last executing test programs: 18.923285829s ago: executing program 2 (id=118): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 11) 18.841464998s ago: executing program 2 (id=119): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @remote, @random="03220f167338", @dev={0xac, 0x14, 0x14, 0x44}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005580)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xfff1, 0xffff}, {0x6, 0x1}}}, 0x24}}, 0x0) 18.714068943s ago: executing program 2 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = fsopen(&(0x7f00000005c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='rootcontext', &(0x7f0000000740)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000740)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)={0x42}, &(0x7f0000000800)='./file1\x00', 0x18, 0x0, 0x12345}) r8 = syz_io_uring_complete(r5, r6) close(r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000003c00000000000000a70b0000177a1950080000009500000000000000692557ce4d2556903d44e52fd17d17304d0bd2a22c7af1daba775097fb8a8f5c55e5a2e7c2eca6518d4ffd51140b038dd14eaf2010ff436e35cfd80dd45d658a7efdd856addbcf2eec6d5c1d001f04000000000000000e4143503aa9e1b5d7f48b9e90a2ed006851c3931fce9f45e895b30401ddc1e11188a8138fdaf5d8a398a6d6a88976239f984209712559200624ff21c4b50cef94d690056612f6aa413f221b7f4c78f947c415dafbb2da33b34185d2b369844cc1c1c6092149c49a65c1ec1c24ddb3cb245e47342b39f2847c5209a6ceacea3ee049691dbd1e"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, &(0x7f00000003c0), 0x41000, 0x29, '\x00', 0x0, @fallback=0x2a, r3, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x10, 0xffffffff, 0xb030}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000008c0)=[r8, r2, r9, r2, r2, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f00000001c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000340)=0x207, 0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x1ec, r13, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd01f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc31}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xdb}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x180, @private2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeef}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa22}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x50b3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20008000}, 0x40051) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000ac0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000b00)={0x11, 0x86dd, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x24}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) 17.924328542s ago: executing program 3 (id=137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2d, 0x1, 0x70bd25, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/122, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 17.863890116s ago: executing program 3 (id=140): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000740), 0x900, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000780)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000540)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.743835992s ago: executing program 2 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (fail_nth: 11) 17.743315107s ago: executing program 3 (id=143): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000080)="1a00c74253a55a00", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) read$FUSE(r3, &(0x7f00000016c0)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) r9 = open(&(0x7f0000000700)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0xc0049364, &(0x7f0000000740)) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000780)=@multiplanar_fd={0x2, 0xb, 0x4, 0xc09066c473f46588, 0x2, {r6, r7/1000+60000}, {0x2, 0x1, 0x7, 0x4, 0x5, 0x2, "d86ab0b2"}, 0x8, 0x4, {&(0x7f0000000680)=[{0x4, 0x9, {r3}, 0x4}, {0x7ff, 0x8, {r8}, 0x8}]}, 0x7, 0x0, r9}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03082d885400fbdbdf251900006073134b000a00010077010500290001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0xc, "fad98357e5a1149989fc8dbec3bd02b82a128bbad00934464c516bddcf79684c00", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000640)='n', 0x1}], 0x1) write$cgroup_int(r10, &(0x7f0000000000)=0x9, 0x12) 17.742998758s ago: executing program 2 (id=144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), &(0x7f0000000240)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x4}, 0xf5c4}) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3}}, 0x801, 0x31, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) 17.6740135s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) mount(&(0x7f00000001c0)=@filename='./proc\x00', &(0x7f0000000200)='./proc/kmsg/file0\x00', &(0x7f0000000240)='nfs4\x00', 0x400, &(0x7f0000000280)='\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 17.533966158s ago: executing program 3 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000a08000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x1, &(0x7f0000000080)=""/13, 0xd}, &(0x7f0000000100)=0x40) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x6}}, @fwd={0x1}, @enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x6, [{0x7, 0x9, 0x7}, {0x10, 0x0, 0x6}, {0xc, 0x1, 0x4c2c}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}, @union={0x6, 0x4, 0x0, 0x5, 0x0, 0x3, [{0x7, 0x4, 0x4}, {0x0, 0x3, 0x7f}, {0x7, 0x1, 0x10001}, {0x6, 0x4, 0x2}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f, 0x41]}}, &(0x7f0000000500)=""/150, 0xd3, 0x96, 0x1, 0x9, 0x10000, @value=r1}, 0x28) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000200)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000002c0)=0x84) r6 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x3}, 0x90) openat(r6, &(0x7f00000003c0)='./file0\x00', 0x400002, 0xe8) 2.521010547s ago: executing program 1 (id=302): r0 = socket$l2tp(0x2, 0x2, 0x73) fchdir(r0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x14002, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x2, 0xff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x509, 0x30}, 0xc) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) (async) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000280)={'bridge0\x00', @ifru_mtu=0x3ce}) (async) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000300)='[\x00', &(0x7f0000000340)="f838475f80e87406db23a4a0e73d0922ffa58bde027eb4fc3e8fe42478707b5de2010cf303e39a4dccdc8d37d2468042dd2affbfdeba955b848442", 0x3b) (async) sendfile(0xffffffffffffffff, r1, 0x0, 0x4800000) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b6c49319dff7d4b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000500)={0x5, 0x100000000, 0x2c7a, 0x8, 0x3}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000540)) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(r1, 0x3b64) (async) recvmsg$kcm(r1, &(0x7f0000000c80)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f00000009c0)=""/102, 0x66}, {&(0x7f0000000a40)=""/24, 0x18}, {&(0x7f0000000a80)=""/145, 0x91}], 0x8, &(0x7f0000000bc0)=""/150, 0x96}, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000cc0)={0x1, 'veth1_to_batadv\x00', {}, 0xc}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000e80)={'ipvs\x00'}, &(0x7f0000000ec0)=0x1e) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r4, 0x10, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4880) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000001000)=0x14, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001040)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000001080)={r2, 0xffffffffffffffff, 0x80000}, &(0x7f00000010c0)=0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xf0, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "18922328d5675ef43bd9bdbc069f5a47ffe18a9e228a86cc"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95705f8292ed46f96872eb09e7aa5f8b939d86b7afc3e3a1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f90fda1e37bfc05d74603d8da4dd35af6033c8b4a3d6e17"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2.456271494s ago: executing program 32 (id=144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), &(0x7f0000000240)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x4}, 0xf5c4}) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3}}, 0x801, 0x31, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) 2.407753899s ago: executing program 1 (id=304): r0 = syz_create_resource$futex(&(0x7f00000020c0)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(r0, 0x3, 0x1, 0x0, 0x0, 0x3) (fail_nth: 11) 2.407593663s ago: executing program 1 (id=305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000480)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000004c0)=0x7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="27002dbd7000fedbdf25310000000500000300d4ddb2fd340009000000050036000100008005003500060000000800020000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = syz_open_dev$media(&(0x7f00000011c0), 0xef7, 0x2a080) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000001e80)={{0x80000000, 0x0, 0x3, [0x9, 0x7fffffff]}, {0x80000000, 0x0, 0x2, [0x6, 0x1000]}, 0x10000000, [0x2, 0x6]}) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000000500)=""/257, 0x101}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x4, 0xfffffffd, 0x8) 2.317640456s ago: executing program 1 (id=306): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r1 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r1, &(0x7f0000000080)=""/107, 0x6b, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000c0942000000000000000000711009000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000300)=@t={0x81, 0x5, 0x6, 0x0, @generic=0xfffffffe}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.276081459s ago: executing program 33 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000a08000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x1, &(0x7f0000000080)=""/13, 0xd}, &(0x7f0000000100)=0x40) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x6}}, @fwd={0x1}, @enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x6, [{0x7, 0x9, 0x7}, {0x10, 0x0, 0x6}, {0xc, 0x1, 0x4c2c}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}, @union={0x6, 0x4, 0x0, 0x5, 0x0, 0x3, [{0x7, 0x4, 0x4}, {0x0, 0x3, 0x7f}, {0x7, 0x1, 0x10001}, {0x6, 0x4, 0x2}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f, 0x41]}}, &(0x7f0000000500)=""/150, 0xd3, 0x96, 0x1, 0x9, 0x10000, @value=r1}, 0x28) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000200)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000002c0)=0x84) r6 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x3}, 0x90) openat(r6, &(0x7f00000003c0)='./file0\x00', 0x400002, 0xe8) 741.276624ms ago: executing program 0 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x4) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000940)='9', 0x1) (async) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000980)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a010800000000000000000100000009000100732c3f30000000000900030073797a3200000000140000000400000000000000000100000014000000110001", @ANYRESOCT=r1], 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x44800) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r7, &(0x7f00000002c0), 0x400000000000235, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r8, 0x1, 0x0, 0x2000}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 506.41477ms ago: executing program 0 (id=317): r0 = syz_open_dev$media(&(0x7f00000011c0), 0xef7, 0x2a080) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001e80)={{0x80000000, 0x0, 0x3, [0x9, 0x7fffffff]}, {0x80000000, 0x0, 0x2, [0x6, 0x1000]}, 0x10000000, [0x2, 0x6]}) (fail_nth: 4) 506.236298ms ago: executing program 0 (id=318): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0xd7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x4, 0x7, &(0x7f00000000c0)={0x13, "fd5a4451ed2abb470100270000000000000000f5ffffffffff7fff00"}}) set_mempolicy(0x2005, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x9) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/set_event\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000002c0)={{0x2, 0xfffffffe}, {0xffffffffffffffff, 0x8}, 0x100001, 0x2}) 425.876542ms ago: executing program 0 (id=319): syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(0xffffffffffffffff, 0x80207501, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000880)=ANY=[], 0x28}], 0x1, 0x0, 0x44, 0xb305e06d8ab4c277}, 0x6400c006) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x44, &(0x7f00000002c0)=[{&(0x7f0000000300)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mount(0x0, 0x0, &(0x7f0000000400)='hfsplus\x00', 0x2, 0x0) socket$inet6(0xa, 0x200000000003, 0xd) r2 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000240)={'veth0_vlan\x00', 0x100}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x481, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x10, &(0x7f0000000500), &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7cefd88291d271cdc9234781300e4e2dd8655e112443c086473b83"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) r8 = syz_pidfd_open(0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x20002039}) 90.832086ms ago: executing program 0 (id=320): r0 = syz_open_dev$media(&(0x7f00000011c0), 0xef7, 0x2a080) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001e80)={{0x80000000, 0x0, 0xfffffff, [0x9, 0x7fffffff]}, {0x80000000, 0x0, 0x2, [0x6, 0x1000]}, 0x10000000, [0x2, 0x6]}) 90.188023ms ago: executing program 1 (id=321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (fail_nth: 5) 89.913838ms ago: executing program 0 (id=322): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x22000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000000500)={&(0x7f00000005c0)=[r7], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000600)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000680)={&(0x7f0000000640)=[r7, 0x0, 0x0, r8, 0x0], 0x5}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10020, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r11 = accept4$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x3b8, 0x0, 0x0, 0x0, 0x488, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8c, 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @private1, [0xff000000, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xff, 0xff000000], 'bridge_slave_1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x2, 0x0, 0x44}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x7b5, 0x8, 0x1, 'syz0\x00', 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x2}, {0x0, 0x6, 0x4}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth0_to_hsr\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x67, 0x0, 0x42}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$qrtrtun(r10, &(0x7f0000000040)="2bdbca4b", 0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r9, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7f, 0x8, 0x10000000, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0xb, 0x0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4588, 0x40, 0x0, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 0s ago: executing program 1 (id=323): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x2, 0x0) write(r0, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/100, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/rom\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) kernel console output (not intermixed with test programs): S: 00000246 ORIG_RAX: 0000000000000000 [ 63.021801][ T6273] RAX: ffffffffffffffda RBX: 00007f791b8976c0 RCX: 00007f791a95ea0e [ 63.021812][ T6273] RDX: 000000000000000f RSI: 00007f791b8970a0 RDI: 0000000000000005 [ 63.021821][ T6273] RBP: 00007f791b897090 R08: 0000000000000000 R09: 0000000000000000 [ 63.021830][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.021840][ T6273] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 63.021863][ T6273] [ 63.079926][ T6271] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 63.081296][ T6271] .