last executing test programs: 2m25.492250873s ago: executing program 0 (id=850): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x5dc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 2m25.393374658s ago: executing program 0 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x500, 0x0, 0x0, 0x0) 2m25.333759977s ago: executing program 0 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x66ac00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006a80)={0x38, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x36}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m25.19372056s ago: executing program 0 (id=853): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty=0x600, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2m25.122958031s ago: executing program 0 (id=855): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e20000000000004000", [0x8, 0xd91]}}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0x0) close(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000140)=0xffffffff, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) setuid(0xee00) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) 2m24.983846108s ago: executing program 0 (id=857): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x0, 0xffffe14b, 0x2bf2e784, 0x449621be, 0x7, 0x9}, {0x4, 0x2, 0x67b, 0x0, 0x5, 0x17a16f80}], ['\x00']}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m9.58930298s ago: executing program 32 (id=857): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x0, 0xffffe14b, 0x2bf2e784, 0x449621be, 0x7, 0x9}, {0x4, 0x2, 0x67b, 0x0, 0x5, 0x17a16f80}], ['\x00']}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.671168456s ago: executing program 4 (id=1717): socket(0x2, 0x80805, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4, 0xa}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCFLSH(r3, 0x540b, 0x2) 2.451991348s ago: executing program 4 (id=1721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 1.940756076s ago: executing program 4 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {0x25, 0x0, 0x600}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.789784372s ago: executing program 1 (id=1741): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1, 0x600}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x12161, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000bc0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, 0x3, 0x20000000000401}) semget(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000002c0)=0x1) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000000c0)) 1.720299225s ago: executing program 1 (id=1742): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1c8, 0x288, 0x130, 0x130, 0x98, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, 'xfrm0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xf7, 0x5, 0x44}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x288}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wg0\x00', 'pimreg1\x00', {}, {}, 0x11, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x2, [0x3d, 0x2, 0x3c, 0x1d, 0x34, 0x6, 0x2a, 0x3e, 0x3d, 0xc, 0x11, 0x3, 0xc, 0x27, 0x30, 0x1f], 0x0, 0x40, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 1.720163993s ago: executing program 1 (id=1743): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="65486d795fe26defdeed7dda726561645f74b9ffa2e37786fe66e431205f2e76", 0x20) 1.6398962s ago: executing program 1 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b00"], 0x97) 1.577499201s ago: executing program 2 (id=1747): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) write(r0, 0x0, 0x0) 1.574828243s ago: executing program 2 (id=1748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4) bind$packet(r2, &(0x7f0000000200)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.500378425s ago: executing program 1 (id=1749): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$inet(r1, 0x0, 0x2004010) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.327215226s ago: executing program 2 (id=1751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x9, &(0x7f0000000200)=@framed={{}, [@generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x35}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.32694683s ago: executing program 1 (id=1752): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x0) 1.158375384s ago: executing program 3 (id=1755): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007009e000000000000801810850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 999.242868ms ago: executing program 2 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) 900.775163ms ago: executing program 2 (id=1757): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b00"], 0x97) 810.897703ms ago: executing program 3 (id=1758): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 749.661517ms ago: executing program 4 (id=1759): r0 = socket(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) listen(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0179e0b}) 749.478417ms ago: executing program 3 (id=1760): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000001d00)) 640.943719ms ago: executing program 4 (id=1761): openat$ptp0(0xffffffffffffff9c, 0x0, 0x100, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x7f, 0x100) openat(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1cb) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3da76561e1a35176f399d5ca462a3d3b05ef581d09ba0413013471b1c6e01b7b6e98d757edffd80ee13864212c0db15834bf5e54c01d0b83098ef54c9804559f1a24fe13a08c1bc6ca9a4328e0087efb58a4ea51bb70a20e5af94c3224ba49f9fc9ab61db44f3b9c46f603295bed5c7b63ea6b6925da0f461f97d5e4df320a96229aca883eb9a1e0ee613d", @ANYRESHEX=r0, @ANYBLOB=',']) 640.70208ms ago: executing program 3 (id=1762): clock_adjtime(0x0, &(0x7f0000000380)={0x37f, 0x80007, 0x4101, 0x100000001, 0xfffffffffffffffe, 0xffff, 0x400000400, 0x80000000008a, 0x5, 0x100, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x761c9023, 0x403, 0x1ff, 0x5, 0x1, 0x9, 0x8001, 0x1f4e2762, 0x2000000000, 0x3, 0x72a2, 0xe}) 480.642685ms ago: executing program 4 (id=1763): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x400, 0x6, {"280116c596a0b02d72711dda56cab4d0"}, 0x3, 0xec4f, 0xc}}}, 0x90) 330.405479ms ago: executing program 3 (id=1764): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2c004) 230.716997ms ago: executing program 3 (id=1765): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000203000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x15, 0x76}) 0s ago: executing program 2 (id=1766): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007009e000000000000801810850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): xec no attachment [ 200.822828][ T9431] comedi: valid board names for 8255 driver are: [ 200.822841][ T9431] 8255 [ 200.822845][ T9431] comedi: valid board names for vmk80xx driver are: [ 200.822850][ T9431] vmk80xx [ 200.822854][ T9431] comedi: valid board names for usbduxsigma driver are: [ 200.822859][ T9431] usbduxsigma [ 200.822862][ T9431] comedi: valid board names for usbduxfast driver are: [ 200.822867][ T9431] usbduxfast [ 200.822870][ T9431] comedi: valid board names for usbdux driver are: [ 200.822875][ T9431] usbdux [ 200.822878][ T9431] comedi: valid board names for ni6501 driver are: [ 200.822883][ T9431] ni6501 [ 200.822887][ T9431] comedi: valid board names for dt9812 driver are: [ 200.822891][ T9431] dt9812 [ 200.822894][ T9431] comedi: valid board names for ni_labpc_cs driver are: [ 200.822899][ T9431] ni_labpc_cs [ 200.822902][ T9431] comedi: valid board names for ni_daq_700 driver are: [ 200.822907][ T9431] ni_daq_700 [ 200.822910][ T9431] comedi: valid board names for labpc_pci driver are: [ 200.822915][ T9431] labpc_pci [ 200.822918][ T9431] comedi: valid board names for adl_pci9118 driver are: [ 200.822923][ T9431] pci9118dg [ 200.822927][ T9431] pci9118hg [ 200.822930][ T9431] pci9118hr [ 200.822933][ T9431] comedi: valid board names for 8255_pci driver are: [ 200.822938][ T9431] 8255_pci [ 200.822942][ T9431] comedi: valid board names for s526 driver are: [ 200.822946][ T9431] s526 [ 200.822950][ T9431] comedi: valid board names for multiq3 driver are: [ 200.822955][ T9431] multiq3 [ 200.822959][ T9431] comedi: valid board names for pcmuio driver are: [ 200.822963][ T9431] pcmuio48 [ 200.822967][ T9431] pcmuio96 [ 200.822971][ T9431] comedi: valid board names for pcmmio driver are: [ 200.822975][ T9431] pcmmio [ 200.822979][ T9431] comedi: valid board names for pcmda12 driver are: [ 200.822984][ T9431] pcmda12 [ 200.822988][ T9431] comedi: valid board names for pcmad driver are: [ 200.822992][ T9431] pcmad12 [ 200.822996][ T9431] pcmad16 [ 200.823000][ T9431] comedi: valid board names for ni_labpc driver are: [ 200.823005][ T9431] lab-pc-1200 [ 200.823009][ T9431] lab-pc-1200ai [ 200.823013][ T9431] lab-pc+ [ 200.823018][ T9431] comedi: valid board names for atmio16 driver are: [ 200.823022][ T9431] atmio16 [ 200.823026][ T9431] atmio16d [ 200.823030][ T9431] comedi: valid board names for ni_at_ao driver are: [ 200.823034][ T9431] at-ao-6 [ 200.823038][ T9431] at-ao-10 [ 200.823042][ T9431] comedi: valid board names for ni_at_a2150 driver are: [ 200.823047][ T9431] ni_at_a2150 [ 200.823051][ T9431] comedi: valid board names for adq12b driver are: [ 200.823056][ T9431] adq12b [ 200.823060][ T9431] comedi: valid board names for mpc624 driver are: [ 200.823065][ T9431] mpc624 [ 200.823068][ T9431] comedi: valid board names for c6xdigio driver are: [ 200.823073][ T9431] c6xdigio [ 200.823076][ T9431] comedi: valid board names for aio_iiro_16 driver are: [ 200.823081][ T9431] aio_iiro_16 [ 200.823084][ T9431] comedi: valid board names for aio_aio12_8 driver are: [ 200.823089][ T9431] aio_aio12_8 [ 200.823092][ T9431] aio_ai12_8 [ 200.823096][ T9431] aio_ao12_4 [ 200.823099][ T9431] comedi: valid board names for fl512 driver are: [ 200.823104][ T9431] fl512 [ 200.823107][ T9431] comedi: valid board names for dmm32at driver are: [ 200.823112][ T9431] dmm32at [ 200.823115][ T9431] comedi: valid board names for dt282x driver are: [ 200.823119][ T9431] dt2821 [ 200.823123][ T9431] dt2821-f [ 200.823126][ T9431] dt2821-g [ 200.823130][ T9431] dt2823 [ 200.823133][ T9431] dt2824-pgh [ 200.823137][ T9431] dt2824-pgl [ 200.823140][ T9431] dt2825 [ 200.823144][ T9431] dt2827 [ 200.823147][ T9431] dt2828 [ 200.823150][ T9431] dt2829 [ 200.823154][ T9431] dt21-ez [ 200.823157][ T9431] dt23-ez [ 200.823161][ T9431] dt24-ez [ 200.823164][ T9431] dt24-ez-pgl [ 200.823167][ T9431] comedi: valid board names for dt2817 driver are: [ 200.823172][ T9431] dt2817 [ 200.823175][ T9431] comedi: valid board names for dt2815 driver are: [ 200.823180][ T9431] dt2815 [ 200.823183][ T9431] comedi: valid board names for dt2814 driver are: [ 200.823188][ T9431] dt2814 [ 200.823191][ T9431] comedi: valid board names for dt2811 driver are: [ 200.823196][ T9431] dt2811-pgh [ 200.823199][ T9431] dt2811-pgl [ 200.823203][ T9431] comedi: valid board names for dt2801 driver are: [ 200.823207][ T9431] dt2801 [ 200.823211][ T9431] comedi: valid board names for das6402 driver are: [ 200.823215][ T9431] das6402-12 [ 200.823219][ T9431] das6402-16 [ 200.823222][ T9431] comedi: valid board names for das1800 driver are: [ 200.823227][ T9431] das-1701st [ 200.823230][ T9431] das-1701st-da [ 200.823234][ T9431] das-1702st [ 200.823237][ T9431] das-1702st-da [ 200.823241][ T9431] das-1702hr [ 200.823244][ T9431] das-1702hr-da [ 200.823248][ T9431] das-1701ao [ 200.823252][ T9431] das-1702ao [ 200.823255][ T9431] das-1801st [ 200.823259][ T9431] das-1801st-da [ 200.826186][ T9431] das-1802st [ 200.826195][ T9431] das-1802st-da [ 200.826199][ T9431] das-1802hr [ 200.826203][ T9431] das-1802hr-da [ 200.826227][ T9431] das-1801hc [ 200.826232][ T9431] das-1802hc [ 200.826237][ T9431] das-1801ao [ 200.826241][ T9431] das-1802ao [ 200.826246][ T9431] comedi: valid board names for das800 driver are: [ 200.826251][ T9431] das-800 [ 200.826255][ T9431] cio-das800 [ 200.826259][ T9431] das-801 [ 200.826263][ T9431] cio-das801 [ 200.826267][ T9431] das-802 [ 200.826271][ T9431] cio-das802 [ 200.826275][ T9431] cio-das802/16 [ 200.826279][ T9431] comedi: valid board names for isa-das08 driver are: [ 200.826284][ T9431] isa-das08 [ 200.826289][ T9431] das08-pgm [ 200.826293][ T9431] das08-pgh [ 200.826296][ T9431] das08-pgl [ 200.826300][ T9431] das08-aoh [ 200.826304][ T9431] das08-aol [ 200.826308][ T9431] das08-aom [ 200.826312][ T9431] das08/jr-ao [ 200.826316][ T9431] das08jr-16-ao [ 200.826320][ T9431] pc104-das08 [ 200.826898][ T9431] das08jr/16 [ 200.826906][ T9431] comedi: valid board names for das16m1 driver are: [ 200.826911][ T9431] das16m1 [ 200.826914][ T9431] comedi: valid board names for dac02 driver are: [ 200.826920][ T9431] dac02 [ 200.826924][ T9431] comedi: valid board names for rti802 driver are: [ 200.826929][ T9431] rti802 [ 200.826933][ T9431] comedi: valid board names for rti800 driver are: [ 200.826937][ T9431] rti800 [ 200.826941][ T9431] rti815 [ 200.826945][ T9431] comedi: valid board names for pcm3724 driver are: [ 200.826950][ T9431] pcm3724 [ 200.826954][ T9431] comedi: valid board names for pcl818 driver are: [ 200.826959][ T9431] pcl818l [ 200.826963][ T9431] pcl818h [ 200.826967][ T9431] pcl818hd [ 200.826971][ T9431] pcl818hg [ 200.826974][ T9431] pcl818 [ 200.826978][ T9431] pcl718 [ 200.826982][ T9431] pcm3718 [ 200.826986][ T9431] comedi: valid board names for pcl816 driver are: [ 200.826991][ T9431] pcl816 [ 200.826994][ T9431] pcl814b [ 200.826998][ T9431] comedi: valid board names for pcl812 driver are: [ 200.827003][ T9431] pcl812 [ 200.827007][ T9431] pcl812pg [ 200.827011][ T9431] acl8112pg [ 200.827015][ T9431] acl8112dg [ 200.827019][ T9431] acl8112hg [ 200.827023][ T9431] a821pgl [ 200.827026][ T9431] a821pglnda [ 200.827030][ T9431] a821pgh [ 200.827034][ T9431] a822pgl [ 200.827038][ T9431] a822pgh [ 200.827042][ T9431] a823pgl [ 200.827046][ T9431] a823pgh [ 200.827050][ T9431] pcl813 [ 200.827054][ T9431] pcl813b [ 200.827057][ T9431] acl8113 [ 200.827061][ T9431] iso813 [ 200.827065][ T9431] acl8216 [ 200.827068][ T9431] a826pg [ 200.827073][ T9431] comedi: valid board names for pcl730 driver are: [ 200.827077][ T9431] pcl730 [ 200.827081][ T9431] iso730 [ 200.827085][ T9431] acl7130 [ 200.827089][ T9431] pcm3730 [ 200.827093][ T9431] pcl725 [ 200.827096][ T9431] p8r8dio [ 200.827100][ T9431] acl7225b [ 200.827103][ T9431] p16r16dio [ 200.827107][ T9431] pcl733 [ 200.827111][ T9431] pcl734 [ 200.827115][ T9431] opmm-1616-xt [ 200.827120][ T9431] pearl-mm-p [ 200.827123][ T9431] ir104-pbf [ 200.827128][ T9431] comedi: valid board names for pcl726 driver are: [ 200.827133][ T9431] pcl726 [ 200.827136][ T9431] pcl727 [ 200.827140][ T9431] pcl728 [ 200.827143][ T9431] acl6126 [ 200.827146][ T9431] acl6128 [ 200.827150][ T9431] comedi: valid board names for pcl724 driver are: [ 200.827154][ T9431] pcl724 [ 200.827158][ T9431] pcl722 [ 200.827161][ T9431] pcl731 [ 200.827164][ T9431] acl7122 [ 200.827168][ T9431] acl7124 [ 200.827171][ T9431] pet48dio [ 200.827174][ T9431] pcmio48 [ 200.827178][ T9431] onyx-mm-dio [ 200.827181][ T9431] comedi: valid board names for pcl711 driver are: [ 200.827186][ T9431] pcl711 [ 200.827189][ T9431] pcl711b [ 200.827193][ T9431] acl8112hg [ 200.827196][ T9431] acl8112dg [ 200.827200][ T9431] comedi: valid board names for amplc_pc263 driver are: [ 200.827204][ T9431] pc263 [ 200.827208][ T9431] comedi: valid board names for amplc_pc236 driver are: [ 200.827212][ T9431] pc36at [ 200.827216][ T9431] comedi: valid board names for amplc_dio200 driver are: [ 200.827220][ T9431] pc212e [ 200.827224][ T9431] pc214e [ 200.827227][ T9431] pc215e [ 200.827230][ T9431] pc218e [ 200.827234][ T9431] pc272e [ 200.827237][ T9431] comedi: valid board names for comedi_parport driver are: [ 200.827241][ T9431] comedi_parport [ 200.827245][ T9431] comedi: valid board names for comedi_test driver are: [ 200.827250][ T9431] comedi_test [ 200.827254][ T9431] comedi: valid board names for comedi_bond driver are: [ 200.827258][ T9431] comedi_bond [ 200.880281][ T66] Bluetooth: hci4: command tx timeout [ 200.896063][ T9442] FAULT_INJECTION: forcing a failure. [ 200.896063][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 200.896084][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.4.