ 55.642820][ T6830] x509_key_preparse+0x65/0x9c0 [ 55.642837][ T6830] asymmetric_key_preparse+0xce/0x1d0 [ 55.642849][ T6830] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 55.642861][ T6830] __key_create_or_update+0x3f6/0xe10 [ 55.642880][ T6830] ? __pfx___key_create_or_update+0x10/0x10 [ 55.642896][ T6830] ? lookup_user_key+0x3fc/0x1330 [ 55.642912][ T6830] ? __pfx_lookup_user_key+0x10/0x10 [ 55.642938][ T6830] key_create_or_update+0x42/0x60 [ 55.642956][ T6830] __do_sys_add_key+0x2e8/0x460 [ 55.642969][ T6830] ? __pfx___do_sys_add_key+0x10/0x10 [ 55.642987][ T6830] __do_fast_syscall_32+0x14b/0x8c0 [ 55.643000][ T6830] do_fast_syscall_32+0x32/0x70 [ 55.643011][ T6830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.643024][ T6830] RIP: 0023:0xf7f47fbc [ 55.643033][ T6830] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 55.643043][ T6830] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 55.643054][ T6830] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000 [ 55.643061][ T6830] RDX: 0000000080000480 RSI: 0000000000000559 RDI: 00000000fffffffd [ 55.643067][ T6830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.643074][ T6830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.643080][ T6830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.643095][ T6830] [ 55.796827][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 55.801049][ T6838] jffs2: notice: (6838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.111284][ T6863] kernel read not supported for file /cpuacct.usage_percpu (pid: 6863 comm: syz.1.359) [ 56.111972][ T42] audit: type=1800 audit(1792762382.646:4): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.359" name="cpuacct.usage_percpu" dev="mqueue" ino=14292 res=0 errno=-22 [ 56.366988][ T6874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.368632][ T6874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.383564][ T6874] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 56.383717][ T6874] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 56.384370][ T6876] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 40960 (only 8 groups) [ 56.385667][ T6874] overlayfs: d_ino too big (65, ino=9223372036854776179, xinobits=3) [ 56.386031][ T6874] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 56.386210][ T6874] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 56.386381][ T6874] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 56.386554][ T6874] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 56.386729][ T6874] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 56.386906][ T6874] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 56.390675][ T6874] overlayfs: d_ino too big (instances, ino=4611686018427390511, xinobits=3) [ 56.588741][ T6887] Process accounting resumed [ 56.736232][ T5864] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8a [ 56.791249][ T6901] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 56.925127][ T6909] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 56.994236][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 56.994354][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 57.044404][ T5876] libceph: connect (1)0.0.0.0:6789 error -22 [ 57.044510][ T5876] libceph: mon0 (1)0.0.0.0:6789 connect error [ 57.253681][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 57.253801][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 57.302980][ T5876] libceph: connect (1)0.0.0.0:6789 error -22 [ 57.303063][ T5876] libceph: mon0 (1)0.0.0.0:6789 connect error [ 57.327150][ T6933] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 57.702878][ T5792] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.763873][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 57.763956][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 57.812995][ T5876] libceph: connect (1)0.0.0.0:6789 error -22 [ 57.813106][ T5876] libceph: mon0 (1)0.0.0.0:6789 connect error [ 57.817812][ T6911] ceph: No mds server is up or the cluster is laggy [ 57.819114][ T6914] ceph: No mds server is up or the cluster is laggy [ 57.849951][ T6946] FAULT_INJECTION: forcing a failure. [ 57.849951][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 57.849971][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 57.849983][ T6946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.849989][ T6946] Call Trace: [ 57.849993][ T6946] [ 57.849997][ T6946] dump_stack_lvl+0x100/0x190 [ 57.850016][ T6946] should_fail_ex.cold+0x5/0xa [ 57.850033][ T6946] should_failslab+0xc2/0x120 [ 57.850045][ T6946] __kmalloc_cache_noprof+0x91/0x6d0 [ 57.850060][ T6946] ? do_inotify_init+0xa2/0x5a0 [ 57.850077][ T6946] do_inotify_init+0xa2/0x5a0 [ 57.850094][ T6946] __ia32_sys_inotify_init1+0x30/0x40 [ 57.850110][ T6946] __do_fast_syscall_32+0x14b/0x8c0 [ 57.850125][ T6946] do_fast_syscall_32+0x32/0x70 [ 57.850137][ T6946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.850151][ T6946] RIP: 0023:0xf7f17fbc [ 57.850161][ T6946] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 57.850171][ T6946] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000014c [ 57.850184][ T6946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 57.850191][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.850198][ T6946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.850205][ T6946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.850212][ T6946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.850225][ T6946] [ 57.869295][ T6948] Set syz1 is full, maxelem 2 reached [ 57.891194][ T5792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.904485][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.904508][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.920528][ T5792] usb 5-1: config 0 descriptor?? [ 58.131497][ T5792] usbhid 5-1:0.0: can't add hid device: -71 [ 58.131549][ T5792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 58.132767][ T5792] usb 5-1: USB disconnect, device number 2 [ 58.572920][ T5792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.752831][ T5792] usb 5-1: Using ep0 maxpacket: 32 [ 58.753297][ T5792] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 58.754108][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.754130][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.755821][ T5792] usb 5-1: config 0 descriptor?? [ 58.757184][ T5792] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 58.760956][ T5792] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 59.220451][ T5792] usb 5-1: USB disconnect, device number 3 [ 59.227386][ T5792] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 59.668073][ T6893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.710930][ T6998] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.746491][ T7003] FAULT_INJECTION: forcing a failure. [ 59.746491][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 59.746509][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT(full) [ 59.746523][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.746530][ T7003] Call Trace: [ 59.746534][ T7003] [ 59.746538][ T7003] dump_stack_lvl+0x100/0x190 [ 59.746558][ T7003] should_fail_ex.cold+0x5/0xa [ 59.746574][ T7003] should_failslab+0xc2/0x120 [ 59.746585][ T7003] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.746599][ T7003] ? raw_ioctl_init+0x1c0/0x850 [ 59.746617][ T7003] raw_ioctl_init+0x1c0/0x850 [ 59.746631][ T7003] ? __pfx_raw_ioctl_init+0x10/0x10 [ 59.746646][ T7003] ? tomoyo_path_number_perm+0x188/0x580 [ 59.746680][ T7003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 59.746699][ T7003] raw_ioctl+0x138a/0x2b80 [ 59.746717][ T7003] ? __pfx_raw_ioctl+0x10/0x10 [ 59.746733][ T7003] ? __pfx_raw_ioctl+0x10/0x10 [ 59.746748][ T7003] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 59.746764][ T7003] __do_fast_syscall_32+0x14b/0x8c0 [ 59.746777][ T7003] do_fast_syscall_32+0x32/0x70 [ 59.746789][ T7003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.746803][ T7003] RIP: 0023:0xf7f47fbc [ 59.746812][ T7003] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.746822][ T7003] RSP: 002b:00000000f53f4424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 59.746834][ T7003] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000041015500 [ 59.746843][ T7003] RDX: 00000000f53f54c0 RSI: 00000000f73cdff4 RDI: 00000000f53f54c0 [ 59.746853][ T7003] RBP: 00000000f73cdff4 R08: 0000000000000000 R09: 0000000000000000 [ 59.746860][ T7003] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.746867][ T7003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.746880][ T7003] [ 59.839849][ T7013] netlink: 55 bytes leftover after parsing attributes in process `syz.1.419'. [ 59.839907][ T7013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.839914][ T7013] IPv6: NLM_F_CREATE should be set when creating new route [ 59.867778][ T7016] lo: Caught tx_queue_len zero misconfig [ 59.870468][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 59.871132][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 60.935530][ T7069] FAULT_INJECTION: forcing a failure. [ 60.935530][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 60.935560][ T7069] CPU: 2 UID: 0 PID: 7069 Comm: syz.3.437 Not tainted syzkaller #0 PREEMPT(full) [ 60.935584][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.935596][ T7069] Call Trace: [ 60.935603][ T7069] [ 60.935612][ T7069] dump_stack_lvl+0x100/0x190 [ 60.935640][ T7069] should_fail_ex.cold+0x5/0xa [ 60.935665][ T7069] should_failslab+0xc2/0x120 [ 60.935677][ T7069] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.935693][ T7069] ? __kernfs_new_node+0xd2/0xa10 [ 60.935709][ T7069] __kernfs_new_node+0xd2/0xa10 [ 60.935724][ T7069] ? __pfx___kernfs_new_node+0x10/0x10 [ 60.935738][ T7069] ? lock_acquire+0x1d1/0x380 [ 60.935754][ T7069] ? kernfs_root+0x23/0x2a0 [ 60.935765][ T7069] ? find_held_lock+0x2b/0x80 [ 60.935776][ T7069] ? kernfs_root+0xee/0x2a0 [ 60.935786][ T7069] ? kernfs_root+0xee/0x2a0 [ 60.935800][ T7069] kernfs_new_node+0x194/0x200 [ 60.935820][ T7069] ? __pfx_kernfs_new_node+0x10/0x10 [ 60.935834][ T7069] ? kernfs_add_one+0x213/0xb40 [ 60.935850][ T7069] __kernfs_create_file+0x53/0x350 [ 60.935868][ T7069] sysfs_add_file_mode_ns+0x207/0x3c0 [ 60.935888][ T7069] internal_create_group+0x593/0xfb0 [ 60.935905][ T7069] ? __pfx_internal_create_group+0x10/0x10 [ 60.935920][ T7069] ? kernfs_create_link+0x1f1/0x280 [ 60.935938][ T7069] internal_create_groups+0x9d/0x150 [ 60.935952][ T7069] device_add+0x7c8/0x1970 [ 60.935972][ T7069] ? __pfx_device_add+0x10/0x10 [ 60.935987][ T7069] ? lockdep_init_map_type+0x5c/0x250 [ 60.936003][ T7069] ? __init_waitqueue_head+0xca/0x150 [ 60.936022][ T7069] netdev_register_kobject+0x1df/0x410 [ 60.936037][ T7069] register_netdevice+0x1313/0x26b0 [ 60.936055][ T7069] ? __pfx_register_netdevice+0x10/0x10 [ 60.936074][ T7069] br_dev_newlink+0x6a/0x170 [ 60.936091][ T7069] ? __pfx_br_dev_newlink+0x10/0x10 [ 60.936107][ T7069] rtnl_newlink+0x1697/0x2620 [ 60.936126][ T7069] ? __pfx_rtnl_newlink+0x10/0x10 [ 60.936141][ T7069] ? rcu_is_watching+0x13/0xc0 [ 60.936154][ T7069] ? kasan_quarantine_put+0x104/0x240 [ 60.936172][ T7069] ? kfree_skbmem+0x19a/0x210 [ 60.936196][ T7069] ? __dev_queue_xmit+0xa5e/0x4a50 [ 60.936208][ T7069] ? lock_acquire+0x1d1/0x380 [ 60.936222][ T7069] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 60.936237][ T7069] ? find_held_lock+0x2b/0x80 [ 60.936248][ T7069] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 60.936263][ T7069] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 60.936278][ T7069] ? __pfx_rtnl_newlink+0x10/0x10 [ 60.936293][ T7069] rtnetlink_rcv_msg+0x95e/0xe90 [ 60.936311][ T7069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.936351][ T7069] netlink_rcv_skb+0x159/0x420 [ 60.936366][ T7069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.936382][ T7069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 60.936394][ T7069] ? __asan_memcpy+0x3c/0x60 [ 60.936414][ T7069] ? netlink_deliver_tap+0x1ae/0xb50 [ 60.936429][ T7069] netlink_unicast+0x668/0x950 [ 60.936445][ T7069] ? __pfx_netlink_unicast+0x10/0x10 [ 60.936463][ T7069] netlink_sendmsg+0x9ac/0x10c0 [ 60.936478][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.936494][ T7069] ? apparmor_socket_sendmsg+0x165/0x280 [ 60.936511][ T7069] ? ____sys_sendmsg+0xa99/0xc30 [ 60.936524][ T7069] ____sys_sendmsg+0xa99/0xc30 [ 60.936538][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.936552][ T7069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.936575][ T7069] ___sys_sendmsg+0x190/0x1e0 [ 60.936591][ T7069] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.936608][ T7069] ? futex_wait+0x11e/0x370 [ 60.936627][ T7069] ? find_held_lock+0x2b/0x80 [ 60.936648][ T7069] __sys_sendmsg+0x160/0x210 [ 60.936662][ T7069] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.936683][ T7069] __do_fast_syscall_32+0x14b/0x8c0 [ 60.936696][ T7069] do_fast_syscall_32+0x32/0x70 [ 60.936707][ T7069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.936721][ T7069] RIP: 0023:0xf7f47fbc [ 60.936730][ T7069] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 60.936742][ T7069] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 60.936754][ T7069] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 60.936761][ T7069] RDX: 0000000000000890 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.936767][ T7069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.936773][ T7069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.936779][ T7069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.936794][ T7069] [ 61.016310][ T7074] overlayfs: failed to verify upper root origin [ 61.072001][ T7080] input: syz0 as /devices/virtual/input/input6 [ 61.154511][ T7091] fuse: Bad value for 'fd' [ 61.155539][ T42] audit: type=1326 audit(1792762387.696:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.447" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3fbc code=0x0 [ 61.430020][ T7119] FAULT_INJECTION: forcing a failure. [ 61.430020][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 61.430041][ T7119] CPU: 2 UID: 0 PID: 7119 Comm: syz.1.459 Not tainted syzkaller #0 PREEMPT(full) [ 61.430053][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.430059][ T7119] Call Trace: [ 61.430064][ T7119] [ 61.430068][ T7119] dump_stack_lvl+0x100/0x190 [ 61.430087][ T7119] should_fail_ex.cold+0x5/0xa [ 61.430103][ T7119] should_failslab+0xc2/0x120 [ 61.430116][ T7119] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.430131][ T7119] ? sk_prot_alloc+0x60/0x2a0 [ 61.430149][ T7119] sk_prot_alloc+0x60/0x2a0 [ 61.430164][ T7119] sk_alloc+0x36/0xe80 [ 61.430176][ T7119] kcm_create+0xfc/0x6a0 [ 61.430195][ T7119] __sock_create+0x339/0x860 [ 61.430212][ T7119] __sys_socket+0x14d/0x260 [ 61.430228][ T7119] ? __pfx___sys_socket+0x10/0x10 [ 61.430245][ T7119] ? __might_fault+0xc5/0x140 [ 61.430260][ T7119] __ia32_sys_socket+0x72/0xb0 [ 61.430278][ T7119] __do_fast_syscall_32+0x14b/0x8c0 [ 61.430292][ T7119] do_fast_syscall_32+0x32/0x70 [ 61.430303][ T7119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.430325][ T7119] RIP: 0023:0xf7fd3fbc [ 61.430335][ T7119] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 61.430347][ T7119] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 61.430359][ T7119] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 0000000000000002 [ 61.430367][ T7119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.430374][ T7119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.430381][ T7119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.430388][ T7119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.430403][ T7119] [ 62.632140][ T7152] FAULT_INJECTION: forcing a failure. [ 62.632140][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 62.632168][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT(full) [ 62.632188][ T7152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.632198][ T7152] Call Trace: [ 62.632204][ T7152] [ 62.632211][ T7152] dump_stack_lvl+0x100/0x190 [ 62.632239][ T7152] should_fail_ex.cold+0x5/0xa [ 62.632257][ T7152] should_failslab+0xc2/0x120 [ 62.632274][ T7152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.632300][ T7152] ? proc_reg_open+0x23f/0x5f0 [ 62.632325][ T7152] proc_reg_open+0x23f/0x5f0 [ 62.632346][ T7152] do_dentry_open+0x674/0x1470 [ 62.632365][ T7152] ? __pfx_proc_reg_open+0x10/0x10 [ 62.632389][ T7152] vfs_open_consume+0xcc/0x460 [ 62.632410][ T7152] path_openat+0x1547/0x23f0 [ 62.632440][ T7152] ? __pfx_path_openat+0x10/0x10 [ 62.632465][ T7152] do_file_open+0x20e/0x430 [ 62.632492][ T7152] ? __pfx_do_file_open+0x10/0x10 [ 62.632526][ T7152] ? __pfx_kfree_link+0x10/0x10 [ 62.632549][ T7152] ? _raw_spin_unlock+0x28/0x50 [ 62.632571][ T7152] ? alloc_fd+0x471/0x7a0 [ 62.632603][ T7152] do_sys_openat2+0x163/0x1d0 [ 62.632623][ T7152] ? __pfx_do_sys_openat2+0x10/0x10 [ 62.632648][ T7152] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 62.632667][ T7152] __ia32_compat_sys_openat+0x12d/0x210 [ 62.632687][ T7152] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 62.632716][ T7152] do_int80_emulation+0x166/0x650 [ 62.632737][ T7152] asm_int80_emulation+0x1a/0x20 [ 62.632754][ T7152] RIP: 0023:0xf71c77ab [ 62.632764][ T7152] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 62.632803][ T7152] RSP: 002b:00000000f54863cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 62.632822][ T7152] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5486490 [ 62.632834][ T7152] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.632844][ T7152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.632851][ T7152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.632858][ T7152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.632872][ T7152] [ 62.650435][ T7150] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 62.849519][ T7168] loop5: detected capacity change from 0 to 7 [ 62.856403][ T7168] Dev loop5: unable to read RDB block 7 [ 62.856420][ T7168] loop5: AHDI p1 p3 p4 [ 62.856431][ T7168] loop5: partition table partially beyond EOD, truncated [ 62.856522][ T7168] loop5: p1 size 100663296 extends beyond EOD, truncated [ 62.859323][ T7168] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 62.950310][ T7168] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 63.323001][ T5867] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 63.483362][ T5867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.484272][ T5867] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 63.484294][ T5867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 63.484308][ T5867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 63.484321][ T5867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.484340][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.661237][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 63.662407][ T7180] hsr_slave_0: left promiscuous mode [ 63.667971][ T7180] hsr_slave_1: left promiscuous mode [ 63.697428][ T5867] usb 6-1: GET_CAPABILITIES returned 0 [ 63.697454][ T5867] usbtmc 6-1:16.0: can't read capabilities [ 63.810934][ T42] audit: type=1326 audit(1792762646.346:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.811063][ T42] audit: type=1326 audit(1792762646.346:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.811883][ T42] audit: type=1326 audit(1792762646.346:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.811905][ T42] audit: type=1326 audit(1792762646.346:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.811925][ T42] audit: type=1326 audit(1792762646.346:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.812201][ T42] audit: type=1326 audit(1792762646.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.812312][ T42] audit: type=1326 audit(1792762646.346:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.812593][ T42] audit: type=1326 audit(1792762646.346:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.812873][ T42] audit: type=1326 audit(1792762646.346:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 63.906273][ T5876] usb 6-1: USB disconnect, device number 2 [ 63.926632][ T7197] FAULT_INJECTION: forcing a failure. [ 63.926632][ T7197] name failslab, interval 1, probability 0, space 0, times 0 [ 63.926652][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 63.926665][ T7197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.926671][ T7197] Call Trace: [ 63.926675][ T7197] [ 63.926680][ T7197] dump_stack_lvl+0x100/0x190 [ 63.926700][ T7197] should_fail_ex.cold+0x5/0xa [ 63.926717][ T7197] should_failslab+0xc2/0x120 [ 63.926734][ T7197] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 63.926751][ T7197] ? __do_sys_fsconfig+0x834/0xcb0 [ 63.926766][ T7197] ? smb3_parse_devname+0xfd/0x500 [ 63.926783][ T7197] kstrndup+0x64/0x120 [ 63.926798][ T7197] smb3_parse_devname+0xfd/0x500 [ 63.926812][ T7197] smb3_fs_context_parse_param+0x3f02/0x7740 [ 63.926826][ T7197] ? lock_acquire+0x1d1/0x380 [ 63.926841][ T7197] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 63.926854][ T7197] ? find_held_lock+0x2b/0x80 [ 63.926865][ T7197] ? __might_fault+0xc5/0x140 [ 63.926884][ T7197] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 63.926896][ T7197] ? vfs_parse_fs_param+0x200/0x3b0 [ 63.926907][ T7197] vfs_parse_fs_param+0x200/0x3b0 [ 63.926919][ T7197] __do_sys_fsconfig+0x617/0xcb0 [ 63.926933][ T7197] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 63.926952][ T7197] __do_fast_syscall_32+0x14b/0x8c0 [ 63.926967][ T7197] do_fast_syscall_32+0x32/0x70 [ 63.926978][ T7197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.926991][ T7197] RIP: 0023:0xf7fd3fbc [ 63.927001][ T7197] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 63.927011][ T7197] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 63.927022][ T7197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 63.927028][ T7197] RDX: 0000000080000000 RSI: 00000000800004c0 RDI: 0000000000000000 [ 63.927035][ T7197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.927041][ T7197] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.927048][ T7197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.927063][ T7197] [ 63.927176][ T7197] CIFS: VFS: Unable to allocate memory for devname [ 64.008600][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'. [ 64.117459][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 64.119416][ T7210] IPv6: sit1: Disabled Multicast RS [ 64.575077][ T7237] FAULT_INJECTION: forcing a failure. [ 64.575077][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 64.575097][ T7237] CPU: 2 UID: 0 PID: 7237 Comm: syz.0.508 Not tainted syzkaller #0 PREEMPT(full) [ 64.575110][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.575118][ T7237] Call Trace: [ 64.575122][ T7237] [ 