last executing test programs: 7m26.220693207s ago: executing program 0 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r0, &(0x7f0000000140)='1', 0x1) 7m26.010361688s ago: executing program 0 (id=400): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000001a280)='maps\x00') r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x100, 0x8, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x90, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r6, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x80000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af0, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) 7m24.591180367s ago: executing program 0 (id=402): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 7m24.471109687s ago: executing program 0 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x187091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0xa) 7m24.361017888s ago: executing program 0 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000100d00)={0x0, 0x0, &(0x7f0000100cc0)={&(0x7f0000100700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x8, 0x8, "d294906a"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x80, 0x6, "5206b32d35ae8cd61c4ec662747c43f4cc6f11f50921e4c0c4c5e31e90be40f014f6733ce5a00f1b31d2f17d931da53aa2afe379f51524b067aed06ad7cd201eb3106701ad6dbdeefe663b4c0fb18de06ee151300c949fb061fe7f8b64a8ebd1f7a622c2cd04a4bc33d852bafe3168f24aa5c33911f9c18aa35bace2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x14c}, 0x1, 0x0, 0x0, 0x8041}, 0x10) 7m24.02687747s ago: executing program 0 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) 7m24.02664053s ago: executing program 32 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) 4.373893938s ago: executing program 2 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x80, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x40, @default, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x3, 0xa}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x9}}, @void}}]]}, 0x80}}, 0x0) 4.12108091s ago: executing program 2 (id=2145): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xc3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x149) write(r0, &(0x7f0000000000)='7', 0x1) clock_gettime(0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x4, 0x8) 3.97030711s ago: executing program 2 (id=2146): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='jfs\x00', 0x20c86, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.818396911s ago: executing program 2 (id=2147): syz_emit_ethernet(0x6f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e5) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.659629302s ago: executing program 2 (id=2148): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @empty}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x8819520}], 0x1, 0x45833af92e4a38bf, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2.950571055s ago: executing program 1 (id=2152): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x4, 0x1000, 0x8, 0x18, "ed9c52dafcfd9751b42cd3345e86d0a04e5fa4"}) 2.881918236s ago: executing program 1 (id=2153): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.739717606s ago: executing program 1 (id=2154): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000380)=0x2c, 0x4) 2.660181407s ago: executing program 1 (id=2155): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='r', 0x1) 2.569999737s ago: executing program 1 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0xa15b0}, 0x700) write(r0, &(0x7f0000000000)='3', 0x4e) 1.007919735s ago: executing program 2 (id=2157): socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 1 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) kernel console output (not intermixed with test programs): 89.738264][ T3890] do_dentry_open+0x128/0x4fc [ 189.738300][ T3890] vfs_open+0x2c/0xe8 [ 189.738344][ T3890] path_openat+0x5b4/0x960 [ 189.738380][ T3890] do_file_open+0xb0/0x168 [ 189.738413][ T3890] do_sys_openat2+0x84/0x104 [ 189.738448][ T3890] __arm64_sys_openat+0x64/0xc0 [ 189.738484][ T3890] invoke_syscall+0x54/0x10c [ 189.738518][ T3890] el0_svc_common.constprop.0+0x40/0xe0 [ 189.738551][ T3890] do_el0_svc+0x1c/0x34 [ 189.738583][ T3890] el0_svc+0x38/0x1fc [ 189.738618][ T3890] el0t_64_sync_handler+0xa0/0xe4 [ 189.738650][ T3890] el0t_64_sync+0x1a4/0x1a8 [ 189.738915][ T3890] syz.0.140: vmalloc error: size 8888, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 189.744497][ T3890] CPU: 0 UID: 0 PID: 3890 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT [ 189.744586][ T3890] Hardware name: linux,dummy-virt (DT) [ 189.744627][ T3890] Call trace: [ 189.744660][ T3890] show_stack+0x18/0x24 (C) [ 189.744801][ T3890] dump_stack_lvl+0x60/0x80 [ 189.744914][ T3890] dump_stack+0x18/0x24 [ 189.745027][ T3890] warn_alloc+0x134/0x148 [ 189.745100][ T3890] __vmalloc_node_range_noprof+0x78c/0x920 [ 189.745178][ T3890] vzalloc_noprof+0x94/0xa4 [ 189.745241][ T3890] n_tty_open+0x1c/0xb8 [ 189.745317][ T3890] tty_ldisc_open+0x3c/0xc8 [ 189.745386][ T3890] tty_ldisc_setup+0x3c/0x6c [ 189.745461][ T3890] tty_init_dev.part.0+0xa8/0x260 [ 189.745530][ T3890] tty_open+0x410/0x6ac [ 189.745596][ T3890] chrdev_open+0xac/0x220 [ 189.745668][ T3890] do_dentry_open+0x128/0x4fc [ 189.745740][ T3890] vfs_open+0x2c/0xe8 [ 189.745817][ T3890] path_openat+0x5b4/0x960 [ 189.745889][ T3890] do_file_open+0xb0/0x168 [ 189.746001][ T3890] do_sys_openat2+0x84/0x104 [ 189.746076][ T3890] __arm64_sys_openat+0x64/0xc0 [ 189.746149][ T3890] invoke_syscall+0x54/0x10c [ 189.746218][ T3890] el0_svc_common.constprop.0+0x40/0xe0 [ 189.746301][ T3890] do_el0_svc+0x1c/0x34 [ 189.746371][ T3890] el0_svc+0x38/0x1fc [ 189.746443][ T3890] el0t_64_sync_handler+0xa0/0xe4 [ 189.746522][ T3890] el0t_64_sync+0x1a4/0x1a8 [ 189.746816][ T3890] Mem-Info: [ 189.747200][ T3890] active_anon:12 inactive_anon:3233 isolated_anon:0 [ 189.747200][ T3890] active_file:1667 inactive_file:12055 isolated_file:0 [ 189.747200][ T3890] unevictable:768 dirty:20 writeback:0 [ 189.747200][ T3890] slab_reclaimable:3417 slab_unreclaimable:8362 [ 189.747200][ T3890] mapped:2686 shmem:825 pagetables:382 [ 189.747200][ T3890] sec_pagetables:0 bounce:0 [ 189.747200][ T3890] kernel_misc_reclaimable:0 [ 189.747200][ T3890] free:433449 free_pcp:27698 free_cma:8128 [ 189.748152][ T3890] Node 0 active_anon:48kB inactive_anon:12932kB active_file:6668kB inactive_file:48220kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10744kB dirty:80kB writeback:0kB shmem:3300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3048kB pagetables:1528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 189.748470][ T3890] Node 0 DMA free:1733796kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48kB inactive_anon:12932kB active_file:6668kB inactive_file:48220kB unevictable:3072kB writepending:80kB zspages:0kB present:2097152kB managed:1988656kB mlocked:0kB bounce:0kB free_pcp:110792kB local_pcp:69724kB free_cma:32512kB [ 189.748844][ T3890] lowmem_reserve[]: 0 0 0 0 0 [ 189.750925][ T3890] Node 0 DMA: 125*4kB (UM) 92*8kB (UME) 93*16kB (UM) 78*32kB (UME) 87*64kB (UME) 107*128kB (UM) 105*256kB (UMC) 66*512kB (UMEC) 72*1024kB (UMEC) 51*2048kB (UMC) 359*4096kB (MC) = 1733796kB [ 189.752169][ T3890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.752274][ T3890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 189.752322][ T3890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 189.752367][ T3890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 189.752499][ T3890] 14543 total pagecache pages [ 189.752561][ T3890] 0 pages in swap cache [ 189.752623][ T3890] Free swap = 124996kB [ 189.752671][ T3890] Total swap = 124996kB [ 189.752845][ T3890] 524288 pages RAM [ 189.752890][ T3890] 0 pages HighMem/MovableOnly [ 189.752926][ T3890] 27124 pages reserved [ 189.752967][ T3890] 8192 pages cma reserved [ 189.753005][ T3890] 0 pages hwpoisoned [ 189.753638][ T3890] pty pty20: ldisc open failed (-12), clearing slot 20 [ 189.851905][ T3892] input: syz0 as /devices/virtual/input/input5 [ 194.061072][ T3906] input: syz0 as /devices/virtual/input/input6 [ 200.113884][ T3918] input: syz0 as /devices/virtual/input/input7 [ 205.281640][ T3927] input: syz0 as /devices/virtual/input/input8 [ 214.011917][ T3952] input: syz0 as /devices/virtual/input/input9 [ 220.778487][ T3970] input: syz0 as /devices/virtual/input/input10 [ 223.077295][ T3974] input: syz1 as /devices/virtual/input/input11 [ 248.496777][ T4035] input: syz0 as /devices/virtual/input/input12 [ 258.825469][ T4052] input: syz0 as /devices/virtual/input/input13 [ 267.669855][ T4075] input: syz0 as /devices/virtual/input/input14 [ 276.594379][ T4093] input: syz0 as /devices/virtual/input/input15 [ 277.983565][ T4096] input: syz0 as /devices/virtual/input/input16 [ 285.335412][ T4106] 0x000000000000-0x000008000000 : "" [ 285.434495][ T4106] ftl_cs: FTL header not found. [ 299.243429][ T4130] FAULT_INJECTION: forcing a failure. [ 299.243429][ T4130] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 299.243594][ T4130] CPU: 0 UID: 0 PID: 4130 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT [ 299.243676][ T4130] Hardware name: linux,dummy-virt (DT) [ 299.243717][ T4130] Call trace: [ 299.243752][ T4130] show_stack+0x18/0x24 (C) [ 299.243874][ T4130] dump_stack_lvl+0x60/0x80 [ 299.243948][ T4130] dump_stack+0x18/0x24 [ 299.244015][ T4130] should_fail_ex+0x1e0/0x238 [ 299.244086][ T4130] should_fail_alloc_page+0x60/0x80 [ 299.244152][ T4130] __alloc_frozen_pages_noprof+0x234/0x13d8 [ 299.244226][ T4130] alloc_pages_mpol+0x74/0x1b8 [ 299.244293][ T4130] folio_alloc_mpol_noprof+0x14/0x68 [ 299.244363][ T4130] vma_alloc_folio_noprof+0x80/0xcc [ 299.244431][ T4130] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 299.244494][ T4130] do_anonymous_page+0x2b0/0x9b8 [ 299.244566][ T4130] __handle_mm_fault+0xa5c/0xec0 [ 299.244629][ T4130] handle_mm_fault+0x88/0x318 [ 299.244691][ T4130] do_page_fault+0x378/0x77c [ 299.244752][ T4130] do_translation_fault+0x5c/0x6c [ 299.244822][ T4130] do_mem_abort+0x40/0x90 [ 299.244886][ T4130] el0_da+0x38/0xf0 [ 299.244956][ T4130] el0t_64_sync_handler+0xd0/0xe4 [ 299.245017][ T4130] el0t_64_sync+0x1a4/0x1a8 [ 299.245367][ T4130] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 299.876779][ T4133] FAULT_INJECTION: forcing a failure. [ 299.876779][ T4133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 299.876940][ T4133] CPU: 0 UID: 0 PID: 4133 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT [ 299.877026][ T4133] Hardware name: linux,dummy-virt (DT) [ 299.877067][ T4133] Call trace: [ 299.877100][ T4133] show_stack+0x18/0x24 (C) [ 299.877204][ T4133] dump_stack_lvl+0x60/0x80 [ 299.877274][ T4133] dump_stack+0x18/0x24 [ 299.877347][ T4133] should_fail_ex+0x1e0/0x238 [ 299.877421][ T4133] should_fail+0x14/0x40 [ 299.877487][ T4133] should_fail_usercopy+0x1c/0x40 [ 299.877551][ T4133] _inline_copy_from_user+0x24/0xa8 [ 299.877624][ T4133] copy_msghdr_from_user+0x58/0x160 [ 299.877691][ T4133] ___sys_sendmsg+0x90/0x108 [ 299.877762][ T4133] __sys_sendmsg+0x9c/0x100 [ 299.877834][ T4133] __arm64_sys_sendmsg+0x20/0x38 [ 299.877906][ T4133] invoke_syscall+0x54/0x10c [ 299.877970][ T4133] el0_svc_common.constprop.0+0x40/0xe0 [ 299.878033][ T4133] do_el0_svc+0x1c/0x34 [ 299.878094][ T4133] el0_svc+0x38/0x1fc [ 299.878161][ T4133] el0t_64_sync_handler+0xa0/0xe4 [ 299.878224][ T4133] el0t_64_sync+0x1a4/0x1a8 [ 316.698127][ T4179] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 316.828032][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.835806][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.852936][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.855111][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.216439][ T4188] capability: warning: `syz.1.224' uses 32-bit capabilities (legacy support in use) [ 318.601018][ T4203] binder: 4202:4203 got reply transaction with no transaction stack [ 318.601455][ T4203] binder: 4202:4203 transaction reply to 0:0 failed 1/29201/-71, code 0 size 80-24 line 3155 [ 322.285344][ T4294] input: syz0 as /devices/virtual/input/input17 [ 327.359616][ T4325] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 329.663557][ T4370] FAULT_INJECTION: forcing a failure. [ 329.663557][ T4370] name failslab, interval 1, probability 0, space 0, times 0 [ 329.663731][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: syz.1.290 Not tainted syzkaller #0 PREEMPT [ 329.663821][ T4370] Hardware name: linux,dummy-virt (DT) [ 329.663870][ T4370] Call trace: [ 329.663908][ T4370] show_stack+0x18/0x24 (C) [ 329.664010][ T4370] dump_stack_lvl+0x60/0x80 [ 329.664082][ T4370] dump_stack+0x18/0x24 [ 329.664151][ T4370] should_fail_ex+0x1e0/0x238 [ 329.664229][ T4370] should_failslab+0x54/0x80 [ 329.664301][ T4370] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 329.664392][ T4370] __d_alloc+0x3c/0x280 [ 329.664463][ T4370] d_alloc_pseudo+0x10/0x50 [ 329.664530][ T4370] alloc_file_pseudo+0x7c/0x160 [ 329.664598][ T4370] anon_inode_getfile+0x70/0xf0 [ 329.664673][ T4370] do_seccomp+0x3c4/0xa84 [ 329.664750][ T4370] __arm64_sys_seccomp+0x1c/0x30 [ 329.664821][ T4370] invoke_syscall+0x54/0x10c [ 329.664896][ T4370] el0_svc_common.constprop.0+0x40/0xe0 [ 329.664966][ T4370] do_el0_svc+0x1c/0x34 [ 329.665033][ T4370] el0_svc+0x38/0x1fc [ 329.665108][ T4370] el0t_64_sync_handler+0xa0/0xe4 [ 329.665176][ T4370] el0t_64_sync+0x1a4/0x1a8 [ 329.777230][ T4373] binder: 4372:4373 ioctl c0306201 20000080 returned -14 [ 329.787681][ T4373] binder: 4372:4373 tried to acquire reference to desc 0, got 1 instead [ 329.787949][ T4373] binder: 4372:4373 ioctl c0306201 200003c0 returned -14 [ 329.789337][ T4373] binder: 4372:4373 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 329.789598][ T4373] binder: 4373 RLIMIT_NICE not set [ 330.295620][ T4374] binder: 4372:4374 unknown command 0 [ 330.295788][ T4374] binder: 4372:4374 ioctl c0306201 20000000 returned -22 [ 331.874492][ T4402] xt_hashlimit: size too large, truncated to 1048576 [ 332.761737][ T4418] ip_tables: iptables: counters copy to user failed while replacing table [ 335.665399][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 335.665521][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 339.011418][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.012772][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.225315][ T4469] block nbd0: shutting down sockets [ 339.678000][ T4486] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 339.737738][ T4489] xt_hashlimit: size too large, truncated to 1048576 [ 340.146236][ T4501] ubi24: attaching mtd2 [ 340.211633][ T4501] ubi24: scanning is finished [ 340.212743][ T4501] ubi24 error: ubi_read_volume_table: the layout volume