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.896099][ T9442] Tainted: [L]=SOFTLOCKUP [ 200.896103][ T9442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.896110][ T9442] Call Trace: [ 200.896114][ T9442] [ 200.896119][ T9442] dump_stack_lvl+0x100/0x190 [ 200.896138][ T9442] should_fail_ex.cold+0x5/0xa [ 200.896152][ T9442] should_failslab+0xc2/0x120 [ 200.896175][ T9442] __kmalloc_noprof+0xfc/0x840 [ 200.896194][ T9442] ? rcu_is_watching+0x13/0xc0 [ 200.896213][ T9442] ? tomoyo_realpath_from_path+0xb6/0x690 [ 200.896240][ T9442] tomoyo_realpath_from_path+0xb6/0x690 [ 200.896266][ T9442] tomoyo_path_number_perm+0x23c/0x580 [ 200.896285][ T9442] ? tomoyo_path_number_perm+0x22e/0x580 [ 200.896303][ T9442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.896322][ T9442] ? get_pid_task+0x106/0x250 [ 200.896350][ T9442] ? __lock_acquire+0x5c0/0x1f40 [ 200.896387][ T9442] ? __fget_files+0x34/0x3d0 [ 200.896431][ T9442] ? find_held_lock+0x2b/0x80 [ 200.896453][ T9442] ? __fget_files+0x215/0x3d0 [ 200.896474][ T9442] ? hook_file_ioctl_common+0x140/0x440 [ 200.896493][ T9442] ? __fget_files+0x215/0x3d0 [ 200.896517][ T9442] ? __fget_files+0x21f/0x3d0 [ 200.896542][ T9442] security_file_ioctl_compat+0xd3/0x230 [ 200.896562][ T9442] __ia32_compat_sys_ioctl+0xc2/0x360 [ 200.896586][ T9442] __do_fast_syscall_32+0x13a/0x8b0 [ 200.896610][ T9442] ? lockdep_hardirqs_on+0x7d/0x110 [ 200.896633][ T9442] do_fast_syscall_32+0x32/0x70 [ 200.896656][ T9442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.896682][ T9442] RIP: 0023:0xf706efec [ 200.896701][ T9442] Code: Unable to access opcode bytes at 0xf706efc2. [ 200.896709][ T9442] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 200.896726][ T9442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086f53 [ 200.896738][ T9442] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.896749][ T9442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.896759][ T9442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.896770][ T9442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.896799][ T9442] [ 200.896837][ T9442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.041484][ T9447] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1007'. [ 201.240264][ T42] audit: type=1800 audit(1790867291.638:486): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170653 res=0 errno=0 [ 201.294477][ T9457] netlink: zone id is out of range [ 201.294486][ T9457] netlink: zone id is out of range [ 201.294491][ T9457] netlink: zone id is out of range [ 201.294495][ T9457] netlink: zone id is out of range [ 201.294499][ T9457] netlink: zone id is out of range [ 201.294503][ T9457] netlink: zone id is out of range [ 201.294676][ T9457] netlink: zone id is out of range [ 201.294681][ T9457] netlink: zone id is out of range [ 201.294685][ T9457] netlink: zone id is out of range [ 201.294689][ T9457] netlink: zone id is out of range [ 201.693815][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 201.852389][ T9475] netlink: 'syz.1.1018': attribute type 2 has an invalid length. [ 202.058737][ T9478] profile_transition: unconfined exec no attachment [ 202.077980][ T9479] profile_transition: unconfined exec no attachment [ 202.101799][ T9477] siw: device registration error -23 [ 202.130939][ T9477] smc: removing ib device syz0 [ 202.224430][ T9477] smbdirect: ib_dev[syz0] removed [ 202.473103][ T9484] profile_transition: name lookup ix on error [ 203.678887][ T9488] bond2: entered allmulticast mode [ 203.679258][ T9488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.760180][ T9493] profile_transition: unconfined exec no attachment [ 203.785838][ T9494] profile_transition: unconfined exec no attachment [ 203.822912][ T9496] profile_transition: unconfined exec no attachment [ 203.855469][ T9499] profile_transition: unconfined exec no attachment [ 203.881063][ T9500] profile_transition: unconfined exec no attachment [ 203.908444][ T9501] profile_transition: unconfined exec no attachment [ 204.019251][ T9505] profile_transition: unconfined exec no attachment [ 204.246300][ T9518] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 204.302657][ T9525] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 204.585136][ T9536] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 204.613578][ T9536] team0 (unregistering): Port device team_slave_0 removed [ 205.088680][ T42] audit: type=1800 audit(1790867295.489:487): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171068 res=0 errno=0 [ 205.091658][ T62] hid-generic 0005:16C0:05DF.0002: unknown main item tag 0x0 [ 205.109449][ T62] hid-generic 0005:16C0:05DF.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 205.111042][ T42] audit: type=1800 audit(1790867295.509:488): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171088 res=0 errno=0 [ 205.207836][ T42] audit: type=1800 audit(1790867295.609:489): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171102 res=0 errno=0 [ 205.223152][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 205.373617][ T42] audit: type=1800 audit(1790867295.779:490): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=171070 res=0 errno=0 [ 205.485724][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 205.845815][ T9568] profile_transition: 11 callbacks suppressed [ 205.845829][ T9568] profile_transition: unconfined exec no attachment [ 205.866793][ T9570] profile_transition: unconfined exec no attachment [ 205.947745][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 205.991513][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 206.001939][ T9575] netlink: 384 bytes leftover after parsing attributes in process `syz.4.1044'. [ 206.019797][ T9555] ceph: No mds server is up or the cluster is laggy [ 206.071813][ T9575] FAULT_INJECTION: forcing a failure. [ 206.071813][ T9575] name failslab, interval 1, probability 0, space 0, times 0 [ 206.071838][ T9575] CPU: 3 UID: 0 PID: 9575 Comm: syz.4.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.071863][ T9575] Tainted: [L]=SOFTLOCKUP [ 206.071867][ T9575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.071874][ T9575] Call Trace: [ 206.071880][ T9575] [ 206.071885][ T9575] dump_stack_lvl+0x100/0x190 [ 206.071905][ T9575] should_fail_ex.cold+0x5/0xa [ 206.071920][ T9575] should_failslab+0xc2/0x120 [ 206.071939][ T9575] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 206.071957][ T9575] ? arch_stack_walk+0x88/0xf0 [ 206.071970][ T9575] ? kvasprintf_const+0x66/0x1a0 [ 206.071990][ T9575] kvasprintf+0xbc/0x150 [ 206.072008][ T9575] ? __pfx_kvasprintf+0x10/0x10 [ 206.072026][ T9575] ? mark_held_locks+0x40/0x70 [ 206.072045][ T9575] kvasprintf_const+0x66/0x1a0 [ 206.072062][ T9575] kobject_set_name_vargs+0x5a/0x140 [ 206.072081][ T9575] kobject_init_and_add+0xe7/0x180 [ 206.072098][ T9575] ? __pfx_kobject_init_and_add+0x10/0x10 [ 206.072115][ T9575] ? vti_init_net+0x2e/0x140 [ 206.072128][ T9575] ? create_new_namespaces+0x3ea/0xac0 [ 206.072145][ T9575] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 206.072162][ T9575] ? ksys_unshare+0x4a2/0xa70 [ 206.072189][ T9575] ? __ia32_sys_unshare+0x30/0x40 [ 206.072200][ T9575] ? __do_fast_syscall_32+0x13a/0x8b0 [ 206.072214][ T9575] ? do_fast_syscall_32+0x32/0x70 [ 206.072228][ T9575] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.072243][ T9575] ? dev_uevent_filter+0x3e/0xd0 [ 206.072260][ T9575] ? kobject_uevent_env+0x2e7/0x18b0 [ 206.072282][ T9575] net_rx_queue_update_kobjects+0x37e/0x760 [ 206.072301][ T9575] ? kset_register+0x1bb/0x290 [ 206.072319][ T9575] netdev_register_kobject+0x2c6/0x410 [ 206.072336][ T9575] register_netdevice+0x15b6/0x25a0 [ 206.072352][ T9575] ? __pfx_register_netdevice+0x10/0x10 [ 206.072370][ T9575] __ip_tunnel_create+0x52b/0x670 [ 206.072383][ T9575] ? __pfx___ip_tunnel_create+0x10/0x10 [ 206.072394][ T9575] ? net_generic+0xea/0x2a0 [ 206.072409][ T9575] ip_tunnel_init_net+0x230/0x780 [ 206.072423][ T9575] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 206.072439][ T9575] ? __kmalloc_noprof+0x350/0x840 [ 206.072455][ T9575] ? __pfx_vti_init_net+0x10/0x10 [ 206.072468][ T9575] vti_init_net+0x2e/0x140 [ 206.072481][ T9575] ops_init+0x1e2/0x5f0 [ 206.072494][ T9575] setup_net+0x118/0x3a0 [ 206.072506][ T9575] ? __pfx_setup_net+0x10/0x10 [ 206.072522][ T9575] copy_net_ns+0x345/0x7a0 [ 206.072537][ T9575] create_new_namespaces+0x3ea/0xac0 [ 206.072559][ T9575] unshare_nsproxy_namespaces+0xf2/0x220 [ 206.072578][ T9575] ksys_unshare+0x4a2/0xa70 [ 206.072590][ T9575] ? __pfx_ksys_unshare+0x10/0x10 [ 206.072608][ T9575] __ia32_sys_unshare+0x30/0x40 [ 206.072620][ T9575] __do_fast_syscall_32+0x13a/0x8b0 [ 206.072634][ T9575] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.072649][ T9575] do_fast_syscall_32+0x32/0x70 [ 206.072663][ T9575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.072678][ T9575] RIP: 0023:0xf706efec [ 206.072692][ T9575] Code: Unable to access opcode bytes at 0xf706efc2. [ 206.072697][ T9575] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 206.072709][ T9575] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 206.072716][ T9575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.072723][ T9575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.072729][ T9575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.072736][ T9575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.072750][ T9575] [ 206.072769][ T9575] kobject: can not set name properly! [ 206.380866][ T9586] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 206.380885][ T9587] profile_transition: name lookup ix on error [ 206.404702][ T9588] profile_transition: unconfined exec no attachment [ 206.453916][ T9592] profile_transition: unconfined exec no attachment [ 206.998763][ T66] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 207.199398][ T9603] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 207.206542][ T9603] syzkaller0: entered promiscuous mode [ 207.206565][ T9603] syzkaller0: entered allmulticast mode [ 207.576426][ T9616] netlink: 'syz.4.1055': attribute type 6 has an invalid length. [ 207.904647][ T9632] profile_transition: unconfined exec no attachment [ 207.966221][ T9629] profile_transition: unconfined exec no attachment [ 208.184845][ T9641] lo: entered promiscuous mode [ 208.196612][ T9641] tunl0: entered promiscuous mode [ 208.202156][ T9641] gre0: entered promiscuous mode [ 208.216109][ T9641] gretap0: entered promiscuous mode [ 208.222108][ T9641] erspan0: entered promiscuous mode [ 208.228184][ T9641] ip_vti0: entered promiscuous mode [ 208.233317][ T9641] ip6_vti0: entered promiscuous mode [ 208.235609][ T9641] sit0: entered promiscuous mode [ 208.244115][ T9641] ip6tnl0: entered promiscuous mode [ 208.255167][ T9641] ip6gre0: entered promiscuous mode [ 208.257206][ T9641] tipc: Resetting bearer [ 208.264183][ T9641] syz_tun: entered promiscuous mode [ 208.270931][ T9641] ip6gretap0: entered promiscuous mode [ 208.277262][ T9641] vcan0: entered promiscuous mode [ 208.285463][ T9641] bond0: entered promiscuous mode [ 208.285478][ T9641] bond_slave_0: entered promiscuous mode [ 208.285587][ T9641] bond_slave_1: entered promiscuous mode [ 208.288986][ T9641] dummy0: entered promiscuous mode [ 208.301088][ T9641] nlmon0: entered promiscuous mode [ 208.303709][ T9641] batadv0: entered promiscuous mode [ 208.308998][ T9641] vxcan0: entered promiscuous mode [ 208.311027][ T9641] vxcan1: entered promiscuous mode [ 208.315418][ T9641] veth0: entered promiscuous mode [ 208.317008][ T9641] veth1: entered promiscuous mode [ 208.332458][ T9641] wg0: entered promiscuous mode [ 208.337237][ T9641] wg1: entered promiscuous mode [ 208.339788][ T9641] wg2: entered promiscuous mode [ 208.341896][ T9641] veth0_to_bridge: entered promiscuous mode [ 208.349803][ T9641] bridge_slave_0: entered promiscuous mode [ 208.351502][ T9641] veth1_to_bridge: entered promiscuous mode [ 208.360770][ T9641] veth0_to_bond: entered promiscuous mode [ 208.368054][ T9641] veth1_to_bond: entered promiscuous mode [ 208.374509][ T9641] veth0_to_team: entered promiscuous mode [ 208.375871][ T9641] team_slave_0: entered promiscuous mode [ 208.376029][ T9641] veth0_to_batadv: entered promiscuous mode [ 208.380934][ T9641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.383509][ T9641] batadv_slave_0: entered promiscuous mode [ 208.387601][ T9641] veth1_to_batadv: entered promiscuous mode [ 208.394690][ T9641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.394725][ T9641] batadv_slave_1: entered promiscuous mode [ 208.398253][ T9641] xfrm0: entered promiscuous mode [ 208.403989][ T9641] veth0_to_hsr: entered promiscuous mode [ 208.415042][ T9641] veth1_to_hsr: entered promiscuous mode [ 208.422525][ T9641] hsr0: entered promiscuous mode [ 208.425101][ T9641] veth1_virt_wifi: entered promiscuous mode [ 208.432229][ T9641] veth0_virt_wifi: entered promiscuous mode [ 208.434980][ T9641] virt_wifi0: entered promiscuous mode [ 208.441266][ T9641] vlan0: entered promiscuous mode [ 208.445428][ T9641] vlan1: entered promiscuous mode [ 208.453122][ T9641] macvlan0: entered promiscuous mode [ 208.458249][ T9641] macvlan1: entered promiscuous mode [ 208.459428][ T9641] ipvlan0: entered promiscuous mode [ 208.459804][ T9641] ipvlan1: entered promiscuous mode [ 208.477965][ T9641] macvtap0: entered promiscuous mode [ 208.481977][ T9641] macsec0: entered promiscuous mode [ 208.484873][ T9641] geneve0: entered promiscuous mode [ 208.488160][ T9641] geneve1: entered promiscuous mode [ 208.500242][ T9641] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 208.520322][ T9641] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 208.527798][ T9641] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 208.543222][ T9641] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 208.545905][ T9641] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 208.546025][ T9641] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 208.546092][ T9641] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 208.547730][ T9641] erspan0.1: entered promiscuous mode [ 208.548508][ T9641] bond1: entered promiscuous mode [ 208.548523][ T9641] geneve2: entered promiscuous mode [ 208.554107][ T9641] veth2: entered promiscuous mode [ 208.554238][ T9641] veth3: entered promiscuous mode [ 208.569717][ T5822] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.569757][ T5822] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.569785][ T5822] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.569811][ T5822] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.608215][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 208.695176][ T42] audit: type=1800 audit(1790867299.099:491): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1074" name="remove" dev="sysfs" ino=2452 res=0 errno=0 [ 208.707570][ T42] audit: type=1800 audit(1790867299.109:492): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1074" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 209.365628][ T9672] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 209.366461][ T9672] syzkaller0: entered promiscuous mode [ 209.366474][ T9672] syzkaller0: entered allmulticast mode [ 209.491126][ T9676] FAULT_INJECTION: forcing a failure. [ 209.491126][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 209.491148][ T9676] CPU: 3 UID: 0 PID: 9676 Comm: syz.4.