64.575126][ T7237] dump_stack_lvl+0x100/0x190 [ 64.575145][ T7237] should_fail_ex.cold+0x5/0xa [ 64.575161][ T7237] should_failslab+0xc2/0x120 [ 64.575173][ T7237] __kmalloc_noprof+0xfc/0x840 [ 64.575189][ T7237] ? sk_prot_alloc+0x10b/0x2a0 [ 64.575213][ T7237] sk_prot_alloc+0x10b/0x2a0 [ 64.575229][ T7237] sk_alloc+0x36/0xe80 [ 64.575242][ T7237] bt_sock_alloc+0x3b/0x3c0 [ 64.575261][ T7237] rfcomm_sock_alloc.constprop.0+0x51/0x2a0 [ 64.575278][ T7237] rfcomm_sock_create+0xf1/0x180 [ 64.575294][ T7237] bt_sock_create+0x185/0x350 [ 64.575310][ T7237] __sock_create+0x339/0x860 [ 64.575327][ T7237] __sys_socket+0x14d/0x260 [ 64.575343][ T7237] ? __pfx___sys_socket+0x10/0x10 [ 64.575359][ T7237] ? __might_fault+0xc5/0x140 [ 64.575375][ T7237] __ia32_sys_socket+0x72/0xb0 [ 64.575391][ T7237] __do_fast_syscall_32+0x14b/0x8c0 [ 64.575402][ T7237] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.575420][ T7237] do_fast_syscall_32+0x32/0x70 [ 64.575430][ T7237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.575444][ T7237] RIP: 0023:0xf7fd3fbc [ 64.575453][ T7237] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.575463][ T7237] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 64.575474][ T7237] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000001 [ 64.575481][ T7237] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00000000f548653c [ 64.575487][ T7237] RBP: 00000000f54865ec R08: 0000000000000000 R09: 0000000000000000 [ 64.575493][ T7237] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 64.575499][ T7237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.575512][ T7237] [ 64.726863][ T7245] input: syz0 as /devices/virtual/input/input7 [ 65.302372][ T7259] device-mapper: ioctl: Target spec extends beyond end of parameters [ 65.302383][ T7259] device-mapper: ioctl: unable to find target [ 65.643966][ T7272] batadv_slave_1: entered promiscuous mode [ 65.644860][ T7271] batadv_slave_1: left promiscuous mode [ 65.679674][ T7278] FAULT_INJECTION: forcing a failure. [ 65.679674][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 65.679694][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(full) [ 65.679708][ T7278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.679721][ T7278] Call Trace: [ 65.679726][ T7278] [ 65.679731][ T7278] dump_stack_lvl+0x100/0x190 [ 65.679750][ T7278] should_fail_ex.cold+0x5/0xa [ 65.679766][ T7278] should_failslab+0xc2/0x120 [ 65.679778][ T7278] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.679794][ T7278] ? anon_vma_clone+0x2b3/0xca0 [ 65.679808][ T7278] anon_vma_clone+0x2b3/0xca0 [ 65.679823][ T7278] anon_vma_fork+0x1bb/0x6a0 [ 65.679837][ T7278] dup_mmap+0x10e6/0x2370 [ 65.679853][ T7278] ? __pfx_dup_mmap+0x10/0x10 [ 65.679862][ T7278] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 65.679879][ T7278] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.679897][ T7278] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 65.679914][ T7278] ? __lock_acquire+0x5c0/0x1f40 [ 65.679935][ T7278] ? lock_acquire+0x1d1/0x380 [ 65.679950][ T7278] ? copy_process+0x79fc/0x84c0 [ 65.679970][ T7278] copy_process+0x7a07/0x84c0 [ 65.679993][ T7278] ? __pfx_copy_process+0x10/0x10 [ 65.680012][ T7278] ? _copy_from_user+0x59/0xd0 [ 65.680038][ T7278] kernel_clone+0x176/0x9d0 [ 65.680062][ T7278] ? __pfx_kernel_clone+0x10/0x10 [ 65.680097][ T7278] ? lock_acquire+0x1d1/0x380 [ 65.680127][ T7278] __do_sys_clone3+0x214/0x290 [ 65.680154][ T7278] ? __pfx___do_sys_clone3+0x10/0x10 [ 65.680180][ T7278] ? clockevents_program_event+0x1ef/0x820 [ 65.680207][ T7278] __do_fast_syscall_32+0x14b/0x8c0 [ 65.680223][ T7278] do_fast_syscall_32+0x32/0x70 [ 65.680235][ T7278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.680249][ T7278] RIP: 0023:0xf7fd3fbc [ 65.680259][ T7278] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.680269][ T7278] RSP: 002b:00000000f54863dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 65.680280][ T7278] RAX: ffffffffffffffda RBX: 00000000f5486410 RCX: 0000000000000058 [ 65.680287][ T7278] RDX: 0000000000000000 RSI: 0000000080801400 RDI: 0000000000000001 [ 65.680294][ T7278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.680300][ T7278] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.680306][ T7278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.680320][ T7278] [ 65.810715][ T7284] netlink: 'syz.3.525': attribute type 4 has an invalid length. [ 65.966412][ T7303] FAULT_INJECTION: forcing a failure. [ 65.966412][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 65.966432][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT(full) [ 65.966446][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.966454][ T7303] Call Trace: [ 65.966458][ T7303] [ 65.966463][ T7303] dump_stack_lvl+0x100/0x190 [ 65.966482][ T7303] should_fail_ex.cold+0x5/0xa [ 65.966497][ T7303] should_failslab+0xc2/0x120 [ 65.966509][ T7303] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 65.966527][ T7303] ? __d_alloc+0x34/0xad0 [ 65.966539][ T7303] __d_alloc+0x34/0xad0 [ 65.966548][ T7303] ? do_raw_spin_lock+0x128/0x260 [ 65.966560][ T7303] d_alloc+0x4a/0x1e0 [ 65.966571][ T7303] d_alloc_name+0x83/0xb0 [ 65.966581][ T7303] ? __pfx_d_alloc_name+0x10/0x10 [ 65.966590][ T7303] ? fast_dput+0x168/0x6f0 [ 65.966603][ T7303] ? dput.part.0+0x4a/0x240 [ 65.966616][ T7303] proc_setup_thread_self+0x3f/0x1e0 [ 65.966629][ T7303] proc_fill_super+0x5cf/0x860 [ 65.966643][ T7303] ? __pfx_proc_fill_super+0x10/0x10 [ 65.966656][ T7303] get_tree_nodev+0xdd/0x190 [ 65.966671][ T7303] vfs_get_tree+0x92/0x320 [ 65.966683][ T7303] path_mount+0x7d0/0x2850 [ 65.966696][ T7303] ? __pfx_path_mount+0x10/0x10 [ 65.966707][ T7303] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.966732][ T7303] ? putname+0xb1/0x110 [ 65.966741][ T7303] ? kmem_cache_free+0x127/0x6c0 [ 65.966759][ T7303] ? __ia32_sys_mount+0x292/0x310 [ 65.966770][ T7303] __ia32_sys_mount+0x292/0x310 [ 65.966783][ T7303] ? __pfx___ia32_sys_mount+0x10/0x10 [ 65.966800][ T7303] __do_fast_syscall_32+0x14b/0x8c0 [ 65.966814][ T7303] do_fast_syscall_32+0x32/0x70 [ 65.966826][ T7303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.966840][ T7303] RIP: 0023:0xf7fd3fbc [ 65.966850][ T7303] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.966861][ T7303] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 65.966872][ T7303] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 65.966879][ T7303] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.966885][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.966891][ T7303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.966897][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.966911][ T7303] [ 65.966916][ T7303] proc_fill_super: can't allocate /proc/thread-self [ 67.033437][ T7346] FAULT_INJECTION: forcing a failure. [ 67.033437][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 67.033469][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) [ 67.033490][ T7346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.033502][ T7346] Call Trace: [ 67.033508][ T7346] [ 67.033516][ T7346] dump_stack_lvl+0x100/0x190 [ 67.033545][ T7346] should_fail_ex.cold+0x5/0xa [ 67.033571][ T7346] should_failslab+0xc2/0x120 [ 67.033590][ T7346] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 67.033617][ T7346] ? __alloc_skb+0x140/0x710 [ 67.033644][ T7346] __alloc_skb+0x140/0x710 [ 67.033662][ T7346] ? __alloc_skb+0x5b7/0x710 [ 67.033680][ T7346] ? __pfx___alloc_skb+0x10/0x10 [ 67.033697][ T7346] ? kfree_skbmem+0x19a/0x210 [ 67.033721][ T7346] ? nlmon_xmit+0xa5/0xe0 [ 67.033748][ T7346] ? dev_hard_start_xmit+0x121/0x760 [ 67.033772][ T7346] tcf_action_add+0x542/0x750 [ 67.033798][ T7346] ? __pfx_tcf_action_add+0x10/0x10 [ 67.033854][ T7346] ? __nla_parse+0x40/0x60 [ 67.033884][ T7346] tc_ctl_action+0x2e3/0x470 [ 67.033909][ T7346] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.033964][ T7346] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.033992][ T7346] rtnetlink_rcv_msg+0x3c9/0xe90 [ 67.034020][ T7346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.034056][ T7346] netlink_rcv_skb+0x159/0x420 [ 67.034077][ T7346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.034102][ T7346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.034132][ T7346] ? __asan_memcpy+0x3c/0x60 [ 67.034165][ T7346] ? netlink_deliver_tap+0x1ae/0xb50 [ 67.034189][ T7346] netlink_unicast+0x668/0x950 [ 67.034216][ T7346] ? __pfx_netlink_unicast+0x10/0x10 [ 67.034243][ T7346] netlink_sendmsg+0x9ac/0x10c0 [ 67.034266][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.034294][ T7346] ? apparmor_socket_sendmsg+0x165/0x280 [ 67.034318][ T7346] ? ____sys_sendmsg+0xa99/0xc30 [ 67.034343][ T7346] ____sys_sendmsg+0xa99/0xc30 [ 67.034367][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.034393][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.034433][ T7346] ___sys_sendmsg+0x190/0x1e0 [ 67.034463][ T7346] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.034490][ T7346] ? futex_wait+0x11e/0x370 [ 67.034527][ T7346] ? find_held_lock+0x2b/0x80 [ 67.034563][ T7346] __sys_sendmsg+0x160/0x210 [ 67.034586][ T7346] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.034621][ T7346] __do_fast_syscall_32+0x14b/0x8c0 [ 67.034645][ T7346] do_fast_syscall_32+0x32/0x70 [ 67.034665][ T7346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.034692][ T7346] RIP: 0023:0xf7fd3fbc [ 67.034708][ T7346] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 67.034727][ T7346] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 67.034748][ T7346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 67.034761][ T7346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.034773][ T7346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.034783][ T7346] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.034794][ T7346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.034821][ T7346] [ 67.124346][ T7352] netlink: 'syz.1.546': attribute type 12 has an invalid length. [ 67.124360][ T7352] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 67.124368][ T7352] netlink: 148 bytes leftover after parsing attributes in process `syz.1.546'. [ 67.124378][ T7352] netlink: 'syz.1.546': attribute type 2 has an invalid length. [ 67.124384][ T7352] netlink: 43 bytes leftover after parsing attributes in process `syz.1.546'. [ 67.268779][ T7369] netlink: 'syz.3.553': attribute type 3 has an invalid length. [ 67.268804][ T7369] netlink: 'syz.3.553': attribute type 3 has an invalid length. [ 67.638826][ T7394] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 67.649705][ T7394] bond1: entered promiscuous mode [ 67.649973][ T7394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.661784][ T7394] bond1: (slave bridge1): making interface the new active one [ 67.661799][ T7394] bridge1: entered promiscuous mode [ 67.662507][ T7394] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.709796][ T7397] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.709882][ T7397] block device autoloading is deprecated and will be removed. [ 67.868653][ T7397] md/raid1:md3: not clean -- starting background reconstruction [ 67.868665][ T7397] md/raid1:md3: active with 2 out of 3 mirrors [ 67.869612][ T7397] md3: detected capacity change from 0 to 4096 [ 67.875304][ T7400] md: resync of RAID array md3 [ 67.912687][ T7400] md: md3: resync done. [ 