last executing test programs: 2m0.885348031s ago: executing program 3 (id=1722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) 2m0.763924119s ago: executing program 3 (id=1723): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) (fail_nth: 1) 2m0.705535043s ago: executing program 3 (id=1724): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001800)={0x0, &(0x7f0000001c40)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9, 0x7fffffff, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0xb8a}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xaa, 0xc2d, 0x7, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5b2, 0xb, 0xfffffffffffffffc}}, @nested_load_syzos={0x136, 0x20, {0x0, 0xf}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xf9, 0x8000000000000001, 0x1}}, @rdmsr={0x66, 0x18}, @nested_load_code={0x12e, 0x74, {0x1, "66ba4000b800980000efb9020a00000f320f01ca410f005bdc670f97c42e6766460f7c8600000000660f381d4d110f01d166baf80cb88085e88cef66bafc0cedc7442400d97d0000c7442402fbc4ad4cc7442406000000000f011424"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_syzos={0x136, 0x95, {0x2, 0x1, [@nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x4d, {"3e440f20430f01c20f0766baf80cb8de7ca383ef66bafc0cb080ee420f0f48deae65674781e9002000000f01c8c422712d29b9e80800000f320f2190"}}]}}, @code={0xa, 0x4a, {"0f07650f79f440d9f40f5c58c9430f06b9d00400000f32b9a10800000f32b903020000b8750f0000ba000000000f300bc2b8010000000f01d9"}}, @rdmsr={0x66, 0x18, {0x821}}, @nested_amd_set_intercept={0x181, 0x30, {0x8, 0xae, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x14, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x80b8}}, @nested_load_code={0x12e, 0x59, {0x1, "66baf80cb8ee554984ef66bafc0cb000eec4c24d9dad0eced112f244ab650f06653e4f0fc76e028f2858a6c340260f01d10f011bc421ff2d500836f36526470f30"}}], 0x3cc}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4b20, 0x8, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ef, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x4082f0b980d8a9a6, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x1a1700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m0.564129102s ago: executing program 3 (id=1726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) close(r0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) pread64(r4, &(0x7f00000023c0)=""/6, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) 2m0.563477568s ago: executing program 3 (id=1728): ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x8e, 0x2003) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100001002dbd7000fedbdf25000000000b029490de59ef4546b6e785742064a260f0da547d54d1515d9551ba1c4d5ae258d788925794308f6fdab1ed2e647f149a003ba8f0730187d282c6dc4e6d47d25bc4d8072cc6638dae67ee631ac5d090a52f866cd936dac139741170f0da31e519e543c025bae0f73fb4", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d30000000000000200016801c00018018000c8014000100feffff7f790200000200000088a80000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000844) r1 = userfaultfd(0x80001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f00007d1000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) (rerun: 64) 2m0.245397121s ago: executing program 3 (id=1731): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) (fail_nth: 1) 2m0.210790294s ago: executing program 32 (id=1731): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) (fail_nth: 1) 2.023887221s ago: executing program 2 (id=3472): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x32, 0x503, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff80fe, 0x8}, 0x50) 2.023651431s ago: executing program 2 (id=3473): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0xa0044d03, &(0x7f0000000000)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000280)=0xc) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x16) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010040bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01b0840100180012800e00010077697265677561726400000004000280000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 1.733030311s ago: executing program 2 (id=3480): socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r4 = getpid() r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) 1.575079462s ago: executing program 2 (id=3483): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_open_procfs(0x0, 0x0) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 997.530549ms ago: executing program 2 (id=3500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)={0x2, 0x0, [{0x989}, {0x400000b2, 0x0, 