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.491163][ T9676] Tainted: [L]=SOFTLOCKUP [ 209.491168][ T9676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.491174][ T9676] Call Trace: [ 209.491178][ T9676] [ 209.491183][ T9676] dump_stack_lvl+0x100/0x190 [ 209.491201][ T9676] should_fail_ex.cold+0x5/0xa [ 209.491221][ T9676] should_failslab+0xc2/0x120 [ 209.491238][ T9676] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 209.491253][ T9676] ? copy_process+0x6a2/0x8380 [ 209.491267][ T9676] copy_process+0x6a2/0x8380 [ 209.491278][ T9676] ? kasan_save_stack+0x3f/0x50 [ 209.491292][ T9676] ? kasan_save_stack+0x30/0x50 [ 209.491305][ T9676] ? kasan_save_track+0x14/0x30 [ 209.491319][ T9676] ? __kasan_kmalloc+0xaa/0xb0 [ 209.491333][ T9676] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 209.491344][ T9676] ? create_io_worker+0xc6/0x5b0 [ 209.491359][ T9676] ? io_wq_enqueue+0x4d8/0x970 [ 209.491374][ T9676] ? io_queue_iowq+0x238/0x5b0 [ 209.491388][ T9676] ? io_queue_async+0x22e/0x290 [ 209.491403][ T9676] ? io_submit_sqes+0x1808/0x2480 [ 209.491419][ T9676] ? __do_fast_syscall_32+0x13a/0x8b0 [ 209.491433][ T9676] ? do_fast_syscall_32+0x32/0x70 [ 209.491449][ T9676] ? __pfx_copy_process+0x10/0x10 [ 209.491465][ T9676] ? __pfx_io_wq_worker+0x10/0x10 [ 209.491482][ T9676] create_io_thread+0xc2/0x110 [ 209.491492][ T9676] ? __pfx_create_io_thread+0x10/0x10 [ 209.491507][ T9676] ? __pfx_io_wq_worker+0x10/0x10 [ 209.491524][ T9676] ? lockdep_init_map_type+0x5c/0x250 [ 209.491542][ T9676] ? lockdep_init_map_type+0x5c/0x250 [ 209.491559][ T9676] ? __init_swait_queue_head+0xca/0x150 [ 209.491572][ T9676] create_io_worker+0x1cd/0x5b0 [ 209.491589][ T9676] io_wq_enqueue+0x4d8/0x970 [ 209.491606][ T9676] ? __pfx_io_wq_enqueue+0x10/0x10 [ 209.491622][ T9676] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 209.491638][ T9676] ? io_prep_async_work+0x3ab/0x720 [ 209.491655][ T9676] io_queue_iowq+0x238/0x5b0 [ 209.491671][ T9676] io_queue_async+0x22e/0x290 [ 209.491688][ T9676] io_submit_sqes+0x1808/0x2480 [ 209.491712][ T9676] __do_sys_io_uring_enter+0xa88/0x1b10 [ 209.491735][ T9676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.491750][ T9676] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 209.491767][ T9676] ? __fget_files+0x21f/0x3d0 [ 209.491783][ T9676] ? fput+0x7c/0x100 [ 209.491800][ T9676] ? ksys_write+0x1ac/0x250 [ 209.491813][ T9676] ? __pfx_ksys_write+0x10/0x10 [ 209.491828][ T9676] __do_fast_syscall_32+0x13a/0x8b0 [ 209.491843][ T9676] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.491857][ T9676] do_fast_syscall_32+0x32/0x70 [ 209.491871][ T9676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.491885][ T9676] RIP: 0023:0xf706efec [ 209.491898][ T9676] Code: Unable to access opcode bytes at 0xf706efc2. [ 209.491903][ T9676] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 209.491914][ T9676] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 209.491921][ T9676] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 209.491927][ T9676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.491933][ T9676] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.491940][ T9676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.491953][ T9676] [ 209.792474][ T9691] FAULT_INJECTION: forcing a failure. [ 209.792474][ T9691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.792496][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.4.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.792512][ T9691] Tainted: [L]=SOFTLOCKUP [ 209.792517][ T9691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.792524][ T9691] Call Trace: [ 209.792528][ T9691] [ 209.792533][ T9691] dump_stack_lvl+0x100/0x190 [ 209.792553][ T9691] should_fail_ex.cold+0x5/0xa [ 209.792569][ T9691] _copy_from_user+0x2e/0xd0 [ 209.792586][ T9691] __sys_bpf+0x2f5/0x4a30 [ 209.792603][ T9691] ? __pfx___sys_bpf+0x10/0x10 [ 209.792615][ T9691] ? lock_acquire+0x1d1/0x380 [ 209.792632][ T9691] ? get_pid_task+0x2a/0x250 [ 209.792645][ T9691] ? find_held_lock+0x2b/0x80 [ 209.792658][ T9691] ? get_pid_task+0xfc/0x250 [ 209.792669][ T9691] ? get_pid_task+0xfc/0x250 [ 209.792684][ T9691] ? proc_fail_nth_write+0x9f/0x220 [ 209.792698][ T9691] ? find_held_lock+0x2b/0x80 [ 209.792714][ T9691] ? rcu_read_lock_any_held+0x6a/0x90 [ 209.792728][ T9691] ? find_held_lock+0x2b/0x80 [ 209.792741][ T9691] ? ksys_write+0x190/0x250 [ 209.792754][ T9691] ? ksys_write+0x190/0x250 [ 209.792766][ T9691] ? lock_acquire+0x1d1/0x380 [ 209.792797][ T9691] ? fput+0x7c/0x100 [ 209.792815][ T9691] ? __ia32_sys_bpf+0xcc/0x170 [ 209.792827][ T9691] __ia32_sys_bpf+0xcc/0x170 [ 209.792841][ T9691] ? __do_fast_syscall_32+0xb3/0x8b0 [ 209.792858][ T9691] __do_fast_syscall_32+0x13a/0x8b0 [ 209.792871][ T9691] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.792885][ T9691] do_fast_syscall_32+0x32/0x70 [ 209.792915][ T9691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.792930][ T9691] RIP: 0023:0xf706efec [ 209.792943][ T9691] Code: Unable to access opcode bytes at 0xf706efc2. [ 209.792948][ T9691] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 209.792960][ T9691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 209.792967][ T9691] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.792974][ T9691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.792980][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.792987][ T9691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.793002][ T9691] [ 209.878500][ T9695] netlink: 'syz.4.1087': attribute type 11 has an invalid length. [ 209.882218][ T9696] profile_transition: unconfined exec no attachment [ 209.902337][ T9697] profile_transition: unconfined exec no attachment [ 210.492440][ T42] audit: type=1800 audit(1790867300.899:493): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171919 res=0 errno=0 [ 210.585774][ T9716] FAULT_INJECTION: forcing a failure. [ 210.585774][ T9716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.585799][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.1.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.585815][ T9716] Tainted: [L]=SOFTLOCKUP [ 210.585820][ T9716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.585827][ T9716] Call Trace: [ 210.585832][ T9716] [ 210.585837][ T9716] dump_stack_lvl+0x100/0x190 [ 210.585857][ T9716] should_fail_ex.cold+0x5/0xa [ 210.585873][ T9716] _copy_from_iter+0x1f4/0x1690 [ 210.585895][ T9716] ? __pfx__copy_from_iter+0x10/0x10 [ 210.585913][ T9716] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 210.585937][ T9716] ? lock_acquire+0x1d1/0x380 [ 210.585957][ T9716] copy_page_from_iter+0x238/0x300 [ 210.585977][ T9716] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 210.586002][ T9716] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 210.586023][ T9716] ? __lock_acquire+0x5c0/0x1f40 [ 210.586047][ T9716] ? aa_file_perm+0x197/0x14d0 [ 210.586063][ T9716] ? find_held_lock+0x2b/0x80 [ 210.586079][ T9716] tun_get_user+0x1674/0x3cc0 [ 210.586103][ T9716] ? __lock_acquire+0x5c0/0x1f40 [ 210.586120][ T9716] ? __pfx_tun_get_user+0x10/0x10 [ 210.586140][ T9716] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 210.586158][ T9716] ? find_held_lock+0x2b/0x80 [ 210.586207][ T9716] ? tun_get+0x191/0x370 [ 210.586224][ T9716] ? tun_get+0x191/0x370 [ 210.586244][ T9716] tun_chr_write_iter+0xdc/0x200 [ 210.586265][ T9716] vfs_write+0x6af/0x1050 [ 210.586279][ T9716] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 210.586300][ T9716] ? __pfx_vfs_write+0x10/0x10 [ 210.586313][ T9716] ? find_held_lock+0x2b/0x80 [ 210.586337][ T9716] ksys_write+0x12a/0x250 [ 210.586351][ T9716] ? __pfx_ksys_write+0x10/0x10 [ 210.586369][ T9716] do_int80_emulation+0x166/0x650 [ 210.586388][ T9716] asm_int80_emulation+0x1a/0x20 [ 210.586400][ T9716] RIP: 0023:0xf71c75ab [ 210.586410][ T9716] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 210.586428][ T9716] RSP: 002b:00000000f548644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 210.586440][ T9716] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 210.586448][ T9716] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.586455][ T9716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.586462][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.586468][ T9716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.586483][ T9716] [ 210.684020][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 210.764199][ T9731] profile_transition: unconfined exec no attachment [ 210.770973][ T9729] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 210.770991][ T9729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1096'. [ 210.795920][ T9732] profile_transition: unconfined exec no attachment [ 210.859541][ T9735] profile_transition: 1 callbacks suppressed [ 210.859557][ T9735] profile_transition: unconfined exec no attachment [ 211.227310][ T66] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 211.338218][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1101'. [ 211.886301][ T42] audit: type=1800 audit(1790867302.289:494): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171938 res=0 errno=0 [ 211.983519][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 212.175706][ T42] audit: type=1800 audit(1790867302.579:495): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1109" name="add_local_port" dev="sysfs" ino=22671 res=0 errno=0 [ 212.188514][ T9772] FAULT_INJECTION: forcing a failure. [ 212.188514][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 212.188548][ T9772] CPU: 3 UID: 0 PID: 9772 Comm: syz.4.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.188575][ T9772] Tainted: [L]=SOFTLOCKUP [ 212.188582][ T9772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.188594][ T9772] Call Trace: [ 212.188601][ T9772] [ 212.188608][ T9772] dump_stack_lvl+0x100/0x190 [ 212.188640][ T9772] should_fail_ex.cold+0x5/0xa [ 212.188665][ T9772] should_failslab+0xc2/0x120 [ 212.188693][ T9772] __kvmalloc_node_noprof+0x113/0x9b0 [ 212.188720][ T9772] ? bpf_prog_pack_alloc+0x1a6/0x950 [ 212.188749][ T9772] ? bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 212.188778][ T9772] bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 212.188799][ T9772] ? __pfx_jit_fill_hole+0x10/0x10 [ 212.188833][ T9772] bpf_int_jit_compile+0x526/0x1820 [ 212.188865][ T9772] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 212.188904][ T9772] __bpf_prog_select_runtime+0x3df/0x9f0 [ 212.188926][ T9772] ? __asan_memcpy+0x3c/0x60 [ 212.188950][ T9772] bpf_prepare_filter+0xd32/0x11e0 [ 212.188973][ T9772] ? __pfx_seccomp_check_filter+0x10/0x10 [ 212.188995][ T9772] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 212.189021][ T9772] ? __asan_memcpy+0x3c/0x60 [ 212.189043][ T9772] ? kmemdup_noprof+0x49/0x60 [ 212.189087][ T9772] bpf_prog_create_from_user+0x1df/0x2e0 [ 212.189113][ T9772] ? __pfx_seccomp_check_filter+0x10/0x10 [ 212.189137][ T9772] do_seccomp+0x7f7/0x2730 [ 212.189168][ T9772] ? __pfx_do_seccomp+0x10/0x10 [ 212.189194][ T9772] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 212.189230][ T9772] __do_fast_syscall_32+0x13a/0x8b0 [ 212.189259][ T9772] do_fast_syscall_32+0x32/0x70 [ 212.189283][ T9772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.189306][ T9772] RIP: 0023:0xf706efec [ 212.189328][ T9772] Code: Unable to access opcode bytes at 0xf706efc2. [ 212.189337][ T9772] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 212.189357][ T9772] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 212.189370][ T9772] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.189382][ T9772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.189394][ T9772] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.189407][ T9772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.189433][ T9772] [ 212.987515][ T9783] fuse: fd is not a fuse device [ 213.102632][ T9788] profile_transition: unconfined exec no attachment [ 213.104793][ T9787] profile_transition: unconfined exec no attachment [ 213.524301][ T9792] netlink: 'syz.2.1114': attribute type 21 has an invalid length. [ 213.524327][ T9792] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.866226][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 213.866241][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 213.895320][ T9803] lo: entered promiscuous mode [ 213.907685][ T9803] tunl0: entered promiscuous mode [ 213.909379][ T9803] gre0: entered promiscuous mode [ 213.922776][ T9803] gretap0: entered promiscuous mode [ 213.927225][ T9803] erspan0: entered promiscuous mode [ 213.935283][ T9803] ip_vti0: entered promiscuous mode [ 213.936311][ T9803] ip6_vti0: entered promiscuous mode [ 213.937656][ T9803] sit0: entered promiscuous mode [ 213.939844][ T9803] ip6tnl0: entered promiscuous mode [ 213.943778][ T9803] ip6gre0: entered promiscuous mode [ 213.960313][ T9803] syz_tun: entered promiscuous mode [ 213.964584][ T9803] ip6gretap0: entered promiscuous mode [ 213.968240][ T9803] vcan0: entered promiscuous mode [ 213.973643][ T9803] bond0: entered promiscuous mode [ 213.973656][ T9803] bond_slave_0: entered promiscuous mode [ 213.973762][ T9803] bond_slave_1: entered promiscuous mode [ 213.978748][ T9803] team0: entered promiscuous mode [ 213.978763][ T9803] team_slave_0: entered promiscuous mode [ 213.978860][ T9803] team_slave_1: entered promiscuous mode [ 213.990227][ T9803] dummy0: entered promiscuous mode [ 214.007788][ T9803] nlmon0: entered promiscuous mode [ 214.011287][ T9803] batadv0: entered promiscuous mode [ 214.017238][ T9803] veth0: entered promiscuous mode [ 214.022976][ T9803] veth1: entered promiscuous mode [ 214.036194][ T9803] wg0: entered promiscuous mode [ 214.043003][ T9803] wg1: entered promiscuous mode [ 214.046754][ T9803] wg2: entered promiscuous mode [ 214.050477][ T9803] veth0_to_bridge: entered promiscuous mode [ 214.061795][ T9803] bridge_slave_0: entered promiscuous mode [ 214.066216][ T9803] veth1_to_bridge: entered promiscuous mode [ 214.077105][ T9803] veth0_to_bond: entered promiscuous mode [ 214.089909][ T9803] veth1_to_bond: entered promiscuous mode [ 214.098855][ T9803] veth0_to_team: entered promiscuous mode [ 214.108236][ T9803] veth1_to_team: entered promiscuous mode [ 214.115741][ T9803] veth0_to_batadv: entered promiscuous mode [ 214.117893][ T9803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.334412][ T9803] batadv_slave_0: entered promiscuous mode [ 214.337700][ T9803] veth1_to_batadv: entered promiscuous mode [ 214.346654][ T9803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.346690][ T9803] batadv_slave_1: entered promiscuous mode [ 214.357723][ T9803] xfrm0: entered promiscuous mode [ 214.368372][ T9803] veth0_to_hsr: entered promiscuous mode [ 214.377621][ T9803] veth1_to_hsr: entered promiscuous mode [ 214.387223][ T9803] hsr0: entered promiscuous mode [ 214.392198][ T9803] veth1_virt_wifi: entered promiscuous mode [ 214.394893][ T9803] veth0_virt_wifi: entered promiscuous mode [ 214.397623][ T9803] virt_wifi0: entered promiscuous mode [ 214.414812][ T9803] vlan0: entered promiscuous mode [ 214.422281][ T9803] vlan1: entered promiscuous mode [ 214.426726][ T9803] macvlan0: entered promiscuous mode [ 214.443630][ T9803] macvlan1: entered promiscuous mode [ 214.447135][ T9811] 9p: Bad value for 'rfdno' [ 214.447193][ T9803] ipvlan0: entered promiscuous mode [ 214.447294][ T9803] ipvlan1: entered promiscuous mode [ 214.472216][ T9803] macvtap0: entered promiscuous mode [ 214.474210][ T9803] macsec0: entered promiscuous mode [ 214.478861][ T9803] geneve0: entered promiscuous mode [ 214.492026][ T9803] geneve1: entered promiscuous mode [ 214.504167][ T42] audit: type=1800 audit(1790867304.909:496): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.1120" name="file1" dev="tmpfs" ino=1595 res=0 errno=0 [ 214.504187][ T9803] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 214.508300][ T9803] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 214.521977][ T9803] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 214.523554][ T9803] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 214.523643][ T9803] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 214.523733][ T9803] netdevsim netdevsim120 eth0: entered promiscuous mode [ 214.524000][ T9803] bridge1: entered promiscuous mode [ 214.525159][ T9803] macsec1: entered promiscuous mode [ 214.526476][ T9803] erspan0.1: entered promiscuous mode [ 214.526654][ T9803] ip6tnl1: entered promiscuous mode [ 214.547164][ T9803] bond1: entered promiscuous mode [ 214.547807][ T9803] syztnl1: entered promiscuous mode [ 214.552221][ T9803] bond2: entered promiscuous mode [ 214.552685][ T9803] bareudp0: entered promiscuous mode [ 214.558818][ T9815] gre1: entered promiscuous mode [ 214.568050][ T9815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.573139][ T5822] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.573169][ T5822] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.573190][ T5822] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.573210][ T5822] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.573237][ T5822] netdevsim netdevsim120 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.783721][ T42] audit: type=1800 audit(1790867305.189:497): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.1128" name="sequencer2" dev="tmpfs" ino=1612 res=0 errno=0 [ 215.446925][ T42] audit: type=1800 audit(1790867305.849:498): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34691 res=0 errno=0 [ 215.457175][ T42] audit: type=1800 audit(1790867305.859:499): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34714 res=0 errno=0 [ 215.680157][ T6058] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 215.831344][ T6058] usb 9-1: unable to get BOS descriptor or descriptor too short [ 215.831838][ T6058] usb 9-1: not running at top speed; connect to a high speed hub [ 215.831864][ T6058] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 215.832801][ T6058] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 215.832822][ T6058] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 215.832839][ T6058] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 215.832855][ T6058] usb 9-1: config 14 has no interface number 0 [ 215.832869][ T6058] usb 9-1: config 14 has no interface number 1 [ 215.832927][ T6058] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 215.832948][ T6058] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 215.832969][ T6058] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.832991][ T6058] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.833009][ T6058] usb 9-1: config 14 interface 57 has no altsetting 0 [ 215.833025][ T6058] usb 9-1: config 14 interface 228 has no altsetting 0 [ 215.834935][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.834955][ T6058] usb 9-1: Product: syz [ 215.834968][ T6058] usb 9-1: Manufacturer: syz [ 215.834981][ T6058] usb 9-1: SerialNumber: syz [ 215.863638][ T42] audit: type=1800 audit(1790867306.269:500): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172942 res=0 errno=0 [ 215.866649][ T42] audit: type=1800 audit(1790867306.269:501): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=172974 res=0 errno=0 [ 215.867249][ T42] audit: type=1800 audit(1790867306.269:502): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=172949 res=0 errno=0 [ 215.867932][ T42] audit: type=1800 audit(1790867306.269:503): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=172950 res=0 errno=0 [ 215.908380][ T66] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 216.194793][ T42] audit: type=1800 audit(1790867306.599:504): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1138" name="remove" dev="sysfs" ino=2452 res=0 errno=0 [ 216.211058][ T42] audit: type=1800 audit(1790867306.619:505): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1138" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 216.352724][ T6058] legousbtower 9-1:14.57: interrupt endpoints not found [ 216.755290][ T6058] legousbtower 9-1:14.228: get version request failed: -121 [ 216.755420][ T6058] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 216.767068][ T42] audit: type=1800 audit(1790867307.169:506): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=172971 res=0 errno=0 [ 216.767129][ T42] audit: type=1800 audit(1790867307.169:507): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=172972 res=0 errno=0 [ 216.767171][ T42] audit: type=1800 audit(1790867307.169:508): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=172951 res=0 errno=0 [ 216.779941][ T42] audit: type=1800 audit(1790867307.189:509): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=172973 res=0 errno=0 [ 216.958636][ T854] usb 9-1: USB disconnect, device number 2 [ 217.319298][ T9892] profile_transition: unconfined exec no attachment [ 217.342829][ T9895] profile_transition: unconfined exec no attachment [ 217.515166][ T9902] syzkaller0: entered promiscuous mode [ 217.515188][ T9902] syzkaller0: entered allmulticast mode [ 217.899102][ T854] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 217.932371][ T9939] profile_transition: unconfined exec no attachment [ 217.932423][ T9940] profile_transition: unconfined exec no attachment [ 217.951556][ T9941] profile_transition: unconfined exec no attachment [ 217.959081][ T9942] profile_transition: unconfined exec no attachment [ 218.052209][ T854] usb 9-1: Using ep0 maxpacket: 32 [ 218.053538][ T854] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 218.054704][ T854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.058726][ T854] usb 9-1: config 0 descriptor?? [ 218.067319][ T854] as10x_usb: device has been detected [ 218.067843][ T854] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 218.089693][ T854] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 218.127915][ T854] as10x_usb: error during firmware upload part1 [ 218.128449][ T854] Registered device nBox DVB-T Dongle [ 218.372571][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1159'. [ 218.452600][ T9905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.482184][ T9905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.671092][ T9905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.671867][ T9905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.722429][ T9905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.722905][ T9905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.780030][ T9905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.781963][ T9905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.823333][ T9905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.925500][ T854] usb 9-1: USB disconnect, device number 3 [ 218.954257][ T854] Unregistered device nBox DVB-T Dongle [ 218.954979][ T854] as10x_usb: device has been disconnected [ 218.997185][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 201 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 219.322156][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 219.337855][T10068] ovs-dp0: entered promiscuous mode [ 219.359872][T10069] ovs-dp0: left promiscuous mode [ 220.038920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.479372][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 220.567208][T10087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 220.721043][ T66] Bluetooth: hci2: command 0x2016 tx timeout [ 220.811385][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.811450][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 221.028831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.231602][T10091] ptrace attach of ""[10094] was attempted by "/syz-executor exec"[10091] [ 221.580112][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 221.580127][ T42] audit: type=1800 audit(1790867311.980:524): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1169" name="remove" dev="sysfs" ino=2452 res=0 errno=0 [ 221.683775][ T42] audit: type=1800 audit(1790867312.090:525): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1169" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 222.560222][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 222.799005][ T66] Bluetooth: hci2: command 0x2016 tx timeout [ 222.852018][ T42] audit: type=1800 audit(1790867313.260:526): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16181 res=0 errno=0 [ 222.879117][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 222.879155][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.898947][ T42] audit: type=1800 audit(1790867313.300:527): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16181 res=0 errno=0 [ 222.927383][T10105] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 222.954538][T10110] profile_transition: unconfined exec no attachment [ 222.992031][T10112] profile_transition: unconfined exec no attachment [ 223.696163][T10124] profile_transition: unconfined exec no attachment [ 223.728787][T10125] profile_transition: unconfined exec no attachment [ 224.173838][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 224.192002][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 225.663872][T10149] Can't find a SQUASHFS superblock on nullb0 [ 226.835298][T10160] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.105086][ T42] audit: type=1800 audit(1790867317.510:528): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1190" name="remove" dev="sysfs" ino=2452 res=0 errno=0 [ 227.116548][ T42] audit: type=1800 audit(1790867317.520:529): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1190" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 227.314247][ T66] Bluetooth: hci4: unexpected event for opcode 0x080e [ 227.381735][T10171] profile_transition: unconfined exec no attachment [ 227.402445][T10172] profile_transition: unconfined exec no attachment [ 227.569723][T10180] profile_transition: unconfined exec no attachment [ 227.590405][T10181] profile_transition: unconfined exec no attachment [ 227.865987][ T42] audit: type=1326 audit(1790867318.270:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10185 comm="syz.2.1197" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 228.489034][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 228.534965][T10200] profile_transition: unconfined exec no attachment [ 228.573942][T10201] profile_transition: unconfined exec no attachment [ 228.949972][ T42] audit: type=1800 audit(1790867319.360:531): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1205" name="remove" dev="sysfs" ino=2452 res=0 errno=0 [ 228.974582][ T42] audit: type=1800 audit(1790867319.380:532): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1205" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 229.605608][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.178458][T10231] profile_transition: unconfined exec no attachment [ 231.228603][T10232] profile_transition: unconfined exec no attachment [ 232.379281][ T66] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 233.047560][T10250] profile_transition: name lookup ix on error [ 233.163089][T10248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1217'. [ 233.272553][T10254] profile_transition: unconfined exec no attachment [ 233.485497][T10258] xt_cluster: node mask cannot exceed total number of nodes [ 234.243963][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 234.555105][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'. [ 234.882043][T10284] fuse: fd is not a fuse device [ 235.987420][T10305] netlink: 'syz.2.1238': attribute type 8 has an invalid length. [ 236.010687][T10305] netlink: 4808 bytes leftover after parsing attributes in process `syz.2.1238'. [ 236.073538][T10300] ptrace attach of ""[10309] was attempted by "/syz-executor exec"[10300] [ 236.220295][ T42] audit: type=1107 audit(1790867326.620:533): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined msg='7!¸@EÖoâð¶[ÓÖ—ò=•|ÌKÉÝïúqmˆÄÿå† â c|…^½ŒBg´JÄ©–çx¨ˆn`\UÍ„·r­ì”]ý˜Us0¿çL#˜K.uTº[®}VGq‚Í©F3Ù·X» >oBT62œ¦¾ä–`hìyIKÆ]NU”wFPÎo¹ì”b§ÿ¹ u' [ 236.253002][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.328104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 236.427989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 238.381015][T10329] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 238.397266][T10330] profile_transition: unconfined exec no attachment [ 238.451355][T10332] profile_transition: unconfined exec no attachment [ 239.487968][ T5823] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 239.637838][ T5823] usb 9-1: Using ep0 maxpacket: 16 [ 239.638352][ T5823] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.639752][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.639768][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.639779][ T5823] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.639801][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.641754][ T5823] usb 9-1: config 0 descriptor?? [ 239.641858][ T42] audit: type=1800 audit(1790867330.051:534): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174700 res=0 errno=0 [ 239.643071][ T42] audit: type=1800 audit(1790867330.051:535): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=174729 res=0 errno=0 [ 239.644493][ T42] audit: type=1800 audit(1790867330.051:536): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=174707 res=0 errno=0 [ 239.644520][ T42] audit: type=1800 audit(1790867330.051:537): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=174708 res=0 errno=0 [ 239.644540][ T42] audit: type=1800 audit(1790867330.051:538): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=174709 res=0 errno=0 [ 239.750256][ T42] audit: type=1800 audit(1790867330.161:539): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174749 res=0 errno=0 [ 239.969376][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1252'. [ 239.977619][T10352] profile_transition: unconfined exec no attachment [ 240.086889][ T42] audit: type=1800 audit(1790867330.491:540): pid=10342 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1249" name="run" dev="sysfs" ino=1000 res=0 errno=0 [ 240.156043][ T5823] usbhid 9-1:0.0: can't add hid device: -71 [ 240.156108][ T5823] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 240.164485][ T5823] usb 9-1: USB disconnect, device number 4 [ 240.299926][T10354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.373822][T10357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.374313][T10359] fuse: fd is not a fuse device [ 240.706807][T10367] FAULT_INJECTION: forcing a failure. [ 240.706807][T10367] name failslab, interval 1, probability 0, space 0, times 0 [ 240.706839][T10367] CPU: 3 UID: 0 PID: 10367 Comm: syz.4.