was not found [ 340.289084][ T4501] ubi24 error: ubi_attach_mtd_dev: failed to attach mtd2, error -22 [ 342.344899][ T4542] syzkaller0: entered promiscuous mode [ 342.344973][ T4542] syzkaller0: entered allmulticast mode [ 347.681634][ T2061] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 347.710628][ T4556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.877681][ T2061] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.893471][ T2061] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.893844][ T2061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.893971][ T2061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.895097][ T2061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.938238][ T2061] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.938397][ T2061] usb 1-1: Product: syz [ 347.938480][ T2061] usb 1-1: Manufacturer: syz [ 348.011635][ T2061] cdc_wdm 1-1:1.0: skipping garbage [ 348.011789][ T2061] cdc_wdm 1-1:1.0: skipping garbage [ 348.019746][ T2061] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 348.227873][ T3526] usb 1-1: USB disconnect, device number 2 [ 348.626703][ T4604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.627962][ T4604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.843071][ T4604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.844332][ T4604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.882069][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.882719][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.107798][ T4627] hub 1-0:1.0: USB hub found [ 350.115143][ T4627] hub 1-0:1.0: 1 port detected [ 350.338512][ T4633] lo speed is unknown, defaulting to 1000 [ 350.349015][ T4633] lo speed is unknown, defaulting to 1000 [ 350.356300][ T4633] lo speed is unknown, defaulting to 1000 [ 350.959650][ T4633] infiniband sz1: set active [ 350.960619][ T3377] lo speed is unknown, defaulting to 1000 [ 350.961937][ T4633] infiniband sz1: added lo [ 351.132646][ T4633] RDS/IB: sz1: added [ 351.138828][ T4633] smc: adding ib device sz1 with port count 1 [ 351.139244][ T4633] smc: ib device sz1 port 1 has no pnetid [ 351.139765][ T3377] lo speed is unknown, defaulting to 1000 [ 351.164683][ T4633] lo speed is unknown, defaulting to 1000 [ 351.815841][ T4652] ======================================================= [ 351.815841][ T4652] WARNING: The mand mount option has been deprecated and [ 351.815841][ T4652] and is ignored by this kernel. Remove the mand [ 351.815841][ T4652] option from the mount to silence this warning. [ 351.815841][ T4652] ======================================================= [ 351.971411][ T4633] lo speed is unknown, defaulting to 1000 [ 352.123896][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.277119][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.386110][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.489839][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.407434][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.442952][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.466935][ T51] bond0 (unregistering): Released all slaves [ 354.055223][ T4654] lo speed is unknown, defaulting to 1000 [ 354.185175][ T51] hsr_slave_0: left promiscuous mode [ 354.199750][ T51] hsr_slave_1: left promiscuous mode [ 354.254035][ T51] veth1_macvtap: left promiscuous mode [ 354.254435][ T51] veth0_macvtap: left promiscuous mode [ 354.254846][ T51] veth1_vlan: left promiscuous mode [ 354.255246][ T51] veth0_vlan: left promiscuous mode [ 355.428097][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 356.651839][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.659835][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.347207][ T4654] hsr_slave_0: entered promiscuous mode [ 357.352820][ T4654] hsr_slave_1: entered promiscuous mode [ 360.020910][ T4684] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 360.053128][ T4654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.102985][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.114991][ T4654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.139937][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.145854][ T4654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.175799][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.184657][ T4654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.216312][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.249482][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 361.507053][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.004694][ T4754] FAULT_INJECTION: forcing a failure. [ 362.004694][ T4754] name failslab, interval 1, probability 0, space 0, times 0 [ 362.004880][ T4754] CPU: 1 UID: 0 PID: 4754 Comm: syz.1.419 Not tainted syzkaller #0 PREEMPT [ 362.004970][ T4754] Hardware name: linux,dummy-virt (DT) [ 362.005009][ T4754] Call trace: [ 362.005047][ T4754] show_stack+0x18/0x24 (C) [ 362.005154][ T4754] dump_stack_lvl+0x60/0x80 [ 362.005224][ T4754] dump_stack+0x18/0x24 [ 362.005292][ T4754] should_fail_ex+0x1e0/0x238 [ 362.005369][ T4754] should_failslab+0x54/0x80 [ 362.005439][ T4754] kmem_cache_alloc_noprof+0x54/0x458 [ 362.005568][ T4754] __send_signal_locked+0x88/0x2e4 [ 362.005790][ T4754] send_signal_locked+0x94/0x1ec [ 362.005879][ T4754] force_sig_info_to_task+0xc8/0x150 [ 362.005954][ T4754] force_sig_fault+0x64/0x98 [ 362.006023][ T4754] arm64_force_sig_fault+0x40/0x70 [ 362.006104][ T4754] do_page_fault+0x50c/0x77c [ 362.006178][ T4754] do_translation_fault+0x5c/0x6c [ 362.006244][ T4754] do_mem_abort+0x40/0x90 [ 362.006310][ T4754] el0_da+0x38/0xf0 [ 362.006388][ T4754] el0t_64_sync_handler+0xd0/0xe4 [ 362.006464][ T4754] el0t_64_sync+0x1a4/0x1a8 [ 362.263493][ T4759] FAULT_INJECTION: forcing a failure. [ 362.263493][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 362.263668][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT [ 362.263758][ T4759] Hardware name: linux,dummy-virt (DT) [ 362.263802][ T4759] Call trace: [ 362.263838][ T4759] show_stack+0x18/0x24 (C) [ 362.263950][ T4759] dump_stack_lvl+0x60/0x80 [ 362.264026][ T4759] dump_stack+0x18/0x24 [ 362.264098][ T4759] should_fail_ex+0x1e0/0x238 [ 362.264169][ T4759] should_failslab+0x54/0x80 [ 362.264237][ T4759] __kvmalloc_node_noprof+0xc8/0x65c [ 362.264311][ T4759] io_alloc_cache_init+0x38/0x74 [ 362.264404][ T4759] io_uring_setup+0x218/0x7ec [ 362.264473][ T4759] __arm64_sys_io_uring_setup+0x60/0xb4 [ 362.264542][ T4759] invoke_syscall+0x54/0x10c [ 362.264608][ T4759] el0_svc_common.constprop.0+0x40/0xe0 [ 362.264671][ T4759] do_el0_svc+0x1c/0x34 [ 362.264737][ T4759] el0_svc+0x38/0x1fc [ 362.264810][ T4759] el0t_64_sync_handler+0xa0/0xe4 [ 362.264884][ T4759] el0t_64_sync+0x1a4/0x1a8 [ 362.993171][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 364.464036][ T3225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 365.316062][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 365.316466][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.429'. [ 365.316778][ T4818] FAULT_INJECTION: forcing a failure. [ 365.316778][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 365.316893][ T4818] CPU: 0 UID: 0 PID: 4818 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT [ 365.316980][ T4818] Hardware name: linux,dummy-virt (DT) [ 365.317025][ T4818] Call trace: [ 365.317062][ T4818] show_stack+0x18/0x24 (C) [ 365.317189][ T4818] dump_stack_lvl+0x60/0x80 [ 365.317268][ T4818] dump_stack+0x18/0x24 [ 365.317345][ T4818] should_fail_ex+0x1e0/0x238 [ 365.317430][ T4818] should_failslab+0x54/0x80 [ 365.317512][ T4818] __kmalloc_cache_noprof+0x58/0x470 [ 365.317597][ T4818] nf_tables_addchain.constprop.0+0x3c4/0x5d4 [ 365.317687][ T4818] nf_tables_newchain+0x728/0x9a0 [ 365.317764][ T4818] nfnetlink_rcv_batch+0x7a8/0x9e0 [ 365.317845][ T4818] nfnetlink_rcv+0x164/0x1b8 [ 365.317920][ T4818] netlink_unicast+0x328/0x3b4 [ 365.317997][ T4818] netlink_sendmsg+0x194/0x410 [ 365.318072][ T4818] __sock_sendmsg+0x54/0x60 [ 365.318162][ T4818] ____sys_sendmsg+0x250/0x2a8 [ 365.318240][ T4818] ___sys_sendmsg+0xb0/0x108 [ 365.318315][ T4818] __sys_sendmsg+0x9c/0x100 [ 365.318394][ T4818] __arm64_sys_sendmsg+0x20/0x38 [ 365.318471][ T4818] invoke_syscall+0x54/0x10c [ 365.318548][ T4818] el0_svc_common.constprop.0+0x40/0xe0 [ 365.318626][ T4818] do_el0_svc+0x1c/0x34 [ 365.318700][ T4818] el0_svc+0x38/0x1fc [ 365.318779][ T4818] el0t_64_sync_handler+0xa0/0xe4 [ 365.318853][ T4818] el0t_64_sync+0x1a4/0x1a8 [ 365.614506][ T4654] veth0_vlan: entered promiscuous mode [ 365.654121][ T4654] veth1_vlan: entered promiscuous mode [ 365.766547][ T4654] veth0_macvtap: entered promiscuous mode [ 365.797220][ T4654] veth1_macvtap: entered promiscuous mode [ 365.965395][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.968652][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.051925][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.057157][ T4644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.886697][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 368.061882][ T4850] binder: 4848:4850 tried to acquire reference to desc 0, got 1 instead [ 368.067339][ T4850] binder: 4848:4850 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 368.067434][ T4850] binder: 4850 RLIMIT_NICE not set [ 368.067598][ T4850] binder: 4850 RLIMIT_NICE not set [ 368.069368][ T4850] binder: release 4848:4850 transaction 14 in, still active [ 368.069613][ T4850] binder: send failed reply for transaction 14 to 4848:4850 [ 368.077791][ T2061] binder: undelivered TRANSACTION_COMPLETE [ 368.078017][ T2061] binder: undelivered TRANSACTION_ERROR: 29189 [ 370.617530][ T4874] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 377.008015][ T4924] process 'syz.1.452' launched '/dev/fd/3' with NULL argv: empty string added [ 386.651522][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.654096][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.731531][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.733174][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.105352][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.106107][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.432234][ T2061] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 390.436849][ T2061] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.471839][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.473120][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.911481][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 396.300868][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.302114][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.482732][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.484431][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.698427][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.699291][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.514443][ T5242] UDC core: g1: couldn't find an available UDC or it's busy [ 401.494718][ T5286] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 402.654626][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.656026][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.014863][ T5323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.619'. [ 403.154998][ T5327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.156188][ T5327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.254681][ T5329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.258002][ T5329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.388789][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.394658][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.362981][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.383042][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.963239][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 409.407932][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.421288][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.708812][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.709521][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.197020][ T5418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.198165][ T5418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.309922][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.316301][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.404665][ T5424] netlink: 140 bytes leftover after parsing attributes in process `syz.2.663'. [ 410.405098][ T5424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.663'. [ 410.521905][ T5429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.526117][ T5429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.694217][ T5432] af_packet: packet size is too long (4294967219 > 2016) [ 414.556064][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.556941][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.666995][ T5483] binder: 5482:5483 tried to acquire reference to desc 0, got 1 instead [ 414.683393][ T23] binder: undelivered transaction 19, process died. [ 414.683668][ T23] binder: send failed reply for transaction 20 to 5482:5483 [ 414.704291][ T23] binder: undelivered TRANSACTION_COMPLETE [ 414.704427][ T23] binder: undelivered TRANSACTION_COMPLETE [ 414.704500][ T23] binder: undelivered TRANSACTION_ERROR: 29189 [ 415.622454][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.623748][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.162699][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 419.042748][ T5531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.044099][ T5531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.309406][ T5555] binder: 5554:5555 ioctl c0306201 20000080 returned -14 [ 420.433056][ T5557] af_packet: packet size is too long (4294967219 > 2016) [ 421.624645][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.625951][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.828098][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.829525][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.933574][ T5584] netlink: 'syz.2.728': attribute type 12 has an invalid length. [ 426.442432][ T5586] syz.2.729 uses obsolete (PF_INET,SOCK_PACKET) [ 427.015899][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.017038][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.098258][ T5598] binder: 5597:5598 tried to acquire reference to desc 0, got 1 instead [ 427.101012][ T5598] binder: 5597:5598 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 427.101075][ T5598] binder: 5598 RLIMIT_NICE not set [ 427.101161][ T5598] binder: 5598 RLIMIT_NICE not set [ 427.101337][ T5598] binder: send failed reply for transaction 29 to 5597:5598 [ 427.108176][ T5598] binder: 5597:5598 transaction 29 fd fixups failed 29201/-12, line 5098 [ 427.109757][ T3468] binder: undelivered TRANSACTION_COMPLETE [ 427.109844][ T3468] binder: undelivered TRANSACTION_ERROR: 29201 [ 427.189984][ T5600] netlink: 'syz.2.736': attribute type 13 has an invalid length. [ 427.457735][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.458529][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.697308][ T5635] binder: 5634:5635 ioctl 40046210 0 returned -14 [ 431.806912][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 444.085452][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.086882][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.530020][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.530771][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.939467][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.940786][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.573341][ T5777] binder: 5776:5777 tried to acquire reference to desc 0, got 1 instead [ 449.575697][ T5777] binder: 5776:5777 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 449.575787][ T5777] binder: 5777 RLIMIT_NICE not set [ 449.575876][ T5777] binder: 5777 RLIMIT_NICE not set [ 449.576148][ T5777] binder: send failed reply for transaction 36 to 5776:5777 [ 449.576390][ T5777] binder: 5776:5777 ioctl c0306201 20000680 returned -14 [ 449.581573][ T5391] binder: undelivered TRANSACTION_COMPLETE [ 449.581733][ T5391] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.376856][ T5796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.810'. [ 454.176935][ T5836] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 461.564461][ T5934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.791685][ T5965] binder: 5964:5965 Acquire 1 refcount change on invalid ref 2 ret -22 [ 463.001432][ T5971] ubi0: attaching mtd0 [ 463.005567][ T5971] FAULT_INJECTION: forcing a failure. [ 463.005567][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 463.005736][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.2.882 Not tainted syzkaller #0 PREEMPT [ 463.005833][ T5971] Hardware name: linux,dummy-virt (DT) [ 463.005877][ T5971] Call trace: [ 463.005914][ T5971] show_stack+0x18/0x24 (C) [ 463.006021][ T5971] dump_stack_lvl+0x60/0x80 [ 463.006099][ T5971] dump_stack+0x18/0x24 [ 463.006172][ T5971] should_fail_ex+0x1e0/0x238 [ 463.006253][ T5971] should_failslab+0x54/0x80 [ 463.006330][ T5971] kmem_cache_alloc_noprof+0x54/0x458 [ 463.006411][ T5971] __kernfs_new_node+0x70/0x254 [ 463.006496][ T5971] kernfs_new_node+0x88/0xa4 [ 463.006566][ T5971] kernfs_create_link+0xc0/0x100 [ 463.006639][ T5971] sysfs_do_create_link_sd+0x6c/0x100 [ 463.006712][ T5971] sysfs_create_link+0x20/0x40 [ 463.006791][ T5971] sysfs_slab_alias+0x9c/0xb8 [ 463.006871][ T5971] __kmem_cache_create_args+0x3c0/0x470 [ 463.006954][ T5971] ubi_attach+0xc4/0x1334 [ 463.007033][ T5971] ubi_attach_mtd_dev+0x448/0xaf4 [ 463.007104][ T5971] ctrl_cdev_ioctl+0x11c/0x214 [ 463.007175][ T5971] __arm64_sys_ioctl+0xa8/0x100 [ 463.007291][ T5971] invoke_syscall+0x54/0x10c [ 463.007393][ T5971] el0_svc_common.constprop.0+0x40/0xe0 [ 463.007470][ T5971] do_el0_svc+0x1c/0x34 [ 463.007541][ T5971] el0_svc+0x38/0x1fc [ 463.007619][ T5971] el0t_64_sync_handler+0xa0/0xe4 [ 463.007692][ T5971] el0t_64_sync+0x1a4/0x1a8 [ 463.008744][ T5971] SLUB: Unable to add cache alias ubi_aeb_slab_cache to sysfs [ 463.076451][ T5971] ubi0: scanning is finished [ 463.076843][ T5971] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 463.123866][ T5971] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 463.186411][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 463.248233][ T5977] x_tables: ip_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 48 [ 463.435776][ T5983] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 463.439962][ T11] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 464.029661][ T5981] infiniband syz1: set down [ 464.030475][ T5981] infiniband syz1: added team_slave_1 [ 464.154936][ T5981] RDS/IB: syz1: added [ 464.155184][ T5981] smc: adding ib device syz1 with port count 1 [ 464.155266][ T5981] smc: ib device syz1 port 1 has no pnetid [ 464.668329][ T803] lo speed is unknown, defaulting to 1000 [ 465.811556][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.815454][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.938884][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 467.331947][ T6050] FAULT_INJECTION: forcing a failure. [ 467.331947][ T6050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.332125][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT [ 467.332218][ T6050] Hardware name: linux,dummy-virt (DT) [ 467.332262][ T6050] Call trace: [ 467.332310][ T6050] show_stack+0x18/0x24 (C) [ 467.332420][ T6050] dump_stack_lvl+0x60/0x80 [ 467.332498][ T6050] dump_stack+0x18/0x24 [ 467.332572][ T6050] should_fail_ex+0x1e0/0x238 [ 467.332654][ T6050] should_fail+0x14/0x40 [ 467.332728][ T6050] should_fail_usercopy+0x1c/0x40 [ 467.332805][ T6050] _copy_to_iter+0x60/0x6a0 [ 467.332880][ T6050] simple_copy_to_iter+0x2c/0x70 [ 467.332954][ T6050] __skb_datagram_iter+0x78/0x29c [ 467.333025][ T6050] skb_copy_datagram_iter+0x20/0x34 [ 467.333095][ T6050] netlink_recvmsg+0xac/0x298 [ 467.333173][ T6050] __sys_recvfrom+0x158/0x1a8 [ 467.333252][ T6050] __arm64_sys_recvfrom+0x20/0x38 [ 467.333337][ T6050] invoke_syscall+0x54/0x10c [ 467.333413][ T6050] el0_svc_common.constprop.0+0x40/0xe0 [ 467.333487][ T6050] do_el0_svc+0x1c/0x34 [ 467.333562][ T6050] el0_svc+0x38/0x1fc [ 467.333639][ T6050] el0t_64_sync_handler+0xa0/0xe4 [ 467.333731][ T6050] el0t_64_sync+0x1a4/0x1a8 [ 468.017361][ T4640] nci: nci_rsp_packet: unknown rsp opcode 0x10b [ 472.591422][ T6057] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 473.114954][ T6087] FAULT_INJECTION: forcing a failure. [ 473.114954][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 473.115097][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT [ 473.115180][ T6087] Hardware name: linux,dummy-virt (DT) [ 473.115219][ T6087] Call trace: [ 473.115250][ T6087] show_stack+0x18/0x24 (C) [ 473.115387][ T6087] dump_stack_lvl+0x60/0x80 [ 473.115460][ T6087] dump_stack+0x18/0x24 [ 473.115526][ T6087] should_fail_ex+0x1e0/0x238 [ 473.115613][ T6087] should_failslab+0x54/0x80 [ 473.115687][ T6087] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 473.115768][ T6087] kstrdup+0x48/0xa0 [ 473.115842][ T6087] debugfs_create_symlink+0x28/0x114 [ 473.115921][ T6087] ref_tracker_dir_symlink+0x140/0x1a8 [ 473.115989][ T6087] net_ns_net_init+0x2c/0x58 [ 473.116063][ T6087] ops_init+0x74/0x13c [ 473.116129][ T6087] setup_net+0x94/0x180 [ 473.116196][ T6087] copy_net_ns+0x100/0x394 [ 473.116265][ T6087] create_new_namespaces+0x114/0x370 [ 473.116343][ T6087] unshare_nsproxy_namespaces+0x70/0xbc [ 473.116432][ T6087] ksys_unshare+0x1cc/0x3b8 [ 473.116504][ T6087] __arm64_sys_unshare+0x14/0x24 [ 473.116574][ T6087] invoke_syscall+0x54/0x10c [ 473.116653][ T6087] el0_svc_common.constprop.0+0x40/0xe0 [ 473.116721][ T6087] do_el0_svc+0x1c/0x34 [ 473.116787][ T6087] el0_svc+0x38/0x1fc [ 473.116858][ T6087] el0t_64_sync_handler+0xa0/0xe4 [ 473.116924][ T6087] el0t_64_sync+0x1a4/0x1a8 [ 473.209330][ T6087] lo speed is unknown, defaulting to 1000 [ 475.030998][ T6114] device-mapper: ioctl: The device has no table. [ 475.344302][ T6121] x_tables: duplicate underflow at hook 1 [ 478.512900][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.522145][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.580275][ T6154] lo speed is unknown, defaulting to 1000 [ 479.128823][ T6156] lo speed is unknown, defaulting to 1000 [ 480.047296][ T6157] lo speed is unknown, defaulting to 1000 [ 481.984003][ T6190] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 482.254469][ T11] hid-generic 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 482.584767][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 487.157729][ T6220] device-mapper: table: 248:1: integrity: Invalid argument count (-EINVAL) [ 487.158870][ T6220] device-mapper: ioctl: error adding target to table [ 487.232429][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.233957][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.381045][ T6228] macvlan0: entered promiscuous mode [ 487.384856][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 487.798001][ T6199] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 487.924108][ T6242] FAULT_INJECTION: forcing a failure. [ 487.924108][ T6242] name fail_futex, interval 1, probability 0, space 0, times 1 [ 487.924205][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.1.984 Not tainted syzkaller #0 PREEMPT [ 487.924249][ T6242] Hardware name: linux,dummy-virt (DT) [ 487.924271][ T6242] Call trace: [ 487.924289][ T6242] show_stack+0x18/0x24 (C) [ 487.924363][ T6242] dump_stack_lvl+0x60/0x80 [ 487.924399][ T6242] dump_stack+0x18/0x24 [ 487.924432][ T6242] should_fail_ex+0x1e0/0x238 [ 487.924471][ T6242] should_fail+0x14/0x40 [ 487.924505][ T6242] get_futex_key+0xdc/0x620 [ 487.924541][ T6242] futex_wake+0x68/0x240 [ 487.924574][ T6242] do_futex+0x178/0x210 [ 487.924607][ T6242] __arm64_sys_futex+0x100/0x1a0 [ 487.924640][ T6242] invoke_syscall+0x54/0x10c [ 487.924694][ T6242] el0_svc_common.constprop.0+0x40/0xe0 [ 487.924753][ T6242] do_el0_svc+0x1c/0x34 [ 487.924820][ T6242] el0_svc+0x38/0x1fc [ 487.924900][ T6242] el0t_64_sync_handler+0xa0/0xe4 [ 487.924943][ T6242] el0t_64_sync+0x1a4/0x1a8 [ 488.223943][ T6250] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.378652][ T6252] lo speed is unknown, defaulting to 1000 [ 488.556433][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 488.556568][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 488.556841][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 489.934895][ T6267] FAULT_INJECTION: forcing a failure. [ 489.934895][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 489.935074][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT [ 489.935159][ T6267] Hardware name: linux,dummy-virt (DT) [ 489.935199][ T6267] Call trace: [ 489.935233][ T6267] show_stack+0x18/0x24 (C) [ 489.935378][ T6267] dump_stack_lvl+0x60/0x80 [ 489.935455][ T6267] dump_stack+0x18/0x24 [ 489.935526][ T6267] should_fail_ex+0x1e0/0x238 [ 489.935604][ T6267] should_failslab+0x54/0x80 [ 489.935676][ T6267] kmem_cache_alloc_noprof+0x54/0x458 [ 489.935755][ T6267] __kernfs_new_node+0x70/0x254 [ 489.935838][ T6267] kernfs_new_node+0x88/0xa4 [ 489.935906][ T6267] kernfs_create_link+0xc0/0x100 [ 489.935974][ T6267] sysfs_do_create_link_sd+0x6c/0x100 [ 489.936044][ T6267] sysfs_create_link+0x20/0x40 [ 489.936109][ T6267] module_add_driver+0xa0/0x180 [ 489.936184][ T6267] bus_add_driver+0xf8/0x208 [ 489.936251][ T6267] driver_register+0x68/0x130 [ 489.936317][ T6267] usb_gadget_register_driver_owner+0x54/0xfc [ 489.936411][ T6267] raw_ioctl+0x728/0xd38 [ 489.936490][ T6267] __arm64_sys_ioctl+0xa8/0x100 [ 489.936565][ T6267] invoke_syscall+0x54/0x10c [ 489.936634][ T6267] el0_svc_common.constprop.0+0x40/0xe0 [ 489.936702][ T6267] do_el0_svc+0x1c/0x34 [ 489.936768][ T6267] el0_svc+0x38/0x1fc [ 489.936841][ T6267] el0t_64_sync_handler+0xa0/0xe4 [ 489.936913][ T6267] el0t_64_sync+0x1a4/0x1a8 [ 490.008094][ T6267] bus_add_driver: failed to create module links for raw-gadget.0 [ 490.008393][ T6267] UDC core: USB Raw Gadget: driver registration failed: -12 [ 490.008499][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 491.960771][ T4644] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.961003][ T4644] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.961133][ T4644] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.961255][ T4644] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.984284][ T6290] syzkaller0: entered promiscuous mode [ 491.984403][ T6290] syzkaller0: entered allmulticast mode [ 492.552906][ T6327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 492.817451][ T6334] random: crng reseeded on system resumption [ 493.463780][ T6346] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 497.319551][ T6315] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 497.515020][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.516710][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.782618][ T6367] FAULT_INJECTION: forcing a failure. [ 497.782618][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 497.782790][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.2.1025 Not tainted syzkaller #0 PREEMPT [ 497.782879][ T6367] Hardware name: linux,dummy-virt (DT) [ 497.782921][ T6367] Call trace: [ 497.782957][ T6367] show_stack+0x18/0x24 (C) [ 497.783063][ T6367] dump_stack_lvl+0x60/0x80 [ 497.783135][ T6367] dump_stack+0x18/0x24 [ 497.783203][ T6367] should_fail_ex+0x1e0/0x238 [ 497.783282][ T6367] should_failslab+0x54/0x80 [ 497.783386][ T6367] __kmalloc_cache_noprof+0x58/0x470 [ 497.783463][ T6367] alloc_fs_context+0x44/0x2f8 [ 497.783533][ T6367] fs_context_for_mount+0x20/0x2c [ 497.783600][ T6367] mq_init_ns+0x3c/0x210 [ 497.783670][ T6367] copy_ipcs+0x170/0x300 [ 497.783733][ T6367] create_new_namespaces+0xa8/0x370 [ 497.783823][ T6367] unshare_nsproxy_namespaces+0x70/0xbc [ 497.783898][ T6367] ksys_unshare+0x1cc/0x3b8 [ 497.783967][ T6367] __arm64_sys_unshare+0x14/0x24 [ 497.784035][ T6367] invoke_syscall+0x54/0x10c [ 497.784104][ T6367] el0_svc_common.constprop.0+0x40/0xe0 [ 497.784171][ T6367] do_el0_svc+0x1c/0x34 [ 497.784234][ T6367] el0_svc+0x38/0x1fc [ 497.784309][ T6367] el0t_64_sync_handler+0xa0/0xe4 [ 497.784379][ T6367] el0t_64_sync+0x1a4/0x1a8 [ 497.786254][ T6367] FAULT_INJECTION: forcing a failure. [ 497.786254][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 497.786669][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.2.1025 Not tainted syzkaller #0 PREEMPT [ 497.786764][ T6367] Hardware name: linux,dummy-virt (DT) [ 497.786804][ T6367] Call trace: [ 497.786835][ T6367] show_stack+0x18/0x24 (C) [ 497.786913][ T6367] dump_stack_lvl+0x60/0x80 [ 497.786976][ T6367] dump_stack+0x18/0x24 [ 497.787040][ T6367] should_fail_ex+0x1e0/0x238 [ 497.787110][ T6367] should_failslab+0x54/0x80 [ 497.787172][ T6367] __kmalloc_cache_noprof+0x58/0x470 [ 497.787243][ T6367] shrinker_alloc+0x5c/0x430 [ 497.787339][ T6367] sget_fc+0x22c/0x78c [ 497.787408][ T6367] get_tree_nodev+0x2c/0xc0 [ 497.787471][ T6367] mqueue_get_tree+0x44/0x50 [ 497.787538][ T6367] vfs_get_tree+0x28/0x100 [ 497.787604][ T6367] fc_mount_longterm+0x18/0xa0 [ 497.787670][ T6367] mq_init_ns+0xb8/0x210 [ 497.787745][ T6367] copy_ipcs+0x170/0x300 [ 497.787822][ T6367] create_new_namespaces+0xa8/0x370 [ 497.787894][ T6367] unshare_nsproxy_namespaces+0x70/0xbc [ 497.787964][ T6367] ksys_unshare+0x1cc/0x3b8 [ 497.788029][ T6367] __arm64_sys_unshare+0x14/0x24 [ 497.788096][ T6367] invoke_syscall+0x54/0x10c [ 497.788161][ T6367] el0_svc_common.constprop.0+0x40/0xe0 [ 497.788226][ T6367] do_el0_svc+0x1c/0x34 [ 497.788349][ T6367] el0_svc+0x38/0x1fc [ 497.788422][ T6367] el0t_64_sync_handler+0xa0/0xe4 [ 497.788485][ T6367] el0t_64_sync+0x1a4/0x1a8 [ 497.896127][ T6367] lo speed is unknown, defaulting to 1000 [ 498.359662][ T6367] FAULT_INJECTION: forcing a failure. [ 498.359662][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 498.359852][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.1025 Not tainted syzkaller #0 PREEMPT [ 498.359935][ T6367] Hardware name: linux,dummy-virt (DT) [ 498.359977][ T6367] Call trace: [ 498.360013][ T6367] show_stack+0x18/0x24 (C) [ 498.360123][ T6367] dump_stack_lvl+0x60/0x80 [ 498.360195][ T6367] dump_stack+0x18/0x24 [ 498.360263][ T6367] should_fail_ex+0x1e0/0x238 [ 498.360340][ T6367] should_failslab+0x54/0x80 [ 498.360415][ T6367] kmem_cache_alloc_noprof+0x54/0x458 [ 498.360493][ T6367] __kernfs_new_node+0x70/0x254 [ 498.360572][ T6367] kernfs_new_node+0x88/0xa4 [ 498.360637][ T6367] __kernfs_create_file+0x30/0xfc [ 498.360705][ T6367] sysfs_add_file_mode_ns+0x74/0x130 [ 498.360773][ T6367] internal_create_group+0x2e0/0x440 [ 498.360851][ T6367] internal_create_groups+0x50/0xd8 [ 498.360921][ T6367] sysfs_create_groups+0x18/0x24 [ 498.360990][ T6367] kobject_add_internal+0xcc/0x250 [ 498.361067][ T6367] kobject_add+0x9c/0x108 [ 498.361133][ T6367] setup_port+0x130/0x594 [ 498.361207][ T6367] ib_setup_port_attrs+0xcc/0x280 [ 498.361277][ T6367] add_one_compat_dev+0x1e4/0x258 [ 498.361351][ T6367] rdma_dev_init_net+0x120/0x1bc [ 498.361411][ T6367] ops_init+0x74/0x13c [ 498.361478][ T6367] setup_net+0x94/0x180 [ 498.361543][ T6367] copy_net_ns+0x100/0x394 [ 498.361605][ T6367] create_new_namespaces+0x114/0x370 [ 498.361679][ T6367] unshare_nsproxy_namespaces+0x70/0xbc [ 498.361753][ T6367] ksys_unshare+0x1cc/0x3b8 [ 498.361822][ T6367] __arm64_sys_unshare+0x14/0x24 [ 498.361902][ T6367] invoke_syscall+0x54/0x10c [ 498.361972][ T6367] el0_svc_common.constprop.0+0x40/0xe0 [ 498.362037][ T6367] do_el0_svc+0x1c/0x34 [ 498.362102][ T6367] el0_svc+0x38/0x1fc [ 498.362170][ T6367] el0t_64_sync_handler+0xa0/0xe4 [ 498.362239][ T6367] el0t_64_sync+0x1a4/0x1a8 [ 498.363043][ T6367] kobject: kobject_add_internal failed for 1 (error: -12 parent: ports) [ 498.464209][ T6373] lo speed is unknown, defaulting to 1000 [ 498.620623][ T6371] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 498.709511][ T6371] virtio_blk virtio3: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 499.497134][ T6381] gadgetfs: bound to dummy_udc driver [ 499.750433][ T2061] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 499.751599][ C1] gadgetfs: connected [ 499.756027][ T2061] gadgetfs: disconnected [ 499.981088][ T6384] FAULT_INJECTION: forcing a failure. [ 499.981088][ T6384] name fail_futex, interval 1, probability 0, space 0, times 0 [ 499.981259][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT [ 499.981351][ T6384] Hardware name: linux,dummy-virt (DT) [ 499.981397][ T6384] Call trace: [ 499.981435][ T6384] show_stack+0x18/0x24 (C) [ 499.981545][ T6384] dump_stack_lvl+0x60/0x80 [ 499.981619][ T6384] dump_stack+0x18/0x24 [ 499.981687][ T6384] should_fail_ex+0x1e0/0x238 [ 499.981760][ T6384] should_fail+0x14/0x40 [ 499.981835][ T6384] get_futex_key+0xdc/0x620 [ 499.981903][ T6384] futex_wait_setup+0x54/0x240 [ 499.981975][ T6384] __futex_wait+0xd4/0x180 [ 499.982045][ T6384] futex_wait+0x88/0x110 [ 499.982115][ T6384] do_futex+0x1a0/0x210 [ 499.982181][ T6384] __arm64_sys_futex+0x100/0x1a0 [ 499.982256][ T6384] invoke_syscall+0x54/0x10c [ 499.982333][ T6384] el0_svc_common.constprop.0+0x40/0xe0 [ 499.982410][ T6384] do_el0_svc+0x1c/0x34 [ 499.982482][ T6384] el0_svc+0x38/0x1fc [ 499.982564][ T6384] el0t_64_sync_handler+0xa0/0xe4 [ 499.982638][ T6384] el0t_64_sync+0x1a4/0x1a8 [ 500.069562][ T6384] lo speed is unknown, defaulting to 1000 [ 500.482550][ T6386] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 500.531110][ T6384] FAULT_INJECTION: forcing a failure. [ 500.531110][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 500.531285][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT [ 500.531405][ T6384] Hardware name: linux,dummy-virt (DT) [ 500.531445][ T6384] Call trace: [ 500.531479][ T6384] show_stack+0x18/0x24 (C) [ 500.531586][ T6384] dump_stack_lvl+0x60/0x80 [ 500.531657][ T6384] dump_stack+0x18/0x24 [ 500.531725][ T6384] should_fail_ex+0x1e0/0x238 [ 500.531802][ T6384] should_failslab+0x54/0x80 [ 500.532089][ T6384] kmem_cache_alloc_noprof+0x54/0x458 [ 500.532177][ T6384] __kernfs_new_node+0x70/0x254 [ 500.532257][ T6384] kernfs_new_node+0x88/0xa4 [ 500.532316][ T6384] __kernfs_create_file+0x30/0xfc [ 500.532375][ T6384] sysfs_add_file_mode_ns+0x74/0x130 [ 500.532439][ T6384] internal_create_group+0x2e0/0x440 [ 500.532499][ T6384] internal_create_groups+0x50/0xd8 [ 500.532561][ T6384] sysfs_create_groups+0x18/0x24 [ 500.532626][ T6384] ib_setup_port_attrs+0x1b8/0x280 [ 500.532710][ T6384] add_one_compat_dev+0x1e4/0x258 [ 500.532789][ T6384] rdma_dev_init_net+0x120/0x1bc [ 500.532874][ T6384] ops_init+0x74/0x13c [ 500.532951][ T6384] setup_net+0x94/0x180 [ 500.533021][ T6384] copy_net_ns+0x100/0x394 [ 500.533092][ T6384] create_new_namespaces+0x114/0x370 [ 500.533165][ T6384] unshare_nsproxy_namespaces+0x70/0xbc [ 500.533242][ T6384] ksys_unshare+0x1cc/0x3b8 [ 500.533306][ T6384] __arm64_sys_unshare+0x14/0x24 [ 500.533373][ T6384] invoke_syscall+0x54/0x10c [ 500.533443][ T6384] el0_svc_common.constprop.0+0x40/0xe0 [ 500.533512][ T6384] do_el0_svc+0x1c/0x34 [ 500.533579][ T6384] el0_svc+0x38/0x1fc [ 500.533650][ T6384] el0t_64_sync_handler+0xa0/0xe4 [ 500.533720][ T6384] el0t_64_sync+0x1a4/0x1a8 [ 501.049825][ T6387] lo speed is unknown, defaulting to 1000 [ 501.429892][ T6400] bond0: option arp_validate: invalid value () [ 501.553534][ T6384] FAULT_INJECTION: forcing a failure. [ 501.553534][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 501.553705][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT [ 501.553792][ T6384] Hardware name: linux,dummy-virt (DT) [ 501.553831][ T6384] Call trace: [ 501.553863][ T6384] show_stack+0x18/0x24 (C) [ 501.553967][ T6384] dump_stack_lvl+0x60/0x80 [ 501.554038][ T6384] dump_stack+0x18/0x24 [ 501.554103][ T6384] should_fail_ex+0x1e0/0x238 [ 501.554181][ T6384] should_failslab+0x54/0x80 [ 501.554251][ T6384] __kmalloc_noprof+0xac/0x520 [ 501.554323][ T6384] tomoyo_encode2+0x7c/0x13c [ 501.554398][ T6384] tomoyo_encode+0x28/0x40 [ 501.554469][ T6384] tomoyo_mount_acl+0x74/0x334 [ 501.554538][ T6384] tomoyo_mount_permission+0xe4/0x200 [ 501.554610][ T6384] tomoyo_sb_mount+0x10/0x1c [ 501.554693][ T6384] security_sb_mount+0xa8/0x1f8 [ 501.554766][ T6384] path_mount+0x84/0xabc [ 501.554835][ T6384] __arm64_sys_mount+0x1b0/0x204 [ 501.554900][ T6384] invoke_syscall+0x54/0x10c [ 501.554965][ T6384] el0_svc_common.constprop.0+0x40/0xe0 [ 501.555033][ T6384] do_el0_svc+0x1c/0x34 [ 501.555096][ T6384] el0_svc+0x38/0x1fc [ 501.555191][ T6384] el0t_64_sync_handler+0xa0/0xe4 [ 501.555254][ T6384] el0t_64_sync+0x1a4/0x1a8 [ 502.079597][ T6396] lo speed is unknown, defaulting to 1000 [ 502.486775][ T6384] FAULT_INJECTION: forcing a failure. [ 502.486775][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 502.486953][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT [ 502.487045][ T6384] Hardware name: linux,dummy-virt (DT) [ 502.487089][ T6384] Call trace: [ 502.487127][ T6384] show_stack+0x18/0x24 (C) [ 502.487238][ T6384] dump_stack_lvl+0x60/0x80 [ 502.487349][ T6384] dump_stack+0x18/0x24 [ 502.487425][ T6384] should_fail_ex+0x1e0/0x238 [ 502.487508][ T6384] should_failslab+0x54/0x80 [ 502.487586][ T6384] kmem_cache_alloc_noprof+0x54/0x458 [ 502.487668][ T6384] __kernfs_new_node+0x70/0x254 [ 502.487751][ T6384] kernfs_new_node+0x88/0xa4 [ 502.487822][ T6384] __kernfs_create_file+0x30/0xfc [ 502.487896][ T6384] sysfs_add_file_mode_ns+0x74/0x130 [ 502.487969][ T6384] internal_create_group+0x2e0/0x440 [ 502.488044][ T6384] internal_create_groups+0x50/0xd8 [ 502.488118][ T6384] sysfs_create_groups+0x18/0x24 [ 502.488192][ T6384] device_add+0x4e8/0x800 [ 502.488269][ T6384] add_one_compat_dev+0x1d4/0x258 [ 502.488365][ T6384] rdma_dev_init_net+0x120/0x1bc [ 502.488435][ T6384] ops_init+0x74/0x13c [ 502.488512][ T6384] setup_net+0x94/0x180 [ 502.488582][ T6384] copy_net_ns+0x100/0x394 [ 502.488657][ T6384] create_new_namespaces+0x114/0x370 [ 502.488782][ T6384] unshare_nsproxy_namespaces+0x70/0xbc [ 502.488913][ T6384] ksys_unshare+0x1cc/0x3b8 [ 502.488997][ T6384] __arm64_sys_unshare+0x14/0x24 [ 502.489082][ T6384] invoke_syscall+0x54/0x10c [ 502.489178][ T6384] el0_svc_common.constprop.0+0x40/0xe0 [ 502.489256][ T6384] do_el0_svc+0x1c/0x34 [ 502.489351][ T6384] el0_svc+0x38/0x1fc [ 502.489430][ T6384] el0t_64_sync_handler+0xa0/0xe4 [ 502.489504][ T6384] el0t_64_sync+0x1a4/0x1a8 [ 507.911806][ T6461] FAULT_INJECTION: forcing a failure. [ 507.911806][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 507.911974][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: syz.1.1051 Not tainted syzkaller #0 PREEMPT [ 507.912062][ T6461] Hardware name: linux,dummy-virt (DT) [ 507.912103][ T6461] Call trace: [ 507.912136][ T6461] show_stack+0x18/0x24 (C) [ 507.912241][ T6461] dump_stack_lvl+0x60/0x80 [ 507.912314][ T6461] dump_stack+0x18/0x24 [ 507.912393][ T6461] should_fail_ex+0x1e0/0x238 [ 507.912470][ T6461] should_failslab+0x54/0x80 [ 507.912543][ T6461] __kmalloc_cache_noprof+0x58/0x470 [ 507.912625][ T6461] __arm64_sys_fanotify_init+0x180/0x3c0 [ 507.912698][ T6461] invoke_syscall+0x54/0x10c [ 507.912767][ T6461] el0_svc_common.constprop.0+0x40/0xe0 [ 507.912836][ T6461] do_el0_svc+0x1c/0x34 [ 507.912901][ T6461] el0_svc+0x38/0x1fc [ 507.912965][ T6461] el0t_64_sync_handler+0xa0/0xe4 [ 507.913023][ T6461] el0t_64_sync+0x1a4/0x1a8 [ 508.358683][ T6468] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1054'. [ 510.124684][ T5391] lo speed is unknown, defaulting to 1000 [ 510.125170][ T5391] sz1: Port: 1 Link DOWN [ 510.134438][ T5391] lo speed is unknown, defaulting to 1000 [ 510.141609][ T1021] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.141826][ T1021] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.141957][ T1021] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.142077][ T1021] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.264089][ T6497] netlink: 'syz.2.1067': attribute type 9 has an invalid length. [ 512.322993][ T6514] lo speed is unknown, defaulting to 1000 [ 513.298303][ T6526] fuse: Bad value for 'fd' [ 517.015571][ T6561] lo speed is unknown, defaulting to 1000 [ 518.012537][ T6564] FAULT_INJECTION: forcing a failure. [ 518.012537][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 518.012697][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.1.1095 Not tainted syzkaller #0 PREEMPT [ 518.012780][ T6564] Hardware name: linux,dummy-virt (DT) [ 518.012820][ T6564] Call trace: [ 518.012853][ T6564] show_stack+0x18/0x24 (C) [ 518.012952][ T6564] dump_stack_lvl+0x60/0x80 [ 518.013021][ T6564] dump_stack+0x18/0x24 [ 518.013086][ T6564] should_fail_ex+0x1e0/0x238 [ 518.013159][ T6564] should_failslab+0x54/0x80 [ 518.013227][ T6564] __kmalloc_noprof+0xac/0x520 [ 518.013299][ T6564] lsm_blob_alloc+0x40/0x64 [ 518.013378][ T6564] security_prepare_creds+0x30/0x1fc [ 518.013449][ T6564] prepare_creds+0x18c/0x33c [ 518.013517][ T6564] lookup_user_key+0x374/0x640 [ 518.013609][ T6564] __arm64_sys_add_key+0xfc/0x21c [ 518.013686][ T6564] invoke_syscall+0x54/0x10c [ 518.013754][ T6564] el0_svc_common.constprop.0+0x40/0xe0 [ 518.013822][ T6564] do_el0_svc+0x1c/0x34 [ 518.013888][ T6564] el0_svc+0x38/0x1fc [ 518.013958][ T6564] el0t_64_sync_handler+0xa0/0xe4 [ 518.014024][ T6564] el0t_64_sync+0x1a4/0x1a8 [ 518.594379][ T6572] lo speed is unknown, defaulting to 1000 [ 522.202432][ T6591] x_tables: duplicate underflow at hook 3 [ 522.721234][ T6597] lo speed is unknown, defaulting to 1000 [ 531.464926][ T6681] xt_MASQUERADE: bad rangesize 10242 [ 531.716037][ T6687] lo speed is unknown, defaulting to 1000 [ 532.188761][ T6689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1148'. [ 533.578067][ T6697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.734914][ T6697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.735100][ T6697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.754352][ T6697] veth1_vlan: left promiscuous mode [ 533.758180][ T6697] veth0_vlan: left promiscuous mode [ 533.764648][ T6697] veth0_vlan: entered promiscuous mode [ 533.773325][ T6697] veth1_vlan: entered promiscuous mode [ 533.795215][ T6697] veth1_macvtap: left promiscuous mode [ 533.799176][ T6697] veth0_macvtap: left promiscuous mode [ 533.804028][ T6697] veth0_macvtap: entered promiscuous mode [ 533.807936][ T6697] veth1_macvtap: entered promiscuous mode [ 533.836253][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.838960][ T6697] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 533.843086][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.847372][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.853841][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.954171][ T6697] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 533.964049][ T5391] lo speed is unknown, defaulting to 1000 [ 533.964283][ T5391] sz1: Port: 1 Link ACTIVE [ 533.964611][ T5391] lo speed is unknown, defaulting to 1000 [ 533.968497][ T6304] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 534.141075][ T6435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.225269][ T6435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.225533][ T6435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.225727][ T6435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.612855][ T6716] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 535.633024][ T6304] lo speed is unknown, defaulting to 1000 [ 535.633175][ T6304] sz1: Port: 1 Link DOWN [ 535.633437][ T6304] lo speed is unknown, defaulting to 1000 [ 535.635062][ T6716] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 535.669338][ T6304] lo speed is unknown, defaulting to 1000 [ 535.669587][ T6304] sz1: Port: 1 Link ACTIVE [ 535.669842][ T6304] lo speed is unknown, defaulting to 1000 [ 537.559377][ T6752] FAULT_INJECTION: forcing a failure. [ 537.559377][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 537.559533][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.1.1175 Not tainted syzkaller #0 PREEMPT [ 537.559618][ T6752] Hardware name: linux,dummy-virt (DT) [ 537.559660][ T6752] Call trace: [ 537.559703][ T6752] show_stack+0x18/0x24 (C) [ 537.559808][ T6752] dump_stack_lvl+0x60/0x80 [ 537.559926][ T6752] dump_stack+0x18/0x24 [ 537.560030][ T6752] should_fail_ex+0x1e0/0x238 [ 537.560154][ T6752] should_failslab+0x54/0x80 [ 537.560231][ T6752] __kmalloc_cache_noprof+0x58/0x470 [ 537.560317][ T6752] sysfs_init_fs_context+0x3c/0x198 [ 537.560437][ T6752] alloc_fs_context+0xf4/0x2f8 [ 537.560508][ T6752] fs_context_for_mount+0x20/0x2c [ 537.560577][ T6752] path_mount+0x390/0xabc [ 537.560648][ T6752] __arm64_sys_mount+0x1b0/0x204 [ 537.560726][ T6752] invoke_syscall+0x54/0x10c [ 537.560823][ T6752] el0_svc_common.constprop.0+0x40/0xe0 [ 537.560895][ T6752] do_el0_svc+0x1c/0x34 [ 537.560964][ T6752] el0_svc+0x38/0x1fc [ 537.561039][ T6752] el0t_64_sync_handler+0xa0/0xe4 [ 537.561107][ T6752] el0t_64_sync+0x1a4/0x1a8 [ 539.969381][ T6774] FAULT_INJECTION: forcing a failure. [ 539.969381][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 539.969507][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT [ 539.969550][ T6774] Hardware name: linux,dummy-virt (DT) [ 539.969570][ T6774] Call trace: [ 539.969588][ T6774] show_stack+0x18/0x24 (C) [ 539.969675][ T6774] dump_stack_lvl+0x60/0x80 [ 539.969719][ T6774] dump_stack+0x18/0x24 [ 539.969753][ T6774] should_fail_ex+0x1e0/0x238 [ 539.969792][ T6774] should_failslab+0x54/0x80 [ 539.969828][ T6774] __kmalloc_noprof+0xac/0x520 [ 539.969866][ T6774] tomoyo_encode2+0x7c/0x13c [ 539.969905][ T6774] tomoyo_encode+0x28/0x40 [ 539.969940][ T6774] tomoyo_realpath_from_path+0x100/0x1d4 [ 539.970000][ T6774] tomoyo_path_number_perm+0xe0/0x21c [ 539.970053][ T6774] tomoyo_path_mknod+0x98/0xa8 [ 539.970092][ T6774] security_path_mknod+0xb8/0x1e0 [ 539.970136][ T6774] unix_bind+0x178/0x648 [ 539.970178][ T6774] __sys_bind+0xfc/0x12c [ 539.970217][ T6774] __arm64_sys_bind+0x1c/0x30 [ 539.970252][ T6774] invoke_syscall+0x54/0x10c [ 539.970287][ T6774] el0_svc_common.constprop.0+0x40/0xe0 [ 539.970349][ T6774] do_el0_svc+0x1c/0x34 [ 539.970393][ T6774] el0_svc+0x38/0x1fc [ 539.970429][ T6774] el0t_64_sync_handler+0xa0/0xe4 [ 539.970463][ T6774] el0t_64_sync+0x1a4/0x1a8 [ 539.984860][ T6774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.718765][ T6793] ip_tables: iptables: counters copy to user failed while replacing table [ 541.803972][ T6795] ip_tables: iptables: counters copy to user failed while replacing table [ 543.504572][ T6804] loop6: detected capacity change from 0 to 1 [ 543.521180][ T6804] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.521571][ T6804] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.521689][ T6804] loop6: unable to read partition table [ 543.522024][ T6804] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.909227][ T6843] bond1: entered allmulticast mode [ 544.915104][ T6843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.013949][ T6849] fuse: Bad value for 'fd' [ 545.866118][ T4646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.045123][ T4646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.218827][ T4646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.403918][ T4646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.936055][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.065011][ T6873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.065092][ T6873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.088629][ T6873] veth1_vlan: left promiscuous mode [ 547.094163][ T6873] veth0_vlan: left promiscuous mode [ 547.099277][ T6873] veth0_vlan: entered promiscuous mode [ 547.113295][ T6873] veth1_vlan: entered promiscuous mode [ 547.140648][ T6873] veth1_macvtap: left promiscuous mode [ 547.146264][ T6873] veth0_macvtap: left promiscuous mode [ 547.157232][ T6873] veth0_macvtap: entered promiscuous mode [ 547.166767][ T6873] veth1_macvtap: entered promiscuous mode [ 547.195115][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.200490][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.208780][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.215793][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.290922][ T6433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.293439][ T4639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.293546][ T4639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.293614][ T4639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.528829][ T2061] syz1: Port: 1 Link ACTIVE [ 548.228096][ T4646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.269920][ T4646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.308477][ T4646] bond0 (unregistering): Released all slaves [ 548.885032][ T6866] lo speed is unknown, defaulting to 1000 [ 549.645914][ T4646] hsr_slave_0: left promiscuous mode [ 549.649653][ T4646] hsr_slave_1: left promiscuous mode [ 549.672630][ T4646] veth1_macvtap: left promiscuous mode [ 549.672806][ T4646] veth0_macvtap: left promiscuous mode [ 549.673336][ T4646] veth1_vlan: left promiscuous mode [ 549.673591][ T4646] veth0_vlan: left promiscuous mode [ 550.759802][ T6308] infiniband sz1: ib_query_port failed (-19) [ 550.774959][ T3225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 551.482138][ T1021] smc: removing ib device sz1 [ 552.543648][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 553.876183][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 554.246248][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.274326][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.472386][ T6866] hsr_slave_0: entered promiscuous mode [ 555.477216][ T6866] hsr_slave_1: entered promiscuous mode [ 555.482833][ T6866] debugfs: 'hsr0' already exists in 'hsr' [ 555.482955][ T6866] Cannot create hsr debugfs directory [ 555.487861][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 557.371628][ T6866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.405639][ T6866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.423450][ T6866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.455057][ T6866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.464861][ T6866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.504530][ T6866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.514490][ T6866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.572229][ T6866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.242893][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.738437][ T7046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 562.247373][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 563.476320][ T6866] veth0_vlan: entered promiscuous mode [ 563.536658][ T6866] veth1_vlan: entered promiscuous mode [ 563.702380][ T6866] veth0_macvtap: entered promiscuous mode [ 563.761736][ T6866] veth1_macvtap: entered promiscuous mode [ 564.056976][ T4646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.057182][ T4646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.057302][ T4646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.057431][ T4646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.331676][ T7146] FAULT_INJECTION: forcing a failure. [ 564.331676][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 564.331774][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT [ 564.331829][ T7146] Hardware name: linux,dummy-virt (DT) [ 564.331850][ T7146] Call trace: [ 564.331868][ T7146] show_stack+0x18/0x24 (C) [ 564.331924][ T7146] dump_stack_lvl+0x60/0x80 [ 564.331959][ T7146] dump_stack+0x18/0x24 [ 564.331993][ T7146] should_fail_ex+0x1e0/0x238 [ 564.332031][ T7146] should_failslab+0x54/0x80 [ 564.332066][ T7146] __kmalloc_noprof+0xac/0x520 [ 564.332104][ T7146] tnode_new+0x4c/0xc8 [ 564.332146][ T7146] fib_insert_alias+0x180/0x2c4 [ 564.332183][ T7146] fib_trie_unmerge+0x104/0x32c [ 564.332215][ T7146] fib_unmerge+0x40/0xf0 [ 564.332250][ T7146] fib4_rule_configure+0x1e0/0x370 [ 564.332287][ T7146] fib_newrule+0x198/0x77c [ 564.332330][ T7146] fib_nl_newrule+0x28/0x40 [ 564.332367][ T7146] rtnetlink_rcv_msg+0x300/0x3a0 [ 564.332405][ T7146] netlink_rcv_skb+0x60/0x130 [ 564.332440][ T7146] rtnetlink_rcv+0x18/0x30 [ 564.332474][ T7146] netlink_unicast+0x328/0x3b4 [ 564.332520][ T7146] netlink_sendmsg+0x194/0x410 [ 564.332585][ T7146] __sock_sendmsg+0x54/0x60 [ 564.332640][ T7146] ____sys_sendmsg+0x250/0x2a8 [ 564.332675][ T7146] ___sys_sendmsg+0xb0/0x108 [ 564.332709][ T7146] __sys_sendmsg+0x9c/0x100 [ 564.332744][ T7146] __arm64_sys_sendmsg+0x20/0x38 [ 564.332780][ T7146] invoke_syscall+0x54/0x10c [ 564.332823][ T7146] el0_svc_common.constprop.0+0x40/0xe0 [ 564.332857][ T7146] do_el0_svc+0x1c/0x34 [ 564.332924][ T7146] el0_svc+0x38/0x1fc [ 564.332967][ T7146] el0t_64_sync_handler+0xa0/0xe4 [ 564.333000][ T7146] el0t_64_sync+0x1a4/0x1a8 [ 565.858646][ T6304] syz1: Port: 1 Link DOWN [ 565.861271][ T6433] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.861592][ T6433] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.861730][ T6433] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.861881][ T6433] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.920988][ T7157] lo: entered promiscuous mode [ 565.944250][ T7157] tunl0: entered promiscuous mode [ 565.949713][ T7157] gre0: entered promiscuous mode [ 565.988227][ T7157] gretap0: entered promiscuous mode [ 566.006805][ T7157] erspan0: entered promiscuous mode [ 566.027189][ T7157] ip_vti0: entered promiscuous mode [ 566.037726][ T7157] ip6_vti0: entered promiscuous mode [ 566.053236][ T7157] sit0: entered promiscuous mode [ 566.072989][ T7157] ip6tnl0: entered promiscuous mode [ 566.084207][ T7157] ip6gre0: entered promiscuous mode [ 566.095895][ T7157] syz_tun: entered promiscuous mode [ 566.113733][ T7157] ip6gretap0: entered promiscuous mode [ 566.126900][ T7157] vcan0: entered promiscuous mode [ 566.134025][ T7157] bond0: entered promiscuous mode [ 566.134252][ T7157] bond_slave_0: entered promiscuous mode [ 566.135176][ T7157] bond_slave_1: entered promiscuous mode [ 566.153838][ T7157] dummy0: entered promiscuous mode [ 566.166190][ T7157] nlmon0: entered promiscuous mode [ 566.177565][ T7157] vxcan0: entered promiscuous mode [ 566.183054][ T7157] vxcan1: entered promiscuous mode [ 566.188425][ T7157] veth0: entered promiscuous mode [ 566.213621][ T7157] veth1: entered promiscuous mode [ 566.232864][ T7157] wg0: entered promiscuous mode [ 566.248252][ T7157] wg1: entered promiscuous mode [ 566.263075][ T7157] wg2: entered promiscuous mode [ 566.275538][ T7157] veth0_to_bridge: entered promiscuous mode [ 566.288044][ T7157] bridge_slave_0: entered promiscuous mode [ 566.297094][ T7157] veth1_to_bridge: entered promiscuous mode [ 566.316192][ T7157] bridge_slave_1: entered promiscuous mode [ 566.329393][ T7157] veth0_to_bond: entered promiscuous mode [ 566.356068][ T7157] veth1_to_bond: entered promiscuous mode [ 566.366253][ T7157] veth0_to_team: entered promiscuous mode [ 566.373166][ T7157] team_slave_0: entered promiscuous mode [ 566.374956][ T7157] veth1_to_team: entered promiscuous mode [ 566.379601][ T7157] team_slave_1: entered promiscuous mode [ 566.381852][ T7157] veth0_to_batadv: entered promiscuous mode [ 566.392627][ T7157] batadv_slave_0: entered promiscuous mode [ 566.399901][ T7157] veth1_to_batadv: entered promiscuous mode [ 566.414643][ T7157] batadv_slave_1: entered promiscuous mode [ 566.426659][ T7157] xfrm0: entered promiscuous mode [ 566.437522][ T7157] veth0_to_hsr: entered promiscuous mode [ 566.468680][ T7157] veth1_to_hsr: entered promiscuous mode [ 566.494968][ T7157] hsr0: entered promiscuous mode [ 566.508482][ T7157] veth1_virt_wifi: entered promiscuous mode [ 566.523617][ T7157] veth0_virt_wifi: entered promiscuous mode [ 566.576053][ T7157] vlan0: entered promiscuous mode [ 566.587862][ T7157] vlan1: entered promiscuous mode [ 566.631806][ T7157] macvlan0: entered promiscuous mode [ 566.682079][ T7157] macvlan1: entered promiscuous mode [ 566.694633][ T7157] ipvlan0: entered promiscuous mode [ 566.695574][ T7157] ipvlan1: entered promiscuous mode [ 566.741647][ T7157] macvtap0: entered promiscuous mode [ 566.759074][ T7157] macsec0: entered promiscuous mode [ 566.772352][ T7157] geneve0: entered promiscuous mode [ 566.783394][ T7157] geneve1: entered promiscuous mode [ 566.800074][ T7157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 566.814714][ T7157] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 566.826761][ T7157] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 566.837599][ T7157] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 566.849078][ T6433] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.849283][ T6433] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.849359][ T6433] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.849425][ T6433] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.882432][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.074245][ T7184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 568.074388][ T7184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.199938][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.211335][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.217336][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.227713][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.374230][ T7195] ip_tables: iptables: counters copy to user failed while replacing table [ 568.472028][ T4639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.474591][ T4639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.474730][ T4639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.474861][ T4639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.306944][ T7214] netlink: 'syz.1.1308': attribute type 13 has an invalid length. [ 570.071273][ T7227] mmap: syz.1.1314 (7227) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 571.055720][ T7238] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 574.431094][ T4639] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.431306][ T4639] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.431470][ T4639] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.431587][ T4639] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.635076][ T7266] fuse: Unknown parameter 'grou00000000000000000000' [ 580.034408][ T7301] fuse: Unknown parameter 'grou00000000000000000000' [ 584.211641][ T7352] FAULT_INJECTION: forcing a failure. [ 584.211641][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 584.211807][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.2.1368 Not tainted syzkaller #0 PREEMPT [ 584.211895][ T7352] Hardware name: linux,dummy-virt (DT) [ 584.211933][ T7352] Call trace: [ 584.211964][ T7352] show_stack+0x18/0x24 (C) [ 584.212067][ T7352] dump_stack_lvl+0x60/0x80 [ 584.212137][ T7352] dump_stack+0x18/0x24 [ 584.212202][ T7352] should_fail_ex+0x1e0/0x238 [ 584.212275][ T7352] should_failslab+0x54/0x80 [ 584.212358][ T7352] kmem_cache_alloc_noprof+0x54/0x458 [ 584.212435][ T7352] alloc_task_exec_state+0x24/0xb4 [ 584.212508][ T7352] task_exec_state_copy+0x24/0x60 [ 584.212574][ T7352] copy_process+0x3c4/0x18a0 [ 584.212640][ T7352] kernel_clone+0x88/0x39c [ 584.212704][ T7352] __do_sys_clone+0x74/0xb0 [ 584.212768][ T7352] __arm64_sys_clone+0x1c/0x28 [ 584.212837][ T7352] invoke_syscall+0x54/0x10c [ 584.212903][ T7352] el0_svc_common.constprop.0+0x40/0xe0 [ 584.212972][ T7352] do_el0_svc+0x1c/0x34 [ 584.213038][ T7352] el0_svc+0x38/0x1fc [ 584.213109][ T7352] el0t_64_sync_handler+0xa0/0xe4 [ 584.213176][ T7352] el0t_64_sync+0x1a4/0x1a8 [ 588.418333][ T7394] fuse: Bad value for 'group_id' [ 588.418505][ T7394] fuse: Bad value for 'group_id' [ 588.949637][ T7409] bond1: option downdelay: invalid value (18446744073709551613) [ 588.949805][ T7409] bond1: option downdelay: allowed values 0 - 2147483647 [ 588.959720][ T7409] bond1 (unregistering): Released all slaves [ 591.998223][ T7427] fuse: Bad value for 'group_id' [ 591.998328][ T7427] fuse: Bad value for 'group_id' [ 593.189407][ T7457] FAULT_INJECTION: forcing a failure. [ 593.189407][ T7457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 593.189568][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: syz.1.1411 Not tainted syzkaller #0 PREEMPT [ 593.189656][ T7457] Hardware name: linux,dummy-virt (DT) [ 593.189695][ T7457] Call trace: [ 593.189727][ T7457] show_stack+0x18/0x24 (C) [ 593.189834][ T7457] dump_stack_lvl+0x60/0x80 [ 593.189908][ T7457] dump_stack+0x18/0x24 [ 593.189976][ T7457] should_fail_ex+0x1e0/0x238 [ 593.190053][ T7457] should_fail_alloc_page+0x60/0x80 [ 593.190157][ T7457] __alloc_frozen_pages_noprof+0x234/0x13d8 [ 593.190242][ T7457] alloc_pages_mpol+0x74/0x1b8 [ 593.190330][ T7457] folio_alloc_mpol_noprof+0x14/0x68 [ 593.190402][ T7457] vma_alloc_folio_noprof+0x80/0xcc [ 593.190471][ T7457] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 593.190576][ T7457] do_anonymous_page+0x2b0/0x9b8 [ 593.190659][ T7457] __handle_mm_fault+0xa5c/0xec0 [ 593.190734][ T7457] handle_mm_fault+0x88/0x318 [ 593.190812][ T7457] __get_user_pages+0x3bc/0xc60 [ 593.190882][ T7457] faultin_page_range+0xa0/0x24c [ 593.190949][ T7457] madvise_do_behavior+0x134/0x320 [ 593.191027][ T7457] do_madvise+0x140/0x188 [ 593.191101][ T7457] __arm64_sys_madvise+0x28/0x38 [ 593.191175][ T7457] invoke_syscall+0x54/0x10c [ 593.191241][ T7457] el0_svc_common.constprop.0+0x40/0xe0 [ 593.191353][ T7457] do_el0_svc+0x1c/0x34 [ 593.191429][ T7457] el0_svc+0x38/0x1fc [ 593.191505][ T7457] el0t_64_sync_handler+0xa0/0xe4 [ 593.191574][ T7457] el0t_64_sync+0x1a4/0x1a8 [ 593.699688][ T7462] fuse: Bad value for 'fd' [ 594.286919][ T7467] FAULT_INJECTION: forcing a failure. [ 594.286919][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 594.287052][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.2.1415 Not tainted syzkaller #0 PREEMPT [ 594.287112][ T7467] Hardware name: linux,dummy-virt (DT) [ 594.287133][ T7467] Call trace: [ 594.287150][ T7467] show_stack+0x18/0x24 (C) [ 594.287245][ T7467] dump_stack_lvl+0x60/0x80 [ 594.287348][ T7467] dump_stack+0x18/0x24 [ 594.287421][ T7467] should_fail_ex+0x1e0/0x238 [ 594.287466][ T7467] should_failslab+0x54/0x80 [ 594.287503][ T7467] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 594.287573][ T7467] kmemdup_noprof+0x34/0x60 [ 594.287651][ T7467] x509_cert_parse+0x100/0x214 [ 594.287689][ T7467] x509_key_preparse+0x20/0x1e0 [ 594.287733][ T7467] asymmetric_key_preparse+0x64/0xa4 [ 594.287766][ T7467] __key_create_or_update+0x1b8/0x4f0 [ 594.287809][ T7467] key_create_or_update+0x14/0x20 [ 594.287842][ T7467] __arm64_sys_add_key+0x128/0x21c [ 594.287877][ T7467] invoke_syscall+0x54/0x10c [ 594.287911][ T7467] el0_svc_common.constprop.0+0x40/0xe0 [ 594.287945][ T7467] do_el0_svc+0x1c/0x34 [ 594.287977][ T7467] el0_svc+0x38/0x1fc [ 594.288013][ T7467] el0t_64_sync_handler+0xa0/0xe4 [ 594.288080][ T7467] el0t_64_sync+0x1a4/0x1a8 [ 596.943559][ T7476] fuse: Bad value for 'fd' [ 597.244535][ T7485] ptrace attach of "/syz-executor exec"[7486] was attempted by "/syz-executor exec"[7485] [ 597.289957][ T7488] fuse: Unknown parameter 'grou00000000000000000000' [ 598.218743][ T7498] fuse: Unknown parameter 'grou00000000000000000000' [ 600.988362][ T7508] fuse: Invalid rootmode [ 601.086732][ T7510] fuse: Unknown parameter 'group_i00000000000000000000' [ 602.070618][ T7519] fuse: Invalid rootmode [ 602.225693][ T7521] fuse: Unknown parameter 'group_i00000000000000000000' [ 602.499818][ T7529] fuse: Invalid rootmode [ 602.601616][ T7531] fuse: Unknown parameter 'group_i00000000000000000000' [ 602.808098][ T28] audit: type=1326 audit(602.179:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.808363][ T28] audit: type=1326 audit(602.189:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.808486][ T28] audit: type=1326 audit(602.189:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.808642][ T28] audit: type=1326 audit(602.189:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.808797][ T28] audit: type=1326 audit(602.189:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.809039][ T28] audit: type=1326 audit(602.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.809178][ T28] audit: type=1326 audit(602.189:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.809269][ T28] audit: type=1326 audit(602.189:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.809395][ T28] audit: type=1326 audit(602.189:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.809490][ T28] audit: type=1326 audit(602.189:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.1.1446" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 602.901201][ T7540] fuse: Bad value for 'rootmode' [ 602.970089][ T7542] fuse: Unknown parameter 'group_id00000000000000000000' [ 604.179472][ T7554] fuse: Unknown parameter 'group_id00000000000000000000' [ 605.024357][ T7564] fuse: Unknown parameter 'group_id00000000000000000000' [ 608.244573][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 608.244731][ T28] audit: type=1326 audit(607.629:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.244927][ T28] audit: type=1326 audit(607.629:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.247386][ T28] audit: type=1326 audit(607.629:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.247567][ T28] audit: type=1326 audit(607.629:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.247653][ T28] audit: type=1326 audit(607.629:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.247792][ T28] audit: type=1326 audit(607.629:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.248222][ T28] audit: type=1326 audit(607.629:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.249519][ T28] audit: type=1326 audit(607.629:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.1467" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.331614][ T28] audit: type=1326 audit(607.719:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7589 comm="syz.2.1468" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 608.334270][ T28] audit: type=1326 audit(607.719:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7589 comm="syz.2.1468" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.084381][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 616.084492][ T28] audit: type=1326 audit(615.469:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.088882][ T28] audit: type=1326 audit(615.469:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.099048][ T28] audit: type=1326 audit(615.469:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.102446][ T28] audit: type=1326 audit(615.479:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.104554][ T28] audit: type=1326 audit(615.479:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.104791][ T28] audit: type=1326 audit(615.489:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.106047][ T28] audit: type=1326 audit(615.489:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.111361][ T28] audit: type=1326 audit(615.489:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.111585][ T28] audit: type=1326 audit(615.489:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.111737][ T28] audit: type=1326 audit(615.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.1493" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 616.858111][ T7651] fuse: Bad value for 'fd' [ 617.437367][ T7662] fuse: Bad value for 'fd' [ 618.237465][ T7672] fuse: Bad value for 'fd' [ 623.597236][ T7708] fuse: Bad value for 'rootmode' [ 627.686626][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 627.686704][ T28] audit: type=1326 audit(627.069:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.689262][ T28] audit: type=1326 audit(627.069:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.689834][ T28] audit: type=1326 audit(627.069:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.689930][ T28] audit: type=1326 audit(627.069:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.690064][ T28] audit: type=1326 audit(627.069:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.704608][ T28] audit: type=1326 audit(627.069:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.704816][ T28] audit: type=1326 audit(627.069:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.704955][ T28] audit: type=1326 audit(627.069:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.705203][ T28] audit: type=1326 audit(627.069:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 627.705456][ T28] audit: type=1326 audit(627.069:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 628.359066][ T7758] fuse: Unknown parameter 'user_i00000000000000000000' [ 633.282340][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 633.282450][ T28] audit: type=1326 audit(632.669:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.282655][ T28] audit: type=1326 audit(632.669:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.282857][ T28] audit: type=1326 audit(632.669:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.283769][ T28] audit: type=1326 audit(632.669:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.287046][ T28] audit: type=1326 audit(632.669:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.305565][ T28] audit: type=1326 audit(632.689:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa475c22c code=0x7ffc0000 [ 633.307386][ T28] audit: type=1326 audit(632.689:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.308778][ T28] audit: type=1326 audit(632.689:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.311060][ T28] audit: type=1326 audit(632.689:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 633.325220][ T28] audit: type=1326 audit(632.699:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.1.1556" exe="/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 634.461937][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 637.134356][ T7852] fuse: Unknown parameter '0x0000000000000003' [ 639.805070][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 639.805131][ T28] audit: type=1326 audit(639.189:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.805854][ T28] audit: type=1326 audit(639.189:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.806551][ T28] audit: type=1326 audit(639.189:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.806979][ T28] audit: type=1326 audit(639.189:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.807091][ T28] audit: type=1326 audit(639.189:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.808523][ T28] audit: type=1326 audit(639.189:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.809262][ T28] audit: type=1326 audit(639.189:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.810753][ T28] audit: type=1326 audit(639.189:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.810909][ T28] audit: type=1326 audit(639.189:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 639.814682][ T28] audit: type=1326 audit(639.199:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1593" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c979368 code=0x7ffc0000 [ 654.904491][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.922851][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.798996][ T7952] hsr_slave_0: entered promiscuous mode [ 655.803260][ T7952] hsr_slave_1: entered promiscuous mode [ 655.806423][ T7952] debugfs: 'hsr0' already exists in 'hsr' [ 655.806518][ T7952] Cannot create hsr debugfs directory [ 657.599473][ T7952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 657.628709][ T7952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.637022][ T7952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 657.656988][ T7952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.665096][ T7952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.688244][ T7952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.696100][ T7952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 657.725830][ T7952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.569315][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.615809][ T7952] veth0_vlan: entered promiscuous mode [ 661.656903][ T7952] veth1_vlan: entered promiscuous mode [ 661.808447][ T7952] veth0_macvtap: entered promiscuous mode [ 661.846971][ T7952] veth1_macvtap: entered promiscuous mode [ 662.001353][ T1021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.004483][ T1021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.004637][ T1021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.004763][ T1021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.634512][ T8029] trusted_key: encrypted_key: key trusted:syz not found [ 662.636490][ T8029] trusted_key: encrypted_key: insufficient parameters specified [ 662.738652][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.739994][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.912111][ T8036] ip_tables: iptables: counters copy to user failed while replacing table [ 663.598414][ T8042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.599639][ T8042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.995772][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.996535][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.500786][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 677.551502][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1672'. [ 679.073492][ T8167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.056685][ T8194] wireguard0: entered promiscuous mode [ 689.558914][ T8258] ip_tables: iptables: counters copy to user failed while replacing table [ 691.785633][ T8265] fuse: fd is not a fuse device [ 692.315006][ T8275] fuse: fd is not a fuse device [ 695.259506][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 