68.066189][ T7409] FAULT_INJECTION: forcing a failure. [ 68.066189][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.066209][ T7409] CPU: 3 UID: 0 PID: 7409 Comm: syz.1.571 Not tainted syzkaller #0 PREEMPT(full) [ 68.066222][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.066228][ T7409] Call Trace: [ 68.066232][ T7409] [ 68.066237][ T7409] dump_stack_lvl+0x100/0x190 [ 68.066254][ T7409] should_fail_ex.cold+0x5/0xa [ 68.066270][ T7409] _copy_from_user+0x2e/0xd0 [ 68.066288][ T7409] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 68.066306][ T7409] bpf_vlog_finalize+0x2bf/0x360 [ 68.066320][ T7409] bpf_log_attr_finalize+0x86/0x1a0 [ 68.066333][ T7409] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 68.066350][ T7409] btf_new_fd+0x712/0x38f0 [ 68.066362][ T7409] ? __lock_acquire+0x5c0/0x1f40 [ 68.066380][ T7409] ? lock_acquire+0x1d1/0x380 [ 68.066397][ T7409] ? __pfx_btf_new_fd+0x10/0x10 [ 68.066409][ T7409] ? rcu_is_watching+0x13/0xc0 [ 68.066421][ T7409] ? apparmor_capable+0x1d7/0x4d0 [ 68.066437][ T7409] ? bpf_lsm_capable+0x9/0x10 [ 68.066448][ T7409] ? security_capable+0x80/0x260 [ 68.066461][ T7409] ? ns_capable+0xcd/0xf0 [ 68.066476][ T7409] __sys_bpf+0x13ef/0x4a30 [ 68.066492][ T7409] ? __pfx___sys_bpf+0x10/0x10 [ 68.066504][ T7409] ? find_held_lock+0x2b/0x80 [ 68.066515][ T7409] ? futex_wake+0x4ea/0x5e0 [ 68.066538][ T7409] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.066551][ T7409] ? find_held_lock+0x2b/0x80 [ 68.066562][ T7409] ? ksys_write+0x190/0x250 [ 68.066576][ T7409] ? ksys_write+0x190/0x250 [ 68.066599][ T7409] ? lock_acquire+0x1d1/0x380 [ 68.066613][ T7409] ? __might_fault+0xc5/0x140 [ 68.066625][ T7409] ? find_held_lock+0x2b/0x80 [ 68.066639][ T7409] ? __ia32_sys_bpf+0xcc/0x170 [ 68.066651][ T7409] __ia32_sys_bpf+0xcc/0x170 [ 68.066665][ T7409] ? __might_fault+0x111/0x140 [ 68.066678][ T7409] __do_fast_syscall_32+0x14b/0x8c0 [ 68.066699][ T7409] do_fast_syscall_32+0x32/0x70 [ 68.066711][ T7409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.066726][ T7409] RIP: 0023:0xf7fd3fbc [ 68.066736][ T7409] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.066748][ T7409] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 68.066760][ T7409] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000d80 [ 68.066767][ T7409] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.066775][ T7409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.066782][ T7409] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.066789][ T7409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.066803][ T7409] [ 68.738823][ T7402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.739465][ T7402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.748485][ T7402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.751020][ T7402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.751178][ T7402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.752253][ T7402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.753844][ T7402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.753876][ T7402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.757306][ T7402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.761129][ T7402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.761164][ T7402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.766783][ T7402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.802250][ T7420] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 68.812237][ T7420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.841744][ T7426] Bluetooth: MGMT ver 1.23 [ 68.877106][ T7431] FAULT_INJECTION: forcing a failure. [ 68.877106][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 68.877129][ T7431] CPU: 3 UID: 0 PID: 7431 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(full) [ 68.877142][ T7431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.877149][ T7431] Call Trace: [ 68.877154][ T7431] [ 68.877159][ T7431] dump_stack_lvl+0x100/0x190 [ 68.877178][ T7431] should_fail_ex.cold+0x5/0xa [ 68.877194][ T7431] should_failslab+0xc2/0x120 [ 68.877206][ T7431] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.877222][ T7431] ? v9fs_get_tree+0x9c/0xb50 [ 68.877241][ T7431] v9fs_get_tree+0x9c/0xb50 [ 68.877254][ T7431] ? rcu_is_watching+0x13/0xc0 [ 68.877267][ T7431] ? __pfx_v9fs_get_tree+0x10/0x10 [ 68.877283][ T7431] ? bpf_lsm_capable+0x9/0x10 [ 68.877294][ T7431] ? security_capable+0x80/0x260 [ 68.877308][ T7431] vfs_get_tree+0x92/0x320 [ 68.877321][ T7431] path_mount+0x7d0/0x2850 [ 68.877335][ T7431] ? __pfx_path_mount+0x10/0x10 [ 68.877345][ T7431] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.877364][ T7431] ? putname+0xb1/0x110 [ 68.877373][ T7431] ? kmem_cache_free+0x127/0x6c0 [ 68.877391][ T7431] ? __ia32_sys_mount+0x292/0x310 [ 68.877402][ T7431] __ia32_sys_mount+0x292/0x310 [ 68.877413][ T7431] ? __pfx___ia32_sys_mount+0x10/0x10 [ 68.877428][ T7431] __do_fast_syscall_32+0x14b/0x8c0 [ 68.877441][ T7431] do_fast_syscall_32+0x32/0x70 [ 68.877452][ T7431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.877466][ T7431] RIP: 0023:0xf7fd3fbc [ 68.877475][ T7431] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.877486][ T7431] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 68.877497][ T7431] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000180 [ 68.877504][ T7431] RDX: 00000000800001c0 RSI: 0000000000800000 RDI: 0000000080000200 [ 68.877510][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.877516][ T7431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.877523][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.877537][ T7431] [ 69.141107][ T7445] Set syz1 is full, maxelem 6117 reached [ 69.776534][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.791201][ T7498] bridge_slave_1 (unregistering): left allmulticast mode [ 69.791216][ T7498] bridge_slave_1 (unregistering): left promiscuous mode [ 69.791278][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.952852][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.954865][ T67] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.387434][ T7505] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 70.397878][ T7505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.408555][ T7505] bond2: (slave geneve2): making interface the new active one [ 70.409208][ T7505] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 70.453042][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 70.453085][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 70.453122][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 70.453151][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 70.615483][ T7518] nbd1: detected capacity change from 0 to 63 [ 70.618581][ T7518] block nbd1: NBD_DISCONNECT [ 70.620245][ T7518] block nbd1: Disconnected due to user request. [ 70.620261][ T7518] block nbd1: shutting down sockets [ 70.620394][ T35] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.620553][ T35] Buffer I/O error on dev nbd1, logical block 2, async page read [ 70.621113][ T35] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.621128][ T35] Buffer I/O error on dev nbd1, logical block 3, async page read [ 70.624092][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.624131][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 70.624144][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.624168][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 70.624304][ T3818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 70.624319][ T3818] Buffer I/O error on dev nbd1, logical block 0, async page read [ 70.624327][ T3818] Buffer I/O error on dev nbd1, logical block 1, async page read [ 70.624335][ T3818] Buffer I/O error on dev nbd1, logical block 2, async page read [ 70.624342][ T3818] Buffer I/O error on dev nbd1, logical block 3, async page read [ 70.625156][ T3818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 70.625179][ T3818] Buffer I/O error on dev nbd1, logical block 0, async page read [ 70.625199][ T3818] Buffer I/O error on dev nbd1, logical block 1, async page read [ 70.625318][ T3818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 70.626163][ T3818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 70.626263][ T3818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.626313][ T3818] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.631758][ T6023] ldm_validate_partition_table(): Disk read failed. [ 70.632965][ T6023] Dev nbd1: unable to read RDB block 0 [ 70.634711][ T6023] nbd1: unable to read partition table [ 70.643795][ T6023] ldm_validate_partition_table(): Disk read failed. [ 70.644940][ T6023] Dev nbd1: unable to read RDB block 0 [ 70.646198][ T6023] nbd1: unable to read partition table [ 70.753377][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.836022][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.836264][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.838331][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.838370][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.862083][ T1366] cfg80211: failed to load regulatory.db [ 71.705840][ T41] kernel read not supported for file [fscontext] (pid: 41 comm: kworker/3:1) [ 71.742424][ T7541] FAULT_INJECTION: forcing a failure. [ 71.742424][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 71.742445][ T7541] CPU: 3 UID: 0 PID: 7541 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT(full) [ 71.742458][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.742464][ T7541] Call Trace: [ 71.742468][ T7541] [ 71.742473][ T7541] dump_stack_lvl+0x100/0x190 [ 71.742490][ T7541] should_fail_ex.cold+0x5/0xa [ 71.742506][ T7541] should_failslab+0xc2/0x120 [ 71.742518][ T7541] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.742533][ T7541] ? __might_fault+0xc5/0x140 [ 71.742546][ T7541] ? tcp_fastopen_reset_cipher+0x54/0x3b0 [ 71.742567][ T7541] tcp_fastopen_reset_cipher+0x54/0x3b0 [ 71.742586][ T7541] do_tcp_setsockopt+0x29c/0x2b50 [ 71.742609][ T7541] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 71.742625][ T7541] ? __lock_acquire+0x5c0/0x1f40 [ 71.742644][ T7541] ? rcu_read_lock_any_held+0x6a/0x90 [ 71.742658][ T7541] ? find_held_lock+0x2b/0x80 [ 71.742674][ T7541] ? find_held_lock+0x2b/0x80 [ 71.742689][ T7541] tcp_setsockopt+0xe2/0x100 [ 71.742704][ T7541] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 71.742721][ T7541] do_sock_setsockopt+0xf3/0x1d0 [ 71.742737][ T7541] __sys_setsockopt+0x119/0x190 [ 71.742752][ T7541] __ia32_sys_setsockopt+0xbc/0x160 [ 71.742763][ T7541] ? __might_fault+0x111/0x140 [ 71.742793][ T7541] __do_fast_syscall_32+0x14b/0x8c0 [ 71.742808][ T7541] do_fast_syscall_32+0x32/0x70 [ 71.742819][ T7541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.742833][ T7541] RIP: 0023:0xf7fd3fbc [ 71.742843][ T7541] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.742855][ T7541] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 71.742866][ T7541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 71.742873][ T7541] RDX: 0000000000000021 RSI: 0000000080000180 RDI: 0000000000000010 [ 71.742879][ T7541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.742886][ T7541] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.742892][ T7541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.742905][ T7541] [ 72.005306][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 