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.706862][T10367] Tainted: [L]=SOFTLOCKUP [ 240.706868][T10367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.706878][T10367] Call Trace: [ 240.706884][T10367] [ 240.706891][T10367] dump_stack_lvl+0x100/0x190 [ 240.706919][T10367] should_fail_ex.cold+0x5/0xa [ 240.706939][T10367] ? __netlink_lookup+0x652/0x900 [ 240.706965][T10367] should_failslab+0xc2/0x120 [ 240.706991][T10367] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.707013][T10367] ? skb_clone+0x190/0x400 [ 240.707035][T10367] skb_clone+0x190/0x400 [ 240.707052][T10367] netlink_deliver_tap+0xaed/0xcc0 [ 240.707080][T10367] netlink_unicast+0x62b/0x850 [ 240.707108][T10367] ? __pfx_netlink_unicast+0x10/0x10 [ 240.707139][T10367] netlink_sendmsg+0x8b0/0xda0 [ 240.707167][T10367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.707193][T10367] ? apparmor_socket_sendmsg+0x165/0x280 [ 240.707223][T10367] ____sys_sendmsg+0xa4d/0xbe0 [ 240.707263][T10367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.707289][T10367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.707320][T10367] ___sys_sendmsg+0x190/0x1e0 [ 240.707344][T10367] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.707378][T10367] ? find_held_lock+0x2b/0x80 [ 240.707415][T10367] __sys_sendmsg+0x160/0x210 [ 240.707432][T10367] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.707455][T10367] ? __pfx_ksys_write+0x10/0x10 [ 240.707479][T10367] __do_fast_syscall_32+0x13a/0x8b0 [ 240.707501][T10367] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.707522][T10367] do_fast_syscall_32+0x32/0x70 [ 240.707543][T10367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.707564][T10367] RIP: 0023:0xf706efec [ 240.707591][T10367] Code: Unable to access opcode bytes at 0xf706efc2. [ 240.707599][T10367] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 240.707617][T10367] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 240.707629][T10367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.707639][T10367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.707648][T10367] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.707658][T10367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.707681][T10367] [ 241.834900][ T42] audit: type=1800 audit(1790867332.241:541): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174802 res=0 errno=0 [ 241.836042][ T42] audit: type=1800 audit(1790867332.241:542): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174817 res=0 errno=0 [ 241.902575][T10385] profile_transition: unconfined exec no attachment [ 242.145581][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1275'. [ 242.261181][T10397] profile_transition: unconfined exec no attachment [ 242.315840][ T42] audit: type=1800 audit(1790867332.721:543): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34541 res=0 errno=0 [ 242.320051][ T42] audit: type=1800 audit(1790867332.721:544): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34564 res=0 errno=0 [ 242.547749][ T5824] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.697741][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 242.698357][ T5824] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.699257][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.699273][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.699284][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.699304][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.701218][ T5824] usb 6-1: config 0 descriptor?? [ 242.704332][ T42] audit: type=1800 audit(1790867333.111:545): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175388 res=0 errno=0 [ 242.708999][ T42] audit: type=1800 audit(1790867333.121:546): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=175417 res=0 errno=0 [ 242.713263][ T42] audit: type=1800 audit(1790867333.121:547): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=175395 res=0 errno=0 [ 242.713305][ T42] audit: type=1800 audit(1790867333.121:548): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=175396 res=0 errno=0 [ 242.713400][ T42] audit: type=1800 audit(1790867333.121:549): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=175397 res=0 errno=0 [ 242.719251][ T42] audit: type=1800 audit(1790867333.131:550): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175437 res=0 errno=0 [ 242.875601][ T66] Bluetooth: hci1: unexpected event for opcode 0x080e [ 243.056629][T10411] profile_transition: unconfined exec no attachment [ 243.084391][T10413] profile_transition: unconfined exec no attachment [ 243.563270][ T5824] usbhid 6-1:0.0: can't add hid device: -71 [ 243.563344][ T5824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 243.566746][ T5824] usb 6-1: USB disconnect, device number 13 [ 244.156865][T10434] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 244.876985][T10448] trusted_key: encrypted_key: insufficient parameters specified [ 244.882566][T10450] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 244.898204][T10450] bond2: entered promiscuous mode [ 244.899196][T10450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.932928][T10450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.933238][T10450] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 244.933256][T10450] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 244.940898][T10450] bond2: (slave wireguard0): making interface the new active one [ 244.940916][T10450] wireguard0: entered promiscuous mode [ 244.941811][T10455] profile_transition: unconfined exec no attachment [ 244.952079][T10450] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 244.964328][T10458] profile_transition: unconfined exec no attachment [ 245.072672][T10460] profile_transition: unconfined exec no attachment [ 245.099091][T10461] profile_transition: unconfined exec no attachment [ 245.160583][T10466] profile_transition: unconfined exec no attachment [ 245.194114][T10470] profile_transition: unconfined exec no attachment [ 245.229958][T10454] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 245.230094][T10454] net_ratelimit: 747 callbacks suppressed [ 245.230125][T10454] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 245.265229][T10468] binder: transaction release 19 bad handle 1, ret = -22 [ 245.420972][T10479] profile_transition: unconfined exec no attachment [ 245.483980][T10485] profile_transition: unconfined exec no attachment [ 245.487058][T10483] MINIX-fs: unable to read superblock [ 245.496320][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 245.516291][T10487] profile_transition: unconfined exec no attachment [ 245.666065][T10490] profile_transition: unconfined exec no attachment [ 246.109274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 246.127443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.137450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.287566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.368441][T10495] FAULT_INJECTION: forcing a failure. [ 246.368441][T10495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.368465][T10495] CPU: 3 UID: 0 PID: 10495 Comm: syz.4.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.368480][T10495] Tainted: [L]=SOFTLOCKUP [ 246.368485][T10495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.368492][T10495] Call Trace: [ 246.368496][T10495] [ 246.368501][T10495] dump_stack_lvl+0x100/0x190 [ 246.368521][T10495] should_fail_ex.cold+0x5/0xa [ 246.368537][T10495] _copy_from_user+0x2e/0xd0 [ 246.368561][T10495] get_compat_msghdr+0xb3/0x480 [ 246.368576][T10495] ? __pfx_get_compat_msghdr+0x10/0x10 [ 246.368592][T10495] ? _kstrtoull+0x144/0x200 [ 246.368604][T10495] ? __pfx__kstrtoull+0x10/0x10 [ 246.368617][T10495] ___sys_sendmsg+0x1b6/0x1e0 [ 246.368633][T10495] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.368648][T10495] ? __lock_acquire+0x5c0/0x1f40 [ 246.368670][T10495] ? __fget_files+0x34/0x3d0 [ 246.368695][T10495] __sys_sendmmsg+0x309/0x440 [ 246.368708][T10495] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.368719][T10495] ? find_held_lock+0x2b/0x80 [ 246.368736][T10495] ? __mutex_unlock_slowpath+0x35d/0x930 [ 246.368758][T10495] ? fput+0x7c/0x100 [ 246.368773][T10495] ? ksys_write+0x1ac/0x250 [ 246.368789][T10495] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 246.368804][T10495] ? lockdep_hardirqs_on+0x7d/0x110 [ 246.368832][T10495] __do_fast_syscall_32+0x13a/0x8b0 [ 246.368846][T10495] ? lockdep_hardirqs_on+0x7d/0x110 [ 246.368860][T10495] do_fast_syscall_32+0x32/0x70 [ 246.368875][T10495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.368890][T10495] RIP: 0023:0xf706efec [ 246.368904][T10495] Code: Unable to access opcode bytes at 0xf706efc2. [ 246.368909][T10495] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 246.368921][T10495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 246.368929][T10495] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.368935][T10495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.368942][T10495] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.368948][T10495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.368962][T10495] [ 247.787934][T10517] nbd: illegal input index 13872787 [ 247.966015][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 248.086140][T10535] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2147484160 (only 8 groups) [ 248.185763][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 248.230585][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 248.230606][ T42] audit: type=1326 audit(1790867338.641:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.230834][ T42] audit: type=1326 audit(1790867338.641:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.235699][ T42] audit: type=1326 audit(1790867338.641:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.235901][ T42] audit: type=1326 audit(1790867338.641:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.236099][ T42] audit: type=1326 audit(1790867338.641:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.238361][ T42] audit: type=1326 audit(1790867338.641:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.239721][ T42] audit: type=1326 audit(1790867338.651:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.239908][ T42] audit: type=1326 audit(1790867338.651:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.242132][ T42] audit: type=1326 audit(1790867338.651:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 248.242177][ T42] audit: type=1326 audit(1790867338.651:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10543 comm="syz.2.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 248.390794][T10546] syz.2.1315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.451713][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1315'. [ 248.830034][T10557] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.830089][T10557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.397298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.437241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.970121][ T66] Bluetooth: hci1: unexpected event for opcode 0x080e [ 250.003258][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 250.028195][T10591] fuse: Bad value for 'fd' [ 250.043959][T10591] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 250.044024][T10591] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 250.044155][T10591] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 250.164439][T10596] FAULT_INJECTION: forcing a failure. [ 250.164439][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 250.164496][T10596] CPU: 3 UID: 0 PID: 10596 Comm: syz.1.1331 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.164512][T10596] Tainted: [L]=SOFTLOCKUP [ 250.164516][T10596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.164522][T10596] Call Trace: [ 250.164527][T10596] [ 250.164532][T10596] dump_stack_lvl+0x100/0x190 [ 250.164551][T10596] should_fail_ex.cold+0x5/0xa [ 250.164568][T10596] should_failslab+0xc2/0x120 [ 250.164585][T10596] __kmalloc_noprof+0xfc/0x840 [ 250.164599][T10596] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 250.164618][T10596] kernfs_fop_write_iter+0x26a/0x5f0 [ 250.164631][T10596] vfs_write+0x6af/0x1050 [ 250.164645][T10596] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 250.164658][T10596] ? __pfx_vfs_write+0x10/0x10 [ 250.164670][T10596] ? find_held_lock+0x2b/0x80 [ 250.164692][T10596] ksys_write+0x12a/0x250 [ 250.164705][T10596] ? __pfx_ksys_write+0x10/0x10 [ 250.164717][T10596] ? ksys_write+0x1ac/0x250 [ 250.164730][T10596] ? __pfx_ksys_write+0x10/0x10 [ 250.164746][T10596] __do_fast_syscall_32+0x13a/0x8b0 [ 250.164760][T10596] ? lockdep_hardirqs_on+0x7d/0x110 [ 250.164774][T10596] do_fast_syscall_32+0x32/0x70 [ 250.164788][T10596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.164802][T10596] RIP: 0023:0xf7fc7fec [ 250.164814][T10596] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 250.164819][T10596] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 250.164830][T10596] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 250.164837][T10596] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.164843][T10596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.164850][T10596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 250.164856][T10596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.164870][T10596] [ 250.246906][T10603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 250.342394][T10608] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 250.342423][T10608] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 250.342449][T10608] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 250.342468][T10608] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 250.342480][T10608] page dumped because: unmovable page [ 250.342490][T10608] page_owner tracks the page as allocated [ 250.342498][T10608] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 1, tgid 1 (swapper/0), ts 8361162109 [ 250.342523][T10608] post_alloc_hook+0xfd/0x120 [ 250.342546][T10608] get_page_from_freelist+0x110d/0x35d0 [ 250.342568][T10608] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 250.342591][T10608] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 250.342614][T10608] __kasan_populate_vmalloc+0xf0/0x210 [ 250.342638][T10608] alloc_vmap_area+0x95d/0x2bb0 [ 250.342661][T10608] __get_vm_area_node+0x1ed/0x350 [ 250.342685][T10608] __vmalloc_node_range_noprof+0x268/0x1420 [ 250.342710][T10608] __vmalloc_node_noprof+0xad/0xf0 [ 250.342736][T10608] tpg_alloc+0xbd/0x9b0 [ 250.342755][T10608] vivid_probe.cold+0x2166/0x921e [ 250.342778][T10608] platform_probe+0x106/0x1d0 [ 250.342802][T10608] really_probe+0x241/0xa60 [ 250.342827][T10608] __driver_probe_device+0x210/0x460 [ 250.342855][T10608] driver_probe_device+0x4a/0x140 [ 250.342883][T10608] __driver_attach+0x21f/0x5b0 [ 250.342911][T10608] page_owner free stack trace missing [ 250.634309][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1337'. [ 250.713062][T10618] profile_transition: 6 callbacks suppressed [ 250.713190][T10618] profile_transition: unconfined exec no attachment [ 252.293564][T10633] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 252.293591][T10633] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 252.293605][T10633] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 253.493517][T10643] profile_transition: unconfined exec no attachment [ 253.575624][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 253.695325][T10648] FAULT_INJECTION: forcing a failure. [ 253.695325][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 253.695349][T10648] CPU: 2 UID: 0 PID: 10648 Comm: syz.4.