695.259632][ T28] audit: type=1326 audit(694.639:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.264810][ T28] audit: type=1326 audit(694.649:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.267561][ T28] audit: type=1326 audit(694.649:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.267803][ T28] audit: type=1326 audit(694.649:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.267957][ T28] audit: type=1326 audit(694.649:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.269320][ T28] audit: type=1326 audit(694.649:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.272888][ T28] audit: type=1326 audit(694.649:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.273107][ T28] audit: type=1326 audit(694.659:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 695.273256][ T28] audit: type=1326 audit(694.659:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8285 comm="syz.1.1726" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 703.591883][ T8333] lo: left promiscuous mode [ 703.660058][ T8333] tunl0: left promiscuous mode [ 703.710954][ T8333] gre0: left promiscuous mode [ 703.756697][ T8333] gretap0: left promiscuous mode [ 703.777449][ T8333] erspan0: left promiscuous mode [ 703.801868][ T8333] ip_vti0: left promiscuous mode [ 703.871557][ T8333] ip6_vti0: left promiscuous mode [ 703.892899][ T8333] sit0: left promiscuous mode [ 703.991560][ T8333] ip6tnl0: left promiscuous mode [ 704.005551][ T8333] ip6gre0: left promiscuous mode [ 704.026300][ T8333] syz_tun: left promiscuous mode [ 704.114078][ T8333] ip6gretap0: left promiscuous mode [ 704.132278][ T8333] vcan0: left promiscuous mode [ 704.146457][ T8333] bond0: left promiscuous mode [ 704.157234][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.161985][ T8333] dummy0: left promiscuous mode [ 704.174448][ T8333] nlmon0: left promiscuous mode [ 704.178455][ T8333] vxcan0: left promiscuous mode [ 704.188937][ T8333] vxcan1: left promiscuous mode [ 704.200075][ T8333] veth0: left promiscuous mode [ 704.219123][ T8333] veth1: left promiscuous mode [ 704.266998][ T8333] wg0: left promiscuous mode [ 704.307071][ T8333] wg1: left promiscuous mode [ 704.331537][ T8333] wg2: left promiscuous mode [ 704.335302][ T8333] veth0_to_bridge: left promiscuous mode [ 704.369424][ T8333] bridge_slave_0: left promiscuous mode [ 704.392619][ T8333] veth1_to_bridge: left promiscuous mode [ 704.396419][ T8333] bridge_slave_1: left promiscuous mode [ 704.398511][ T8333] veth0_to_bond: left promiscuous mode [ 704.445950][ T8333] bond_slave_0: left promiscuous mode [ 704.461476][ T8333] veth1_to_bond: left promiscuous mode [ 704.466108][ T8333] bond_slave_1: left promiscuous mode [ 704.601900][ T8333] veth0_to_team: left promiscuous mode [ 704.642425][ T8333] team_slave_0: left promiscuous mode [ 704.652526][ T8333] veth1_to_team: left promiscuous mode [ 704.656234][ T8333] team_slave_1: left promiscuous mode [ 704.657746][ T8333] veth0_to_batadv: left promiscuous mode [ 704.671828][ T8333] batadv_slave_0: left promiscuous mode [ 704.674592][ T8333] veth1_to_batadv: left promiscuous mode [ 704.684719][ T8333] batadv_slave_1: left promiscuous mode [ 704.698797][ T8333] xfrm0: left promiscuous mode [ 704.704858][ T8333] veth0_to_hsr: left promiscuous mode [ 704.722068][ T8333] veth1_to_hsr: left promiscuous mode [ 704.726442][ T8333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.726497][ T8333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.726599][ T8333] hsr0: left promiscuous mode [ 704.729666][ T8333] veth1_virt_wifi: left promiscuous mode [ 704.841752][ T8333] veth0_virt_wifi: left promiscuous mode [ 704.844247][ T8333] veth1_vlan: left promiscuous mode [ 704.865675][ T8333] vlan0: left promiscuous mode [ 704.868742][ T8333] vlan1: left promiscuous mode [ 704.882059][ T8333] veth1_vlan: entered promiscuous mode [ 704.882515][ T8333] macvlan0: left promiscuous mode [ 704.886128][ T8333] macvlan1: left promiscuous mode [ 704.888773][ T8333] ipvlan0: left promiscuous mode [ 704.904135][ T8333] ipvlan1: left promiscuous mode [ 704.925145][ T8333] veth1_macvtap: left promiscuous mode [ 704.929008][ T8333] veth0_macvtap: left promiscuous mode [ 704.942852][ T8333] veth0_macvtap: entered promiscuous mode [ 704.943284][ T8333] macvtap0: left promiscuous mode [ 704.946125][ T8333] veth1_macvtap: entered promiscuous mode [ 704.946769][ T8333] macsec0: left promiscuous mode [ 704.984218][ T8333] geneve0: left promiscuous mode [ 704.995529][ T8333] geneve1: left promiscuous mode [ 705.006383][ T8333] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 705.007536][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.015547][ T8333] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 705.018545][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.037024][ T8333] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 705.053326][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.058936][ T8333] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 705.063650][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.343124][ T4646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.343381][ T4646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.343517][ T4646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.394967][ T4639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.712487][ T8375] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 713.037848][ T8396] fuse: fd is not a fuse device [ 721.549691][ T8441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1784'. [ 724.384700][ T8455] xt_hashlimit: size too large, truncated to 1048576 [ 724.662324][ T8455] xt_connbytes: Forcing CT accounting to be enabled [ 727.707915][ T8524] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 727.824492][ T8526] FAULT_INJECTION: forcing a failure. [ 727.824492][ T8526] name failslab, interval 1, probability 0, space 0, times 0 [ 727.824663][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.2.1821 Not tainted syzkaller #0 PREEMPT [ 727.824751][ T8526] Hardware name: linux,dummy-virt (DT) [ 727.824794][ T8526] Call trace: [ 727.824834][ T8526] show_stack+0x18/0x24 (C) [ 727.824946][ T8526] dump_stack_lvl+0x60/0x80 [ 727.825020][ T8526] dump_stack+0x18/0x24 [ 727.825091][ T8526] should_fail_ex+0x1e0/0x238 [ 727.825171][ T8526] should_failslab+0x54/0x80 [ 727.825247][ T8526] kmem_cache_alloc_noprof+0x54/0x458 [ 727.825338][ T8526] do_getname+0x3c/0x1a0 [ 727.825409][ T8526] getname_flags+0x14/0x20 [ 727.825479][ T8526] path_setxattrat+0x1a0/0x1e0 [ 727.825555][ T8526] __arm64_sys_setxattr+0x2c/0x40 [ 727.825630][ T8526] invoke_syscall+0x54/0x10c [ 727.825700][ T8526] el0_svc_common.constprop.0+0x40/0xe0 [ 727.825770][ T8526] do_el0_svc+0x1c/0x34 [ 727.825842][ T8526] el0_svc+0x38/0x1fc [ 727.825917][ T8526] el0t_64_sync_handler+0xa0/0xe4 [ 727.825986][ T8526] el0t_64_sync+0x1a4/0x1a8 [ 730.447242][ T8557] fuse: fd is not a fuse device [ 732.579073][ T8617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.579254][ T8617] IPv6: NLM_F_CREATE should be set when creating new route [ 733.973802][ T8647] FAULT_INJECTION: forcing a failure. [ 733.973802][ T8647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.973973][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.2.1872 Not tainted syzkaller #0 PREEMPT [ 733.974070][ T8647] Hardware name: linux,dummy-virt (DT) [ 733.974114][ T8647] Call trace: [ 733.974153][ T8647] show_stack+0x18/0x24 (C) [ 733.974277][ T8647] dump_stack_lvl+0x60/0x80 [ 733.974358][ T8647] dump_stack+0x18/0x24 [ 733.974431][ T8647] should_fail_ex+0x1e0/0x238 [ 733.974541][ T8647] should_fail+0x14/0x40 [ 733.974627][ T8647] should_fail_usercopy+0x1c/0x40 [ 733.974702][ T8647] strncpy_from_user+0x24/0x1c0 [ 733.974793][ T8647] do_getname+0x5c/0x1a0 [ 733.974872][ T8647] getname_flags+0x14/0x20 [ 733.974945][ T8647] path_setxattrat+0x1a0/0x1e0 [ 733.975028][ T8647] __arm64_sys_setxattr+0x2c/0x40 [ 733.975104][ T8647] invoke_syscall+0x54/0x10c [ 733.975174][ T8647] el0_svc_common.constprop.0+0x40/0xe0 [ 733.975245][ T8647] do_el0_svc+0x1c/0x34 [ 733.975360][ T8647] el0_svc+0x38/0x1fc [ 733.975441][ T8647] el0t_64_sync_handler+0xa0/0xe4 [ 733.975513][ T8647] el0t_64_sync+0x1a4/0x1a8 [ 736.128959][ T8667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 736.877261][ T28] audit: type=1326 audit(736.259:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.878661][ T28] audit: type=1326 audit(736.259:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.881011][ T28] audit: type=1326 audit(736.259:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.886427][ T28] audit: type=1326 audit(736.269:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.888342][ T28] audit: type=1326 audit(736.269:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.894657][ T28] audit: type=1326 audit(736.279:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.894898][ T28] audit: type=1326 audit(736.279:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.896790][ T28] audit: type=1326 audit(736.279:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.898529][ T28] audit: type=1326 audit(736.279:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 736.904287][ T28] audit: type=1326 audit(736.279:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa979368 code=0x7ffc0000 [ 737.017291][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 737.017458][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 737.017560][ T8671] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 740.157208][ T8718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 740.387234][ T8723] FAULT_INJECTION: forcing a failure. [ 740.387234][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 740.387420][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: syz.2.1904 Not tainted syzkaller #0 PREEMPT [ 740.387504][ T8723] Hardware name: linux,dummy-virt (DT) [ 740.387545][ T8723] Call trace: [ 740.387578][ T8723] show_stack+0x18/0x24 (C) [ 740.387677][ T8723] dump_stack_lvl+0x60/0x80 [ 740.387754][ T8723] dump_stack+0x18/0x24 [ 740.387826][ T8723] should_fail_ex+0x1e0/0x238 [ 740.387913][ T8723] should_failslab+0x54/0x80 [ 740.387986][ T8723] __kvmalloc_node_noprof+0xc8/0x65c [ 740.388067][ T8723] io_alloc_cache_init+0x38/0x74 [ 740.388146][ T8723] io_uring_setup+0x218/0x7ec [ 740.388213][ T8723] __arm64_sys_io_uring_setup+0x60/0xb4 [ 740.388278][ T8723] invoke_syscall+0x54/0x10c [ 740.388358][ T8723] el0_svc_common.constprop.0+0x40/0xe0 [ 740.388433][ T8723] do_el0_svc+0x1c/0x34 [ 740.388531][ T8723] el0_svc+0x38/0x1fc [ 740.388620][ T8723] el0t_64_sync_handler+0xa0/0xe4 [ 740.388695][ T8723] el0t_64_sync+0x1a4/0x1a8 [ 742.216374][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 742.218293][ T8746] vlan0: entered promiscuous mode [ 743.389392][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 743.389459][ T28] audit: type=1326 audit(742.769:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1924" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 743.389621][ T28] audit: type=1326 audit(742.769:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1924" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 743.404338][ T28] audit: type=1326 audit(742.789:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1924" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 743.404485][ T28] audit: type=1326 audit(742.789:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1924" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 743.404568][ T28] audit: type=1326 audit(742.789:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1924" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 744.095394][ T8778] FAULT_INJECTION: forcing a failure. [ 744.095394][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 744.095562][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.1927 Not tainted syzkaller #0 PREEMPT [ 744.095649][ T8778] Hardware name: linux,dummy-virt (DT) [ 744.095690][ T8778] Call trace: [ 744.095724][ T8778] show_stack+0x18/0x24 (C) [ 744.095827][ T8778] dump_stack_lvl+0x60/0x80 [ 744.095898][ T8778] dump_stack+0x18/0x24 [ 744.095966][ T8778] should_fail_ex+0x1e0/0x238 [ 744.096093][ T8778] should_failslab+0x54/0x80 [ 744.096176][ T8778] __kvmalloc_node_noprof+0xc8/0x65c [ 744.096253][ T8778] vmemdup_user+0x34/0xc0 [ 744.096320][ T8778] path_setxattrat+0xbc/0x1e0 [ 744.096394][ T8778] __arm64_sys_setxattr+0x2c/0x40 [ 744.096468][ T8778] invoke_syscall+0x54/0x10c [ 744.096537][ T8778] el0_svc_common.constprop.0+0x40/0xe0 [ 744.096605][ T8778] do_el0_svc+0x1c/0x34 [ 744.096672][ T8778] el0_svc+0x38/0x1fc [ 744.096743][ T8778] el0t_64_sync_handler+0xa0/0xe4 [ 744.096811][ T8778] el0t_64_sync+0x1a4/0x1a8 [ 745.125868][ T8798] FAULT_INJECTION: forcing a failure. [ 745.125868][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 745.126945][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.2.1937 Not tainted syzkaller #0 PREEMPT [ 745.127054][ T8798] Hardware name: linux,dummy-virt (DT) [ 745.127098][ T8798] Call trace: [ 745.127134][ T8798] show_stack+0x18/0x24 (C) [ 745.127242][ T8798] dump_stack_lvl+0x60/0x80 [ 745.127377][ T8798] dump_stack+0x18/0x24 [ 745.127460][ T8798] should_fail_ex+0x1e0/0x238 [ 745.127539][ T8798] should_failslab+0x54/0x80 [ 745.127608][ T8798] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 745.127688][ T8798] kvasprintf+0x88/0x120 [ 745.127768][ T8798] __kthread_create_on_node+0x98/0x188 [ 745.127842][ T8798] kthread_create_on_node+0x58/0x84 [ 745.127909][ T8798] cryptomgr_notify+0x364/0x3e8 [ 745.127973][ T8798] blocking_notifier_call_chain+0x6c/0xa0 [ 745.128033][ T8798] crypto_alg_mod_lookup+0xec/0x2cc [ 745.128098][ T8798] crypto_alloc_tfm_node+0x54/0x100 [ 745.128172][ T8798] crypto_alloc_sig+0x28/0x38 [ 745.128242][ T8798] public_key_verify_signature+0x100/0x258 [ 745.128308][ T8798] x509_check_for_self_signed+0xa8/0xf4 [ 745.128388][ T8798] x509_cert_parse+0x160/0x214 [ 745.128455][ T8798] x509_key_preparse+0x20/0x1e0 [ 745.128523][ T8798] asymmetric_key_preparse+0x64/0xa4 [ 745.128589][ T8798] __key_create_or_update+0x1b8/0x4f0 [ 745.128662][ T8798] key_create_or_update+0x14/0x20 [ 745.128726][ T8798] __arm64_sys_add_key+0x128/0x21c [ 745.128793][ T8798] invoke_syscall+0x54/0x10c [ 745.128912][ T8798] el0_svc_common.constprop.0+0x40/0xe0 [ 745.128978][ T8798] do_el0_svc+0x1c/0x34 [ 745.129038][ T8798] el0_svc+0x38/0x1fc [ 745.129108][ T8798] el0t_64_sync_handler+0xa0/0xe4 [ 745.129178][ T8798] el0t_64_sync+0x1a4/0x1a8 [ 745.983545][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1943'. [ 745.983700][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 746.157721][ T8817] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 