0x2}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000040)={0x100, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r8], &(0x7f0000000280)=[0x64], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r7, 0xc02064cc, &(0x7f0000000680)={r8, r6, 0x1, 0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r7, 0xc00864c0, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000240)={0x83, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000380)={0x0, 0x0, 0x3}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r16, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r16, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000003c0)=[r17], 0x0, 0x800000ea25, 0x1, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000000640)={0x0, 0x1, {0x30, 0x3, &(0x7f0000000580)=[{0xf0000000, r3, 0x7fff, 0x1000, 0x8, {0x10, 0x5, &(0x7f00000001c0)=[{0xff, r4, 0xffffffff}, {0x0, r8, 0x4}, {0x1, r9, 0x3e}, {0xff, r10, 0x7}, {0xff, r11, 0x8000000000000001}]}}, {0xf0000000, r12, 0x3, 0xff, 0x6, {0x10, 0x3, &(0x7f0000000300)=[{0x80000000, r13}, {0x0, r14, 0x4}, {0xff, 0x0, 0x9}]}}, {0x0, r15, 0x5, 0x81, 0x40, {0x10, 0x8, &(0x7f0000000500)=[{0x80000000, 0x0, 0x9}, {0xff, r17, 0x1}, {0x1, r18, 0x3}, {0xff, r19, 0xf6f}, {0x1, r20, 0x552}, {0x0, 0x0, 0x3ff}, {0x1, r21, 0x9}, {0xff, r22, 0xb1}]}}]}}) 632.954563ms ago: executing program 0 (id=3512): r0 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4206, r0) ptrace(0x4207, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000780)) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x60, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}}, 0x8004) syz_clone(0x49001100, &(0x7f0000000540)="5a7a0a90f6dbab18e387520efa2fbc67132ba47cddee645a26507936028d418bc4c7275b28f2efbf36371081dbd8e82a7f351d7da9f13ffac89f221fcc23298f5c685e50f3c8e88a552cb7e88b8a30589123ea7ff18f27358baeaea78d191bacde223f3827a06cf39d3c01c35848256154d3c889cd9bfeb07d55", 0x7a, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="b2660f3a237d655c07040b387d4f0939847fbc9802288637bf1f779e2e85f556dbfd74785230ec55680490398881f1fe1b74f674e0dc8049dca7f2a5d96015cfb3d522199fa3e657b04ed6564aea29dcad3ec5f458627e08c54cf53381a64814") ptrace(0x4210, 0x0) socket$phonet(0x23, 0x2, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x8, 0x0, 0x6}, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) mount$9p_tcp(&(0x7f0000000640), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 632.579562ms ago: executing program 4 (id=3513): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4095, 0xffffffffffffff9c}, {&(0x7f0000000000)=""/67, 0x50}], 0x2) r1 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r6, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x4, @remote, 0xff7ffffb}}, {{0xa, 0x4e08, 0xcb5, @local, 0x4f2}}}, 0x108) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000005200000225bd7000fcdbdf251c08000100", @ANYRES32=r6, @ANYBLOB="08000600d1000000080006000600000008000100", @ANYRES32=r9, @ANYBLOB="080006eb256f110008000100", @ANYRES32=r9, @ANYBLOB="08000600f66c000008000100", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x0) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x200000000000000) 461.857384ms ago: executing program 4 (id=3514): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000400000/0xc00000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001400b595feffbfff000800000a0066fe", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffffac14142108000800040400"], 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x3, 0x80000000, 0x0) r4 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r9}) fcntl$setflags(r8, 0x2, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_emit_ethernet(0x113, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast, @void, {@ipv4={0x800, @dccp={{0x1c, 0x4, 0x1, 0x4, 0x105, 0x65, 0x0, 0x0, 0x21, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x4, "6fb9"}, @timestamp_addr={0x44, 0x14, 0x89, 0x1, 0x0, [{@local, 0xe}, {@remote, 0x4}]}, @timestamp={0x44, 0xc, 0xe3, 0x0, 0x8, [0x746, 0x7]}, @end, @timestamp={0x44, 0x8, 0xeb, 0x0, 0x1, [0x8]}, @lsrr={0x83, 0x17, 0xc6, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @ssrr={0x89, 0x7, 0x1c, [@remote]}, @generic={0x88, 0xc, "f2257d604730331f6f30"}]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, "1f888c", 0x3, "5c2af8"}, "40927910499e908ee258e26b116a40e57d7cd2946746c2ff9cab4b6e498fb06aac62b905c5da625a29016ebc2f6789aca9170284ee3fa03219b0a8c7ce28cb24020ebebea62c593940b52efefff8f6b4fc386861188cd314293ea7df36046efc19546d30fb3e48c42b9ed835783cc9c067d88a793191da8a6bf7c7832b5d44121f64a217b3"}}}}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r10, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x9d, 