`: renamed from bond0 [ 63.172280][ T6279] FAULT_INJECTION: forcing a failure. [ 63.172280][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 63.172307][ T6279] CPU: 2 UID: 0 PID: 6279 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 63.172326][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.172335][ T6279] Call Trace: [ 63.172341][ T6279] [ 63.172347][ T6279] dump_stack_lvl+0x100/0x190 [ 63.172374][ T6279] should_fail_ex.cold+0x5/0xa [ 63.172398][ T6279] should_failslab+0xc2/0x120 [ 63.172422][ T6279] __kmalloc_noprof+0xfc/0x840 [ 63.172449][ T6279] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 63.172515][ T6279] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 63.172538][ T6279] genl_family_rcv_msg_doit+0xc7/0x300 [ 63.172557][ T6279] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.172582][ T6279] ? bpf_lsm_capable+0x9/0x10 [ 63.172596][ T6279] ? security_capable+0x80/0x260 [ 63.172615][ T6279] ? ns_capable+0xd2/0xf0 [ 63.172633][ T6279] genl_rcv_msg+0x560/0x800 [ 63.172654][ T6279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.172672][ T6279] ? __lock_acquire+0x5c0/0x1f40 [ 63.172693][ T6279] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 63.172721][ T6279] netlink_rcv_skb+0x159/0x420 [ 63.172749][ T6279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.172770][ T6279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.172807][ T6279] ? netlink_deliver_tap+0x1ae/0xcc0 [ 63.172836][ T6279] genl_rcv+0x28/0x40 [ 63.172851][ T6279] netlink_unicast+0x585/0x850 [ 63.172880][ T6279] ? __pfx_netlink_unicast+0x10/0x10 [ 63.172913][ T6279] netlink_sendmsg+0x8b0/0xda0 [ 63.172943][ T6279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.172971][ T6279] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.173000][ T6279] ____sys_sendmsg+0xa4d/0xbe0 [ 63.173021][ T6279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.173049][ T6279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.173076][ T6279] ? lock_acquire+0x1d1/0x380 [ 63.173096][ T6279] ? get_pid_task+0x2a/0x250 [ 63.173123][ T6279] ___sys_sendmsg+0x190/0x1e0 [ 63.173147][ T6279] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.173169][ T6279] ? get_pid_task+0x106/0x250 [ 63.173203][ T6279] ? find_held_lock+0x2b/0x80 [ 63.173247][ T6279] __sys_sendmsg+0x160/0x210 [ 63.173265][ T6279] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.173298][ T6279] do_syscall_64+0x123/0x790 [ 63.173327][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.173346][ T6279] RIP: 0033:0x7f9b14b9e1d9 [ 63.173362][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.173378][ T6279] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.173396][ T6279] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 63.173407][ T6279] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 63.173418][ T6279] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.173434][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.173446][ T6279] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 63.173471][ T6279] [ 63.596590][ T6286] netlink: 'syz.3.115': attribute type 8 has an invalid length. [ 63.615133][ T6288] FAULT_INJECTION: forcing a failure. [ 63.615133][ T6288] name failslab, interval 1, probability 0, space 0, times 0 [ 63.615153][ T6288] CPU: 3 UID: 0 PID: 6288 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 63.615166][ T6288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.615172][ T6288] Call Trace: [ 63.615176][ T6288] [ 63.615180][ T6288] dump_stack_lvl+0x100/0x190 [ 63.615201][ T6288] should_fail_ex.cold+0x5/0xa [ 63.615217][ T6288] should_failslab+0xc2/0x120 [ 63.615235][ T6288] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.615250][ T6288] ? skb_clone+0x190/0x400 [ 63.615263][ T6288] skb_clone+0x190/0x400 [ 63.615273][ T6288] netlink_deliver_tap+0xaed/0xcc0 [ 63.615292][ T6288] netlink_unicast+0x6a5/0x850 [ 63.615311][ T6288] ? __pfx_netlink_unicast+0x10/0x10 [ 63.615326][ T6288] ? ethnl_default_doit+0xa20/0x1520 [ 63.615341][ T6288] ? ethnl_default_doit+0xa87/0x1520 [ 63.615356][ T6288] ? kfree+0x22b/0x6d0 [ 63.615369][ T6288] ethnl_default_doit+0xb19/0x1520 [ 63.615386][ T6288] ? __pfx_ethnl_default_doit+0x10/0x10 [ 63.615402][ T6288] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 63.615414][ T6288] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 63.615428][ T6288] genl_family_rcv_msg_doit+0x214/0x300 [ 63.615440][ T6288] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.615451][ T6288] ? genl_get_cmd+0x3e7/0x760 [ 63.615478][ T6288] ? __dev_queue_xmit+0xa81/0x4a40 [ 63.615492][ T6288] ? __radix_tree_lookup+0x217/0x2b0 [ 63.615509][ T6288] genl_rcv_msg+0x560/0x800 [ 63.615521][ T6288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.615531][ T6288] ? __lock_acquire+0x5c0/0x1f40 [ 63.615544][ T6288] ? __pfx_ethnl_default_doit+0x10/0x10 [ 63.615564][ T6288] netlink_rcv_skb+0x159/0x420 [ 63.615581][ T6288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.615592][ T6288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.615614][ T6288] ? netlink_deliver_tap+0x1ae/0xcc0 [ 63.615632][ T6288] genl_rcv+0x28/0x40 [ 63.615641][ T6288] netlink_unicast+0x585/0x850 [ 63.615659][ T6288] ? __pfx_netlink_unicast+0x10/0x10 [ 63.615680][ T6288] netlink_sendmsg+0x8b0/0xda0 [ 63.615698][ T6288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.615716][ T6288] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.615734][ T6288] ____sys_sendmsg+0xa4d/0xbe0 [ 63.615746][ T6288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.615763][ T6288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.615780][ T6288] ? lock_acquire+0x1d1/0x380 [ 63.615792][ T6288] ? get_pid_task+0x2a/0x250 [ 63.615808][ T6288] ___sys_sendmsg+0x190/0x1e0 [ 63.615823][ T6288] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.615837][ T6288] ? get_pid_task+0x106/0x250 [ 63.615857][ T6288] ? find_held_lock+0x2b/0x80 [ 63.615882][ T6288] __sys_sendmsg+0x160/0x210 [ 63.615893][ T6288] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.615911][ T6288] do_syscall_64+0x123/0x790 [ 63.615928][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.615939][ T6288] RIP: 0033:0x7f8abd79e1d9 [ 63.615948][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.615960][ T6288] RSP: 002b:00007f8abe6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.615970][ T6288] RAX: ffffffffffffffda RBX: 00007f8abda25fa0 RCX: 00007f8abd79e1d9 [ 63.615977][ T6288] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 63.615983][ T6288] RBP: 00007f8abe6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.615990][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.615996][ T6288] R13: 00007f8abda26038 R14: 00007f8abda25fa0 R15: 00007ffc593dac78 [ 63.616010][ T6288] [ 63.641700][ T6292] FAULT_INJECTION: forcing a failure. [ 63.641700][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 63.641728][ T6292] CPU: 3 UID: 0 PID: 6292 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 63.641748][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.641759][ T6292] Call Trace: [ 63.641765][ T6292] [ 63.641773][ T6292] dump_stack_lvl+0x100/0x190 [ 63.641804][ T6292] should_fail_ex.cold+0x5/0xa [ 63.641832][ T6292] should_failslab+0xc2/0x120 [ 63.641859][ T6292] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.641884][ T6292] ? dst_alloc+0x99/0x1a0 [ 63.641915][ T6292] dst_alloc+0x99/0x1a0 [ 63.641944][ T6292] rt_dst_alloc+0x35/0x3a0 [ 63.641988][ T6292] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 63.642026][ T6292] ip_route_output_key_hash+0x118/0x2b0 [ 63.642054][ T6292] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 63.642080][ T6292] ? check_prev_add+0x354/0xe60 [ 63.642114][ T6292] tcp_v4_connect+0x86b/0x1b40 [ 63.642150][ T6292] ? __pfx_tcp_v4_connect+0x10/0x10 [ 63.642177][ T6292] ? __local_bh_enable_ip+0xa5/0x120 [ 63.642203][ T6292] mptcp_connect+0x4dd/0xa20 [ 63.642232][ T6292] __inet_stream_connect+0x208/0xf90 [ 63.642260][ T6292] ? lock_acquire+0x1d1/0x380 [ 63.642283][ T6292] ? __pfx___inet_stream_connect+0x10/0x10 [ 63.642307][ T6292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.642349][ T6292] ? __local_bh_enable_ip+0xa5/0x120 [ 63.642372][ T6292] inet_stream_connect+0x57/0xa0 [ 63.642399][ T6292] __sys_connect_file+0x146/0x1a0 [ 63.642427][ T6292] __sys_connect+0x141/0x170 [ 63.642473][ T6292] ? __pfx___sys_connect+0x10/0x10 [ 63.642497][ T6292] ? __fget_files+0x21f/0x3d0 [ 63.642533][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 63.642562][ T6292] __x64_sys_connect+0x72/0xb0 [ 63.642586][ T6292] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.642610][ T6292] do_syscall_64+0x123/0x790 [ 63.642637][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.642657][ T6292] RIP: 0033:0x7f8abd79e1d9 [ 63.642671][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.642685][ T6292] RSP: 002b:00007f8abe6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 63.642704][ T6292] RAX: ffffffffffffffda RBX: 00007f8abda25fa0 RCX: 00007f8abd79e1d9 [ 63.642714][ T6292] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 63.642724][ T6292] RBP: 00007f8abe6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.642733][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.642742][ T6292] R13: 00007f8abda26038 R14: 00007f8abda25fa0 R15: 00007ffc593dac78 [ 63.642760][ T6292] [ 63.810175][ T6297] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 64.043544][ T6307] FAULT_INJECTION: forcing a failure. [ 64.043544][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 64.043573][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.3.122 Not tainted syzkaller #0 PREEMPT(full) [ 64.043594][ T6307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.043604][ T6307] Call Trace: [ 64.043611][ T6307] [ 64.043618][ T6307] dump_stack_lvl+0x100/0x190 [ 64.043662][ T6307] should_fail_ex.cold+0x5/0xa [ 64.043689][ T6307] should_failslab+0xc2/0x120 [ 64.043723][ T6307] __kmalloc_noprof+0xfc/0x840 [ 64.043747][ T6307] ? tomoyo_encode2+0xfb/0x3c0 [ 64.043779][ T6307] tomoyo_encode2+0xfb/0x3c0 [ 64.043810][ T6307] tomoyo_encode+0x29/0x50 [ 64.043836][ T6307] tomoyo_realpath_from_path+0x18c/0x690 [ 64.043875][ T6307] tomoyo_check_open_permission+0x2af/0x3c0 [ 64.043901][ T6307] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 64.043924][ T6307] ? do_syscall_64+0x123/0x790 [ 64.043963][ T6307] ? hook_file_open+0x248/0x8e0 [ 64.044006][ T6307] tomoyo_file_open+0x6b/0x90 [ 64.044027][ T6307] security_file_open+0xb5/0x1e0 [ 64.044055][ T6307] do_dentry_open+0x588/0x14d0 [ 64.044087][ T6307] vfs_open+0x82/0x3f0 [ 64.044120][ T6307] dentry_open_nonotify+0x7b/0xd0 [ 64.044148][ T6307] fanotify_read+0x5f2/0x2870 [ 64.044188][ T6307] ? __lock_acquire+0x5c0/0x1f40 [ 64.044212][ T6307] ? __pfx_fanotify_read+0x10/0x10 [ 64.044237][ T6307] ? inode_has_perm.isra.0+0x15e/0x1a0 [ 64.044264][ T6307] ? __file_has_perm+0x32e/0x4a0 [ 64.044290][ T6307] ? __pfx___file_has_perm+0x10/0x10 [ 64.044319][ T6307] ? get_signal+0x19b6/0x21e0 [ 64.044345][ T6307] ? selinux_file_permission+0x8f/0x6d0 [ 64.044371][ T6307] ? __pfx_woken_wake_function+0x10/0x10 [ 64.044397][ T6307] ? bpf_lsm_file_permission+0x9/0x10 [ 64.044423][ T6307] ? security_file_permission+0x76/0x210 [ 64.044450][ T6307] ? rw_verify_area+0xce/0x6d0 [ 64.044469][ T6307] ? __pfx_fanotify_read+0x10/0x10 [ 64.044497][ T6307] vfs_read+0x1e4/0xb40 [ 64.044536][ T6307] ? lock_acquire+0x1d1/0x380 [ 64.044557][ T6307] ? __fget_files+0x34/0x3d0 [ 64.044583][ T6307] ? __pfx_vfs_read+0x10/0x10 [ 64.044603][ T6307] ? find_held_lock+0x2b/0x80 [ 64.044629][ T6307] ? __fget_files+0x215/0x3d0 [ 64.044653][ T6307] ? __fget_files+0x215/0x3d0 [ 64.044683][ T6307] ? __fget_files+0x21f/0x3d0 [ 64.044715][ T6307] ksys_read+0x12a/0x250 [ 64.044736][ T6307] ? __pfx_ksys_read+0x10/0x10 [ 64.044766][ T6307] do_syscall_64+0x123/0x790 [ 64.044793][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.044813][ T6307] RIP: 0033:0x7f9d89d9e1d9 [ 64.044829][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.044845][ T6307] RSP: 002b:00007f9d8abfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.044865][ T6307] RAX: ffffffffffffffda RBX: 00007f9d8a025fa0 RCX: 00007f9d89d9e1d9 [ 64.044882][ T6307] RDX: 0000000000002020 RSI: 0000200000000b00 RDI: 0000000000000004 [ 64.044892][ T6307] RBP: 00007f9d8abfd090 R08: 0000000000000000 R09: 0000000000000000 [ 64.044903][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.044914][ T6307] R13: 00007f9d8a026038 R14: 00007f9d8a025fa0 R15: 00007ffcc5500198 [ 64.044938][ T6307] [ 64.045180][ T6307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.065914][ T43] kauditd_printk_skb: 96 callbacks suppressed [ 64.065930][ T43] audit: type=1400 audit(1791559088.163:406): avc: denied { read write } for pid=6312 comm="syz.1.125" name="no_out_endpoint" dev="configfs" ino=11595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 64.066244][ T43] audit: type=1400 audit(1791559088.163:407): avc: denied { open } for pid=6312 comm="syz.1.125" path="/34/config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint" dev="configfs" ino=11595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 64.075259][ T43] audit: type=1400 audit(1791559088.173:408): avc: denied { bind } for pid=6312 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.078697][ T6313] __nla_validate_parse: 7 callbacks suppressed [ 64.078710][ T6313] netlink: 68 bytes leftover after parsing attributes in process `syz.1.125'. [ 64.122140][ T43] audit: type=1400 audit(1791559088.213:409): avc: denied { accept } for pid=6314 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.146112][ T43] audit: type=1400 audit(1791559088.243:410): avc: denied { append } for pid=6317 comm="syz.0.127" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.146773][ T6318] support for the xor transformation has been removed. [ 64.150111][ T43] audit: type=1400 audit(1791559088.243:411): avc: denied { create } for pid=6317 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 64.162525][ T43] audit: type=1400 audit(1791559088.253:412): avc: denied { setopt } for pid=6317 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.163113][ T43] audit: type=1400 audit(1791559088.253:413): avc: denied { listen } for pid=6317 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.291237][ T43] audit: type=1400 audit(1791559088.383:414): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.317951][ T43] audit: type=1400 audit(1791559088.413:415): avc: denied { ioctl } for pid=6323 comm="syz.1.129" path="/dev/video8" dev="devtmpfs" ino=973 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 64.415050][ T5082] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.566043][ T5082] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 64.567345][ T5082] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 64.567381][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 64.567400][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 64.567417][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 64.567434][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 64.567450][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 64.567468][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 64.567485][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 64.567502][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 64.567519][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 64.567536][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 64.567552][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 64.567569][ T5082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 30768, setting to 1024 [ 64.567588][ T5082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 64.567605][ T5082] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 64.570055][ T5082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.570073][ T5082] usb 5-1: Product: syz [ 64.570084][ T5082] usb 5-1: Manufacturer: syz [ 64.570094][ T5082] usb 5-1: SerialNumber: syz [ 64.576602][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.576663][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.576761][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.576806][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.576889][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.576941][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577033][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577081][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577125][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577207][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577251][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.577331][ T6318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.579435][ T5082] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 64.584113][ T5082] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 64.590520][ T5082] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 64.593419][ T5082] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 64.594105][ T5082] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 64.667157][ T6347] FAULT_INJECTION: forcing a failure. [ 64.667157][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.667184][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 64.667205][ T6347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.667214][ T6347] Call Trace: [ 64.667220][ T6347] [ 64.667227][ T6347] dump_stack_lvl+0x100/0x190 [ 64.667259][ T6347] should_fail_ex.cold+0x5/0xa [ 64.667282][ T6347] _copy_to_user+0x32/0xd0 [ 64.667323][ T6347] put_user_ifreq+0xe6/0x150 [ 64.667353][ T6347] sock_do_ioctl+0x233/0x280 [ 64.667372][ T6347] ? __pfx_sock_do_ioctl+0x10/0x10 [ 64.667391][ T6347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.667417][ T6347] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.667436][ T6347] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 64.667461][ T6347] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.667487][ T6347] sock_ioctl+0x599/0x6b0 [ 64.667508][ T6347] ? __pfx_sock_ioctl+0x10/0x10 [ 64.667535][ T6347] ? selinux_file_ioctl+0x13b/0x290 [ 64.667555][ T6347] ? selinux_file_ioctl+0xb6/0x290 [ 64.667577][ T6347] ? __pfx_sock_ioctl+0x10/0x10 [ 64.667598][ T6347] __x64_sys_ioctl+0x18e/0x210 [ 64.667619][ T6347] do_syscall_64+0x123/0x790 [ 64.667643][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.667660][ T6347] RIP: 0033:0x7f791a99e1d9 [ 64.667673][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.667687][ T6347] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.667701][ T6347] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 64.667711][ T6347] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000003 [ 64.667721][ T6347] RBP: 00007f791b897090 R08: 0000000000000000 R09: 0000000000000000 [ 64.667731][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.667740][ T6347] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 64.667763][ T6347] [ 65.705712][ T5962] net_ratelimit: 155 callbacks suppressed [ 65.705725][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.706380][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.445147][ T6381] process 'syz.1.155' launched '/dev/fd/5' with NULL argv: empty string added [ 66.566973][ T6386] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 66.566991][ T6386] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 66.567000][ T6386] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.157'. [ 66.568998][ T6386] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 66.569051][ T6386] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 66.569061][ T6386] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.157'. [ 66.666220][ T6393] FAULT_INJECTION: forcing a failure. [ 66.666220][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 66.666252][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 66.666276][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.666287][ T6393] Call Trace: [ 66.666293][ T6393] [ 66.666301][ T6393] dump_stack_lvl+0x100/0x190 [ 66.666334][ T6393] should_fail_ex.cold+0x5/0xa [ 66.666362][ T6393] should_failslab+0xc2/0x120 [ 66.666394][ T6393] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.666424][ T6393] ? __proc_create+0xc1/0x8f0 [ 66.666446][ T6393] ? __proc_create+0x247/0x8f0 [ 66.666474][ T6393] __proc_create+0x247/0x8f0 [ 66.666499][ T6393] ? __pfx___proc_create+0x10/0x10 [ 66.666525][ T6393] ? _raw_write_unlock+0x28/0x50 [ 66.666550][ T6393] ? proc_register+0x56d/0x910 [ 66.666576][ T6393] proc_create_reg+0x75/0x170 [ 66.666600][ T6393] proc_create_seq_private+0x8e/0x180 [ 66.666626][ T6393] ? __pfx_proc_create_seq_private+0x10/0x10 [ 66.666650][ T6393] ? __pfx_proc_create_net_data+0x10/0x10 [ 66.666672][ T6393] ? __pfx_uevent_net_rcv+0x10/0x10 [ 66.666697][ T6393] ? __pfx_dev_proc_net_init+0x10/0x10 [ 66.666719][ T6393] dev_proc_net_init+0xac/0x230 [ 66.666739][ T6393] ops_init+0x1e2/0x5f0 [ 66.666762][ T6393] setup_net+0x118/0x3a0 [ 66.666782][ T6393] ? __pfx_setup_net+0x10/0x10 [ 66.666841][ T6393] copy_net_ns+0x345/0x7a0 [ 66.666867][ T6393] create_new_namespaces+0x3ea/0xac0 [ 66.666898][ T6393] unshare_nsproxy_namespaces+0xf2/0x220 [ 66.666925][ T6393] ksys_unshare+0x4a2/0xa70 [ 66.666949][ T6393] ? __pfx_ksys_unshare+0x10/0x10 [ 66.666983][ T6393] __x64_sys_unshare+0x31/0x40 [ 66.667006][ T6393] do_syscall_64+0x123/0x790 [ 66.667036][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.667056][ T6393] RIP: 0033:0x7f791a99e1d9 [ 66.667072][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.667089][ T6393] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.667108][ T6393] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 66.667121][ T6393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 66.667132][ T6393] RBP: 00007f791aa35888 R08: 0000000000000000 R09: 0000000000000000 [ 66.667143][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.667154][ T6393] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 66.667180][ T6393] [ 66.755918][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.174676][ T5835] usb 5-1: USB disconnect, device number 2 [ 67.208207][ T5835] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 67.217371][ T5835] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 67.218050][ T5835] keyspan 5-1:1.0: device disconnected [ 67.560384][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 67.560398][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 67.719143][ T6419] FAULT_INJECTION: forcing a failure. [ 67.719143][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 67.719164][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(full) [ 67.719177][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.719183][ T6419] Call Trace: [ 67.719186][ T6419] [ 67.719191][ T6419] dump_stack_lvl+0x100/0x190 [ 67.719211][ T6419] should_fail_ex.cold+0x5/0xa [ 67.719227][ T6419] should_failslab+0xc2/0x120 [ 67.719243][ T6419] __kvmalloc_node_noprof+0x113/0x9b0 [ 67.719258][ T6419] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 67.719270][ T6419] ? io_uring_setup.cold+0x1f4/0x1cde [ 67.719284][ T6419] io_uring_setup.cold+0x1f4/0x1cde [ 67.719295][ T6419] ? lock_acquire+0x1d1/0x380 [ 67.719308][ T6419] ? avc_has_perm_noaudit+0x56/0x470 [ 67.719319][ T6419] ? __pfx_io_uring_setup+0x10/0x10 [ 67.719335][ T6419] ? find_held_lock+0x2b/0x80 [ 67.719353][ T6419] ? avc_has_perm_noaudit+0x11e/0x470 [ 67.719363][ T6419] ? avc_has_perm_noaudit+0x11e/0x470 [ 67.719383][ T6419] ? ksys_write+0x1ac/0x250 [ 67.719396][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 67.719412][ T6419] __x64_sys_io_uring_setup+0xc2/0x170 [ 67.719429][ T6419] do_syscall_64+0x123/0x790 [ 67.719446][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.719457][ T6419] RIP: 0033:0x7f9b14b9e1d9 [ 67.719466][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.719476][ T6419] RSP: 002b:00007f9b15ab5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 67.719490][ T6419] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f9b14b9e1d9 [ 67.719501][ T6419] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 67.719510][ T6419] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 67.719519][ T6419] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 67.719530][ T6419] R13: 0000200000000b10 R14: 00007f9b15ab5fd8 R15: 0000000000000000 [ 67.719555][ T6419] [ 67.813419][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.086583][ T6429] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 68.520158][ T5804] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 68.532366][ T5804] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 68.716832][ T6453] block device autoloading is deprecated and will be removed. [ 68.717548][ T6454] block device autoloading is deprecated and will be removed. [ 68.747226][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.756563][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 68.758274][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 68.788078][ T5804] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 68.827316][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.964252][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 69.258736][ T6471] FAULT_INJECTION: forcing a failure. [ 69.258736][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.258766][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 69.258813][ T6471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.258824][ T6471] Call Trace: [ 69.258830][ T6471] [ 69.258837][ T6471] dump_stack_lvl+0x100/0x190 [ 69.258884][ T6471] should_fail_ex.cold+0x5/0xa [ 69.258911][ T6471] _copy_from_iter+0x1f4/0x1690 [ 69.258952][ T6471] ? __asan_memset+0x23/0x50 [ 69.258976][ T6471] ? __pfx__copy_from_iter+0x10/0x10 [ 69.259001][ T6471] ? __pfx___alloc_skb+0x10/0x10 [ 69.259042][ T6471] netlink_sendmsg+0x808/0xda0 [ 69.259074][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.259104][ T6471] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.259148][ T6471] ____sys_sendmsg+0xa4d/0xbe0 [ 69.259170][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.259200][ T6471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.259229][ T6471] ? lock_acquire+0x1d1/0x380 [ 69.259250][ T6471] ? get_pid_task+0x2a/0x250 [ 69.259278][ T6471] ___sys_sendmsg+0x190/0x1e0 [ 69.259303][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.259327][ T6471] ? get_pid_task+0x106/0x250 [ 69.259362][ T6471] ? find_held_lock+0x2b/0x80 [ 69.259406][ T6471] __sys_sendmsg+0x160/0x210 [ 69.259426][ T6471] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.259457][ T6471] do_syscall_64+0x123/0x790 [ 69.259492][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.259512][ T6471] RIP: 0033:0x7f9b14b9e1d9 [ 69.259529][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.259545][ T6471] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.259565][ T6471] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 69.259579][ T6471] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 69.259589][ T6471] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.259601][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.259611][ T6471] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 69.259636][ T6471] [ 69.296331][ T5804] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 69.308905][ T6443] ceph: No mds server is up or the cluster is laggy [ 69.416848][ T6478] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 69.419867][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 69.419881][ T43] audit: type=1400 audit(1791559093.513:449): avc: denied { getopt } for pid=6477 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.420497][ T43] audit: type=1400 audit(1791559093.513:450): avc: denied { ioctl } for pid=6477 comm="syz.1.187" path="socket:[13742]" dev="sockfs" ino=13742 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.704349][ T6484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.704610][ T6484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.704767][ T6484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.706440][ T6484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.808718][ T6487] FAULT_INJECTION: forcing a failure. [ 69.808718][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 69.808744][ T6487] CPU: 2 UID: 0 PID: 6487 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 69.808762][ T6487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.808773][ T6487] Call Trace: [ 69.808779][ T6487] [ 69.808786][ T6487] dump_stack_lvl+0x100/0x190 [ 69.808840][ T6487] should_fail_ex.cold+0x5/0xa [ 69.808868][ T6487] should_failslab+0xc2/0x120 [ 69.808893][ T6487] __kvmalloc_node_noprof+0x113/0x9b0 [ 69.808913][ T6487] ? __might_fault+0xc5/0x140 [ 69.808930][ T6487] ? xt_alloc_table_info+0x44/0xa0 [ 69.808955][ T6487] xt_alloc_table_info+0x44/0xa0 [ 69.808975][ T6487] do_ipt_set_ctl+0x611/0xcf0 [ 69.809000][ T6487] ? nf_sockopt_find.isra.0+0x222/0x290 [ 69.809017][ T6487] ? nf_sockopt_find.isra.0+0x222/0x290 [ 69.809038][ T6487] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 69.809061][ T6487] ? __mutex_unlock_slowpath+0x35d/0x930 [ 69.809088][ T6487] ? sockopt_release_sock+0x5c/0x70 [ 69.809104][ T6487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.809136][ T6487] ? nf_sockopt_find.isra.0+0x222/0x290 [ 69.809157][ T6487] nf_setsockopt+0x8d/0xf0 [ 69.809178][ T6487] ip_setsockopt+0xcb/0xf0 [ 69.809206][ T6487] udp_setsockopt+0x64/0xb0 [ 69.809229][ T6487] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 69.809251][ T6487] do_sock_setsockopt+0xf3/0x1d0 [ 69.809275][ T6487] __sys_setsockopt+0x195/0x220 [ 69.809306][ T6487] __x64_sys_setsockopt+0xbd/0x160 [ 69.809328][ T6487] ? do_syscall_64+0xae/0x790 [ 69.809349][ T6487] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.809369][ T6487] do_syscall_64+0x123/0x790 [ 69.809395][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.809414][ T6487] RIP: 0033:0x7f9b14b9e1d9 [ 69.809428][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.809444][ T6487] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.809461][ T6487] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 69.809473][ T6487] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 69.809484][ T6487] RBP: 00007f9b15ab6090 R08: 0000000000000408 R09: 0000000000000000 [ 69.809493][ T6487] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001 [ 69.809502][ T6487] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 69.809525][ T6487] [ 69.937685][ T43] audit: type=1400 audit(1791559094.033:451): avc: denied { create } for pid=6492 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.938697][ T43] audit: type=1400 audit(1791559094.033:452): avc: denied { getopt } for pid=6492 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.939701][ T43] audit: type=1400 audit(1791559094.033:453): avc: denied { read write } for pid=6492 comm="syz.0.194" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.940025][ T43] audit: type=1400 audit(1791559094.033:454): avc: denied { open } for pid=6492 comm="syz.0.194" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.941450][ T6493] program syz.0.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.002059][ T6496] Console: switching to colour dummy device 80x25 [ 70.014109][ T43] audit: type=1400 audit(1791559094.103:455): avc: denied { append } for pid=6497 comm="syz.1.196" name="001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.263186][ T6499] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 70.281719][ T6499] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 70.281916][ T6499] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 70.281993][ T6499] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 70.282120][ T6499] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 70.282595][ T6499] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 70.307891][ T6499] pci 0000:00:01.0: Adding to iommu group 1 [ 70.312339][ T6499] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 70.312360][ T6499] pci 0000:00:01.0: vgaarb: bridge control possible [ 70.312373][ T6499] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 70.326964][ T6499] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 70.327117][ T6499] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 70.333016][ T6499] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 70.394240][ T6499] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 70.394311][ T6499] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 70.397500][ T6499] [drm] features: -virgl +edid -resource_blob -host_visible [ 70.397512][ T6499] [drm] features: -context_init -blob_alignment [ 70.410478][ T6499] [drm] number of scanouts: 1 [ 70.410523][ T6499] [drm] number of cap sets: 0 [ 70.433633][ T6499] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 70.509800][ T6499] Console: switching to colour frame buffer device 160x50 [ 70.540729][ T6499] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 70.727661][ T6509] FAULT_INJECTION: forcing a failure. [ 70.727661][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 70.727681][ T6509] CPU: 3 UID: 0 PID: 6509 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full) [ 70.727693][ T6509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.727699][ T6509] Call Trace: [ 70.727703][ T6509] [ 70.727707][ T6509] dump_stack_lvl+0x100/0x190 [ 70.727772][ T6509] should_fail_ex.cold+0x5/0xa [ 70.727790][ T6509] should_failslab+0xc2/0x120 [ 70.727825][ T6509] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 70.727840][ T6509] ? __d_alloc+0x35/0xa50 [ 70.727854][ T6509] __d_alloc+0x35/0xa50 [ 70.727866][ T6509] d_alloc_pseudo+0x1c/0xc0 [ 70.727884][ T6509] alloc_file_pseudo+0x118/0x290 [ 70.727896][ T6509] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 70.727906][ T6509] ? alloc_fd+0x471/0x7a0 [ 70.727923][ T6509] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.727941][ T6509] __anon_inode_getfile+0xe8/0x280 [ 70.727958][ T6509] anon_inode_getfile_fmode+0x37/0xa0 [ 70.727973][ T6509] __do_sys_fanotify_init+0xa0d/0xe30 [ 70.727993][ T6509] do_syscall_64+0x123/0x790 [ 70.728029][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.728040][ T6509] RIP: 0033:0x7f9b14b9e1d9 [ 70.728050][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.728060][ T6509] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 70.728072][ T6509] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 70.728080][ T6509] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000004 [ 70.728087][ T6509] RBP: 00007f9b14c35888 R08: 0000000000000000 R09: 0000000000000000 [ 70.728094][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.728100][ T6509] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 70.728115][ T6509] [ 70.906995][ T5962] net_ratelimit: 35 callbacks suppressed [ 70.907015][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.922558][ T43] audit: type=1400 audit(1792083383.012:456): avc: denied { kexec_image_load } for pid=6515 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 70.936363][ T43] audit: type=1400 audit(1792083383.031:457): avc: denied { create } for pid=6515 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.936953][ T43] audit: type=1400 audit(1792083383.031:458): avc: denied { bind } for pid=6515 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.158463][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.158511][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.447647][ T6532] FAULT_INJECTION: forcing a failure. [ 71.447647][ T6532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 71.447666][ T6532] CPU: 2 UID: 0 PID: 6532 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(full) [ 71.447679][ T6532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.447702][ T6532] Call Trace: [ 71.447706][ T6532] [ 71.447710][ T6532] dump_stack_lvl+0x100/0x190 [ 71.447741][ T6532] should_fail_ex.cold+0x5/0xa [ 71.447755][ T6532] ? prepare_alloc_pages+0x16d/0x5b0 [ 71.447782][ T6532] should_fail_alloc_page+0xeb/0x140 [ 71.447815][ T6532] prepare_alloc_pages+0x1f0/0x5b0 [ 71.447844][ T6532] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 71.447872][ T6532] ? lock_acquire+0x1d1/0x380 [ 71.447892][ T6532] ? page_table_check_set+0x11d/0x580 [ 71.447910][ T6532] ? find_held_lock+0x2b/0x80 [ 71.447926][ T6532] ? page_table_check_set+0x30f/0x580 [ 71.447942][ T6532] ? page_table_check_set+0x30f/0x580 [ 71.447961][ T6532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 71.447974][ T6532] ? page_table_check_set+0x31e/0x580 [ 71.447995][ T6532] ? __lock_acquire+0x5c0/0x1f40 [ 71.448009][ T6532] ? __lock_acquire+0x5c0/0x1f40 [ 71.448021][ T6532] ? __css_rstat_updated+0x1ce/0x590 [ 71.448040][ T6532] ? lock_acquire+0x1d1/0x380 [ 71.448051][ T6532] ? page_table_check_set+0x11d/0x580 [ 71.448068][ T6532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.448084][ T6532] ? policy_nodemask+0xed/0x4f0 [ 71.448102][ T6532] alloc_pages_mpol+0x201/0x550 [ 71.448119][ T6532] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.448137][ T6532] ? __page_table_check_ptes_set+0x1d5/0x530 [ 71.448157][ T6532] folio_alloc_mpol_noprof+0x36/0x260 [ 71.448170][ T6532] vma_alloc_folio_noprof+0xed/0x1d0 [ 71.448181][ T6532] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 71.448193][ T6532] ? rcu_read_unlock+0x2d/0xb0 [ 71.448208][ T6532] do_anonymous_page+0xac9/0x2050 [ 71.448223][ T6532] ? __pfx_do_anonymous_page+0x10/0x10 [ 71.448233][ T6532] ? rcu_read_unlock+0x2d/0xb0 [ 71.448243][ T6532] ? rcu_read_unlock+0x2d/0xb0 [ 71.448254][ T6532] ? __pte_offset_map+0x179/0x310 [ 71.448270][ T6532] __handle_mm_fault+0x1ff3/0x2f60 [ 71.448283][ T6532] ? lock_vma_under_rcu+0x11d/0x590 [ 71.448301][ T6532] ? __pfx___handle_mm_fault+0x10/0x10 [ 71.448316][ T6532] ? lock_vma_under_rcu+0x17c/0x590 [ 71.448341][ T6532] handle_mm_fault+0x363/0xa20 [ 71.448355][ T6532] do_user_addr_fault+0x59c/0x12f0 [ 71.448374][ T6532] exc_page_fault+0x6f/0xd0 [ 71.448394][ T6532] asm_exc_page_fault+0x26/0x30 [ 71.448405][ T6532] RIP: 0033:0x7f9b14b6eac9 [ 71.448415][ T6532] Code: de 00 01 74 a3 83 f9 c0 0f 87 59 fe ff ff 62 e1 fe 28 6f 4e 01 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 62 c1 fe 28 7f 00 62 c1 fe 28 7f 48 01 c3 0f 1f 80 00 00 00 [ 71.448425][ T6532] RSP: 002b:00007f9b15ab5f58 EFLAGS: 00010206 [ 71.448435][ T6532] RAX: 0000200000c62000 RBX: 0000000000000009 RCX: 00000000000015f5 [ 71.448442][ T6532] RDX: 00000000000025f5 RSI: 00007f9b14c05d00 RDI: 0000200000c63000 [ 71.448448][ T6532] RBP: 00007f9b14c550d0 R08: 0000200000c62000 R09: ffffffffffffffff [ 71.448455][ T6532] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000c00000 [ 71.448461][ T6532] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 71.448476][ T6532] [ 71.448679][ T6532] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 71.494419][ T6534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.585572][ T6536] syzkaller0: entered promiscuous mode [ 71.585585][ T6536] syzkaller0: entered allmulticast mode [ 71.661154][ T6536] simple: /dev/video#_3 [ 71.661171][ T6536] simple: /dev/video#_6 [ 71.661180][ T6536] simple: /dev/video#_9 [ 71.661188][ T6536] simple: /dev/video#_12 [ 71.661196][ T6536] simple: /dev/video#_15 [ 71.661203][ T6536] simple: /dev/video#_18 [ 71.661211][ T6536] simple: /dev/video#_21 [ 71.661219][ T6536] simple: /dev/video#_24 [ 71.661227][ T6536] simple: /dev/video#_27 [ 71.661236][ T6536] simple: /dev/video#_30 [ 71.661245][ T6536] simple: /dev/video#_33 [ 71.661254][ T6536] simple: /dev/video#_36 [ 71.661263][ T6536] simple: /dev/video#_39 [ 71.661272][ T6536] simple: /dev/video#_42 [ 71.661281][ T6536] simple: /dev/video#_45 [ 71.661290][ T6536] simple: /dev/video#_48 [ 71.661300][ T6536] simple: /dev/video#_51 [ 71.661309][ T6536] simple: /dev/video#_54 [ 71.661318][ T6536] simple: /dev/video#_57 [ 71.661327][ T6536] simple: /dev/video#_60 [ 71.661336][ T6536] simple: /dev/video#_63 [ 71.661344][ T6536] simple: /dev/video#_66 [ 71.661353][ T6536] simple: /dev/video#_69 [ 71.661362][ T6536] simple: /dev/video#_72 [ 71.661377][ T6536] simple: /dev/video#_75 [ 71.661387][ T6536] simple: /dev/video#_78 [ 71.661397][ T6536] simple: /dev/video#_81 [ 71.661406][ T6536] simple: /dev/video#_84 [ 71.661414][ T6536] simple: /dev/video#_87 [ 71.661424][ T6536] simple: /dev/video#_90 [ 71.661433][ T6536] simple: /dev/video#_93 [ 71.661442][ T6536] simple: /dev/video#_96 [ 71.661451][ T6536] TC_ACT_REPEAT abuse ? [ 71.749145][ T6540] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.808246][ T6546] FAULT_INJECTION: forcing a failure. [ 71.808246][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 71.808275][ T6546] CPU: 2 UID: 0 PID: 6546 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 71.808294][ T6546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.808304][ T6546] Call Trace: [ 71.808311][ T6546] [ 71.808317][ T6546] dump_stack_lvl+0x100/0x190 [ 71.808347][ T6546] should_fail_ex.cold+0x5/0xa [ 71.808379][ T6546] should_failslab+0xc2/0x120 [ 71.808450][ T6546] __kmalloc_noprof+0xfc/0x840 [ 71.808472][ T6546] ? kasan_save_track+0x14/0x30 [ 71.808495][ T6546] ? ethnl_default_start+0x114/0x3f0 [ 71.808559][ T6546] ethnl_default_start+0x114/0x3f0 [ 71.808584][ T6546] ? __pfx_ethnl_default_start+0x10/0x10 [ 71.808609][ T6546] genl_start+0x601/0x970 [ 71.808630][ T6546] __netlink_dump_start+0x60e/0x990 [ 71.808658][ T6546] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 71.808680][ T6546] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 71.808706][ T6546] ? __pfx_genl_get_cmd+0x10/0x10 [ 71.808731][ T6546] ? __pfx_genl_start+0x10/0x10 [ 71.808746][ T6546] ? __pfx_genl_dumpit+0x10/0x10 [ 71.808760][ T6546] ? __pfx_genl_done+0x10/0x10 [ 71.808779][ T6546] ? __dev_queue_xmit+0xa81/0x4a40 [ 71.808802][ T6546] ? __radix_tree_lookup+0x217/0x2b0 [ 71.808830][ T6546] genl_rcv_msg+0x471/0x800 [ 71.808850][ T6546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.808868][ T6546] ? __lock_acquire+0x5c0/0x1f40 [ 71.808887][ T6546] ? __pfx_ethnl_default_start+0x10/0x10 [ 71.808909][ T6546] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 71.808933][ T6546] ? __pfx_ethnl_default_done+0x10/0x10 [ 71.808967][ T6546] netlink_rcv_skb+0x159/0x420 [ 71.808992][ T6546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.809010][ T6546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.809046][ T6546] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.809075][ T6546] genl_rcv+0x28/0x40 [ 71.809090][ T6546] netlink_unicast+0x585/0x850 [ 71.809120][ T6546] ? __pfx_netlink_unicast+0x10/0x10 [ 71.809154][ T6546] netlink_sendmsg+0x8b0/0xda0 [ 71.809185][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.809214][ T6546] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.809243][ T6546] ____sys_sendmsg+0xa4d/0xbe0 [ 71.809263][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.809291][ T6546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.809319][ T6546] ? lock_acquire+0x1d1/0x380 [ 71.809339][ T6546] ? get_pid_task+0x2a/0x250 [ 71.809371][ T6546] ___sys_sendmsg+0x190/0x1e0 [ 71.809396][ T6546] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.809419][ T6546] ? get_pid_task+0x106/0x250 [ 71.809472][ T6546] ? find_held_lock+0x2b/0x80 [ 71.809516][ T6546] __sys_sendmsg+0x160/0x210 [ 71.809533][ T6546] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.809566][ T6546] do_syscall_64+0x123/0x790 [ 71.809594][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.809614][ T6546] RIP: 0033:0x7f9b14b9e1d9 [ 71.809630][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.809647][ T6546] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.809666][ T6546] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 71.809679][ T6546] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 71.809690][ T6546] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 71.809701][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.809711][ T6546] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 71.809738][ T6546] [ 71.825733][ T6548] FAULT_INJECTION: forcing a failure. [ 71.825733][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 71.825764][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) [ 71.825788][ T6548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.825800][ T6548] Call Trace: [ 71.825808][ T6548] [ 71.825816][ T6548] dump_stack_lvl+0x100/0x190 [ 71.825861][ T6548] should_fail_ex.cold+0x5/0xa [ 71.825894][ T6548] should_failslab+0xc2/0x120 [ 71.825926][ T6548] __kvmalloc_node_noprof+0x113/0x9b0 [ 71.825958][ T6548] ? __do_sys_add_key+0x244/0x460 [ 71.825986][ T6548] __do_sys_add_key+0x244/0x460 [ 71.826010][ T6548] ? __pfx___do_sys_add_key+0x10/0x10 [ 71.826043][ T6548] do_syscall_64+0x123/0x790 [ 71.826075][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.826096][ T6548] RIP: 0033:0x7f791a99e1d9 [ 71.826114][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.826133][ T6548] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 71.826152][ T6548] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 71.826166][ T6548] RDX: 00002000000007c0 RSI: 0000000000000000 RDI: 0000200000000480 [ 71.826178][ T6548] RBP: 00007f791aa35888 R08: 000000001a60bb31 R09: 0000000000000000 [ 71.826190][ T6548] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 71.826202][ T6548] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 71.826231][ T6548] [ 71.874911][ T6550] qnx6: Unable to read first mmi superblock [ 72.021984][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.123232][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.128430][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128505][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128553][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128598][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128644][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128689][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.128734][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.334845][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.0.223 [ 72.335588][ T6571] netlink: 'syz.0.223': attribute type 63 has an invalid length. [ 72.335603][ T6571] netlink: 5 bytes leftover after parsing attributes in process `syz.0.223'. [ 72.553935][ T6588] loop7: detected capacity change from 0 to 7 [ 72.607646][ T6588] Dev loop7: unable to read RDB block 7 [ 72.607669][ T6588] loop7: unable to read partition table [ 72.607754][ T6588] loop7: partition table beyond EOD, truncated [ 72.609875][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 72.611383][ T6588] loop_reread_partitions: partition scan of loop7 (Cj̖PP{K %`ր{֐ȟ4FLQk݊5) failed (rc=-5) [ 73.735810][ T6603] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 73.940834][ T6626] FAULT_INJECTION: forcing a failure. [ 73.940834][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.940854][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 73.940868][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.940874][ T6626] Call Trace: [ 73.940878][ T6626] [ 73.940883][ T6626] dump_stack_lvl+0x100/0x190 [ 73.940903][ T6626] should_fail_ex.cold+0x5/0xa [ 73.940919][ T6626] _copy_from_iter+0x1f4/0x1690 [ 73.940937][ T6626] ? __asan_memset+0x23/0x50 [ 73.940951][ T6626] ? __pfx__copy_from_iter+0x10/0x10 [ 73.940966][ T6626] ? __pfx___alloc_skb+0x10/0x10 [ 73.940987][ T6626] netlink_sendmsg+0x808/0xda0 [ 73.941007][ T6626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.941030][ T6626] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.941047][ T6626] ____sys_sendmsg+0xa4d/0xbe0 [ 73.941060][ T6626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.941078][ T6626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.941094][ T6626] ? lock_acquire+0x1d1/0x380 [ 73.941107][ T6626] ? get_pid_task+0x2a/0x250 [ 73.941123][ T6626] ___sys_sendmsg+0x190/0x1e0 [ 73.941138][ T6626] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.941152][ T6626] ? get_pid_task+0x106/0x250 [ 73.941172][ T6626] ? find_held_lock+0x2b/0x80 [ 73.941196][ T6626] __sys_sendmsg+0x160/0x210 [ 73.941207][ T6626] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.941225][ T6626] do_syscall_64+0x123/0x790 [ 73.941241][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.941253][ T6626] RIP: 0033:0x7f791a99e1d9 [ 73.941262][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.941273][ T6626] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.941283][ T6626] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 73.941290][ T6626] RDX: 0000000000040084 RSI: 0000200000000200 RDI: 0000000000000003 [ 73.941296][ T6626] RBP: 00007f791b897090 R08: 0000000000000000 R09: 0000000000000000 [ 73.941303][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.941309][ T6626] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 73.941323][ T6626] [ 74.021089][ T6632] FAULT_INJECTION: forcing a failure. [ 74.021089][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 74.021108][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 74.021121][ T6632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.021128][ T6632] Call Trace: [ 74.021132][ T6632] [ 74.021136][ T6632] dump_stack_lvl+0x100/0x190 [ 74.021157][ T6632] should_fail_ex.cold+0x5/0xa [ 74.021173][ T6632] should_failslab+0xc2/0x120 [ 74.021190][ T6632] __kmalloc_noprof+0xfc/0x840 [ 74.021204][ T6632] ? cap_capable+0x107/0x430 [ 74.021216][ T6632] ? lsm_blob_alloc+0x68/0x90 [ 74.021229][ T6632] lsm_blob_alloc+0x68/0x90 [ 74.021240][ T6632] security_bpf_prog_load+0x5b/0x2f0 [ 74.021255][ T6632] ? bpf_vlog_init+0x118/0x150 [ 74.021266][ T6632] bpf_check+0x17b2/0xac70 [ 74.021284][ T6632] ? __css_rstat_updated+0x1ce/0x590 [ 74.021300][ T6632] ? __lock_acquire+0x5c0/0x1f40 [ 74.021313][ T6632] ? __pfx___css_rstat_updated+0x10/0x10 [ 74.021334][ T6632] ? find_held_lock+0x2b/0x80 [ 74.021353][ T6632] ? __pfx_bpf_check+0x10/0x10 [ 74.021369][ T6632] ? lock_acquire+0x1d1/0x380 [ 74.021381][ T6632] ? bpf_prog_load+0x1a27/0x2ab0 [ 74.021396][ T6632] ? find_held_lock+0x2b/0x80 [ 74.021412][ T6632] ? bpf_prog_load+0x1a27/0x2ab0 [ 74.021430][ T6632] ? __asan_memset+0x23/0x50 [ 74.021445][ T6632] ? bpf_prog_load+0x1ae1/0x2ab0 [ 74.021461][ T6632] bpf_prog_load+0x1ae1/0x2ab0 [ 74.021481][ T6632] ? __pfx_bpf_prog_load+0x10/0x10 [ 74.021508][ T6632] __sys_bpf+0x1f46/0x4a30 [ 74.021524][ T6632] ? __pfx___sys_bpf+0x10/0x10 [ 74.021536][ T6632] ? find_held_lock+0x2b/0x80 [ 74.021552][ T6632] ? get_pid_task+0xfc/0x250 [ 74.021566][ T6632] ? get_pid_task+0xfc/0x250 [ 74.021586][ T6632] ? find_held_lock+0x2b/0x80 [ 74.021605][ T6632] ? rcu_read_lock_any_held+0x6a/0x90 [ 74.021622][ T6632] ? find_held_lock+0x2b/0x80 [ 74.021638][ T6632] ? ksys_write+0x190/0x250 [ 74.021651][ T6632] ? ksys_write+0x190/0x250 [ 74.021664][ T6632] ? lock_acquire+0x1d1/0x380 [ 74.021686][ T6632] ? fput+0x7c/0x100 [ 74.021702][ T6632] ? ksys_write+0x1ac/0x250 [ 74.021716][ T6632] ? __x64_sys_bpf+0xce/0x140 [ 74.021728][ T6632] __x64_sys_bpf+0xce/0x140 [ 74.021740][ T6632] ? do_syscall_64+0xae/0x790 [ 74.021756][ T6632] do_syscall_64+0x123/0x790 [ 74.021772][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.021792][ T6632] RIP: 0033:0x7f9b14b9e1d9 [ 74.021802][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.021813][ T6632] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.021824][ T6632] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 74.021831][ T6632] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 74.021837][ T6632] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.021844][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.021850][ T6632] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 74.021864][ T6632] [ 74.170399][ T6647] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 74.234424][ T6648] can0: slcan on ptm0. [ 74.240578][ T6650] FAULT_INJECTION: forcing a failure. [ 74.240578][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.240605][ T6650] CPU: 3 UID: 0 PID: 6650 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) [ 74.240624][ T6650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.240632][ T6650] Call Trace: [ 74.240638][ T6650] [ 74.240646][ T6650] dump_stack_lvl+0x100/0x190 [ 74.240678][ T6650] should_fail_ex.cold+0x5/0xa [ 74.240706][ T6650] _copy_to_user+0x32/0xd0 [ 74.240730][ T6650] simple_read_from_buffer+0xcb/0x170 [ 74.240757][ T6650] proc_fail_nth_read+0x1af/0x230 [ 74.240786][ T6650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.240809][ T6650] ? rw_verify_area+0xce/0x6d0 [ 74.240830][ T6650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.240861][ T6650] vfs_read+0x1e4/0xb40 [ 74.240883][ T6650] ? lock_acquire+0x1d1/0x380 [ 74.240902][ T6650] ? __fget_files+0x34/0x3d0 [ 74.240924][ T6650] ? __pfx_vfs_read+0x10/0x10 [ 74.240941][ T6650] ? find_held_lock+0x2b/0x80 [ 74.240965][ T6650] ? __fget_files+0x215/0x3d0 [ 74.240996][ T6650] ? __fget_files+0x21f/0x3d0 [ 74.241027][ T6650] ksys_read+0x12a/0x250 [ 74.241046][ T6650] ? __pfx_ksys_read+0x10/0x10 [ 74.241076][ T6650] do_syscall_64+0x123/0x790 [ 74.241104][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.241122][ T6650] RIP: 0033:0x7f9b14b5ea0e [ 74.241137][ T6650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.241155][ T6650] RSP: 002b:00007f9b15ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.241172][ T6650] RAX: ffffffffffffffda RBX: 00007f9b15ab66c0 RCX: 00007f9b14b5ea0e [ 74.241184][ T6650] RDX: 000000000000000f RSI: 00007f9b15ab60a0 RDI: 0000000000000005 [ 74.241197][ T6650] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.241208][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.241220][ T6650] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 74.241246][ T6650] [ 74.314336][ T6654] Bluetooth: MGMT ver 1.23 [ 74.579407][ T6667] FAULT_INJECTION: forcing a failure. [ 74.579407][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 74.579438][ T6667] CPU: 3 UID: 0 PID: 6667 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 74.579460][ T6667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.579470][ T6667] Call Trace: [ 74.579476][ T6667] [ 74.579483][ T6667] dump_stack_lvl+0x100/0x190 [ 74.579514][ T6667] should_fail_ex.cold+0x5/0xa [ 74.579543][ T6667] should_failslab+0xc2/0x120 [ 74.579572][ T6667] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 74.579598][ T6667] ? sock_alloc_inode+0x26/0x2c0 [ 74.579622][ T6667] ? __pfx_sock_alloc_inode+0x10/0x10 [ 74.579646][ T6667] sock_alloc_inode+0x26/0x2c0 [ 74.579662][ T6667] ? __pfx_sock_alloc_inode+0x10/0x10 [ 74.579681][ T6667] alloc_inode+0x68/0x250 [ 74.579705][ T6667] sock_alloc+0x44/0x280 [ 74.579722][ T6667] ? security_socket_create+0x7f/0x250 [ 74.579745][ T6667] __sock_create+0xc2/0x860 [ 74.579770][ T6667] __sys_socket+0x14d/0x260 [ 74.579807][ T6667] ? __pfx___sys_socket+0x10/0x10 [ 74.579840][ T6667] __x64_sys_socket+0x72/0xb0 [ 74.579864][ T6667] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.579890][ T6667] do_syscall_64+0x123/0x790 [ 74.579918][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.579940][ T6667] RIP: 0033:0x7f9b14b9e1d9 [ 74.579956][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.579975][ T6667] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 74.579992][ T6667] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 74.580002][ T6667] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 74.580013][ T6667] RBP: 00007f9b14c35888 R08: 0000000000000000 R09: 0000000000000000 [ 74.580025][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.580035][ T6667] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 74.580060][ T6667] [ 74.637435][ T6669] bridge1: entered allmulticast mode [ 75.081748][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 75.081765][ T43] audit: type=1400 audit(1792083387.054:485): avc: denied { write } for pid=6676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.120924][ T43] audit: type=1400 audit(1792083387.093:486): avc: denied { read write } for pid=6679 comm="syz.0.255" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.120953][ T43] audit: type=1400 audit(1792083387.093:487): avc: denied { open } for pid=6679 comm="syz.0.255" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.148325][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148362][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148382][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148400][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148417][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148437][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148455][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148473][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148492][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.148510][ T5812] hid-generic B299:0008:0007.0002: unknown main item tag 0x0 [ 75.151352][ T6646] can0 (unregistered): slcan off ptm0. [ 75.151924][ T43] audit: type=1400 audit(1792083387.122:488): avc: denied { write } for pid=6683 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.171973][ T5812] hid-generic B299:0008:0007.0002: hidraw1: HID v0.05 Device [syz0] on syz0 [ 75.308464][ T43] audit: type=1400 audit(1792083387.269:489): avc: denied { write } for pid=6688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.380740][ T43] audit: type=1400 audit(1792083387.357:490): avc: denied { write } for pid=6691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.445241][ T43] audit: type=1400 audit(1792083387.415:491): avc: denied { ioctl } for pid=6679 comm="syz.0.255" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0x6e80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.503254][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.667189][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 75.668030][ T25] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 75.669258][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.669281][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.671435][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.671453][ T25] usb 6-1: Product: syz [ 75.671465][ T25] usb 6-1: Manufacturer: syz [ 75.671477][ T25] usb 6-1: SerialNumber: syz [ 75.675493][ T25] usb 6-1: config 0 descriptor?? [ 75.892806][ C2] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 75.899529][ T25] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9 [ 75.912692][ T25] imon:send_packet: packet tx failed (-71) [ 75.923276][ T25] imon 6-1:0.0: panel buttons/knobs setup failed [ 75.974589][ T25] rc_core: IR keymap rc-imon-pad not found [ 75.974600][ T25] Registered IR keymap rc-empty [ 75.974679][ T25] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 75.974688][ T25] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 75.975924][ T25] imon:send_packet: packet tx failed (-71) [ 75.995024][ T25] imon 6-1:0.0: remote input dev register failed [ 75.995117][ T25] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 76.017445][ T25] imon 6-1:0.0: unable to initialize intf0, err 0 [ 76.017457][ T25] imon:imon_probe: failed to initialize context! [ 76.017466][ T25] imon 6-1:0.0: unable to register, err -19 [ 76.022829][ T25] usb 6-1: USB disconnect, device number 2 [ 76.270681][ T6702] FAULT_INJECTION: forcing a failure. [ 76.270681][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.270701][ T6702] CPU: 2 UID: 0 PID: 6702 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT(full) [ 76.270714][ T6702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.270720][ T6702] Call Trace: [ 76.270724][ T6702] [ 76.270729][ T6702] dump_stack_lvl+0x100/0x190 [ 76.270773][ T6702] should_fail_ex.cold+0x5/0xa [ 76.270790][ T6702] _copy_from_user+0x2e/0xd0 [ 76.270806][ T6702] kstrtouint_from_user+0xd6/0x1d0 [ 76.270818][ T6702] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 76.270832][ T6702] ? lock_acquire+0x1d1/0x380 [ 76.270849][ T6702] proc_fail_nth_write+0x83/0x220 [ 76.270865][ T6702] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.270886][ T6702] vfs_write+0x2aa/0x1050 [ 76.270900][ T6702] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.270917][ T6702] ? lock_acquire+0x1d1/0x380 [ 76.270941][ T6702] ? __fget_files+0x34/0x3d0 [ 76.270958][ T6702] ? __pfx_vfs_write+0x10/0x10 [ 76.270970][ T6702] ? find_held_lock+0x2b/0x80 [ 76.270987][ T6702] ? __fget_files+0x215/0x3d0 [ 76.271006][ T6702] ? __fget_files+0x21f/0x3d0 [ 76.271025][ T6702] ksys_write+0x12a/0x250 [ 76.271039][ T6702] ? __pfx_ksys_write+0x10/0x10 [ 76.271057][ T6702] do_syscall_64+0x123/0x790 [ 76.271074][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.271085][ T6702] RIP: 0033:0x7f9b14b5ea0e [ 76.271095][ T6702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.271105][ T6702] RSP: 002b:00007f9b15ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.271116][ T6702] RAX: ffffffffffffffda RBX: 00007f9b15ab66c0 RCX: 00007f9b14b5ea0e [ 76.271123][ T6702] RDX: 0000000000000001 RSI: 00007f9b15ab60a0 RDI: 0000000000000004 [ 76.271130][ T6702] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.271139][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.271149][ T6702] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 76.271171][ T6702] [ 76.334054][ T5962] net_ratelimit: 16 callbacks suppressed [ 76.334072][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.416368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.416442][ T25] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 76.427000][ T850] cfg80211: failed to load regulatory.db [ 76.442181][ T43] audit: type=1400 audit(1792083388.372:492): avc: denied { mount } for pid=6705 comm="syz.0.260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.454164][ T6706] libceph: secret too big 3051 [ 76.466118][ T43] audit: type=1400 audit(1792083388.411:493): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.534014][ T43] audit: type=1400 audit(1792083388.470:494): avc: denied { ioctl } for pid=6711 comm="syz.0.262" path="/dev/binderfs/features/transaction_report" dev="binder" ino=1048584 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.600324][ T25] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 76.601270][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 76.601295][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 76.601317][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 76.603213][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.603232][ T25] usb 6-1: Product: syz [ 76.603244][ T25] usb 6-1: Manufacturer: syz [ 76.603257][ T25] usb 6-1: SerialNumber: syz [ 76.605483][ T25] usb 6-1: config 0 descriptor?? [ 76.606258][ T6687] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.817774][ C2] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 76.830070][ T25] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 77.069495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.072178][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.090455][ T25] rc_core: IR keymap rc-imon-pad not found [ 77.090469][ T25] Registered IR keymap rc-empty [ 77.090526][ T25] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 77.090541][ T25] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 77.244235][ T25] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 77.248492][ T25] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 77.257482][ T25] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:3> initialized [ 77.397254][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.532197][ T6726] FAULT_INJECTION: forcing a failure. [ 77.532197][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.532258][ T6726] CPU: 2 UID: 0 PID: 6726 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(full) [ 77.532279][ T6726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.532289][ T6726] Call Trace: [ 77.532297][ T6726] [ 77.532305][ T6726] dump_stack_lvl+0x100/0x190 [ 77.532335][ T6726] should_fail_ex.cold+0x5/0xa [ 77.532362][ T6726] _copy_to_user+0x32/0xd0 [ 77.532388][ T6726] rng_dev_read+0x223/0x910 [ 77.532409][ T6726] ? __pfx_virtio_read+0x10/0x10 [ 77.532433][ T6726] ? __pfx_rng_dev_read+0x10/0x10 [ 77.532450][ T6726] ? avc_policy_seqno+0x9/0x20 [ 77.532472][ T6726] ? bpf_lsm_file_permission+0x9/0x10 [ 77.532497][ T6726] ? security_file_permission+0x76/0x210 [ 77.532523][ T6726] ? rw_verify_area+0xce/0x6d0 [ 77.532543][ T6726] ? __pfx_rng_dev_read+0x10/0x10 [ 77.532563][ T6726] vfs_read+0x1e4/0xb40 [ 77.532584][ T6726] ? lock_acquire+0x1d1/0x380 [ 77.532604][ T6726] ? __fget_files+0x34/0x3d0 [ 77.532629][ T6726] ? __pfx_vfs_read+0x10/0x10 [ 77.532649][ T6726] ? find_held_lock+0x2b/0x80 [ 77.532675][ T6726] ? __fget_files+0x215/0x3d0 [ 77.532700][ T6726] ? __fget_files+0x215/0x3d0 [ 77.532727][ T6726] ? __fget_files+0x21f/0x3d0 [ 77.532760][ T6726] ksys_read+0x12a/0x250 [ 77.532781][ T6726] ? __pfx_ksys_read+0x10/0x10 [ 77.532811][ T6726] do_syscall_64+0x123/0x790 [ 77.532840][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.532859][ T6726] RIP: 0033:0x7f9b14b9e1d9 [ 77.532874][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.532891][ T6726] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.532909][ T6726] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 77.532921][ T6726] RDX: 0000000000002020 RSI: 00002000000006c0 RDI: 0000000000000003 [ 77.532932][ T6726] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.532942][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.532958][ T6726] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 77.532983][ T6726] [ 77.576680][ T6728] FAULT_INJECTION: forcing a failure. [ 77.576680][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 77.576709][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.0.267 Not tainted syzkaller #0 PREEMPT(full) [ 77.576730][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.576741][ T6728] Call Trace: [ 77.576748][ T6728] [ 77.576755][ T6728] dump_stack_lvl+0x100/0x190 [ 77.576787][ T6728] should_fail_ex.cold+0x5/0xa [ 77.576821][ T6728] should_failslab+0xc2/0x120 [ 77.576848][ T6728] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.576872][ T6728] ? d_instantiate+0x8a/0xb0 [ 77.576890][ T6728] ? alloc_empty_file+0x5b/0x1c0 [ 77.576908][ T6728] alloc_empty_file+0x5b/0x1c0 [ 77.576925][ T6728] alloc_file_pseudo+0x183/0x290 [ 77.576945][ T6728] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 77.576959][ T6728] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 77.576978][ T6728] ? __do_sys_memfd_secret+0x130/0x570 [ 77.577007][ T6728] __do_sys_memfd_secret+0x266/0x570 [ 77.577037][ T6728] do_syscall_64+0x123/0x790 [ 77.577065][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.577086][ T6728] RIP: 0033:0x7f9b14b9e1d9 [ 77.577102][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.577118][ T6728] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 77.577134][ T6728] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 77.577146][ T6728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 77.577155][ T6728] RBP: 00007f9b14c35888 R08: 0000000000000000 R09: 0000000000000000 [ 77.577164][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.577172][ T6728] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 77.577186][ T6728] [ 77.782758][ T6733] netlink: 'syz.0.269': attribute type 12 has an invalid length. [ 77.782772][ T6733] netlink: 'syz.0.269': attribute type 29 has an invalid length. [ 77.782778][ T6733] netlink: 148 bytes leftover after parsing attributes in process `syz.0.269'. [ 77.782787][ T6733] netlink: 59 bytes leftover after parsing attributes in process `syz.0.269'. [ 78.113063][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.116689][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.123367][ T6754] evm: overlay not supported [ 78.225933][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.457920][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.513782][ T6776] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.519086][ T6776] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.550886][ T6778] FAULT_INJECTION: forcing a failure. [ 78.550886][ T6778] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.550907][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 78.550920][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.550926][ T6778] Call Trace: [ 78.550930][ T6778] [ 78.550935][ T6778] dump_stack_lvl+0x100/0x190 [ 78.550955][ T6778] should_fail_ex.cold+0x5/0xa [ 78.550971][ T6778] get_futex_key+0x1d0/0x14f0 [ 78.550989][ T6778] ? __pfx_get_futex_key+0x10/0x10 [ 78.551009][ T6778] futex_wake_op+0x16f/0xe70 [ 78.551020][ T6778] ? get_pid_task+0xfc/0x250 [ 78.551035][ T6778] ? get_pid_task+0xfc/0x250 [ 78.551053][ T6778] ? __pfx_futex_wake_op+0x10/0x10 [ 78.551064][ T6778] ? find_held_lock+0x2b/0x80 [ 78.551084][ T6778] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.551101][ T6778] ? find_held_lock+0x2b/0x80 [ 78.551117][ T6778] ? ksys_write+0x190/0x250 [ 78.551130][ T6778] ? ksys_write+0x190/0x250 [ 78.551145][ T6778] do_futex+0x3d8/0x440 [ 78.551162][ T6778] ? __pfx_do_futex+0x10/0x10 [ 78.551179][ T6778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.551197][ T6778] __x64_sys_futex+0x34f/0x4d0 [ 78.551215][ T6778] ? fput+0x7c/0x100 [ 78.551231][ T6778] ? __pfx___x64_sys_futex+0x10/0x10 [ 78.551247][ T6778] ? ksys_write+0x1ac/0x250 [ 78.551260][ T6778] ? __pfx_ksys_write+0x10/0x10 [ 78.551277][ T6778] do_syscall_64+0x123/0x790 [ 78.551293][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.551305][ T6778] RIP: 0033:0x7f9b14b9e1d9 [ 78.551314][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.551324][ T6778] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.551335][ T6778] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 78.551342][ T6778] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000200000000000 [ 78.551349][ T6778] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000015000000 [ 78.551355][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.551362][ T6778] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 78.551376][ T6778] [ 78.593933][ T6780] qnx4: unable to read the superblock [ 78.747350][ T25] usb 6-1: USB disconnect, device number 3 [ 78.837437][ T6785] Console: switching to colour dummy device 80x25 [ 79.204610][ T6786] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 79.222870][ T6786] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 79.223012][ T6786] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 79.223068][ T6786] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 79.223162][ T6786] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 