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.695365][T10648] Tainted: [L]=SOFTLOCKUP [ 253.695369][T10648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.695375][T10648] Call Trace: [ 253.695379][T10648] [ 253.695384][T10648] dump_stack_lvl+0x100/0x190 [ 253.695404][T10648] should_fail_ex.cold+0x5/0xa [ 253.695419][T10648] should_failslab+0xc2/0x120 [ 253.695436][T10648] __kmalloc_noprof+0xfc/0x840 [ 253.695449][T10648] ? rcu_is_watching+0x13/0xc0 [ 253.695462][T10648] ? tomoyo_realpath_from_path+0xb6/0x690 [ 253.695479][T10648] tomoyo_realpath_from_path+0xb6/0x690 [ 253.695495][T10648] tomoyo_path_number_perm+0x23c/0x580 [ 253.695507][T10648] ? tomoyo_path_number_perm+0x22e/0x580 [ 253.695519][T10648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.695531][T10648] ? get_pid_task+0x106/0x250 [ 253.695547][T10648] ? __lock_acquire+0x5c0/0x1f40 [ 253.695569][T10648] ? __fget_files+0x34/0x3d0 [ 253.695601][T10648] ? find_held_lock+0x2b/0x80 [ 253.695614][T10648] ? __fget_files+0x215/0x3d0 [ 253.695626][T10648] ? hook_file_ioctl_common+0x140/0x440 [ 253.695638][T10648] ? __fget_files+0x215/0x3d0 [ 253.695654][T10648] ? __fget_files+0x21f/0x3d0 [ 253.695669][T10648] security_file_ioctl_compat+0xd3/0x230 [ 253.695682][T10648] __ia32_compat_sys_ioctl+0xc2/0x360 [ 253.695697][T10648] __do_fast_syscall_32+0x13a/0x8b0 [ 253.695712][T10648] ? lockdep_hardirqs_on+0x7d/0x110 [ 253.695726][T10648] do_fast_syscall_32+0x32/0x70 [ 253.695740][T10648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.695755][T10648] RIP: 0023:0xf706efec [ 253.695767][T10648] Code: Unable to access opcode bytes at 0xf706efc2. [ 253.695779][T10648] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 253.695796][T10648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 253.695806][T10648] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.695815][T10648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.695824][T10648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.695833][T10648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.695854][T10648] [ 253.696010][T10648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.844122][T10648] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 253.844157][T10648] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 253.844171][T10648] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 253.881328][T10636] ptrace attach of ""[10649] was attempted by "/syz-executor exec"[10636] [ 253.981781][ T66] Bluetooth: hci3: unexpected event for opcode 0x080e [ 254.734885][T10659] syzkaller0: entered promiscuous mode [ 254.734907][T10659] syzkaller0: entered allmulticast mode [ 254.761748][T10657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1350'. [ 254.978758][T10662] profile_transition: unconfined exec no attachment [ 255.224445][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.866052][T10673] syzkaller0: entered promiscuous mode [ 255.866068][T10673] syzkaller0: entered allmulticast mode [ 256.139563][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 256.983730][T10687] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 256.983851][T10687] overlayfs: failed to clone lowerpath [ 259.355236][T10707] profile_transition: unconfined exec no attachment [ 259.372674][T10708] profile_transition: unconfined exec no attachment [ 259.395349][T10709] profile_transition: unconfined exec no attachment [ 259.425663][T10710] profile_transition: unconfined exec no attachment [ 260.729978][T10738] syzkaller0: entered promiscuous mode [ 260.729999][T10738] syzkaller0: entered allmulticast mode [ 261.374142][T10758] fuse: fd is not a fuse device [ 261.376243][T10758] netlink: 'syz.3.1381': attribute type 5 has an invalid length. [ 261.376259][T10758] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1381'. [ 261.471434][T10759] kAFS: No cell specified [ 261.510995][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 261.511007][ T42] audit: type=1800 audit(1790867351.922:608): pid=10760 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=97613 res=0 errno=0 [ 261.512890][ T42] audit: type=1800 audit(1790867351.922:609): pid=10760 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=97617 res=0 errno=0 [ 261.575804][T10761] profile_transition: unconfined exec no attachment [ 261.661865][T10765] profile_transition: unconfined exec no attachment [ 261.713901][T10769] profile_transition: unconfined exec no attachment [ 261.763044][T10773] profile_transition: unconfined exec no attachment [ 261.812272][T10775] profile_transition: unconfined exec no attachment [ 261.867925][T10776] profile_transition: unconfined exec no attachment [ 263.077280][T10781] ptrace attach of ""[10782] was attempted by "/syz-executor exec"[10781] [ 265.384523][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025e1c000: rx timeout, send abort [ 265.391461][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888025e1c000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.675239][ T42] audit: type=1800 audit(1790867356.082:610): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177201 res=0 errno=0 [ 265.678478][T10818] 9p: Unknown access argument 18446744073709551615: -34 [ 265.934195][T10835] profile_transition: unconfined exec no attachment [ 265.987772][T10837] profile_transition: unconfined exec no attachment [ 266.021666][T10838] profile_transition: unconfined exec no attachment [ 266.050604][T10840] profile_transition: unconfined exec no attachment [ 266.088793][T10834] 9p: Bad value for 'wfdno' [ 266.102824][T10842] profile_transition: unconfined exec no attachment [ 266.215996][T10844] profile_transition: unconfined exec no attachment [ 266.233848][ T42] audit: type=1326 audit(1790867356.642:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10839 comm="syz.3.1403" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x0 [ 266.240673][T10846] profile_transition: unconfined exec no attachment [ 266.357836][T10849] profile_transition: unconfined exec no attachment [ 266.389119][T10841] syzkaller1: entered promiscuous mode [ 266.389138][T10841] syzkaller1: entered allmulticast mode [ 266.471785][T10850] profile_transition: unconfined exec no attachment [ 266.732340][T10854] profile_transition: unconfined exec no attachment [ 267.809219][T10881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.640664][T10908] overlayfs: failed to resolve './cgroup': -2 [ 269.692556][T10909] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 269.692580][T10909] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 269.755636][ T42] audit: type=1800 audit(1790867360.162:612): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177514 res=0 errno=0 [ 273.740209][T10926] profile_transition: 9 callbacks suppressed [ 273.740223][T10926] profile_transition: unconfined exec no attachment [ 273.779825][T10931] profile_transition: unconfined exec no attachment [ 273.813099][T10937] profile_transition: unconfined exec no attachment [ 273.861535][T10938] profile_transition: unconfined exec no attachment [ 274.171326][T10950] ptrace attach of ""[10951] was attempted by "/syz-executor exec"[10950] [ 274.368524][T10952] ptrace attach of ""[10953] was attempted by "/syz-executor exec"[10952] [ 274.373830][ T42] audit: type=1800 audit(1790867364.783:613): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1425" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 275.433986][T10961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1430'. [ 275.439490][T10961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1430'. [ 275.767758][ T42] audit: type=1800 audit(1790867366.183:614): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1431" name="fscaps" dev="sysfs" ino=8 res=0 errno=0 [ 276.758641][T10991] profile_transition: unconfined exec no attachment [ 276.791480][T10992] profile_transition: unconfined exec no attachment [ 277.013532][ T66] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 277.232122][T11002] ptrace attach of ""[11003] was attempted by "/syz-executor exec"[11002] [ 277.552081][T11005] dummy0: entered allmulticast mode [ 277.552875][T11005] dummy0: left allmulticast mode [ 277.646117][T11008] profile_transition: unconfined exec no attachment [ 277.690691][T11010] profile_transition: unconfined exec no attachment [ 277.733337][T11011] profile_transition: unconfined exec no attachment [ 277.788822][T11012] profile_transition: unconfined exec no attachment [ 278.480377][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 279.030341][T11024] profile_transition: unconfined exec no attachment [ 279.096525][T11026] profile_transition: unconfined exec no attachment [ 279.404551][T11040] profile_transition: unconfined exec no attachment [ 279.428315][T11042] profile_transition: unconfined exec no attachment [ 280.067395][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 280.067417][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 280.132189][ T66] Bluetooth: hci1: unexpected event for opcode 0x080e [ 280.250688][T11043] Process accounting resumed [ 280.302403][T11063] netlink: 'syz.1.1460': attribute type 10 has an invalid length. [ 280.332547][T11063] team0: Port device wg2 added [ 281.207344][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 281.208513][ T42] audit: type=1800 audit(1790867371.623:615): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178714 res=0 errno=0 [ 281.245288][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 281.247482][ T42] audit: type=1800 audit(1790867371.663:616): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178840 res=0 errno=0 [ 281.345696][T11094] profile_transition: unconfined exec no attachment [ 281.392779][T11095] profile_transition: unconfined exec no attachment [ 281.404165][T11097] profile_transition: unconfined exec no attachment [ 281.667347][T11102] profile_transition: unconfined exec no attachment [ 281.746156][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 281.821635][ T42] audit: type=1326 audit(1790867372.233:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.821762][ T42] audit: type=1326 audit(1790867372.233:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.822113][ T42] audit: type=1326 audit(1790867372.233:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.822242][ T42] audit: type=1326 audit(1790867372.233:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.822488][ T42] audit: type=1326 audit(1790867372.233:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.823777][ T42] audit: type=1326 audit(1790867372.233:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.873591][ T42] audit: type=1326 audit(1790867372.283:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 281.876897][ T42] audit: type=1326 audit(1790867372.293:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11105 comm="syz.4.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 282.233904][T11115] profile_transition: name lookup ix on error [ 283.575583][ T66] Bluetooth: hci4: unexpected event for opcode 0x080e [ 283.989776][T11157] profile_transition: unconfined exec no attachment [ 284.023383][T11159] profile_transition: unconfined exec no attachment [ 284.053344][T11162] profile_transition: unconfined exec no attachment [ 284.077516][T11164] profile_transition: unconfined exec no attachment [ 285.443028][T11192] ptrace attach of ""[11193] was attempted by "/syz-executor exec"[11192] [ 285.512999][ T5098] Bluetooth: hci2: unexpected event for opcode 0x080e [ 285.592801][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1501'. [ 285.738932][T11197] profile_transition: unconfined exec no attachment [ 285.985421][T11199] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1503'. [ 285.995211][T11201] profile_transition: unconfined exec no attachment [ 286.051825][T11205] profile_transition: unconfined exec no attachment [ 286.054427][T11206] profile_transition: unconfined exec no attachment [ 286.092341][T11207] profile_transition: unconfined exec no attachment [ 286.148140][T11209] profile_transition: unconfined exec no attachment [ 286.330060][T11211] profile_transition: unconfined exec no attachment [ 286.380969][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 286.380982][ T42] audit: type=1800 audit(1790867376.793:659): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179922 res=0 errno=0 [ 286.383638][ T42] audit: type=1800 audit(1790867376.793:660): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179932 res=0 errno=0 [ 287.244696][T11232] syzkaller0: entered promiscuous mode [ 287.244711][T11232] syzkaller0: entered allmulticast mode [ 287.529887][ T66] Bluetooth: hci3: unexpected event for opcode 0x080e [ 287.659460][T11240] profile_transition: unconfined exec no attachment [ 287.770180][T11245] profile_transition: name lookup ix on error [ 287.777596][T11245] fuse: fd is not a fuse device [ 287.779231][T11245] IPVS: set_ctl: invalid protocol: 85 224.0.0.2:20003 [ 287.829731][T11251] overlayfs: failed to clone upperpath [ 287.865721][T11253] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 287.871367][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.873531][T11253] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 288.054344][T11260] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 288.056388][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 288.092139][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 288.348285][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 288.602996][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 288.720714][ T66] Bluetooth: hci3: unexpected event for opcode 0x080e [ 289.394220][T11320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1538'. [ 289.456904][T11327] profile_transition: 12 callbacks suppressed [ 289.456931][T11327] profile_transition: unconfined exec no attachment [ 289.490671][T11328] netlink: 'syz.1.1539': attribute type 3 has an invalid length. [ 289.490691][T11328] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 289.490702][T11328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1539'. [ 289.490714][T11328] NCSI netlink: No device for ifindex 0 [ 289.623840][ T5824] Process accounting resumed [ 289.702285][ T66] Bluetooth: hci2: unexpected event for opcode 0x080e [ 289.838836][T11344] FAULT_INJECTION: forcing a failure. [ 289.838836][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.838875][T11344] CPU: 2 UID: 0 PID: 11344 Comm: syz.4.