72.021263][ T7558] batadv_slave_0: entered promiscuous mode [ 72.024056][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 72.024127][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.028761][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.033144][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.074401][ T7562] Set syz1 is full, maxelem 2 reached [ 72.523927][ T7585] 9pnet: p9_errstr2errno: server reported unknown error 0000 [ 72.533365][ T7588] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 72.581904][ T7592] ubi0: attaching mtd0 [ 72.582225][ T7592] FAULT_INJECTION: forcing a failure. [ 72.582225][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 72.582242][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.1.650 Not tainted syzkaller #0 PREEMPT(full) [ 72.582256][ T7592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.582263][ T7592] Call Trace: [ 72.582268][ T7592] [ 72.582272][ T7592] dump_stack_lvl+0x100/0x190 [ 72.582291][ T7592] should_fail_ex.cold+0x5/0xa [ 72.582308][ T7592] should_failslab+0xc2/0x120 [ 72.582319][ T7592] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.582336][ T7592] ? __bfs+0x150/0x2a0 [ 72.582348][ T7592] ? __kernfs_new_node+0xd2/0xa10 [ 72.582364][ T7592] __kernfs_new_node+0xd2/0xa10 [ 72.582379][ T7592] ? __pfx___kernfs_new_node+0x10/0x10 [ 72.582394][ T7592] ? lock_acquire+0x1d1/0x380 [ 72.582409][ T7592] ? kernfs_root+0x23/0x2a0 [ 72.582420][ T7592] ? find_held_lock+0x2b/0x80 [ 72.582431][ T7592] ? kernfs_root+0xee/0x2a0 [ 72.582442][ T7592] ? kernfs_root+0xee/0x2a0 [ 72.582456][ T7592] kernfs_create_dir_ns+0xa4/0x2b0 [ 72.582472][ T7592] sysfs_create_dir_ns+0x13a/0x2b0 [ 72.582483][ T7592] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 72.582493][ T7592] ? find_held_lock+0x2b/0x80 [ 72.582505][ T7592] ? kobject_add_internal+0x25f/0x930 [ 72.582519][ T7592] ? kobject_add_internal+0x25f/0x930 [ 72.582534][ T7592] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.582546][ T7592] kobject_add_internal+0x2c8/0x930 [ 72.582562][ T7592] kobject_init_and_add+0x121/0x180 [ 72.582584][ T7592] ? __pfx_kobject_init_and_add+0x10/0x10 [ 72.582604][ T7592] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 72.582621][ T7592] do_kmem_cache_create+0x6a2/0x7a0 [ 72.582639][ T7592] ? __kmem_cache_create_args+0x1c3/0x440 [ 72.582655][ T7592] __kmem_cache_create_args+0x1e3/0x440 [ 72.582669][ T7592] ubi_attach+0x32a/0x4d20 [ 72.582688][ T7592] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 72.582707][ T7592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.582718][ T7592] ? __pfx_ubi_msg+0x10/0x10 [ 72.582733][ T7592] ? __pfx_ubi_attach+0x10/0x10 [ 72.582748][ T7592] ? lockdep_init_map_type+0x5c/0x250 [ 72.582765][ T7592] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 72.582800][ T7592] ? __vmalloc_node_noprof+0xad/0xf0 [ 72.582810][ T7592] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 72.582830][ T7592] ubi_attach_mtd_dev+0x1478/0x3420 [ 72.582854][ T7592] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 72.582871][ T7592] ? __pfx_get_mtd_device+0x10/0x10 [ 72.582889][ T7592] ctrl_cdev_ioctl+0x375/0x410 [ 72.582906][ T7592] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 72.582924][ T7592] ? __fget_files+0x21f/0x3d0 [ 72.582941][ T7592] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 72.582958][ T7592] compat_ptr_ioctl+0x6e/0xa0 [ 72.582970][ T7592] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 72.582982][ T7592] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 72.582998][ T7592] __do_fast_syscall_32+0x14b/0x8c0 [ 72.583011][ T7592] do_fast_syscall_32+0x32/0x70 [ 72.583022][ T7592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.583035][ T7592] RIP: 0023:0xf7fd3fbc [ 72.583045][ T7592] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.583056][ T7592] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.583067][ T7592] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40 [ 72.583076][ T7592] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.583082][ T7592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.583089][ T7592] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.583095][ T7592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.583109][ T7592] [ 72.587354][ T7592] kobject: kobject_add_internal failed for ubi_aeb_slab_cache (error: -12 parent: slab) [ 72.587373][ T7592] SLUB: Unable to add cache ubi_aeb_slab_cache to sysfs [ 72.588285][ T7592] ubi0: scanning is finished [ 72.588329][ T7592] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 72.639430][ T7594] db_root: cannot open: /dev/sequencer2 [ 72.639439][ T7594] db_root: not a directory: /dev/sequencer2 [ 72.708789][ T7598] FAULT_INJECTION: forcing a failure. [ 72.708789][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 72.708809][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.3.653 Not tainted syzkaller #0 PREEMPT(full) [ 72.708821][ T7598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.708829][ T7598] Call Trace: [ 72.708833][ T7598] [ 72.708838][ T7598] dump_stack_lvl+0x100/0x190 [ 72.708856][ T7598] should_fail_ex.cold+0x5/0xa [ 72.708871][ T7598] should_failslab+0xc2/0x120 [ 72.708883][ T7598] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.708896][ T7598] ? lockdep_init_map_type+0x5c/0x250 [ 72.708911][ T7598] ? init_srcu_struct_fields+0xb16/0x1060 [ 72.708930][ T7598] init_srcu_struct_fields+0xb16/0x1060 [ 72.708946][ T7598] ? lockdep_init_map_type+0x5c/0x250 [ 72.708963][ T7598] kvm_dev_ioctl+0x7ac/0x1b50 [ 72.708979][ T7598] ? hook_file_ioctl_common+0x140/0x440 [ 72.708996][ T7598] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 72.709030][ T7598] ? __fget_files+0x21f/0x3d0 [ 72.709050][ T7598] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 72.709062][ T7598] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 72.709078][ T7598] __do_fast_syscall_32+0x14b/0x8c0 [ 72.709093][ T7598] do_fast_syscall_32+0x32/0x70 [ 72.709105][ T7598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.709120][ T7598] RIP: 0023:0xf7f47fbc [ 72.709129][ T7598] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.709140][ T7598] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.709150][ T7598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 72.709157][ T7598] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.709163][ T7598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.709169][ T7598] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.709181][ T7598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.709196][ T7598] [ 72.765838][ T7592] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 72.844005][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.846678][ T7606] FAULT_INJECTION: forcing a failure. [ 72.846678][ T7606] name fail_futex, interval 1, probability 0, space 0, times 1 [ 72.846696][ T7606] CPU: 0 UID: 60928 PID: 7606 Comm: syz.3.658 Not tainted syzkaller #0 PREEMPT(full) [ 72.846709][ T7606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.846716][ T7606] Call Trace: [ 72.846720][ T7606] [ 72.846727][ T7606] dump_stack_lvl+0x100/0x190 [ 72.846754][ T7606] should_fail_ex.cold+0x5/0xa [ 72.846775][ T7606] ? __sys_setuid+0x29e/0x430 [ 72.846800][ T7606] get_futex_key+0x1c9/0x13e0 [ 72.846825][ T7606] ? __pfx_get_futex_key+0x10/0x10 [ 72.846842][ T7606] ? __lock_acquire+0x5c0/0x1f40 [ 72.846867][ T7606] futex_wake+0xf4/0x5e0 [ 72.846883][ T7606] ? __pfx_futex_wake+0x10/0x10 [ 72.846897][ T7606] ? find_held_lock+0x2b/0x80 [ 72.846914][ T7606] do_futex+0x2b2/0x440 [ 72.846927][ T7606] ? __pfx_do_futex+0x10/0x10 [ 72.846940][ T7606] ? dec_rlimit_ucounts+0x114/0x170 [ 72.846954][ T7606] __ia32_sys_futex_time32+0x2f4/0x470 [ 72.846969][ T7606] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 72.846983][ T7606] ? __might_fault+0xc5/0x140 [ 72.847000][ T7606] __do_fast_syscall_32+0x14b/0x8c0 [ 72.847013][ T7606] do_fast_syscall_32+0x32/0x70 [ 72.847024][ T7606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.847038][ T7606] RIP: 0023:0xf7f47fbc [ 72.847047][ T7606] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.847058][ T7606] RSP: 002b:00000000f53f65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 72.847069][ T7606] RAX: ffffffffffffffda RBX: 00000000f7404f8c RCX: 0000000000000081 [ 72.847075][ T7606] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 72.847082][ T7606] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 72.847088][ T7606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.847094][ T7606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.847108][ T7606] [ 72.918210][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.922856][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.946754][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 72.978265][ T7616] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 72.986987][ T7616] bond1: entered promiscuous mode [ 72.987154][ T7616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.006824][ T7616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.006972][ T7616] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 73.006982][ T7616] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 73.011044][ T7616] bond1: (slave wireguard0): making interface the new active one [ 73.011058][ T7616] wireguard0: entered promiscuous mode [ 73.012079][ T7616] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 73.257419][ T7634] tipc: Started in network mode [ 73.257436][ T7634] tipc: Node identity ac1414aa, cluster identity 4711 [ 73.257581][ T7634] tipc: New replicast peer: 172.20.20.187 [ 73.258185][ T7634] tipc: Enabled bearer , priority 10 [ 73.543833][ T7644] netfs: Duplicate cookie detected [ 73.543843][ T7644] netfs: O-cookie c=00000004 [fl=4008 na=0 nA=0 s=-] [ 73.543853][ T7644] netfs: O-cookie V=00000002 [9p,syz,] [ 73.543859][ T7644] netfs: O-key=[8] '65174c0400000000' [ 73.543866][ T7644] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 73.543875][ T7644] netfs: N-cookie V=00000002 [9p,syz,] [ 73.543880][ T7644] netfs: N-key=[8] '65174c0400000000' [ 73.593999][ T7646] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 73.786953][ T7652] FAULT_INJECTION: forcing a failure. [ 73.786953][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 73.786974][ T7652] CPU: 2 UID: 0 PID: 7652 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT(full) [ 73.786987][ T7652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.786994][ T7652] Call Trace: [ 73.786998][ T7652] [ 73.787002][ T7652] dump_stack_lvl+0x100/0x190 [ 73.787021][ T7652] should_fail_ex.cold+0x5/0xa [ 73.787043][ T7652] should_failslab+0xc2/0x120 [ 73.787055][ T7652] __kvmalloc_node_noprof+0x113/0x9b0 [ 73.787071][ T7652] ? check_slab_allocation+0xb1/0xf0 [ 73.787088][ T7652] ? __kmalloc_noprof+0x32f/0x840 [ 73.787103][ T7652] ? bpf_test_run_xdp_live+0x16f/0x760 [ 73.787136][ T7652] bpf_test_run_xdp_live+0x16f/0x760 [ 73.787150][ T7652] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.787167][ T7652] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.787197][ T7652] ? _copy_from_user+0x59/0xd0 [ 73.787214][ T7652] ? bpf_test_init.isra.0+0x51/0x100 [ 73.787233][ T7652] bpf_prog_test_run_xdp+0xd86/0x1670 [ 73.787250][ T7652] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.787267][ T7652] ? fput+0x7c/0x100 [ 73.787277][ T7652] ? __bpf_prog_get+0x97/0x290 [ 73.787294][ T7652] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.787306][ T7652] __sys_bpf+0x2265/0x4a30 [ 73.787323][ T7652] ? __pfx___sys_bpf+0x10/0x10 [ 73.787335][ T7652] ? find_held_lock+0x2b/0x80 [ 73.787346][ T7652] ? futex_wake+0x4ea/0x5e0 [ 73.787370][ T7652] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.787383][ T7652] ? find_held_lock+0x2b/0x80 [ 73.787394][ T7652] ? ksys_write+0x190/0x250 [ 73.787408][ T7652] ? ksys_write+0x190/0x250 [ 73.787432][ T7652] ? lock_acquire+0x1d1/0x380 [ 73.787446][ T7652] ? __might_fault+0xc5/0x140 [ 73.787458][ T7652] ? find_held_lock+0x2b/0x80 [ 73.787472][ T7652] ? __ia32_sys_bpf+0xcc/0x170 [ 73.787485][ T7652] __ia32_sys_bpf+0xcc/0x170 [ 73.787498][ T7652] ? __might_fault+0x111/0x140 [ 73.787511][ T7652] __do_fast_syscall_32+0x14b/0x8c0 [ 73.787525][ T7652] do_fast_syscall_32+0x32/0x70 [ 73.787536][ T7652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.787550][ T7652] RIP: 0023:0xf7fd3fbc [ 73.787559][ T7652] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.787569][ T7652] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 73.787580][ T7652] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 73.787587][ T7652] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.787594][ T7652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.787601][ T7652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.787608][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.787622][ T7652] [ 73.946301][ T7662] jffs2: notice: (7662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.046243][ T7671] netlink: 'syz.1.687': attribute type 22 has an invalid length. [ 74.046270][ T7671] bond0: option ad_select: unable to set because the bond device is up [ 74.113707][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.264839][ T5792] tipc: Node number set to 2886997162 [ 74.373399][ T7698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 74.463855][ T7711] ip6gretap0: entered promiscuous mode [ 74.465650][ T7711] ip6gretap0: left promiscuous mode [ 74.502034][ T7716] netlink: 33 bytes leftover after parsing attributes in process `syz.0.704'. [ 74.502049][ T7716] netlink: 140 bytes leftover after parsing attributes in process `syz.0.704'. [ 74.502060][ T7716] netlink: 33 bytes leftover after parsing attributes in process `syz.0.704'. [ 74.505319][ T7717] FAULT_INJECTION: forcing a failure. [ 74.505319][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 74.505337][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.3.705 Not tainted syzkaller #0 PREEMPT(full) [ 74.505350][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.505356][ T7717] Call Trace: [ 74.505361][ T7717] [ 74.505365][ T7717] dump_stack_lvl+0x100/0x190 [ 74.505383][ T7717] should_fail_ex.cold+0x5/0xa [ 74.505398][ T7717] should_failslab+0xc2/0x120 [ 74.505411][ T7717] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.505424][ T7717] ? trace_kmalloc+0xeb/0x110 [ 74.505434][ T7717] ? vb2_vmalloc_alloc+0xf9/0x410 [ 74.505454][ T7717] vb2_vmalloc_alloc+0xf9/0x410 [ 74.505469][ T7717] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 74.505485][ T7717] __vb2_queue_alloc+0x8d5/0x1160 [ 74.505507][ T7717] vb2_core_reqbufs+0x899/0xf30 [ 74.505524][ T7717] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 74.505542][ T7717] ? __vb2_init_fileio+0x18f/0x1000 [ 74.505559][ T7717] __vb2_init_fileio+0x32d/0x1000 [ 74.505575][ T7717] ? __pfx___futex_wait+0x10/0x10 [ 74.505593][ T7717] __vb2_perform_fileio+0x9ba/0x1380 [ 74.505612][ T7717] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 74.505631][ T7717] vb2_fop_write+0x1f8/0x550 [ 74.505647][ T7717] v4l2_write+0x229/0x2c0 [ 74.505660][ T7717] vfs_write+0x2aa/0x1050 [ 74.505675][ T7717] ? __pfx_v4l2_write+0x10/0x10 [ 74.505686][ T7717] ? lock_acquire+0x1d1/0x380 [ 74.505702][ T7717] ? __fget_files+0x34/0x3d0 [ 74.505736][ T7717] ? __pfx_vfs_write+0x10/0x10 [ 74.505750][ T7717] ? find_held_lock+0x2b/0x80 [ 74.505762][ T7717] ? __fget_files+0x215/0x3d0 [ 74.505778][ T7717] ? __fget_files+0x215/0x3d0 [ 74.505796][ T7717] ? __fget_files+0x21f/0x3d0 [ 74.505816][ T7717] ksys_write+0x12a/0x250 [ 74.505832][ T7717] ? __pfx_ksys_write+0x10/0x10 [ 74.505852][ T7717] __do_fast_syscall_32+0x14b/0x8c0 [ 74.505863][ T7717] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.505881][ T7717] do_fast_syscall_32+0x32/0x70 [ 74.505891][ T7717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.505905][ T7717] RIP: 0023:0xf7f47fbc [ 74.505915][ T7717] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.505925][ T7717] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 74.505936][ T7717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 74.505944][ T7717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.505950][ T7717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.505956][ T7717] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.505963][ T7717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.505977][ T7717] [ 74.550992][ T7721] FAULT_INJECTION: forcing a failure. [ 74.550992][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 74.551011][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(full) [ 74.551025][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.551032][ T7721] Call Trace: [ 74.551036][ T7721] [ 74.551041][ T7721] dump_stack_lvl+0x100/0x190 [ 74.551060][ T7721] should_fail_ex.cold+0x5/0xa [ 74.551076][ T7721] should_failslab+0xc2/0x120 [ 74.551089][ T7721] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.551104][ T7721] ? __alloc_workqueue+0xc54/0x1900 [ 74.551125][ T7721] __alloc_workqueue+0xc54/0x1900 [ 74.551148][ T7721] alloc_workqueue_noprof+0xc7/0x130 [ 74.551172][ T7721] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 74.551193][ T7721] ? __pfx___debug_object_init+0x10/0x10 [ 74.551210][ T7721] nci_register_device+0x21e/0xb80 [ 74.551229][ T7721] ? __pfx_nci_register_device+0x10/0x10 [ 74.551246][ T7721] ? lockdep_init_map_type+0x5c/0x250 [ 74.551265][ T7721] virtual_ncidev_open+0x141/0x220 [ 74.551283][ T7721] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 74.551298][ T7721] misc_open+0x26d/0x450 [ 74.551310][ T7721] ? __pfx_misc_open+0x10/0x10 [ 74.551320][ T7721] chrdev_open+0x234/0x6a0 [ 74.551349][ T7721] ? __pfx_apparmor_file_open+0x10/0x10 [ 74.551365][ T7721] ? __pfx_chrdev_open+0x10/0x10 [ 74.551388][ T7721] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 74.551411][ T7721] do_dentry_open+0x674/0x1470 [ 74.551433][ T7721] ? __pfx_chrdev_open+0x10/0x10 [ 74.551460][ T7721] vfs_open_consume+0xcc/0x460 [ 74.551481][ T7721] path_openat+0x1547/0x23f0 [ 74.551503][ T7721] ? __pfx_path_openat+0x10/0x10 [ 74.551524][ T7721] do_file_open+0x20e/0x430 [ 74.551541][ T7721] ? __pfx_do_file_open+0x10/0x10 [ 74.551567][ T7721] ? _raw_spin_unlock+0x28/0x50 [ 74.551581][ T7721] ? alloc_fd+0x471/0x7a0 [ 74.551601][ T7721] do_sys_openat2+0x163/0x1d0 [ 74.551613][ T7721] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.551629][ T7721] __ia32_compat_sys_openat+0x12d/0x210 [ 74.551661][ T7721] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 74.551680][ T7721] __do_fast_syscall_32+0x14b/0x8c0 [ 74.551695][ T7721] do_fast_syscall_32+0x32/0x70 [ 74.551707][ T7721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.551721][ T7721] RIP: 0023:0xf7f47fbc [ 74.551731][ T7721] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.551742][ T7721] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 74.551753][ T7721] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000740 [ 74.551760][ T7721] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.551766][ T7721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.551772][ T7721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.551778][ T7721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.551792][ T7721] [ 74.721027][ T7730] FAULT_INJECTION: forcing a failure. [ 74.721027][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 74.721055][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 74.721076][ T7730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.721083][ T7730] Call Trace: [ 74.721087][ T7730] [ 74.721092][ T7730] dump_stack_lvl+0x100/0x190 [ 74.721111][ T7730] should_fail_ex.cold+0x5/0xa [ 74.721127][ T7730] should_failslab+0xc2/0x120 [ 74.721140][ T7730] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.721159][ T7730] ? sget_fc+0x117/0x1f60 [ 74.721172][ T7730] ? sget_fc+0x1ba/0x1f60 [ 74.721188][ T7730] sget_fc+0x1ba/0x1f60 [ 74.721205][ T7730] ? __pfx_set_anon_super_fc+0x10/0x10 [ 74.721218][ T7730] ? __pfx_sget_fc+0x10/0x10 [ 74.721231][ T7730] ? refcount_dec_not_one+0x136/0x1b0 [ 74.721249][ T7730] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 74.721265][ T7730] ? __kasan_kmalloc+0xaa/0xb0 [ 74.721281][ T7730] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 74.721306][ T7730] ? __kasan_kmalloc+0xaa/0xb0 [ 74.721325][ T7730] ? __pfx_mqueue_fill_super+0x10/0x10 [ 74.721337][ T7730] get_tree_nodev+0x28/0x190 [ 74.721352][ T7730] mqueue_get_tree+0xf1/0x130 [ 74.721364][ T7730] vfs_get_tree+0x92/0x320 [ 74.721375][ T7730] fc_mount_longterm+0x1a/0x270 [ 74.721391][ T7730] mq_init_ns+0x482/0x820 [ 74.721408][ T7730] copy_ipcs+0x3d8/0x7e0 [ 74.721423][ T7730] create_new_namespaces+0x20a/0xac0 [ 74.721439][ T7730] ? security_capable+0x80/0x260 [ 74.721454][ T7730] unshare_nsproxy_namespaces+0xf6/0x210 [ 74.721471][ T7730] ksys_unshare+0x44f/0x980 [ 74.721486][ T7730] ? __pfx_ksys_unshare+0x10/0x10 [ 74.721503][ T7730] ? __might_fault+0xc5/0x140 [ 74.721519][ T7730] __ia32_sys_unshare+0x30/0x40 [ 74.721535][ T7730] __do_fast_syscall_32+0x14b/0x8c0 [ 74.721548][ T7730] do_fast_syscall_32+0x32/0x70 [ 74.721559][ T7730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.721573][ T7730] RIP: 0023:0xf7fd3fbc [ 74.721582][ T7730] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.721593][ T7730] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 74.721604][ T7730] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 74.721611][ T7730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.721617][ T7730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.721624][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.721630][ T7730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.721645][ T7730] [ 74.781368][ T7734] kvm: user requested TSC rate below hardware speed [ 74.801848][ T7739] FAULT_INJECTION: forcing a failure. [ 74.801848][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 74.801869][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT(full) [ 74.801881][ T7739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.801888][ T7739] Call Trace: [ 74.801892][ T7739] [ 74.801896][ T7739] dump_stack_lvl+0x100/0x190 [ 74.801914][ T7739] should_fail_ex.cold+0x5/0xa [ 74.801930][ T7739] should_failslab+0xc2/0x120 [ 74.801942][ T7739] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.801956][ T7739] ? copy_net_ns+0x130/0x7a0 [ 74.801973][ T7739] copy_net_ns+0x130/0x7a0 [ 74.801986][ T7739] ? copy_cgroup_ns+0x64/0x970 [ 74.801999][ T7739] create_new_namespaces+0x3ea/0xac0 [ 74.802018][ T7739] unshare_nsproxy_namespaces+0xf6/0x210 [ 74.802034][ T7739] ksys_unshare+0x44f/0x980 [ 74.802050][ T7739] ? __pfx_ksys_unshare+0x10/0x10 [ 74.802068][ T7739] ? __might_fault+0xc5/0x140 [ 74.802084][ T7739] __ia32_sys_unshare+0x30/0x40 [ 74.802100][ T7739] __do_fast_syscall_32+0x14b/0x8c0 [ 74.802113][ T7739] do_fast_syscall_32+0x32/0x70 [ 74.802124][ T7739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.802138][ T7739] RIP: 0023:0xf7fd3fbc [ 74.802147][ T7739] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.802165][ T7739] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 74.802176][ T7739] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 74.802184][ T7739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.802190][ T7739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.802197][ T7739] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.802204][ T7739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.802218][ T7739] [ 74.889299][ T7748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.895048][ T7750] syzkaller1: entered promiscuous mode [ 74.895060][ T7750] syzkaller1: entered allmulticast mode [ 74.923716][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.993853][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.993887][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.326063][ T7778] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 75.335589][ T7778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.345238][ T7778] bond2: (slave geneve2): making interface the new active one [ 75.346046][ T7778] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 76.160522][ T7800] FAULT_INJECTION: forcing a failure. [ 76.160522][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 76.160552][ T7800] CPU: 2 UID: 0 PID: 7800 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full) [ 76.160574][ T7800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.160586][ T7800] Call Trace: [ 76.160593][ T7800] [ 76.160605][ T7800] dump_stack_lvl+0x100/0x190 [ 76.160634][ T7800] should_fail_ex.cold+0x5/0xa [ 76.160658][ T7800] should_failslab+0xc2/0x120 [ 76.160692][ T7800] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.160721][ T7800] ? __kernfs_new_node+0xd2/0xa10 [ 76.160749][ T7800] __kernfs_new_node+0xd2/0xa10 [ 76.160770][ T7800] ? __pfx___kernfs_new_node+0x10/0x10 [ 76.160786][ T7800] ? lock_acquire+0x1d1/0x380 [ 76.160800][ T7800] ? kernfs_root+0x23/0x2a0 [ 76.160812][ T7800] ? find_held_lock+0x2b/0x80 [ 76.160823][ T7800] ? kernfs_root+0xee/0x2a0 [ 76.160833][ T7800] ? kernfs_root+0xee/0x2a0 [ 76.160848][ T7800] kernfs_new_node+0x194/0x200 [ 76.160869][ T7800] ? __pfx_kernfs_new_node+0x10/0x10 [ 76.160891][ T7800] ? kernfs_add_one+0x213/0xb40 [ 76.160916][ T7800] __kernfs_create_file+0x53/0x350 [ 76.160938][ T7800] sysfs_add_file_mode_ns+0x207/0x3c0 [ 76.160960][ T7800] sysfs_merge_group+0x194/0x340 [ 76.160979][ T7800] ? __pfx_sysfs_merge_group+0x10/0x10 [ 76.161021][ T7800] ? bus_add_device+0x2e2/0x6c0 [ 76.161045][ T7800] ? __pfx_bus_add_device+0x10/0x10 [ 76.161063][ T7800] ? __pfx_dev_add_physical_location+0x10/0x10 [ 76.161097][ T7800] dpm_sysfs_add+0x237/0x280 [ 76.161118][ T7800] device_add+0x9f4/0x1970 [ 76.161134][ T7800] ? __pfx_device_add+0x10/0x10 [ 76.161150][ T7800] ? lockdep_init_map_type+0x5c/0x250 [ 76.161170][ T7800] ? __init_waitqueue_head+0xca/0x150 [ 76.161199][ T7800] netdev_register_kobject+0x1df/0x410 [ 76.161220][ T7800] register_netdevice+0x1313/0x26b0 [ 76.161248][ T7800] ? __pfx_register_netdevice+0x10/0x10 [ 76.161267][ T7800] ? __kmalloc_noprof+0x350/0x840 [ 76.161289][ T7800] ? gtp_newlink+0x2f4/0x13f0 [ 76.161319][ T7800] gtp_newlink+0x599/0x13f0 [ 76.161349][ T7800] ? __pfx_gtp_newlink+0x10/0x10 [ 76.161373][ T7800] rtnl_newlink+0x1697/0x2620 [ 76.161406][ T7800] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.161430][ T7800] ? rcu_is_watching+0x13/0xc0 [ 76.161449][ T7800] ? kasan_quarantine_put+0x104/0x240 [ 76.161478][ T7800] ? kfree_skbmem+0x19a/0x210 [ 76.161515][ T7800] ? __dev_queue_xmit+0xa5e/0x4a50 [ 76.161536][ T7800] ? lock_acquire+0x1d1/0x380 [ 76.161558][ T7800] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 76.161582][ T7800] ? find_held_lock+0x2b/0x80 [ 76.161606][ T7800] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 76.161629][ T7800] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 76.161655][ T7800] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.161681][ T7800] rtnetlink_rcv_msg+0x95e/0xe90 [ 76.161708][ T7800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.161745][ T7800] netlink_rcv_skb+0x159/0x420 [ 76.161766][ T7800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.161789][ T7800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.161809][ T7800] ? __asan_memcpy+0x3c/0x60 [ 76.161840][ T7800] ? netlink_deliver_tap+0x1ae/0xb50 [ 76.161864][ T7800] netlink_unicast+0x668/0x950 [ 76.161888][ T7800] ? __pfx_netlink_unicast+0x10/0x10 [ 76.161915][ T7800] netlink_sendmsg+0x9ac/0x10c0 [ 76.161940][ T7800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.161966][ T7800] ? apparmor_socket_sendmsg+0x165/0x280 [ 76.161993][ T7800] ? ____sys_sendmsg+0xa99/0xc30 [ 76.162016][ T7800] ____sys_sendmsg+0xa99/0xc30 [ 76.162038][ T7800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.162061][ T7800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.162097][ T7800] ___sys_sendmsg+0x190/0x1e0 [ 76.162124][ T7800] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.162149][ T7800] ? futex_wait+0x11e/0x370 [ 76.162182][ T7800] ? find_held_lock+0x2b/0x80 [ 76.162216][ T7800] __sys_sendmsg+0x160/0x210 [ 76.162237][ T7800] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.162271][ T7800] __do_fast_syscall_32+0x14b/0x8c0 [ 76.162294][ T7800] do_fast_syscall_32+0x32/0x70 [ 76.162312][ T7800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.162333][ T7800] RIP: 0023:0xf7fd3fbc [ 76.162348][ T7800] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.162364][ T7800] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 76.162381][ T7800] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002a00 [ 76.162392][ T7800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.162402][ T7800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.162413][ T7800] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.162423][ T7800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.162447][ T7800] [ 76.203901][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.529407][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.532571][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.540608][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.546833][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.547149][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.663836][ T5792] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.723896][ T7819] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.812480][ T5864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.835948][ T5792] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 76.836894][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.836909][ T5792] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.840161][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.840174][ T5792] usb 6-1: Product: syz [ 76.840182][ T5792] usb 6-1: Manufacturer: syz [ 76.840189][ T5792] usb 6-1: SerialNumber: syz [ 76.901260][ T5864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.006036][ T5864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.027902][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.029961][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030024][ T7819] bridge_slave_0: entered allmulticast mode [ 77.031037][ T7819] bridge_slave_0: entered promiscuous mode [ 77.034724][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.034847][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.034941][ T7819] bridge_slave_1: entered allmulticast mode [ 77.035882][ T7819] bridge_slave_1: entered promiscuous mode [ 77.052139][ T5792] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 77.078621][ T5864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.089032][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.090486][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.102575][ T7819] team0: Port device team_slave_0 added [ 77.104646][ T7819] team0: Port device team_slave_1 added [ 77.121578][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.121589][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.121603][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.122519][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.122530][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.122552][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.163952][ T7819] hsr_slave_0: entered promiscuous mode [ 77.164589][ T7819] hsr_slave_1: entered promiscuous mode [ 77.165080][ T7819] debugfs: 'hsr0' already exists in 'hsr' [ 77.165095][ T7819] Cannot create hsr debugfs directory [ 77.255969][ T5876] usb 6-1: USB disconnect, device number 3 [ 77.261180][ T5876] usblp0: removed [ 77.277863][ T5864] bridge_slave_1: left allmulticast mode [ 77.277892][ T5864] bridge_slave_1: left promiscuous mode [ 77.279022][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.282081][ T5864] bridge_slave_0: left allmulticast mode [ 77.282094][ T5864] bridge_slave_0: left promiscuous mode [ 77.282181][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.431333][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.441057][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.447473][ T5864] bond0 (unregistering): Released all slaves [ 77.495390][ T5864] tipc: Disabling bearer [ 77.496254][ T5864] tipc: Left network mode [ 77.578021][ T7819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.580160][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.580565][ T7819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.582421][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.584141][ T7819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.593167][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.593733][ T7819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.601420][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.634228][ T7905] [ 77.634995][ T7905] ====================================================== [ 77.637043][ T7905] WARNING: possible circular locking dependency detected [ 77.639237][ T7905] syzkaller #0 Not tainted [ 77.640695][ T7905] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 77.642782][ T7905] syz.0.775/7905 is trying to acquire lock: [ 77.644606][ T7905] ffff88806bf58a70 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x539/0xd20 [ 77.647837][ T7905] [ 77.647837][ T7905] but task is already holding lock: [ 77.649961][ T7905] ffff888071e08ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 77.652577][ T7905] [ 77.652577][ T7905] which lock already depends on the new lock. [ 77.652577][ T7905] [ 77.655572][ T7905] [ 77.655572][ T7905] the existing dependency chain (in reverse order) is: [ 77.658164][ T7905] [ 77.658164][ T7905] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 77.660368][ T7905] lock_acquire+0x1d1/0x380 [ 77.661850][ T7905] lock_sock_nested+0x41/0xf0 [ 77.663356][ T7905] smc_listen_out+0xf2/0x4b0 [ 77.664855][ T7905] smc_listen_work+0x4c2/0x52e0 [ 77.666438][ T7905] process_one_work+0xac7/0x1b10 [ 77.668077][ T7905] worker_thread+0x5ef/0xe50 [ 77.669613][ T7905] kthread+0x373/0x450 [ 77.670990][ T7905] ret_from_fork+0x730/0xd60 [ 77.672523][ T7905] ret_from_fork_asm+0x1a/0x30 [ 77.674091][ T7905] [ 77.674091][ T7905] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 77.677024][ T7905] check_prev_add+0xeb/0xe60 [ 77.678549][ T7905] __lock_acquire+0x1528/0x1f40 [ 77.680116][ T7905] lock_acquire+0x1d1/0x380 [ 77.681599][ T7905] __flush_work+0x54d/0xd20 [ 77.683076][ T7905] cancel_work_sync+0xcc/0xf0 [ 77.684613][ T7905] smc_clcsock_release+0x5f/0xe0 [ 77.686212][ T7905] __smc_release+0x5c2/0x880 [ 77.687705][ T7905] smc_close_non_accepted+0xda/0x200 [ 77.689426][ T7905] smc_close_active+0x4ff/0x11a0 [ 77.690998][ T7905] __smc_release+0x634/0x880 [ 77.692490][ T7905] smc_release+0x1fc/0x620 [ 77.693976][ T7905] __sock_release+0xb3/0x260 [ 77.695476][ T7905] sock_close+0x1c/0x30 [ 77.696820][ T7905] __fput+0x3fb/0xb50 [ 77.698160][ T7905] fput_close_sync+0x118/0x250 [ 77.699712][ T7905] filp_close_sync+0x75/0xa0 [ 77.701212][ T7905] __range_close+0x4a6/0x8b0 [ 77.702703][ T7905] __ia32_sys_close_range+0x1f8/0x430 [ 77.704399][ T7905] __do_fast_syscall_32+0x14b/0x8c0 [ 77.706057][ T7905] do_fast_syscall_32+0x32/0x70 [ 77.707628][ T7905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.709710][ T7905] [ 77.709710][ T7905] other info that might help us debug this: [ 77.709710][ T7905] [ 77.712637][ T7905] Possible unsafe locking scenario: [ 77.712637][ T7905] [ 77.714797][ T7905] CPU0 CPU1 [ 77.716389][ T7905] ---- ---- [ 77.718030][ T7905] lock(sk_lock-AF_SMC/1); [ 77.719392][ T7905] lock((work_completion)(&new_smc->smc_listen_work)); [ 77.722115][ T7905] lock(sk_lock-AF_SMC/1); [ 77.724143][ T7905] lock((work_completion)(&new_smc->smc_listen_work)); [ 77.726147][ T7905] [ 77.726147][ T7905] *** DEADLOCK *** [ 77.726147][ T7905] [ 77.728570][ T7905] locks held by syz.0.775/7905: 3, last CPU#0: [ 77.730420][ T7905] #0: ffff888014097540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 77.733476][ T7905] #1: ffff888071e08ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 77.736167][ T7905] #2: ffffffff8ffec2e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xd20 [ 77.738857][ T7905] [ 77.738857][ T7905] stack backtrace: [ 77.740601][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.0.775 Not tainted syzkaller #0 PREEMPT(full) [ 77.743234][ T7905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.746185][ T7905] Call Trace: [ 77.747189][ T7905] [ 77.748077][ T7905] dump_stack_lvl+0x100/0x190 [ 77.749520][ T7905] print_circular_bug.cold+0x178/0x1be [ 77.751150][ T7905] check_noncircular+0x146/0x160 [ 77.752612][ T7905] check_prev_add+0xeb/0xe60 [ 77.754001][ T7905] __lock_acquire+0x1528/0x1f40 [ 77.755456][ T7905] lock_acquire+0x1d1/0x380 [ 77.756809][ T7905] ? __flush_work+0x539/0xd20 [ 77.758243][ T7905] ? mark_held_locks+0x40/0x70 [ 77.759574][ T7905] ? __flush_work+0x539/0xd20 [ 77.760997][ T7905] __flush_work+0x54d/0xd20 [ 77.762354][ T7905] ? __flush_work+0x539/0xd20 [ 77.763797][ T7905] ? __pfx___flush_work+0x10/0x10 [ 77.765331][ T7905] ? __lock_acquire+0x5c0/0x1f40 [ 77.766831][ T7905] ? __pfx_wq_barrier_func+0x10/0x10 [ 77.768475][ T7905] ? __pfx___might_resched+0x10/0x10 [ 77.770102][ T7905] ? __smc_release+0x5ba/0x880 [ 77.771551][ T7905] cancel_work_sync+0xcc/0xf0 [ 77.772941][ T7905] smc_clcsock_release+0x5f/0xe0 [ 77.774442][ T7905] __smc_release+0x5c2/0x880 [ 77.775813][ T7905] ? __pfx_sock_def_readable+0x10/0x10 [ 77.777448][ T7905] smc_close_non_accepted+0xda/0x200 [ 77.779047][ T7905] smc_close_active+0x4ff/0x11a0 [ 77.780542][ T7905] __smc_release+0x634/0x880 [ 77.781955][ T7905] smc_release+0x1fc/0x620 [ 77.783263][ T7905] __sock_release+0xb3/0x260 [ 77.784628][ T7905] ? __pfx_sock_close+0x10/0x10 [ 77.786039][ T7905] sock_close+0x1c/0x30 [ 77.787243][ T7905] __fput+0x3fb/0xb50 [ 77.788417][ T7905] fput_close_sync+0x118/0x250 [ 77.789830][ T7905] ? __pfx_fput_close_sync+0x10/0x10 [ 77.791390][ T7905] filp_close_sync+0x75/0xa0 [ 77.792764][ T7905] __range_close+0x4a6/0x8b0 [ 77.794140][ T7905] __ia32_sys_close_range+0x1f8/0x430 [ 77.795704][ T7905] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 77.797451][ T7905] __do_fast_syscall_32+0x14b/0x8c0 [ 77.799005][ T7905] do_fast_syscall_32+0x32/0x70 [ 77.800431][ T7905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.802257][ T7905] RIP: 0023:0xf7fd3fbc [ 77.803453][ T7905] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.808943][ T7905] RSP: 002b:00000000ffe5d67c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 77.811356][ T7905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000001e [ 77.813630][ T7905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.815923][ T7905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.818202][ T7905] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 77.820532][ T7905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.822855][ T7905] [ 77.831185][ T5496] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.954365][ T5864] hsr_slave_0: left promiscuous mode [ 77.954647][ T5864] hsr_slave_1: left promiscuous mode [ 77.954883][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.954893][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.958275][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.958284][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.959912][ T5864] veth1_macvtap: left promiscuous mode [ 77.959931][ T5864] veth0_macvtap: left promiscuous mode [ 77.959961][ T5864] veth1_vlan: left promiscuous mode [ 77.959989][ T5864] veth0_vlan: left promiscuous mode [ 78.049576][ T5864] team0 (unregistering): Port device team_slave_1 removed [ 78.055727][ T5864] team0 (unregistering): Port device team_slave_0 removed [ 78.090041][ T5496] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.177007][ T5496] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.263116][ T5496] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.553442][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.553471][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 78.631949][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.631983][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 78.702558][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.702590][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 78.772350][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.772382][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 78.850237][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.897658][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.962585][ T5496] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.969753][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.018507][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.076259][ T5864] bridge_slave_1: left allmulticast mode [ 79.076275][ T5864] bridge_slave_1: left promiscuous mode [ 79.076349][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.077224][ T5864] bridge_slave_0: left allmulticast mode [ 79.077235][ T5864] bridge_slave_0: left promiscuous mode [ 79.077293][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.089386][ T5864] bridge_slave_0: left allmulticast mode [ 79.089406][ T5864] bridge_slave_0: left promiscuous mode [ 79.089501][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.154183][ T5864] bond2 (unregistering): (slave geneve2): Releasing active interface [ 79.163612][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.169068][ T5864] bond_slave_0: left promiscuous mode [ 79.170035][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.170316][ T5864] bond_slave_1: left promiscuous mode [ 79.170649][ T5864] bond0 (unregistering): Released all slaves [ 79.172278][ T5864] bond1 (unregistering): Released all slaves [ 79.174928][ T5864] bond2 (unregistering): Released all slaves [ 79.195118][ T5864] bond2 (unregistering): (slave geneve2): Releasing active interface [ 79.207537][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.208881][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.209727][ T5864] bond0 (unregistering): Released all slaves [ 79.211886][ T5864] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 79.211898][ T5864] wireguard0: left promiscuous mode [ 79.212504][ T5864] bond1 (unregistering): Released all slaves [ 79.216780][ T5864] bond2 (unregistering): Released all slaves [ 79.221104][ T5496] 8021q: adding VLAN 0 to HW filter on device eth7 [ 79.285344][ T5864] tipc: Disabling bearer [ 79.285384][ T5864] tipc: Left network mode [ 79.325299][ T5496] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.415246][ T5496] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.545572][ T5496] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.609477][ T5864] hsr_slave_0: left promiscuous mode [ 79.609964][ T5864] hsr_slave_1: left promiscuous mode [ 79.610343][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.610356][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.620588][ T5864] hsr_slave_0: left promiscuous mode [ 79.626514][ T5864] hsr_slave_1: left promiscuous mode [ 79.626766][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.626776][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.641799][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.642065][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.653008][ T5864] veth1_macvtap: left promiscuous mode [ 79.653039][ T5864] veth0_macvtap: left promiscuous mode [ 79.653106][ T5864] veth1_vlan: left promiscuous mode [ 79.653159][ T5864] veth0_vlan: left promiscuous mode [ 79.654413][ T5864] veth1_macvtap: left promiscuous mode [ 79.654432][ T5864] veth0_macvtap: left promiscuous mode [ 79.654477][ T5864] veth1_vlan: left promiscuous mode [ 79.654528][ T5864] veth0_vlan: left promiscuous mode [ 79.743925][ T5864] team0 (unregistering): Port device team_slave_1 removed [ 79.746152][ T5864] team0 (unregistering): Port device team_slave_0 removed [ 79.811112][ T5864] team0 (unregistering): Port device team_slave_1 removed [ 79.813015][ T5864] team0 (unregistering): Port device team_slave_0 removed [ 79.830097][ T5496] 8021q: adding VLAN 0 to HW filter on device eth12 [ 79.916824][ T5496] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.007316][ T5496] 8021q: adding VLAN 0 to HW filter on device eth13 [ 80.592732][ T5864] bridge_slave_1: left allmulticast mode [ 80.592754][ T5864] bridge_slave_1: left promiscuous mode [ 80.593777][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.598288][ T5864] bridge_slave_0: left allmulticast mode [ 80.598304][ T5864] bridge_slave_0: left promiscuous mode [ 80.598407][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.630117][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.631576][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.632500][ T5864] bond0 (unregistering): Released all slaves [ 80.757155][ T5496] 8021q: adding VLAN 0 to HW filter on device eth14 [ 80.788461][ T5864] hsr_slave_0: left promiscuous mode [ 80.788751][ T5864] hsr_slave_1: left promiscuous mode [ 80.789002][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.789250][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.831626][ T5864] team0 (unregistering): Port device team_slave_1 removed [ 80.834454][ T5864] team0 (unregistering): Port device team_slave_0 removed [ 80.897298][ T5496] 8021q: adding VLAN 0 to HW filter on device eth15 [ 81.005078][ T5496] 8021q: adding VLAN 0 to HW filter on device eth16 [ 81.141695][ T5496] 8021q: adding VLAN 0 to HW filter on device eth17