746.318234][ T28] audit: type=1326 audit(745.699:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8822 comm="syz.1.1949" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 746.321454][ T28] audit: type=1326 audit(745.699:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8822 comm="syz.1.1949" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 746.332119][ T28] audit: type=1326 audit(745.709:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8822 comm="syz.1.1949" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 746.332304][ T28] audit: type=1326 audit(745.719:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8822 comm="syz.1.1949" exe="/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 746.332401][ T28] audit: type=1326 audit(745.719:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8822 comm="syz.1.1949" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 746.527224][ T8832] ip_tables: iptables: counters copy to user failed while replacing table [ 754.688553][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 754.688616][ T28] audit: type=1326 audit(754.069:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8891 comm="syz.2.1977" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979368 code=0x0 [ 757.267598][ T8924] vlan0: entered promiscuous mode [ 758.002595][ T8941] FAULT_INJECTION: forcing a failure. [ 758.002595][ T8941] name fail_futex, interval 1, probability 0, space 0, times 0 [ 758.002779][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.2.1992 Not tainted syzkaller #0 PREEMPT [ 758.002884][ T8941] Hardware name: linux,dummy-virt (DT) [ 758.002927][ T8941] Call trace: [ 758.002963][ T8941] show_stack+0x18/0x24 (C) [ 758.003075][ T8941] dump_stack_lvl+0x60/0x80 [ 758.003151][ T8941] dump_stack+0x18/0x24 [ 758.003222][ T8941] should_fail_ex+0x1e0/0x238 [ 758.003302][ T8941] should_fail+0x14/0x40 [ 758.003411][ T8941] get_futex_key+0xdc/0x620 [ 758.003485][ T8941] futex_wake+0x68/0x240 [ 758.003556][ T8941] do_futex+0x178/0x210 [ 758.003624][ T8941] __arm64_sys_futex+0x100/0x1a0 [ 758.003694][ T8941] invoke_syscall+0x54/0x10c [ 758.003764][ T8941] el0_svc_common.constprop.0+0x40/0xe0 [ 758.003835][ T8941] do_el0_svc+0x1c/0x34 [ 758.003912][ T8941] el0_svc+0x38/0x1fc [ 758.003986][ T8941] el0t_64_sync_handler+0xa0/0xe4 [ 758.004055][ T8941] el0t_64_sync+0x1a4/0x1a8 [ 761.628978][ T6424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.658502][ T6424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.693757][ T6424] bond0 (unregistering): Released all slaves [ 761.708028][ T6424] bond1 (unregistering): Released all slaves [ 762.295936][ T6424] hsr_slave_0: left promiscuous mode [ 762.299688][ T6424] hsr_slave_1: left promiscuous mode [ 762.698250][ T6438] smc: removing ib device syz1 [ 763.472417][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 763.627152][ T9004] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 763.711728][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 763.778655][ T9004] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 764.353872][ T9017] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2022'. [ 767.195281][ T9030] veth0_virt_wifi: entered promiscuous mode [ 767.271703][ T9034] fuse: fd is not a fuse device [ 767.723854][ T9054] gre1: entered promiscuous mode [ 770.246980][ T9060] FAULT_INJECTION: forcing a failure. [ 770.246980][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 770.247145][ T9060] CPU: 1 UID: 0 PID: 9060 Comm: syz.2.2042 Not tainted syzkaller #0 PREEMPT [ 770.247235][ T9060] Hardware name: linux,dummy-virt (DT) [ 770.247275][ T9060] Call trace: [ 770.247335][ T9060] show_stack+0x18/0x24 (C) [ 770.247445][ T9060] dump_stack_lvl+0x60/0x80 [ 770.247515][ T9060] dump_stack+0x18/0x24 [ 770.247582][ T9060] should_fail_ex+0x1e0/0x238 [ 770.247661][ T9060] should_failslab+0x54/0x80 [ 770.247745][ T9060] __kmalloc_node_noprof+0xb4/0x524 [ 770.247836][ T9060] load_msg+0x40/0x1c8 [ 770.247946][ T9060] do_msgrcv+0xa8/0x638 [ 770.248019][ T9060] __arm64_sys_msgrcv+0x28/0x40 [ 770.248096][ T9060] invoke_syscall+0x54/0x10c [ 770.248168][ T9060] el0_svc_common.constprop.0+0x40/0xe0 [ 770.248239][ T9060] do_el0_svc+0x1c/0x34 [ 770.248309][ T9060] el0_svc+0x38/0x1fc [ 770.248385][ T9060] el0t_64_sync_handler+0xa0/0xe4 [ 770.248454][ T9060] el0t_64_sync+0x1a4/0x1a8 [ 770.556440][ T9066] ./dev/sda1: Can't lookup blockdev [ 771.213931][ T9092] FAULT_INJECTION: forcing a failure. [ 771.213931][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 771.214060][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.2.2057 Not tainted syzkaller #0 PREEMPT [ 771.214106][ T9092] Hardware name: linux,dummy-virt (DT) [ 771.214127][ T9092] Call trace: [ 771.214144][ T9092] show_stack+0x18/0x24 (C) [ 771.214201][ T9092] dump_stack_lvl+0x60/0x80 [ 771.214238][ T9092] dump_stack+0x18/0x24 [ 771.214289][ T9092] should_fail_ex+0x1e0/0x238 [ 771.214361][ T9092] should_failslab+0x54/0x80 [ 771.214400][ T9092] __kvmalloc_node_noprof+0xc8/0x65c [ 771.214440][ T9092] io_alloc_cache_init+0x38/0x74 [ 771.214479][ T9092] io_uring_setup+0x200/0x7ec [ 771.214514][ T9092] __arm64_sys_io_uring_setup+0x60/0xb4 [ 771.214549][ T9092] invoke_syscall+0x54/0x10c [ 771.214583][ T9092] el0_svc_common.constprop.0+0x40/0xe0 [ 771.214617][ T9092] do_el0_svc+0x1c/0x34 [ 771.214648][ T9092] el0_svc+0x38/0x1fc [ 771.214684][ T9092] el0t_64_sync_handler+0xa0/0xe4 [ 771.214716][ T9092] el0t_64_sync+0x1a4/0x1a8 [ 771.805814][ T9104] xt_hashlimit: size too large, truncated to 1048576 [ 773.378544][ T9134] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 773.799439][ T9143] fuse: fd is not a fuse device [ 773.875194][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2080'. [ 773.938395][ T9145] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 773.948127][ T9145] bond1 (unregistering): Released all slaves [ 775.066646][ T28] audit: type=1326 audit(774.449:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.068784][ T28] audit: type=1326 audit(774.449:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.069020][ T28] audit: type=1326 audit(774.449:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.076016][ T28] audit: type=1326 audit(774.449:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.077415][ T28] audit: type=1326 audit(774.459:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.078838][ T28] audit: type=1326 audit(774.459:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.095139][ T28] audit: type=1326 audit(774.479:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 775.095437][ T28] audit: type=1326 audit(774.479:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.1.2085" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa4779368 code=0x7ffc0000 [ 782.312098][ T9250] Invalid ELF header type: 3 != 1 [ 784.639232][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 784.639575][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 784.729944][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 784.730163][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 784.877890][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 784.878097][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 787.415669][ T9282] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2134'. [ 790.223505][ T9300] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2139'. [ 790.224079][ T9300] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 790.239864][ T9300] 0ªî{X¹¦: entered allmulticast mode [ 790.253420][ T9300] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 792.333854][ T9317] FAULT_INJECTION: forcing a failure. [ 792.333854][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 792.334016][ T9317] CPU: 1 UID: 0 PID: 9317 Comm: syz.2.2146 Not tainted syzkaller #0 PREEMPT [ 792.334105][ T9317] Hardware name: linux,dummy-virt (DT) [ 792.334146][ T9317] Call trace: [ 792.334182][ T9317] show_stack+0x18/0x24 (C) [ 792.334287][ T9317] dump_stack_lvl+0x60/0x80 [ 792.334375][ T9317] dump_stack+0x18/0x24 [ 792.334443][ T9317] should_fail_ex+0x1e0/0x238 [ 792.334551][ T9317] should_failslab+0x54/0x80 [ 792.334638][ T9317] kmem_cache_alloc_noprof+0x54/0x458 [ 792.334717][ T9317] security_inode_alloc+0x30/0x1a0 [ 792.334794][ T9317] inode_init_always_gfp+0x174/0x254 [ 792.334871][ T9317] alloc_inode+0x40/0xdc [ 792.334940][ T9317] new_inode+0x14/0x88 [ 792.335009][ T9317] bdev_alloc+0x28/0x130 [ 792.335085][ T9317] __alloc_disk_node+0x78/0x1a4 [ 792.335155][ T9317] __blk_alloc_disk+0x70/0xfc [ 792.335256][ T9317] dm_create+0x168/0x4e0 [ 792.335385][ T9317] dev_create+0x54/0x104 [ 792.335548][ T9317] ctl_ioctl+0x290/0x5b8 [ 792.335620][ T9317] dm_ctl_ioctl+0x10/0x20 [ 792.335694][ T9317] __arm64_sys_ioctl+0xa8/0x100 [ 792.335797][ T9317] invoke_syscall+0x54/0x10c [ 792.335881][ T9317] el0_svc_common.constprop.0+0x40/0xe0 [ 792.335969][ T9317] do_el0_svc+0x1c/0x34 [ 792.336067][ T9317] el0_svc+0x38/0x1fc [ 792.336142][ T9317] el0t_64_sync_handler+0xa0/0xe4 [ 792.336227][ T9317] el0t_64_sync+0x1a4/0x1a8 [ 797.208846][ T9344] Unable to handle kernel paging request at virtual address ffff8000a3b35000 [ 797.208991][ T9344] Mem abort info: [ 797.209026][ T9344] ESR = 0x0000000096000046 [ 797.209101][ T9344] EC = 0x25: DABT (current EL), IL = 32 bits [ 797.209160][ T9344] SET = 0, FnV = 0 [ 797.209209][ T9344] EA = 0, S1PTW = 0 [ 797.209270][ T9344] FSC = 0x06: level 2 translation fault [ 797.209339][ T9344] Data abort info: [ 797.209381][ T9344] ISV = 0, ISS = 0x00000046, ISS2 = 0x00000000 [ 797.209431][ T9344] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 797.209489][ T9344] GCS = 0, Overlay = 0, DirtyBit = 0 [ 797.211754][ T9344] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042bec000 [ 797.212369][ T9344] [ffff8000a3b35000] pgd=100000004311c003, p4d=100000004311d003, pud=100000004311e003, pmd=0000000000000000 [ 797.213475][ T9344] Internal error: Oops: 0000000096000046 [#1] SMP [ 797.220754][ T9344] Modules linked in: [ 797.221371][ T9344] CPU: 1 UID: 0 PID: 9344 Comm: syz.2.2157 Not tainted syzkaller #0 PREEMPT [ 797.221947][ T9344] Hardware name: linux,dummy-virt (DT) [ 797.222431][ T9344] pstate: 20402009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 797.222902][ T9344] pc : sys_imageblit+0x5dc/0x700 [ 797.223362][ T9344] lr : drm_fbdev_shmem_defio_imageblit+0x1c/0x3c [ 797.223758][ T9344] sp : ffff800086db3950 [ 797.224027][ T9344] x29: ffff800086db3980 x28: f0f000000343a400 x27: 0000000000000002 [ 797.224661][ T9344] x26: 0000000000000002 x25: 0000000000000000 x24: f5f0000016d7dffe [ 797.225175][ T9344] x23: f2f0000005697870 x22: 0000000000000002 x21: 0000000000000010 [ 797.225703][ T9344] x20: fdf00000052ad400 x19: ffff800086db3a18 x18: 0000000000000014 [ 797.226243][ T9344] x17: ffff800086db3950 x16: 0000000000001000 x15: f2f0000005697210 [ 797.226773][ T9344] x14: 000000000000032f x13: 0000000000000000 x12: 0000000000000000 [ 797.228337][ T9344] x11: 0000000000000000 x10: 0000000000000008 x9 : 0000000000000001 [ 797.228866][ T9344] x8 : ffff8000a3b35000 x7 : 0000000000000000 x6 : 0000000000000002 [ 797.229385][ T9344] x5 : 0000000000000003 x4 : 0000000000000004 x3 : f2f0000005697211 [ 797.229895][ T9344] x2 : ffff800086db3950 x1 : 0000000000000000 x0 : 0000000000000000 [ 797.230621][ T9344] Call trace: [ 797.231018][ T9344] sys_imageblit+0x5dc/0x700 (P) [ 797.231515][ T9344] drm_fbdev_shmem_defio_imageblit+0x1c/0x3c [ 797.231924][ T9344] ccw_putcs+0x29c/0x3f0 [ 797.232233][ T9344] fbcon_putcs+0x104/0x12c [ 797.232564][ T9344] do_update_region+0x104/0x124 [ 797.232900][ T9344] redraw_screen+0x214/0x248 [ 797.233280][ T9344] vc_do_resize+0x3d4/0x438 [ 797.233579][ T9344] __vc_resize+0x28/0x40 [ 797.233871][ T9344] vt_ioctl+0xae0/0x1314 [ 797.234212][ T9344] tty_ioctl+0xd0/0x998 [ 797.234515][ T9344] __arm64_sys_ioctl+0xa8/0x100 [ 797.235496][ T9344] invoke_syscall+0x54/0x10c [ 797.236078][ T9344] el0_svc_common.constprop.0+0x40/0xe0 [ 797.236467][ T9344] do_el0_svc+0x1c/0x34 [ 797.236778][ T9344] el0_svc+0x38/0x1fc [ 797.237090][ T9344] el0t_64_sync_handler+0xa0/0xe4 [ 797.237460][ T9344] el0t_64_sync+0x1a4/0x1a8 [ 797.238174][ T9344] Code: d3420c27 93407c04 d37d0421 f86d7840 (f82cd900) [ 797.239293][ T9344] ---[ end trace 0000000000000000 ]--- [ 797.240410][ T9344] Kernel panic - not syncing: Oops: Fatal exception [ 797.241206][ T9344] SMP: stopping secondary CPUs [ 797.242439][ T9344] Kernel Offset: disabled [ 797.242896][ T9344] CPU features: 0x0,00000000,00d1982f,df188f01,2afff73f [ 797.244132][ T9344] Memory Limit: none [ 797.245360][ T9344] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:52:59 Registers: info registers vcpu 0 CPU#0 PC=ffff800081cc5dc4 X00=ffff8000860538e0 X01=fff000007f8d4928 X02=f2f0000016d795e8 X03=ffff80008603b760 X04=f2f0000016d795e8 X05=ffff80008603b760 X06=0000000000000000 X07=f6f00000052841b8 X08=ffff8000860538e0 X09=fff000007f8d4928 X10=2d1c64b2c9f3c12d X11=00000000000000c0 X12=00000000025a005b X13=0000967c53dfdcd2 X14=fcf0000006a72280 X15=0000000000000000 X16=ffff800082f38000 X17=fff07ffffcd45000 X18=0000000000000000 X19=ffff8000860538e0 X20=fff000007f8d4900 X21=0000000000000000 X22=fff000007f8d4880 X23=fff000007f8dcf38 X24=0000000000000000 X25=fdf0000008c9c540 X26=fdf0000008c9c540 X27=0000000000000000 X28=ffff8000860539fc X29=ffff800086053890 X30=ffff8000801a7ab8 SP=ffff800086053890 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000d803000000:000000d803000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000000d8 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:00000000000000d8 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffcd0d20f0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809dc6e0 X00=0000000000000002 X01=0000000000000018 X02=ffff800082f61018 X03=ffff800082cf87f8 X04=faf0000003f80880 X05=000000000000005b X06=ffff800082cf88c8 X07=0000000000000001 X08=f8f000000a849100 X09=0000000000000a46 X10=000000000000f6a8 X11=ffff800082bc9438 X12=0000000000038868 X13=ffff800086db31d8 X14=ffff800086db3020 X15=ffff800086db31cd X16=0000000000001000 X17=ffff800086db3950 X18=00000000ffffffff X19=f3f000000346000f X20=ffff8000809dc928 X21=faf0000003f80880 X22=f3f000000346003c X23=0000000000000000 X24=0000000000000000 X25=ffff800082b9ed18 X26=ffff8000828da000 X27=0000000000000002 X28=f8f000000a849100 X29=ffff800086db3350 X30=ffff8000809dc950 SP=ffff800086db3350 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0300000000000000:0300000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000300000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000003:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000003:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffffc65c10 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000