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.838904][T11344] Tainted: [L]=SOFTLOCKUP [ 289.838911][T11344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.838922][T11344] Call Trace: [ 289.838929][T11344] [ 289.838945][T11344] dump_stack_lvl+0x100/0x190 [ 289.838981][T11344] should_fail_ex.cold+0x5/0xa [ 289.839009][T11344] strncpy_from_user+0x3b/0x2d0 [ 289.839046][T11344] do_getname+0x78/0x390 [ 289.839069][T11344] do_sys_openat2+0xc7/0x1e0 [ 289.839104][T11344] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.839142][T11344] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 289.839171][T11344] __ia32_compat_sys_openat+0x12d/0x210 [ 289.839192][T11344] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 289.839223][T11344] do_int80_emulation+0x166/0x650 [ 289.839253][T11344] asm_int80_emulation+0x1a/0x20 [ 289.839273][T11344] RIP: 0023:0xf71a75ab [ 289.839289][T11344] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 289.839308][T11344] RSP: 002b:00000000f545d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 289.839326][T11344] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f545d490 [ 289.839340][T11344] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.839352][T11344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.839363][T11344] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.839373][T11344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.839399][T11344] [ 289.933052][T11346] comedi comedi1: Minor 4 specified more than once! [ 290.102010][T11349] profile_transition: unconfined exec no attachment [ 290.136925][T11350] profile_transition: unconfined exec no attachment [ 290.179028][T11352] profile_transition: unconfined exec no attachment [ 290.204031][T11353] profile_transition: unconfined exec no attachment [ 290.420465][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1551'. [ 290.534599][T11360] profile_transition: unconfined exec no attachment [ 290.916933][T11379] profile_transition: unconfined exec no attachment [ 290.954972][T11383] profile_transition: unconfined exec no attachment [ 290.973240][T11385] profile_transition: unconfined exec no attachment [ 291.013418][T11387] profile_transition: unconfined exec no attachment [ 291.170178][T11389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1562'. [ 291.185614][T11391] ptrace attach of ""[11393] was attempted by "/syz-executor exec"[11391] [ 291.814980][ T2234] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 291.965690][ T2234] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 291.966846][ T2234] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.966890][ T2234] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 291.966914][ T2234] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 291.966948][ T2234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.972654][ T42] audit: type=1800 audit(1790867382.384:661): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180394 res=0 errno=0 [ 292.014299][ T42] audit: type=1800 audit(1790867382.424:662): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180423 res=0 errno=0 [ 292.027703][ T42] audit: type=1800 audit(1790867382.444:663): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=180401 res=0 errno=0 [ 292.028962][ T42] audit: type=1800 audit(1790867382.444:664): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=180402 res=0 errno=0 [ 292.033600][ T42] audit: type=1800 audit(1790867382.444:665): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=180403 res=0 errno=0 [ 292.069982][ T42] audit: type=1800 audit(1790867382.484:666): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180443 res=0 errno=0 [ 292.124347][T11402] fuse: fd is not a fuse device [ 292.404949][ T5823] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 292.501997][T11398] CIFS: VFS: UNC: path must begin with // or \\ [ 292.502009][T11398] Malformed UNC in devname [ 292.502009][T11398] [ 292.502072][T11398] CIFS: VFS: Malformed UNC in devname [ 292.511993][ T2234] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 292.514469][T11408] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 292.514491][T11408] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 292.519474][ T2234] usb 6-1: USB disconnect, device number 14 [ 292.558229][ T5823] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 292.558874][ T5823] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 292.558890][ T5823] usb 9-1: can't read configurations, error -71 [ 292.568889][ T42] audit: type=1800 audit(1790867382.984:667): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180562 res=0 errno=0 [ 292.701747][T11412] F2FS-fs: Conflicting test_dummy_encryption options [ 292.799367][T11417] new mount options do not match the existing superblock, will be ignored [ 292.845380][ T42] audit: type=1326 audit(1790867383.264:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11414 comm="syz.3.1568" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x0 [ 293.199290][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1573'. [ 294.184087][T11449] ptrace attach of ""[11452] was attempted by "/syz-executor exec"[11449] [ 294.213226][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 294.504880][T11467] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1587'. [ 294.576929][T11469] profile_transition: 3 callbacks suppressed [ 294.576947][T11469] profile_transition: unconfined exec no attachment [ 295.076199][ T5824] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 295.246776][ T5824] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.248568][ T5824] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.250832][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.250856][ T5824] usb 9-1: Product: syz [ 295.250871][ T5824] usb 9-1: Manufacturer: syz [ 295.250884][ T5824] usb 9-1: SerialNumber: syz [ 295.256058][ T42] audit: type=1800 audit(1790867385.674:669): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181410 res=0 errno=0 [ 295.820001][T11481] syzkaller0: entered promiscuous mode [ 295.820025][T11481] syzkaller0: entered allmulticast mode [ 296.440830][T11498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1598'. [ 296.465317][T11499] profile_transition: unconfined exec no attachment [ 296.852417][T11509] ptrace attach of ""[11510] was attempted by "/syz-executor exec"[11509] [ 297.526442][ T66] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 297.567073][ T66] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 297.859685][ T5824] cdc_ether 9-1:1.0: missing cdc ether descriptor [ 297.864713][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 297.864729][ T42] audit: type=1800 audit(1790867388.284:676): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=181439 res=0 errno=0 [ 297.864819][ T5824] usb 9-1: USB disconnect, device number 7 [ 297.867522][ T42] audit: type=1800 audit(1790867388.284:677): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=181440 res=0 errno=0 [ 297.868258][ T42] audit: type=1800 audit(1790867388.284:678): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=181419 res=0 errno=0 [ 298.269530][ T42] audit: type=1800 audit(1790867388.684:679): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34714 res=0 errno=0 [ 298.277535][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'. [ 298.683624][ T42] audit: type=1800 audit(1790867389.094:680): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181849 res=0 errno=0 [ 298.715527][ T42] audit: type=1800 audit(1790867389.134:681): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181732 res=0 errno=0 [ 298.792987][T11405] block nbd64: NBD_DISCONNECT [ 298.845110][T11519] profile_transition: unconfined exec no attachment [ 298.924571][T11521] profile_transition: unconfined exec no attachment [ 298.950671][T11525] profile_transition: unconfined exec no attachment [ 299.016292][T11527] profile_transition: unconfined exec no attachment [ 299.073009][T11528] profile_transition: unconfined exec no attachment [ 299.074131][T11529] profile_transition: unconfined exec no attachment [ 299.090876][T11530] profile_transition: unconfined exec no attachment [ 299.149101][T11532] profile_transition: unconfined exec no attachment [ 299.207427][T11405] udevd[11405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 299.683863][T11551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.751446][ T66] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 300.256483][T11561] profile_transition: unconfined exec no attachment [ 300.277035][T11562] profile_transition: unconfined exec no attachment [ 300.294712][T11563] profile_transition: unconfined exec no attachment [ 300.315180][T11564] profile_transition: unconfined exec no attachment [ 300.338314][T11566] profile_transition: unconfined exec no attachment [ 300.364785][T11569] profile_transition: unconfined exec no attachment [ 300.394503][T11570] netlink: 'syz.3.1614': attribute type 21 has an invalid length. [ 300.394543][T11570] netlink: 'syz.3.1614': attribute type 6 has an invalid length. [ 300.394551][T11570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1614'. [ 300.418974][T11574] profile_transition: unconfined exec no attachment [ 300.451599][T11575] profile_transition: unconfined exec no attachment [ 300.779789][ T42] audit: type=1326 audit(1790867391.194:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11588 comm="syz.3.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 300.782293][ T42] audit: type=1326 audit(1790867391.194:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11588 comm="syz.3.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 300.787213][ T42] audit: type=1326 audit(1790867391.204:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11588 comm="syz.3.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 300.787259][ T42] audit: type=1326 audit(1790867391.204:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11588 comm="syz.3.1620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 300.881307][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 300.946424][T11600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1622'. [ 300.952391][T11601] profile_transition: unconfined exec no attachment [ 300.960443][T11593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.007123][T11605] profile_transition: unconfined exec no attachment [ 301.566896][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1634'. [ 301.567302][T11632] FAULT_INJECTION: forcing a failure. [ 301.567302][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.567321][T11632] CPU: 3 UID: 0 PID: 11632 Comm: syz.1.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.567336][T11632] Tainted: [L]=SOFTLOCKUP [ 301.567340][T11632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.567347][T11632] Call Trace: [ 301.567351][T11632] [ 301.567356][T11632] dump_stack_lvl+0x100/0x190 [ 301.567376][T11632] should_fail_ex.cold+0x5/0xa [ 301.567391][T11632] _copy_to_user+0x32/0xd0 [ 301.567409][T11632] simple_read_from_buffer+0xcb/0x170 [ 301.567427][T11632] proc_fail_nth_read+0x1af/0x230 [ 301.567442][T11632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.567456][T11632] ? rw_verify_area+0xce/0x6d0 [ 301.567468][T11632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.567481][T11632] vfs_read+0x1e4/0xb40 [ 301.567493][T11632] ? lock_acquire+0x1d1/0x380 [ 301.567510][T11632] ? __fget_files+0x34/0x3d0 [ 301.567524][T11632] ? __pfx_vfs_read+0x10/0x10 [ 301.567536][T11632] ? find_held_lock+0x2b/0x80 [ 301.567549][T11632] ? __fget_files+0x215/0x3d0 [ 301.567565][T11632] ? __fget_files+0x21f/0x3d0 [ 301.567583][T11632] ksys_read+0x12a/0x250 [ 301.567595][T11632] ? __pfx_ksys_read+0x10/0x10 [ 301.567612][T11632] do_int80_emulation+0x166/0x650 [ 301.567628][T11632] asm_int80_emulation+0x1a/0x20 [ 301.567641][T11632] RIP: 0023:0xf71c75ab [ 301.567650][T11632] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 301.567661][T11632] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 301.567672][T11632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 301.567679][T11632] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 301.567685][T11632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.567691][T11632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.567698][T11632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.567712][T11632] [ 301.635135][T11636] FAULT_INJECTION: forcing a failure. [ 301.635135][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 301.635195][T11636] CPU: 0 UID: 0 PID: 11636 Comm: syz.1.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.635223][T11636] Tainted: [L]=SOFTLOCKUP [ 301.635228][T11636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.635234][T11636] Call Trace: [ 301.635238][T11636] [ 301.635243][T11636] dump_stack_lvl+0x100/0x190 [ 301.635262][T11636] should_fail_ex.cold+0x5/0xa [ 301.635277][T11636] should_failslab+0xc2/0x120 [ 301.635295][T11636] __kmalloc_noprof+0xfc/0x840 [ 301.635309][T11636] ? tomoyo_encode2+0xfb/0x3c0 [ 301.635326][T11636] tomoyo_encode2+0xfb/0x3c0 [ 301.635341][T11636] tomoyo_encode+0x29/0x50 [ 301.635358][T11636] tomoyo_realpath_from_path+0x18c/0x690 [ 301.635375][T11636] tomoyo_path_number_perm+0x23c/0x580 [ 301.635386][T11636] ? tomoyo_path_number_perm+0x22e/0x580 [ 301.635399][T11636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.635411][T11636] ? get_pid_task+0x106/0x250 [ 301.635428][T11636] ? __lock_acquire+0x5c0/0x1f40 [ 301.635450][T11636] ? __fget_files+0x34/0x3d0 [ 301.635465][T11636] ? find_held_lock+0x2b/0x80 [ 301.635477][T11636] ? __fget_files+0x215/0x3d0 [ 301.635490][T11636] ? hook_file_ioctl_common+0x140/0x440 [ 301.635502][T11636] ? __fget_files+0x215/0x3d0 [ 301.635518][T11636] ? __fget_files+0x21f/0x3d0 [ 301.635534][T11636] security_file_ioctl_compat+0xd3/0x230 [ 301.635547][T11636] __ia32_compat_sys_ioctl+0xc2/0x360 [ 301.635562][T11636] __do_fast_syscall_32+0x13a/0x8b0 [ 301.635576][T11636] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.635590][T11636] do_fast_syscall_32+0x32/0x70 [ 301.635604][T11636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.635618][T11636] RIP: 0023:0xf7fc7fec [ 301.635632][T11636] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 301.635637][T11636] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 301.635648][T11636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000081785501 [ 301.635655][T11636] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.635661][T11636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.635667][T11636] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.635674][T11636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.635688][T11636] [ 301.635790][T11636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.754435][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 301.884387][ T30] usb 9-1: device descriptor read/64, error -71 [ 301.946904][T11641] syzkaller0: entered promiscuous mode [ 301.946922][T11641] syzkaller0: entered allmulticast mode [ 302.147830][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 302.284373][ T30] usb 9-1: device descriptor read/64, error -71 [ 302.305876][T11650] ±ÿ)”ëfl: renamed from lo [ 302.355621][T11643] sctp: [Deprecated]: syz.1.1638 (pid 11643) Use of int in max_burst socket option deprecated. [ 302.355621][T11643] Use struct sctp_assoc_value instead [ 302.421373][ T30] usb usb9-port1: attempt power cycle [ 302.582299][T11654] ptrace attach of ""[11655] was attempted by "/syz-executor exec"[11654] [ 302.774353][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 302.795832][ T30] usb 9-1: device descriptor read/8, error -71 [ 303.036088][ T30] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 303.055239][ T30] usb 9-1: device descriptor read/8, error -71 [ 303.164607][ T30] usb usb9-port1: unable to enumerate USB device [ 313.584221][T11670] profile_transition: 5 callbacks suppressed [ 313.584236][T11670] profile_transition: unconfined exec no attachment [ 313.602879][T11674] profile_transition: unconfined exec no attachment [ 314.678520][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 314.678532][ T42] audit: type=1800 audit(1790867661.095:739): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0 [ 314.780273][T11696] syzkaller0: entered promiscuous mode [ 314.780294][T11696] syzkaller0: entered allmulticast mode [ 315.156560][ T42] audit: type=1800 audit(1790867661.625:740): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1660" name="online" dev="sysfs" ino=478 res=0 errno=0 [ 315.255488][T11712] smpboot: CPU 1 is now offline [ 315.338527][ T42] audit: type=1800 audit(1790867661.805:741): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=475 res=0 errno=0 [ 315.603156][ T42] audit: type=1800 audit(1790867662.055:742): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1668" name="stall_thrs" dev="sysfs" ino=109055 res=0 errno=0 [ 315.701552][T11742] FAULT_INJECTION: forcing a failure. [ 315.701552][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 315.701580][T11742] CPU: 3 UID: 0 PID: 11742 Comm: syz.1.1673 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.701601][T11742] Tainted: [L]=SOFTLOCKUP [ 315.701607][T11742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.701616][T11742] Call Trace: [ 315.701621][T11742] [ 315.701628][T11742] dump_stack_lvl+0x100/0x190 [ 315.701650][T11742] should_fail_ex.cold+0x5/0xa [ 315.701668][T11742] should_failslab+0xc2/0x120 [ 315.701720][T11742] __kmalloc_noprof+0xfc/0x840 [ 315.701739][T11742] ? ima_alloc_init_template+0x19d/0x6d0 [ 315.701765][T11742] ima_alloc_init_template+0x19d/0x6d0 [ 315.701787][T11742] ? take_dentry_name_snapshot+0x310/0x7c0 [ 315.701804][T11742] ima_store_measurement+0x1e3/0x5b0 [ 315.701819][T11742] ? __pfx_ima_store_measurement+0x10/0x10 [ 315.701837][T11742] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 315.701858][T11742] process_measurement+0x19cc/0x2350 [ 315.701883][T11742] ? __pfx_process_measurement+0x10/0x10 [ 315.701903][T11742] ? tomoyo_check_open_permission+0x211/0x3c0 [ 315.701917][T11742] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 315.701936][T11742] ? hook_file_open+0x248/0x8e0 [ 315.701967][T11742] ? __pfx_apparmor_file_open+0x10/0x10 [ 315.701981][T11742] ? path_get+0x61/0x80 [ 315.702005][T11742] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 315.702031][T11742] ima_file_check+0xcc/0x120 [ 315.702051][T11742] ? __pfx_ima_file_check+0x10/0x10 [ 315.702076][T11742] security_file_post_open+0xc4/0x210 [ 315.702092][T11742] path_openat+0x5cd/0x2440 [ 315.702114][T11742] ? __pfx_path_openat+0x10/0x10 [ 315.702138][T11742] do_file_open+0x20e/0x430 [ 315.702157][T11742] ? __pfx_do_file_open+0x10/0x10 [ 315.702185][T11742] ? _raw_spin_unlock+0x28/0x50 [ 315.702198][T11742] ? alloc_fd+0x471/0x7a0 [ 315.702219][T11742] do_sys_openat2+0x10f/0x1e0 [ 315.702239][T11742] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.702262][T11742] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 315.702281][T11742] __ia32_compat_sys_openat+0x12d/0x210 [ 315.702296][T11742] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 315.702317][T11742] do_int80_emulation+0x166/0x650 [ 315.702336][T11742] asm_int80_emulation+0x1a/0x20 [ 315.702349][T11742] RIP: 0023:0xf71c75ab [ 315.702361][T11742] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 315.702374][T11742] RSP: 002b:00000000f548642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 315.702387][T11742] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72919a5 [ 315.702395][T11742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.702403][T11742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.702410][T11742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 315.702418][T11742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.702434][T11742] [ 315.704202][ T42] audit: type=1804 audit(1790867662.165:743): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1673" name="/" dev="nsfs" ino=4026533001 res=0 errno=0 [ 315.839892][T11750] program syz.1.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.892335][ T66] Bluetooth: hci3: unexpected event for opcode 0x080e [ 315.925139][T11761] profile_transition: unconfined exec no attachment [ 315.946474][T11764] profile_transition: unconfined exec no attachment [ 316.276483][T11776] trusted_key: encrypted_key: insufficient parameters specified [ 316.453152][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 316.488154][ T42] audit: type=1800 audit(1790867662.955:744): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183187 res=0 errno=0 [ 316.488249][T11792] syzkaller0: entered promiscuous mode [ 316.488262][T11792] syzkaller0: entered allmulticast mode [ 316.491179][ T42] audit: type=1800 audit(1790867662.955:745): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=183191 res=0 errno=0 [ 316.650024][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.935409][ T42] audit: type=1800 audit(1790867663.405:746): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1701" name="stall_thrs" dev="sysfs" ino=165749 res=0 errno=0 [ 319.433091][T11841] profile_transition: unconfined exec no attachment [ 319.509322][T11844] profile_transition: unconfined exec no attachment [ 319.540677][T11846] profile_transition: unconfined exec no attachment [ 319.737766][T11861] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1728'. [ 319.952528][T11877] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1734'. [ 319.952553][T11877] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1734'. [ 320.005620][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1737'. [ 320.315323][T11883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.356421][T11891] syz_tun: entered allmulticast mode [ 320.416153][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 320.574269][T11883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.588445][T11912] macsec0: left promiscuous mode [ 320.689784][T11883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.703690][T11919] profile_transition: unconfined exec no attachment [ 320.739313][T11922] profile_transition: unconfined exec no attachment [ 320.904926][T11883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.106952][T11931] profile_transition: unconfined exec no attachment [ 321.123362][ T5822] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.143775][ T5822] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.143822][ T5822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.143851][ T5822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.321568][T11942] FAULT_INJECTION: forcing a failure. [ 321.321568][T11942] name failslab, interval 1, probability 0, space 0, times 0 [ 321.321595][T11942] CPU: 2 UID: 0 PID: 11942 Comm: syz.4.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.321621][T11942] Tainted: [L]=SOFTLOCKUP [ 321.321629][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.321642][T11942] Call Trace: [ 321.321674][T11942] [ 321.321681][T11942] dump_stack_lvl+0x100/0x190 [ 321.321713][T11942] should_fail_ex.cold+0x5/0xa [ 321.321739][T11942] should_failslab+0xc2/0x120 [ 321.321769][T11942] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 321.321792][T11942] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.321823][T11942] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 321.321859][T11942] kmemdup_nul+0x49/0xd0 [ 321.321882][T11942] vfs_parse_fs_qstr+0x112/0x1c0 [ 321.321906][T11942] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 321.321933][T11942] ? trace_kmalloc+0xeb/0x110 [ 321.321959][T11942] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 321.321985][T11942] ? v9fs_init_fs_context+0x17f/0x5c0 [ 321.322010][T11942] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 321.322036][T11942] vfs_parse_monolithic_sep+0x195/0x210 [ 321.322066][T11942] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 321.322093][T11942] ? v9fs_init_fs_context+0x465/0x5c0 [ 321.322117][T11942] ? alloc_fs_context+0x65a/0xf40 [ 321.322147][T11942] path_mount+0x77f/0x24c0 [ 321.322178][T11942] ? __pfx_path_mount+0x10/0x10 [ 321.322202][T11942] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.322222][T11942] ? putname+0xb1/0x110 [ 321.322244][T11942] ? kmem_cache_free+0x127/0x6c0 [ 321.322272][T11942] ? __ia32_sys_mount+0x292/0x310 [ 321.322298][T11942] __ia32_sys_mount+0x292/0x310 [ 321.322324][T11942] ? __pfx___ia32_sys_mount+0x10/0x10 [ 321.322358][T11942] __do_fast_syscall_32+0x13a/0x8b0 [ 321.322380][T11942] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.322402][T11942] do_fast_syscall_32+0x32/0x70 [ 321.322423][T11942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.322442][T11942] RIP: 0023:0xf706efec [ 321.322463][T11942] Code: Unable to access opcode bytes at 0xf706efc2. [ 321.322471][T11942] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 321.322490][T11942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200 [ 321.322501][T11942] RDX: 00000000800000c0 RSI: 0000000000000008 RDI: 0000000080000300 [ 321.322513][T11942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.322522][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.322529][T11942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.322553][T11942] [ 321.884085][T11949] profile_transition: unconfined exec no attachment [ 322.573276][ T5824] ------------[ cut here ]------------ [ 322.573288][ T5824] bochs-drm 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 322.573297][ T5824] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#2: kworker/2:3/5824 [ 322.584517][ T5824] Modules linked in: [ 322.586456][ T5824] CPU: 2 UID: 0 PID: 5824 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.589895][ T5824] Tainted: [L]=SOFTLOCKUP [ 322.591286][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.594736][ T5824] Workqueue: events drm_fb_helper_damage_work [ 322.596613][ T5824] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 322.598516][ T5824] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 30 75 34 fc 48 89 df e8 98 31 92 00 48 89 c6 48 8d 3d ce 04 7a 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 322.604442][ T5824] RSP: 0000:ffffc900064cfa40 EFLAGS: 00010293 [ 322.606415][ T5824] RAX: ffffffff8c928660 RBX: ffff888060a980d0 RCX: 0000000000000000 [ 322.608970][ T5824] RDX: ffff88801365d880 RSI: ffffffff8c928660 RDI: ffffffff915120a0 [ 322.611747][ T5824] RBP: ffff88801365d880 R08: 0000000000000005 R09: 0000000000000000 [ 322.614562][ T5824] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806e5a8000 [ 322.616966][ T5824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000003d32 [ 322.619364][ T5824] FS: 0000000000000000(0000) GS:ffff888096b55000(0000) knlGS:0000000000000000 [ 322.621989][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.624263][ T5824] CR2: 00000000f508ad1f CR3: 000000004d9b4000 CR4: 0000000000352ef0 [ 322.626623][ T5824] Call Trace: [ 322.627633][ T5824] [ 322.628524][ T5824] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 322.630378][ T5824] ? __pfx_autoremove_wake_function+0x10/0x10 [ 322.632161][ T5824] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.633855][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.635710][ T5824] ? drm_vblank_get+0x14f/0x2d0 [ 322.637270][ T5824] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 322.639446][ T5824] drm_fb_helper_damage_work+0x2e2/0xab0 [ 322.641447][ T5824] ? process_one_work+0xa2c/0x1b10 [ 322.643103][ T5824] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 322.644950][ T5824] ? process_one_work+0x906/0x1b10 [ 322.646507][ T5824] ? process_one_work+0x906/0x1b10 [ 322.648041][ T5824] process_one_work+0xac7/0x1b10 [ 322.649691][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 322.651609][ T5824] ? lock_acquire+0x1d1/0x380 [ 322.653359][ T5824] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 322.655909][ T5824] worker_thread+0x5ef/0xe50 [ 322.657916][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 322.660197][ T5824] ? kthread+0x13a/0x450 [ 322.661957][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 322.664096][ T5824] kthread+0x373/0x450 [ 322.665823][ T5824] ? __pfx_kthread+0x10/0x10 [ 322.667710][ T5824] ret_from_fork+0x730/0xd60 [ 322.669584][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 322.671708][ T5824] ? __switch_to+0x800/0x10f0 [ 322.673962][ T5824] ? __pfx_kthread+0x10/0x10 [ 322.676302][ T5824] ret_from_fork_asm+0x1a/0x30 [ 322.678679][ T5824] [ 322.680182][ T5824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.683291][ T5824] CPU: 2 UID: 0 PID: 5824 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.687785][ T5824] Tainted: [L]=SOFTLOCKUP [ 322.689599][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.693752][ T5824] Workqueue: events drm_fb_helper_damage_work [ 322.696238][ T5824] Call Trace: [ 322.697667][ T5824] [ 322.698927][ T5824] dump_stack_lvl+0x100/0x190 [ 322.701027][ T5824] vpanic+0x553/0x970 [ 322.702783][ T5824] ? __pfx_vpanic+0x10/0x10 [ 322.704372][ T5824] panic+0xd1/0xe0 [ 322.705711][ T5824] ? __pfx_panic+0x10/0x10 [ 322.707490][ T5824] check_panic_on_warn.cold+0x19/0x34 [ 322.709720][ T5824] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 322.711744][ T5824] __warn.cold+0x191/0x318 [ 322.713346][ T5824] __report_bug+0x30f/0x440 [ 322.715116][ T5824] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 322.717387][ T5824] ? __pfx___report_bug+0x10/0x10 [ 322.719148][ T5824] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.721106][ T5824] report_bug_entry+0xe2/0x290 [ 322.722842][ T5824] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 322.725186][ T5824] handle_bug+0x1cd/0x2a0 [ 322.726986][ T5824] exc_invalid_op+0x17/0x50 [ 322.728877][ T5824] asm_exc_invalid_op+0x1a/0x20 [ 322.730909][ T5824] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 322.733193][ T5824] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 30 75 34 fc 48 89 df e8 98 31 92 00 48 89 c6 48 8d 3d ce 04 7a 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 322.741072][ T5824] RSP: 0000:ffffc900064cfa40 EFLAGS: 00010293 [ 322.743594][ T5824] RAX: ffffffff8c928660 RBX: ffff888060a980d0 RCX: 0000000000000000 [ 322.746828][ T5824] RDX: ffff88801365d880 RSI: ffffffff8c928660 RDI: ffffffff915120a0 [ 322.749555][ T5824] RBP: ffff88801365d880 R08: 0000000000000005 R09: 0000000000000000 [ 322.752331][ T5824] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806e5a8000 [ 322.755778][ T5824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000003d32 [ 322.758961][ T5824] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 322.760896][ T5824] ? __pfx_autoremove_wake_function+0x10/0x10 [ 322.762767][ T5824] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.764413][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.766228][ T5824] ? drm_vblank_get+0x14f/0x2d0 [ 322.767791][ T5824] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 322.769847][ T5824] drm_fb_helper_damage_work+0x2e2/0xab0 [ 322.771638][ T5824] ? process_one_work+0xa2c/0x1b10 [ 322.773359][ T5824] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 322.775343][ T5824] ? process_one_work+0x906/0x1b10 [ 322.776952][ T5824] ? process_one_work+0x906/0x1b10 [ 322.778727][ T5824] process_one_work+0xac7/0x1b10 [ 322.780325][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 322.782101][ T5824] ? lock_acquire+0x1d1/0x380 [ 322.783628][ T5824] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 322.785684][ T5824] worker_thread+0x5ef/0xe50 [ 322.787198][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 322.788800][ T5824] ? kthread+0x13a/0x450 [ 322.790150][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 322.791810][ T5824] kthread+0x373/0x450 [ 322.793191][ T5824] ? __pfx_kthread+0x10/0x10 [ 322.794628][ T5824] ret_from_fork+0x730/0xd60 [ 322.796903][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 322.798709][ T5824] ? __switch_to+0x800/0x10f0 [ 322.800333][ T5824] ? __pfx_kthread+0x10/0x10 [ 322.801829][ T5824] ret_from_fork_asm+0x1a/0x30 [ 322.803384][ T5824] [ 323.902598][ T5824] Shutting down cpus with NMI [ 323.904926][ T5824] Kernel Offset: disabled [ 323.906558][ T5824] Rebooting in 86400 seconds..