79.223496][ T6786] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 79.235890][ T6786] pci 0000:00:01.0: Adding to iommu group 1 [ 79.239887][ T6786] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 79.239900][ T6786] pci 0000:00:01.0: vgaarb: bridge control possible [ 79.239908][ T6786] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 79.249886][ T6786] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 79.250079][ T6786] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 79.259494][ T6786] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 79.337410][ T6786] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 79.337487][ T6786] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 79.339406][ T6786] [drm] features: -virgl +edid -resource_blob -host_visible [ 79.339420][ T6786] [drm] features: -context_init -blob_alignment [ 79.357240][ T6786] [drm] number of scanouts: 1 [ 79.357289][ T6786] [drm] number of cap sets: 0 [ 79.391159][ T6786] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 79.491430][ T6786] Console: switching to colour frame buffer device 160x50 [ 79.520154][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.536704][ T6786] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 79.625411][ T6793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.635423][ T6793] x_tables: duplicate underflow at hook 1 [ 79.810761][ T6808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.823861][ T6808] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 79.839574][ T6811] FAULT_INJECTION: forcing a failure. [ 79.839574][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 79.839602][ T6811] CPU: 3 UID: 0 PID: 6811 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(full) [ 79.839641][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.839653][ T6811] Call Trace: [ 79.839660][ T6811] [ 79.839667][ T6811] dump_stack_lvl+0x100/0x190 [ 79.839751][ T6811] should_fail_ex.cold+0x5/0xa [ 79.839774][ T6811] should_failslab+0xc2/0x120 [ 79.839811][ T6811] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.839824][ T6811] ? io_manage_buffers_legacy+0x415/0xf50 [ 79.839845][ T6811] io_manage_buffers_legacy+0x415/0xf50 [ 79.839867][ T6811] __io_issue_sqe+0xe8/0x7a0 [ 79.839882][ T6811] io_issue_sqe+0x88/0x1540 [ 79.839897][ T6811] ? io_provide_buffers_prep+0x373/0x430 [ 79.839916][ T6811] io_submit_sqes+0xb17/0x2480 [ 79.839939][ T6811] __do_sys_io_uring_enter+0xa88/0x1b10 [ 79.839956][ T6811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.839993][ T6811] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 79.840010][ T6811] ? __x64_sys_futex+0x34f/0x4d0 [ 79.840026][ T6811] ? __x64_sys_futex+0x358/0x4d0 [ 79.840044][ T6811] ? xfd_validate_state+0x129/0x190 [ 79.840062][ T6811] do_syscall_64+0x123/0x790 [ 79.840079][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.840091][ T6811] RIP: 0033:0x7f791a99e1d9 [ 79.840100][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.840111][ T6811] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 79.840122][ T6811] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 79.840129][ T6811] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 79.840136][ T6811] RBP: 00007f791aa35888 R08: 0000000000000000 R09: 0000000000000000 [ 79.840142][ T6811] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 79.840148][ T6811] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 79.840163][ T6811] [ 79.935829][ T6821] FAULT_INJECTION: forcing a failure. [ 79.935829][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 79.935857][ T6821] CPU: 2 UID: 0 PID: 6821 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 79.935877][ T6821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.935888][ T6821] Call Trace: [ 79.935894][ T6821] [ 79.935901][ T6821] dump_stack_lvl+0x100/0x190 [ 79.935933][ T6821] should_fail_ex.cold+0x5/0xa [ 79.935959][ T6821] should_failslab+0xc2/0x120 [ 79.935986][ T6821] __kmalloc_noprof+0xfc/0x840 [ 79.936008][ T6821] ? ip_options_get+0xa4/0x4f0 [ 79.936075][ T6821] ip_options_get+0xa4/0x4f0 [ 79.936098][ T6821] ? __pfx_ip_options_get+0x10/0x10 [ 79.936116][ T6821] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.936144][ T6821] ? audit_log_end+0x24/0x30 [ 79.936161][ T6821] ? common_lsm_audit+0x251/0x2b0 [ 79.936191][ T6821] ip_cmsg_send+0x86f/0xbc0 [ 79.936224][ T6821] raw_sendmsg+0xe30/0x3770 [ 79.936256][ T6821] ? avc_has_perm_noaudit+0x3a2/0x470 [ 79.936275][ T6821] ? __pfx_raw_sendmsg+0x10/0x10 [ 79.936302][ T6821] ? avc_has_perm+0x135/0x1e0 [ 79.936320][ T6821] ? __pfx_avc_has_perm+0x10/0x10 [ 79.936344][ T6821] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 79.936398][ T6821] ? __pfx_raw_sendmsg+0x10/0x10 [ 79.936425][ T6821] inet_sendmsg+0x11c/0x140 [ 79.936451][ T6821] ____sys_sendmsg+0x9c9/0xbe0 [ 79.936471][ T6821] ? __pfx_inet_sendmsg+0x10/0x10 [ 79.936497][ T6821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.936525][ T6821] ? lock_acquire+0x1d1/0x380 [ 79.936545][ T6821] ? get_pid_task+0x2a/0x250 [ 79.936572][ T6821] ___sys_sendmsg+0x190/0x1e0 [ 79.936597][ T6821] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.936620][ T6821] ? get_pid_task+0x106/0x250 [ 79.936654][ T6821] ? find_held_lock+0x2b/0x80 [ 79.936697][ T6821] __sys_sendmsg+0x160/0x210 [ 79.936715][ T6821] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.936747][ T6821] do_syscall_64+0x123/0x790 [ 79.936774][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.936792][ T6821] RIP: 0033:0x7f791a99e1d9 [ 79.936807][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.936824][ T6821] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.936841][ T6821] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 79.936853][ T6821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 79.936863][ T6821] RBP: 00007f791b897090 R08: 0000000000000000 R09: 0000000000000000 [ 79.936874][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.936884][ T6821] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 79.936910][ T6821] [ 79.999359][ T6823] Console: switching to colour dummy device 80x25 [ 80.116743][ T6832] FAULT_INJECTION: forcing a failure. [ 80.116743][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 80.116772][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT(full) [ 80.116795][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.116806][ T6832] Call Trace: [ 80.116812][ T6832] [ 80.116819][ T6832] dump_stack_lvl+0x100/0x190 [ 80.116851][ T6832] should_fail_ex.cold+0x5/0xa [ 80.116879][ T6832] should_failslab+0xc2/0x120 [ 80.116906][ T6832] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.116932][ T6832] ? ptlock_alloc+0x1f/0x70 [ 80.116954][ T6832] ptlock_alloc+0x1f/0x70 [ 80.116972][ T6832] pte_alloc_one+0x82/0x3d0 [ 80.117001][ T6832] __pte_alloc+0x6d/0x380 [ 80.117042][ T6832] ? __pfx___pte_alloc+0x10/0x10 [ 80.117073][ T6832] do_anonymous_page+0x1307/0x2050 [ 80.117094][ T6832] ? find_held_lock+0x2b/0x80 [ 80.117121][ T6832] ? __pmd_alloc+0x3f6/0x950 [ 80.117145][ T6832] ? __pmd_alloc+0x3f6/0x950 [ 80.117171][ T6832] ? __pfx_do_anonymous_page+0x10/0x10 [ 80.117188][ T6832] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.117214][ T6832] ? _raw_spin_unlock+0x28/0x50 [ 80.117235][ T6832] ? __pmd_alloc+0x3fb/0x950 [ 80.117263][ T6832] __handle_mm_fault+0x1ff3/0x2f60 [ 80.117288][ T6832] ? __pfx___handle_mm_fault+0x10/0x10 [ 80.117305][ T6832] ? __pfx_mt_find+0x10/0x10 [ 80.117358][ T6832] handle_mm_fault+0x363/0xa20 [ 80.117384][ T6832] __get_user_pages+0x8ae/0x2c30 [ 80.117419][ T6832] ? __pfx___get_user_pages+0x10/0x10 [ 80.117444][ T6832] ? __pfx_down_read_killable+0x10/0x10 [ 80.117481][ T6832] __gup_longterm_locked+0x87d/0x16f0 [ 80.117507][ T6832] ? up_write+0x2dc/0x5b0 [ 80.117536][ T6832] ? __pfx___gup_longterm_locked+0x10/0x10 [ 80.117560][ T6832] ? lock_acquire+0x1d1/0x380 [ 80.117580][ T6832] ? gup_fast_fallback+0x13f7/0x2790 [ 80.117608][ T6832] ? find_held_lock+0x2b/0x80 [ 80.117635][ T6832] ? gup_fast_fallback+0x1467/0x2790 [ 80.117666][ T6832] gup_fast_fallback+0x16dc/0x2790 [ 80.117710][ T6832] ? __pfx_gup_fast_fallback+0x10/0x10 [ 80.117738][ T6832] ? kernel_text_address+0x8d/0x100 [ 80.117757][ T6832] ? unwind_get_return_address+0x59/0xa0 [ 80.117784][ T6832] ? arch_stack_walk+0xa6/0xf0 [ 80.117813][ T6832] get_user_pages_fast+0xa7/0xf0 [ 80.117837][ T6832] ? __pfx_get_user_pages_fast+0x10/0x10 [ 80.117864][ T6832] ? __lock_acquire+0x5c0/0x1f40 [ 80.117883][ T6832] ? _parse_integer_limit+0x1ac/0x220 [ 80.117906][ T6832] get_futex_key+0x2c6/0x14f0 [ 80.117936][ T6832] ? __pfx_get_futex_key+0x10/0x10 [ 80.117961][ T6832] ? __might_fault+0xc5/0x140 [ 80.117988][ T6832] futex_requeue+0x25e/0x22e0 [ 80.118020][ T6832] ? __pfx_futex_requeue+0x10/0x10 [ 80.118038][ T6832] ? get_pid_task+0xfc/0x250 [ 80.118068][ T6832] ? get_pid_task+0x106/0x250 [ 80.118092][ T6832] ? proc_fail_nth_write+0x9f/0x220 [ 80.118127][ T6832] ? rcu_read_lock_any_held+0x6a/0x90 [ 80.118157][ T6832] ? find_held_lock+0x2b/0x80 [ 80.118188][ T6832] do_futex+0x3ae/0x440 [ 80.118217][ T6832] ? __pfx_do_futex+0x10/0x10 [ 80.118244][ T6832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.118275][ T6832] __x64_sys_futex+0x34f/0x4d0 [ 80.118304][ T6832] ? fput+0x7c/0x100 [ 80.118335][ T6832] ? __pfx___x64_sys_futex+0x10/0x10 [ 80.118361][ T6832] ? ksys_write+0x1ac/0x250 [ 80.118382][ T6832] ? __pfx_ksys_write+0x10/0x10 [ 80.118412][ T6832] do_syscall_64+0x123/0x790 [ 80.118439][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.118458][ T6832] RIP: 0033:0x7f791a99e1d9 [ 80.118475][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.118491][ T6832] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.118510][ T6832] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 80.118522][ T6832] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 00002000000020c0 [ 80.118533][ T6832] RBP: 00007f791b897090 R08: 0000000000000000 R09: 0000000000000003 [ 80.118544][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.118555][ T6832] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 80.118581][ T6832] [ 80.164178][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.305'. [ 80.202039][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.205203][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.209266][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.210033][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.210564][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.435948][ T6825] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 80.443396][ T5739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.446529][ T5739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.450701][ T6825] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 80.450930][ T6825] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 80.451009][ T6825] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 80.451153][ T6825] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 80.451747][ T6825] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 80.455374][ T5739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.461362][ T5739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.462453][ T5739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.480059][ T6825] pci 0000:00:01.0: Adding to iommu group 1 [ 80.482153][ T6825] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 80.482165][ T6825] pci 0000:00:01.0: vgaarb: bridge control possible [ 80.482172][ T6825] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 80.495451][ T6825] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 80.495563][ T6825] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 80.504957][ T6825] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 80.542554][ T6825] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 80.542604][ T6825] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 80.543427][ T6825] [drm] features: -virgl +edid -resource_blob -host_visible [ 80.543435][ T6825] [drm] features: -context_init -blob_alignment [ 80.559705][ T6825] [drm] number of scanouts: 1 [ 80.559738][ T6825] [drm] number of cap sets: 0 [ 80.574844][ T6825] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 80.662772][ T6825] Console: switching to colour frame buffer device 160x50 [ 80.686396][ T6825] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 80.748031][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.748065][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.809550][ T6863] FAULT_INJECTION: forcing a failure. [ 80.809550][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 80.809581][ T6863] CPU: 2 UID: 0 PID: 6863 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 80.809602][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.809613][ T6863] Call Trace: [ 80.809620][ T6863] [ 80.809628][ T6863] dump_stack_lvl+0x100/0x190 [ 80.809726][ T6863] should_fail_ex.cold+0x5/0xa [ 80.809754][ T6863] should_failslab+0xc2/0x120 [ 80.809806][ T6863] __kvmalloc_node_noprof+0x113/0x9b0 [ 80.809834][ T6863] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 80.809860][ T6863] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 80.809882][ T6863] ? io_alloc_cache_init+0x38/0x170 [ 80.809908][ T6863] io_alloc_cache_init+0x38/0x170 [ 80.809929][ T6863] io_rsrc_cache_init+0x26/0x50 [ 80.809949][ T6863] io_uring_setup.cold+0x4c0/0x1cde [ 80.809970][ T6863] ? lock_acquire+0x1d1/0x380 [ 80.809991][ T6863] ? avc_has_perm_noaudit+0x56/0x470 [ 80.810010][ T6863] ? __pfx_io_uring_setup+0x10/0x10 [ 80.810035][ T6863] ? find_held_lock+0x2b/0x80 [ 80.810061][ T6863] ? avc_has_perm_noaudit+0x11e/0x470 [ 80.810079][ T6863] ? avc_has_perm_noaudit+0x11e/0x470 [ 80.810114][ T6863] ? xfd_validate_state+0x129/0x190 [ 80.810142][ T6863] __x64_sys_io_uring_setup+0xc2/0x170 [ 80.810170][ T6863] do_syscall_64+0x123/0x790 [ 80.810225][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.810245][ T6863] RIP: 0033:0x7f9b14b9e1d9 [ 80.810262][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.810280][ T6863] RSP: 002b:00007f9b15ab6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 80.810300][ T6863] RAX: ffffffffffffffda RBX: 00007f9b14e25fa0 RCX: 00007f9b14b9e1d9 [ 80.810312][ T6863] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000001b7b [ 80.810323][ T6863] RBP: 00007f9b14c35888 R08: 0000000000000000 R09: 0000000000000000 [ 80.810333][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.810344][ T6863] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 80.810371][ T6863] [ 80.813409][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.813444][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.817069][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 80.817083][ T43] audit: type=1400 audit(1792083392.676:509): avc: denied { create } for pid=6861 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.817918][ T43] audit: type=1400 audit(1792083392.676:510): avc: denied { getopt } for pid=6861 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.835253][ T6863] input: syz1 as /devices/virtual/input/input13 [ 80.950155][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.950176][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.012385][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.012408][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.029381][ T43] audit: type=1400 audit(1792083392.882:511): avc: denied { create } for pid=6873 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.032858][ T43] audit: type=1400 audit(1792083392.882:512): avc: denied { setopt } for pid=6873 comm="syz.0.312" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.033037][ T43] audit: type=1400 audit(1792083392.882:513): avc: denied { write } for pid=6873 comm="syz.0.312" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.063073][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 81.063148][ T6879] FAULT_INJECTION: forcing a failure. [ 81.063148][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.063163][ T6879] CPU: 3 UID: 0 PID: 6879 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 81.063175][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.063182][ T6879] Call Trace: [ 81.063185][ T6879] [ 81.063190][ T6879] dump_stack_lvl+0x100/0x190 [ 81.063210][ T6879] should_fail_ex.cold+0x5/0xa [ 81.063226][ T6879] _copy_to_user+0x32/0xd0 [ 81.063243][ T6879] simple_read_from_buffer+0xcb/0x170 [ 81.063261][ T6879] proc_fail_nth_read+0x1af/0x230 [ 81.063277][ T6879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.063303][ T6879] ? rw_verify_area+0xce/0x6d0 [ 81.063314][ T6879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.063330][ T6879] vfs_read+0x1e4/0xb40 [ 81.063344][ T6879] ? lock_acquire+0x1d1/0x380 [ 81.063356][ T6879] ? __fget_files+0x34/0x3d0 [ 81.063372][ T6879] ? __pfx_vfs_read+0x10/0x10 [ 81.063384][ T6879] ? find_held_lock+0x2b/0x80 [ 81.063401][ T6879] ? __fget_files+0x215/0x3d0 [ 81.063419][ T6879] ? __fget_files+0x21f/0x3d0 [ 81.063439][ T6879] ksys_read+0x12a/0x250 [ 81.063452][ T6879] ? __pfx_ksys_read+0x10/0x10 [ 81.063469][ T6879] do_syscall_64+0x123/0x790 [ 81.063487][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.063499][ T6879] RIP: 0033:0x7f9b14b5ea0e [ 81.063508][ T6879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.063518][ T6879] RSP: 002b:00007f9b15ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.063529][ T6879] RAX: ffffffffffffffda RBX: 00007f9b15ab66c0 RCX: 00007f9b14b5ea0e [ 81.063536][ T6879] RDX: 000000000000000f RSI: 00007f9b15ab60a0 RDI: 0000000000000004 [ 81.063543][ T6879] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 81.063549][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.063555][ T6879] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 81.063570][ T6879] [ 81.086124][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.086167][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.086359][ T6835] bridge_slave_0: entered allmulticast mode [ 81.087099][ T6835] bridge_slave_0: entered promiscuous mode [ 81.088180][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.088218][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.091806][ T6835] bridge_slave_1: entered allmulticast mode [ 81.092593][ T6835] bridge_slave_1: entered promiscuous mode [ 81.101673][ T6881] FAULT_INJECTION: forcing a failure. [ 81.101673][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.101698][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.0.314 Not tainted syzkaller #0 PREEMPT(full) [ 81.101719][ T6881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.101730][ T6881] Call Trace: [ 81.101737][ T6881] [ 81.101744][ T6881] dump_stack_lvl+0x100/0x190 [ 81.101776][ T6881] should_fail_ex.cold+0x5/0xa [ 81.101826][ T6881] _copy_from_user+0x2e/0xd0 [ 81.101852][ T6881] kstrtouint_from_user+0xd6/0x1d0 [ 81.101872][ T6881] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 81.101896][ T6881] ? lock_acquire+0x1d1/0x380 [ 81.101924][ T6881] proc_fail_nth_write+0x83/0x220 [ 81.101951][ T6881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.101984][ T6881] vfs_write+0x2aa/0x1050 [ 81.102009][ T6881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.102033][ T6881] ? lock_acquire+0x1d1/0x380 [ 81.102054][ T6881] ? __fget_files+0x34/0x3d0 [ 81.102081][ T6881] ? __pfx_vfs_write+0x10/0x10 [ 81.102102][ T6881] ? find_held_lock+0x2b/0x80 [ 81.102128][ T6881] ? __fget_files+0x215/0x3d0 [ 81.102158][ T6881] ? __fget_files+0x21f/0x3d0 [ 81.102190][ T6881] ksys_write+0x12a/0x250 [ 81.102213][ T6881] ? __pfx_ksys_write+0x10/0x10 [ 81.102254][ T6881] do_syscall_64+0x123/0x790 [ 81.102282][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.102301][ T6881] RIP: 0033:0x7f9b14b5ea0e [ 81.102316][ T6881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.102332][ T6881] RSP: 002b:00007f9b15ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.102352][ T6881] RAX: ffffffffffffffda RBX: 00007f9b15ab66c0 RCX: 00007f9b14b5ea0e [ 81.102363][ T6881] RDX: 0000000000000001 RSI: 00007f9b15ab60a0 RDI: 0000000000000004 [ 81.102374][ T6881] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 81.102385][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.102396][ T6881] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 81.102422][ T6881] [ 81.154539][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.157482][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.158070][ T6884] Console: switching to colour dummy device 80x25 [ 81.189588][ T43] audit: type=1400 audit(1792083393.039:514): avc: denied { read } for pid=5440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 81.245696][ T6835] team0: Port device team_slave_0 added [ 81.247930][ T6835] team0: Port device team_slave_1 added [ 81.308020][ T13] bridge_slave_1: left allmulticast mode [ 81.308048][ T13] bridge_slave_1: left promiscuous mode [ 81.309191][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.318471][ T13] bridge_slave_0: left allmulticast mode [ 81.318487][ T13] bridge_slave_0: left promiscuous mode [ 81.320050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.445180][ T6886] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 81.453898][ T6886] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 81.454084][ T6886] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 81.454161][ T6886] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 81.454288][ T6886] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 81.454817][ T6886] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 81.478614][ T6886] pci 0000:00:01.0: Adding to iommu group 1 [ 81.481507][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.485128][ T6886] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 81.485139][ T6886] pci 0000:00:01.0: vgaarb: bridge control possible [ 81.485146][ T6886] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 81.491243][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.495303][ T6886] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 81.495445][ T6886] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 81.500677][ T6886] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 81.507204][ T13] bond0 (unregistering): Released all slaves [ 81.515910][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.515919][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.515932][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.517056][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.517064][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.517076][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.583833][ T6886] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 81.587016][ T43] audit: type=1400 audit(1792083393.433:515): avc: denied { write } for pid=6889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.587916][ T6886] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 81.588997][ T6886] [drm] features: -virgl +edid -resource_blob -host_visible [ 81.589009][ T6886] [drm] features: -context_init -blob_alignment [ 81.615101][ T6886] [drm] number of scanouts: 1 [ 81.615149][ T6886] [drm] number of cap sets: 0 [ 81.637078][ T5962] net_ratelimit: 7 callbacks suppressed [ 81.637094][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.637395][ T43] audit: type=1400 audit(1792083393.482:516): avc: denied { write } for pid=6896 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.652796][ T6835] hsr_slave_0: entered promiscuous mode [ 81.653240][ T6835] hsr_slave_1: entered promiscuous mode [ 81.653527][ T6835] debugfs: 'hsr0' already exists in 'hsr' [ 81.653538][ T6835] Cannot create hsr debugfs directory [ 81.657443][ T6886] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 81.681735][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.689743][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.689785][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.689857][ T6844] bridge_slave_0: entered allmulticast mode [ 81.690643][ T6844] bridge_slave_0: entered promiscuous mode [ 81.725955][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.726009][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.726062][ T6844] bridge_slave_1: entered allmulticast mode [ 81.728035][ T6844] bridge_slave_1: entered promiscuous mode [ 81.738145][ T6886] Console: switching to colour frame buffer device 160x50 [ 81.765120][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.769838][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.770309][ T6886] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 81.844182][ T6903] FAULT_INJECTION: forcing a failure. [ 81.844182][ T6903] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.844202][ T6903] CPU: 3 UID: 0 PID: 6903 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT(full) [ 81.844214][ T6903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.844221][ T6903] Call Trace: [ 81.844224][ T6903] [ 81.844239][ T6844] team0: Port device team_slave_0 added [ 81.844229][ T6903] dump_stack_lvl+0x100/0x190 [ 81.844302][ T6903] should_fail_ex.cold+0x5/0xa [ 81.844319][ T6903] get_futex_key+0x1d0/0x14f0 [ 81.844337][ T6903] ? __pfx_get_futex_key+0x10/0x10 [ 81.844358][ T6903] ? ___sys_sendmsg+0x127/0x1e0 [ 81.844394][ T6903] futex_wake+0xf4/0x5e0 [ 81.844405][ T6903] ? futex_wait+0x11e/0x370 [ 81.844418][ T6903] ? __pfx_futex_wake+0x10/0x10 [ 81.844431][ T6903] ? find_held_lock+0x2b/0x80 [ 81.844451][ T6903] do_futex+0x2b2/0x440 [ 81.844468][ T6903] ? __pfx_do_futex+0x10/0x10 [ 81.844485][ T6903] ? fput+0x7c/0x100 [ 81.844522][ T6903] __x64_sys_futex+0x34f/0x4d0 [ 81.844541][ T6903] ? __pfx___x64_sys_futex+0x10/0x10 [ 81.844563][ T6903] do_syscall_64+0x123/0x790 [ 81.844599][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.844611][ T6903] RIP: 0033:0x7f9b14b9e1d9 [ 81.844633][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.844644][ T6903] RSP: 002b:00007f9b15a530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.844654][ T6903] RAX: ffffffffffffffda RBX: 00007f9b14e26278 RCX: 00007f9b14b9e1d9 [ 81.844662][ T6903] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b14e2627c [ 81.844668][ T6903] RBP: 00007f9b14e26270 R08: 0000000000000001 R09: 0000000000000000 [ 81.844674][ T6903] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000000 [ 81.844681][ T6903] R13: 00007f9b14e26308 R14: 00007ffca2287420 R15: 00007ffca2287508 [ 81.844695][ T6903] [ 81.853283][ T6844] team0: Port device team_slave_1 added [ 81.877586][ T43] audit: type=1400 audit(1792083393.709:517): avc: denied { write } for pid=6904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.890210][ T37] rpcbind: server 127.0.0.1 not responding, timed out [ 81.894842][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6900 comm=syz.0.316 [ 81.894858][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6900 comm=syz.0.316 [ 81.894869][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6900 comm=syz.0.316 [ 81.900990][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.901000][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.901013][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.903706][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.903715][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.903728][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.940420][ T43] audit: type=1400 audit(1792083393.777:518): avc: denied { write } for pid=6907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.971110][ T6844] hsr_slave_0: entered promiscuous mode [ 81.971561][ T6844] hsr_slave_1: entered promiscuous mode [ 81.971855][ T6844] debugfs: 'hsr0' already exists in 'hsr' [ 81.971866][ T6844] Cannot create hsr debugfs directory [ 82.005718][ T13] hsr_slave_0: left promiscuous mode [ 82.008110][ T13] hsr_slave_1: left promiscuous mode [ 82.008600][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.008621][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.011975][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.011986][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.017243][ T6910] FAULT_INJECTION: forcing a failure. [ 82.017243][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.017267][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(full) [ 82.017286][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.017296][ T6910] Call Trace: [ 82.017301][ T6910] [ 82.017308][ T6910] dump_stack_lvl+0x100/0x190 [ 82.017342][ T6910] should_fail_ex.cold+0x5/0xa [ 82.017367][ T6910] _copy_to_user+0x32/0xd0 [ 82.017392][ T6910] simple_read_from_buffer+0xcb/0x170 [ 82.017418][ T6910] proc_fail_nth_read+0x1af/0x230 [ 82.017443][ T6910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.017468][ T6910] ? rw_verify_area+0xce/0x6d0 [ 82.017486][ T6910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.017507][ T6910] vfs_read+0x1e4/0xb40 [ 82.017529][ T6910] ? lock_acquire+0x1d1/0x380 [ 82.017548][ T6910] ? __fget_files+0x34/0x3d0 [ 82.017571][ T6910] ? __pfx_vfs_read+0x10/0x10 [ 82.017589][ T6910] ? find_held_lock+0x2b/0x80 [ 82.017613][ T6910] ? __fget_files+0x215/0x3d0 [ 82.017631][ T6910] ? __fget_files+0x21f/0x3d0 [ 82.017656][ T6910] ksys_read+0x12a/0x250 [ 82.017675][ T6910] ? __pfx_ksys_read+0x10/0x10 [ 82.017703][ T6910] do_syscall_64+0x123/0x790 [ 82.017733][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.017750][ T6910] RIP: 0033:0x7f9b14b5ea0e [ 82.017765][ T6910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.017781][ T6910] RSP: 002b:00007f9b15ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.017798][ T6910] RAX: ffffffffffffffda RBX: 00007f9b15ab66c0 RCX: 00007f9b14b5ea0e [ 82.017809][ T6910] RDX: 000000000000000f RSI: 00007f9b15ab60a0 RDI: 0000000000000004 [ 82.017819][ T6910] RBP: 00007f9b15ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.017830][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.017840][ T6910] R13: 00007f9b14e26038 R14: 00007f9b14e25fa0 R15: 00007ffca2287508 [ 82.017865][ T6910] [ 82.020887][ T13] veth1_macvtap: left promiscuous mode [ 82.021689][ T13] veth0_macvtap: left promiscuous mode [ 82.021768][ T13] veth1_vlan: left promiscuous mode [ 82.021812][ T13] veth0_vlan: left promiscuous mode [ 82.207773][ T13] team0 (unregistering): Port device team_slave_1 removed [ 82.219745][ T13] team0 (unregistering): Port device team_slave_0 removed [ 82.285251][ T5733] Bluetooth: hci4: command tx timeout [ 82.309123][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 82.413134][ T6835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.417030][ T6835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.420722][ T6835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.429527][ T6835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.430391][ T6835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.432652][ T6835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.442072][ T6835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.454519][ T6835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.456605][ T6921] FAULT_INJECTION: forcing a failure. [ 82.456605][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 82.456633][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(full) [ 82.456653][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.456665][ T6921] Call Trace: [ 82.456672][ T6921] [ 82.456681][ T6921] dump_stack_lvl+0x100/0x190 [ 82.456714][ T6921] should_fail_ex.cold+0x5/0xa [ 82.456762][ T6921] should_failslab+0xc2/0x120 [ 82.456789][ T6921] __kvmalloc_node_noprof+0x113/0x9b0 [ 82.456814][ T6921] ? __pfx___mutex_lock+0x10/0x10 [ 82.456841][ T6921] ? nf_hook_entries_grow+0x255/0x870 [ 82.456869][ T6921] nf_hook_entries_grow+0x255/0x870 [ 82.456896][ T6921] ? __pfx___mutex_lock+0x10/0x10 [ 82.456927][ T6921] __nf_register_net_hook+0x112/0x780 [ 82.456956][ T6921] nf_register_net_hook+0xdb/0x170 [ 82.456991][ T6921] nf_register_net_hooks+0x5d/0xd0 [ 82.457021][ T6921] nf_defrag_ipv4_enable+0xb8/0x120 [ 82.457045][ T6921] nf_ct_netns_do_get+0x28d/0x610 [ 82.457073][ T6921] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 82.457103][ T6921] ? find_held_lock+0x2b/0x80 [ 82.457131][ T6921] ? net_generic+0xea/0x2a0 [ 82.457158][ T6921] ? net_generic+0xea/0x2a0 [ 82.457190][ T6921] nf_ct_netns_get+0x3d/0x160 [ 82.457218][ T6921] synproxy_tg4_check+0x178/0x2c0 [ 82.457247][ T6921] ? __pfx_synproxy_tg4_check+0x10/0x10 [ 82.457273][ T6921] xt_check_target+0x117/0x1c0 [ 82.457300][ T6921] find_check_entry.isra.0+0x79c/0x990 [ 82.457334][ T6921] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 82.457368][ T6921] ? kasan_quarantine_put+0x104/0x240 [ 82.457398][ T6921] ? translate_table+0xaf2/0x1630 [ 82.457421][ T6921] ? kfree+0x22b/0x6d0 [ 82.457440][ T6921] ? xt_check_table_hooks+0x206/0x330 [ 82.457464][ T6921] translate_table+0xbcd/0x1630 [ 82.457500][ T6921] ? __pfx_translate_table+0x10/0x10 [ 82.457533][ T6921] do_ipt_set_ctl+0x689/0xcf0 [ 82.457558][ T6921] ? nf_sockopt_find.isra.0+0x222/0x290 [ 82.457578][ T6921] ? nf_sockopt_find.isra.0+0x222/0x290 [ 82.457600][ T6921] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 82.457625][ T6921] ? __mutex_unlock_slowpath+0x35d/0x930 [ 82.457652][ T6921] ? sockopt_release_sock+0x5c/0x70 [ 82.457672][ T6921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.457708][ T6921] ? nf_sockopt_find.isra.0+0x222/0x290 [ 82.457733][ T6921] nf_setsockopt+0x8d/0xf0 [ 82.457754][ T6921] ip_setsockopt+0xcb/0xf0 [ 82.457781][ T6921] tcp_setsockopt+0xa7/0x100 [ 82.457809][ T6921] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.457834][ T6921] do_sock_setsockopt+0xf3/0x1d0 [ 82.457857][ T6921] __sys_setsockopt+0x195/0x220 [ 82.457892][ T6921] __x64_sys_setsockopt+0xbd/0x160 [ 82.457918][ T6921] ? do_syscall_64+0xae/0x790 [ 82.457942][ T6921] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.457968][ T6921] do_syscall_64+0x123/0x790 [ 82.458003][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.458023][ T6921] RIP: 0033:0x7f791a99e1d9 [ 82.458040][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.458058][ T6921] RSP: 002b:00007f791b897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.458076][ T6921] RAX: ffffffffffffffda RBX: 00007f791ac25fa0 RCX: 00007f791a99e1d9 [ 82.458088][ T6921] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.458100][ T6921] RBP: 00007f791b897090 R08: 0000000000000468 R09: 0000000000000000 [ 82.458112][ T6921] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.458133][ T6921] R13: 00007f791ac26038 R14: 00007f791ac25fa0 R15: 00007ffe72ea7468 [ 82.458160][ T6921] [ 82.530384][ T5733] Bluetooth: hci5: command tx timeout [ 82.593949][ T6932] Console: switching to colour dummy device 80x25 [ 82.690147][ T6844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.693318][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.694838][ T6844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.695216][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.698838][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.699595][ T6844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.703752][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.704111][ T6844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.713486][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.719599][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.760461][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.777313][ T6942] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 82.791403][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 82.796346][ T6942] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 82.797055][ T6942] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 82.797211][ T6942] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 82.797968][ T6942] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 82.798498][ T6942] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 82.834965][ T6942] pci 0000:00:01.0: Adding to iommu group 1 [ 82.840254][ T6942] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 82.840273][ T6942] pci 0000:00:01.0: vgaarb: bridge control possible [ 82.840285][ T6942] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 82.859327][ T6942] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 82.859491][ T6942] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 82.873880][ T6942] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 82.899379][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.909825][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.924332][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.924420][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.960810][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.960888][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.979048][ T6942] [drm] pci: virtio-vga det ** replaying previous printk message ** [ 82.979048][ T6942] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 82.979095][ T6942] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 82.980198][ T6942] [drm] features: -virgl +edid -resource_blob -host_visible [ 82.980210][ T6942] [drm] features: -context_init -blob_alignment [ 82.988777][ T6942] ------------[ cut here ]------------ [ 82.988789][ T6942] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 82.988798][ T6942] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#3: syz.1.323/6942 [ 83.013188][ T6942] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.015149][ T6942] CPU: 3 UID: 0 PID: 6942 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(full) [ 83.019479][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.023702][ T6942] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 83.026821][ T6942] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 86 f9 8f 74 1f 48 8b 7b 58 48 89 ee e8 d2 db 71 09 85 c0 75 e0 48 8d 3d 97 f4 eb 0f 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 52 dd 71 09 48 85 c0 0f [ 83.035400][ T6942] RSP: 0018:ffffc90003ffef18 EFLAGS: 00010246 [ 83.038384][ T6942] RAX: 0000000000000000 RBX: ffff88802b340b40 RCX: fffff520007ffdbe [ 83.041212][ T6942] RDX: 0000000000000000 RSI: ffffffff8c91bd60 RDI: ffffffff9249efd0 [ 83.044364][ T6942] RBP: ffffffff8c91bd60 R08: 0000000000000000 R09: fffffbfff248accb [ 83.048117][ T6942] R10: ffffc90003ffef18 R11: 0000000000000000 R12: 0000000000000000 [ 83.051358][ T6942] R13: ffffc90003ffef88 R14: 00000000000000d8 R15: ffff88804b074fce [ 83.054966][ T6942] FS: 00007f791b8766c0(0000) GS:ffff8880d4c47000(0000) knlGS:0000000000000000 [ 83.058847][ T6942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.061531][ T6942] CR2: 00007f9b159b7ff8 CR3: 0000000026e4d000 CR4: 0000000000352ef0 [ 83.065017][ T6942] Call Trace: [ 83.066449][ T6942] [ 83.067822][ T6942] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 83.070111][ T6942] ? __pfx__printk+0x10/0x10 [ 83.072091][ T6942] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 83.074633][ T6942] ? lockdep_init_map_type+0x5c/0x250 [ 83.077030][ T6942] virtio_gpu_init.cold+0x40d/0x1293 [ 83.082079][ T6942] ? vga_remove_vgacon.cold+0x1d/0x99 [ 83.084348][ T6942] ? __pfx_virtio_gpu_init+0x10/0x10 [ 83.086585][ T6942] ? is_console_locked+0x9/0x20 [ 83.088727][ T6942] ? con_is_bound+0x141/0x190 [ 83.090754][ T6942] ? vga_remove_vgacon+0x21/0x30 [ 83.092830][ T6942] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 83.095770][ T6942] virtio_gpu_probe+0x21c/0x360 [ 83.097929][ T6942] virtio_dev_probe+0x6a2/0xbe0 [ 83.100064][ T6942] ? __pfx_virtio_dev_probe+0x10/0x10 [ 83.102331][ T6942] ? kernfs_create_link+0x1bd/0x240 [ 83.104540][ T6942] ? kernfs_put+0x3f/0x60 [ 83.106370][ T6942] ? sysfs_do_create_link_sd+0xbb/0x140 [ 83.110549][ T6942] ? sysfs_create_link+0x68/0xc0 [ 83.112817][ T6942] ? __pfx_virtio_dev_probe+0x10/0x10 [ 83.115195][ T6942] really_probe+0x241/0xa60 [ 83.117170][ T6942] __driver_probe_device+0x210/0x460 [ 83.119545][ T6942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.122078][ T6942] driver_probe_device+0x4a/0x140 [ 83.124264][ T6942] __device_attach_driver+0x1df/0x320 [ 83.126562][ T6942] ? __pfx___device_attach_driver+0x10/0x10 [ 83.129203][ T6942] bus_for_each_drv+0x159/0x1e0 [ 83.131320][ T6942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.133615][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.135847][ T6942] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.138748][ T6942] __device_attach+0x1e4/0x4d0 [ 83.140736][ T6942] ? __pfx___device_attach+0x10/0x10 [ 83.142965][ T6942] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.145114][ T6942] device_initial_probe+0xaf/0xd0 [ 83.147135][ T6942] bus_probe_device+0x64/0x160 [ 83.149318][ T6942] device_add+0x121d/0x1970 [ 83.151199][ T6942] ? __pfx_device_add+0x10/0x10 [ 83.153206][ T6942] ? __pfx___might_resched+0x10/0x10 [ 83.155282][ T6942] ? __init_waitqueue_head+0xca/0x150 [ 83.157240][ T6942] ? ioread8+0x8f/0xd0 [ 83.158955][ T6942] register_virtio_device+0x4f0/0x5d0 [ 83.161270][ T6942] ? __pfx_register_virtio_device+0x10/0x10 [ 83.163810][ T6942] ? __pfx_pcibios_set_master+0x10/0x10 [ 83.166179][ T6942] ? __raw_spin_lock_init+0x3a/0x110 [ 83.168543][ T6942] ? __pfx_virtio_pci_probe+0x10/0x10 [ 83.170835][ T6942] virtio_pci_probe+0x255/0x410 [ 83.172930][ T6942] local_pci_probe+0xdd/0x1b0 [ 83.174991][ T6942] pci_call_probe+0x176/0x800 [ 83.177026][ T6942] ? pci_match_device+0x147/0x7d0 [ 83.179219][ T6942] ? __pfx_pci_call_probe+0x10/0x10 [ 83.181187][ T6942] ? __pfx_pci_match_device+0x10/0x10 [ 83.183379][ T6942] ? pci_find_host_bridge+0x3c/0x80 [ 83.185521][ T6942] ? up_write+0x2dc/0x5b0 [ 83.187291][ T6942] pci_device_probe+0x25b/0x400 [ 83.189362][ T6942] ? __pfx_pci_device_probe+0x10/0x10 [ 83.191574][ T6942] ? kernfs_create_link+0x1bd/0x240 [ 83.193779][ T6942] ? sysfs_create_link+0x68/0xc0 [ 83.195925][ T6942] ? __pfx_pci_device_probe+0x10/0x10 [ 83.198056][ T6942] really_probe+0x241/0xa60 [ 83.200143][ T6942] __driver_probe_device+0x210/0x460 [ 83.202437][ T6942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.204941][ T6942] driver_probe_device+0x4a/0x140 [ 83.207098][ T6942] __device_attach_driver+0x1df/0x320 [ 83.209517][ T6942] ? __pfx___device_attach_driver+0x10/0x10 [ 83.212040][ T6942] bus_for_each_drv+0x159/0x1e0 [ 83.214075][ T6942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.216326][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.218529][ T6942] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.221148][ T6942] __device_attach+0x1e4/0x4d0 [ 83.223228][ T6942] ? __pfx___device_attach+0x10/0x10 [ 83.225364][ T6942] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.227629][ T6942] device_initial_probe+0xaf/0xd0 [ 83.229844][ T6942] pci_bus_add_device+0xc5/0x100 [ 83.231946][ T6942] pci_bus_add_devices+0x9a/0x1f0 [ 83.234085][ T6942] pci_rescan_bus+0x2a/0x40 [ 83.236033][ T6942] rescan_store+0xfb/0x130 [ 83.237966][ T6942] ? __pfx_rescan_store+0x10/0x10 [ 83.240206][ T6942] ? sysfs_file_kobj+0xe4/0x290 [ 83.242220][ T6942] ? __pfx_rescan_store+0x10/0x10 [ 83.244280][ T6942] bus_attr_store+0x74/0xb0 [ 83.246235][ T6942] ? __pfx_bus_attr_store+0x10/0x10 [ 83.248480][ T6942] sysfs_kf_write+0xf2/0x150 [ 83.250485][ T6942] kernfs_fop_write_iter+0x3e0/0x5f0 [ 83.252683][ T6942] ? __pfx_sysfs_kf_write+0x10/0x10 [ 83.254855][ T6942] vfs_write+0x6af/0x1050 [ 83.256621][ T6942] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.259117][ T6942] ? __pfx_vfs_write+0x10/0x10 [ 83.261312][ T6942] ? find_held_lock+0x2b/0x80 [ 83.263387][ T6942] ksys_write+0x12a/0x250 [ 83.265241][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 83.267362][ T6942] do_syscall_64+0x123/0x790 [ 83.269355][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.271967][ T6942] RIP: 0033:0x7f791a99e1d9 [ 83.273901][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.281953][ T6942] RSP: 002b:00007f791b876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.285522][ T6942] RAX: ffffffffffffffda RBX: 00007f791ac26090 RCX: 00007f791a99e1d9 [ 83.288871][ T6942] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 83.292306][ T6942] RBP: 00007f791aa35888 R08: 0000000000000000 R09: 0000000000000000 [ 83.295627][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.298940][ T6942] R13: 00007f791ac26128 R14: 00007f791ac26090 R15: 00007ffe72ea7468 [ 83.302437][ T6942] [ 83.303827][ T6942] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.306917][ T6942] CPU: 3 UID: 0 PID: 6942 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(full) [ 83.310770][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.315035][ T6942] Call Trace: [ 83.316486][ T6942] [ 83.317748][ T6942] dump_stack_lvl+0x100/0x190 [ 83.319802][ T6942] vpanic+0x553/0x970 [ 83.321562][ T6942] ? __pfx_vpanic+0x10/0x10 [ 83.323538][ T6942] panic+0xd1/0xe0 [ 83.325165][ T6942] ? __pfx_panic+0x10/0x10 [ 83.327091][ T6942] check_panic_on_warn.cold+0x19/0x34 [ 83.329386][ T6942] ? __kmem_cache_create_args+0xa9/0x430 [ 83.331586][ T6942] __warn.cold+0x191/0x318 [ 83.333457][ T6942] __report_bug+0x30f/0x440 [ 83.335423][ T6942] ? __kmem_cache_create_args+0xa9/0x430 [ 83.337821][ T6942] ? __pfx___report_bug+0x10/0x10 [ 83.339998][ T6942] ? __mutex_lock+0x26c/0x1bd0 [ 83.342062][ T6942] ? __kmem_cache_create_args+0x44/0x430 [ 83.344506][ T6942] report_bug_entry+0xe2/0x290 [ 83.346580][ T6942] ? __kmem_cache_create_args+0xac/0x430 [ 83.348989][ T6942] handle_bug+0x1cd/0x2a0 [ 83.350882][ T6942] exc_invalid_op+0x17/0x50 [ 83.352837][ T6942] asm_exc_invalid_op+0x1a/0x20 [ 83.354954][ T6942] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 83.357624][ T6942] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 86 f9 8f 74 1f 48 8b 7b 58 48 89 ee e8 d2 db 71 09 85 c0 75 e0 48 8d 3d 97 f4 eb 0f 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 52 dd 71 09 48 85 c0 0f [ 83.365757][ T6942] RSP: 0018:ffffc90003ffef18 EFLAGS: 00010246 [ 83.368361][ T6942] RAX: 0000000000000000 RBX: ffff88802b340b40 RCX: fffff520007ffdbe [ 83.371711][ T6942] RDX: 0000000000000000 RSI: ffffffff8c91bd60 RDI: ffffffff9249efd0 [ 83.375039][ T6942] RBP: ffffffff8c91bd60 R08: 0000000000000000 R09: fffffbfff248accb [ 83.378261][ T6942] R10: ffffc90003ffef18 R11: 0000000000000000 R12: 0000000000000000 [ 83.381626][ T6942] R13: ffffc90003ffef88 R14: 00000000000000d8 R15: ffff88804b074fce [ 83.385040][ T6942] ? __kmem_cache_create_args+0x9e/0x430 [ 83.387485][ T6942] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 83.389748][ T6942] ? __pfx__printk+0x10/0x10 [ 83.391742][ T6942] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 83.394280][ T6942] ? lockdep_init_map_type+0x5c/0x250 [ 83.396607][ T6942] virtio_gpu_init.cold+0x40d/0x1293 [ 83.398889][ T6942] ? vga_remove_vgacon.cold+0x1d/0x99 [ 83.401194][ T6942] ? __pfx_virtio_gpu_init+0x10/0x10 [ 83.403491][ T6942] ? is_console_locked+0x9/0x20 [ 83.405586][ T6942] ? con_is_bound+0x141/0x190 [ 83.407654][ T6942] ? vga_remove_vgacon+0x21/0x30 [ 83.409765][ T6942] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 83.412740][ T6942] virtio_gpu_probe+0x21c/0x360 [ 83.414868][ T6942] virtio_dev_probe+0x6a2/0xbe0 [ 83.416959][ T6942] ? __pfx_virtio_dev_probe+0x10/0x10 [ 83.419258][ T6942] ? kernfs_create_link+0x1bd/0x240 [ 83.421484][ T6942] ? kernfs_put+0x3f/0x60 [ 83.423362][ T6942] ? sysfs_do_create_link_sd+0xbb/0x140 [ 83.425730][ T6942] ? sysfs_create_link+0x68/0xc0 [ 83.427863][ T6942] ? __pfx_virtio_dev_probe+0x10/0x10 [ 83.430089][ T6942] really_probe+0x241/0xa60 [ 83.431996][ T6942] __driver_probe_device+0x210/0x460 [ 83.434205][ T6942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.436579][ T6942] driver_probe_device+0x4a/0x140 [ 83.438733][ T6942] __device_attach_driver+0x1df/0x320 [ 83.441047][ T6942] ? __pfx___device_attach_driver+0x10/0x10 [ 83.443592][ T6942] bus_for_each_drv+0x159/0x1e0 [ 83.445687][ T6942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.447987][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.450225][ T6942] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.452730][ T6942] __device_attach+0x1e4/0x4d0 [ 83.454843][ T6942] ? __pfx___device_attach+0x10/0x10 [ 83.457087][ T6942] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.459328][ T6942] device_initial_probe+0xaf/0xd0 [ 83.461486][ T6942] bus_probe_device+0x64/0x160 [ 83.463710][ T6942] device_add+0x121d/0x1970 [ 83.465679][ T6942] ? __pfx_device_add+0x10/0x10 [ 83.467791][ T6942] ? __pfx___might_resched+0x10/0x10 [ 83.470067][ T6942] ? __init_waitqueue_head+0xca/0x150 [ 83.472375][ T6942] ? ioread8+0x8f/0xd0 [ 83.474130][ T6942] register_virtio_device+0x4f0/0x5d0 [ 83.476337][ T6942] ? __pfx_register_virtio_device+0x10/0x10 [ 83.478855][ T6942] ? __pfx_pcibios_set_master+0x10/0x10 [ 83.481222][ T6942] ? __raw_spin_lock_init+0x3a/0x110 [ 83.483511][ T6942] ? __pfx_virtio_pci_probe+0x10/0x10 [ 83.485800][ T6942] virtio_pci_probe+0x255/0x410 [ 83.487913][ T6942] local_pci_probe+0xdd/0x1b0 [ 83.489861][ T6942] pci_call_probe+0x176/0x800 [ 83.491876][ T6942] ? pci_match_device+0x147/0x7d0 [ 83.494063][ T6942] ? __pfx_pci_call_probe+0x10/0x10 [ 83.496327][ T6942] ? __pfx_pci_match_device+0x10/0x10 [ 83.498628][ T6942] ? pci_find_host_bridge+0x3c/0x80 [ 83.500874][ T6942] ? up_write+0x2dc/0x5b0 [ 83.502765][ T6942] pci_device_probe+0x25b/0x400 [ 83.504898][ T6942] ? __pfx_pci_device_probe+0x10/0x10 [ 83.507204][ T6942] ? kernfs_create_link+0x1bd/0x240 [ 83.509455][ T6942] ? sysfs_create_link+0x68/0xc0 [ 83.511574][ T6942] ? __pfx_pci_device_probe+0x10/0x10 [ 83.513883][ T6942] really_probe+0x241/0xa60 [ 83.515872][ T6942] __driver_probe_device+0x210/0x460 [ 83.518151][ T6942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.520621][ T6942] driver_probe_device+0x4a/0x140 [ 83.522636][ T6942] __device_attach_driver+0x1df/0x320 [ 83.524923][ T6942] ? __pfx___device_attach_driver+0x10/0x10 [ 83.527476][ T6942] bus_for_each_drv+0x159/0x1e0 [ 83.529566][ T6942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.531873][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.534129][ T6942] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.536634][ T6942] __device_attach+0x1e4/0x4d0 [ 83.538673][ T6942] ? __pfx___device_attach+0x10/0x10 [ 83.540956][ T6942] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.543237][ T6942] device_initial_probe+0xaf/0xd0 [ 83.545423][ T6942] pci_bus_add_device+0xc5/0x100 [ 83.547557][ T6942] pci_bus_add_devices+0x9a/0x1f0 [ 83.549702][ T6942] pci_rescan_bus+0x2a/0x40 [ 83.551657][ T6942] rescan_store+0xfb/0x130 [ 83.553624][ T6942] ? __pfx_rescan_store+0x10/0x10 [ 83.555795][ T6942] ? sysfs_file_kobj+0xe4/0x290 [ 83.557888][ T6942] ? __pfx_rescan_store+0x10/0x10 [ 83.560055][ T6942] bus_attr_store+0x74/0xb0 [ 83.562017][ T6942] ? __pfx_bus_attr_store+0x10/0x10 [ 83.564096][ T6942] sysfs_kf_write+0xf2/0x150 [ 83.566102][ T6942] kernfs_fop_write_iter+0x3e0/0x5f0 [ 83.568386][ T6942] ? __pfx_sysfs_kf_write+0x10/0x10 [ 83.570633][ T6942] vfs_write+0x6af/0x1050 [ 83.572518][ T6942] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.575030][ T6942] ? __pfx_vfs_write+0x10/0x10 [ 83.577098][ T6942] ? find_held_lock+0x2b/0x80 [ 83.579152][ T6942] ksys_write+0x12a/0x250 [ 83.580970][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 83.583052][ T6942] do_syscall_64+0x123/0x790 [ 83.585004][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.587460][ T6942] RIP: 0033:0x7f791a99e1d9 [ 83.589394][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.597482][ T6942] RSP: 002b:00007f791b876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.600972][ T6942] RAX: ffffffffffffffda RBX: 00007f791ac26090 RCX: 00007f791a99e1d9 [ 83.604272][ T6942] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 83.607533][ T6942] RBP: 00007f791aa35888 R08: 0000000000000000 R09: 0000000000000000 [ 83.610741][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.613896][ T6942] R13: 00007f791ac26128 R14: 00007f791ac26090 R15: 00007ffe72ea7468 [ 83.617125][ T6942] [ 83.619207][ T6942] Kernel Offset: disabled [ 83.620970][ T6942] Rebooting in 86400 seconds..