0x5, &(0x7f0000000040)=""/190, &(0x7f0000000100)=0xbe) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) 461.097556ms ago: executing program 4 (id=3517): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 371.21107ms ago: executing program 4 (id=3519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd20f000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 370.841458ms ago: executing program 4 (id=3520): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400f11b243eb040b5200000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r6, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="000030f60400c20000030180c200000e88a8000081000002"], 0x36) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_dump={0x3e, 0x3, 0x5, 0xb, "dd8f899d15e3e3ef33f059"}}) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, 0x0) 233.230185ms ago: executing program 4 (id=3524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket(0xa, 0x3, 0xff) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r4, &(0x7f00000000c0)="a5", 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000180)) 153.373018ms ago: executing program 1 (id=3527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) 152.689719ms ago: executing program 0 (id=3528): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8000000) 105.064597ms ago: executing program 0 (id=3529): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmda12\x00', [0x100, 0xb, 0x1, 0x101, 0x6, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x2, 0x7, 0xff03, 0x401, 0x10001, 0x1, 0x9, 0xc, 0xfe9, 0x401, 0xffff0000, 0x2, 0x200007, 0x9, 0x48, 0xb, 0x7, 0x6a74, 0x400, 0x6b, 0x2000008]}) 104.760037ms ago: executing program 1 (id=3530): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) dup(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x419, 0xff, 0x18, 0x3, 0xfff, "29d0199be01ccf5c901a181df2d42543af991fa8970ea51e83906109557daa8e15a4650dd1501ee94307a4973e25ad42e7e1763c3ae1ad9d7f53f3c4168469bc57fdfbb3fa915ad31623e6cf294150df774a0c496b6c8a434e330f317278eb444ba28273861f4ea15deb1e8811b749576ae7162bb69fb88353963266400f9082"}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) ptrace$pokeuser(0x6, r1, 0x388, 0x6) 104.493777ms ago: executing program 0 (id=3531): syz_io_uring_setup(0x1006a17, &(0x7f0000000100)={0x0, 0x15d2, 0x40, 0x2, 0x7f}, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) (async) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r3}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmmsg$inet(r6, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 35.313523ms ago: executing program 1 (id=3532): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) (fail_nth: 2) 35.121986ms ago: executing program 0 (id=3533): syz_open_procfs(0x0, &(0x7f0000000d40)='net/ip6_flowlabel\x00') (fail_nth: 10) 34.750953ms ago: executing program 2 (id=3534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x62, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1\x00', 0x2) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x403, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r6, &(0x7f0000000c00)='0x40', 0x4) close(r6) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') symlink(0x0, &(0x7f0000001200)='./config/usb_gadget/g1/os_desc/c.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r7) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 25.017487ms ago: executing program 1 (id=3535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000018040000000000004300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000b500000085100000010000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', r2}, 0x94) 24.535602ms ago: executing program 1 (id=3536): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x2000000006, 0x8f3b8, 0x9271, 0x2, 0x9, 0x4002004c4, 0x1, 0xa, 0x95, 0xc, 0x5, 0x9, 0xffffffffffffffff, 0x800000003, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') 235.94µs ago: executing program 0 (id=3537): r0 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4206, r0) ptrace(0x4207, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000780)) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x60, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}}, 0x8004) syz_clone(0x49001100, &(0x7f0000000540)="5a7a0a90f6dbab18e387520efa2fbc67132ba47cddee645a26507936028d418bc4c7275b28f2efbf36371081dbd8e82a7f351d7da9f13ffac89f221fcc23298f5c685e50f3c8e88a552cb7e88b8a30589123ea7ff18f27358baeaea78d191bacde223f3827a06cf39d3c01c35848256154d3c889cd9bfeb07d55", 0x7a, &(0x7f0000000640), &(0x7f0000000680), 0x0) ptrace(0x4210, 0x0) socket$phonet(0x23, 0x2, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x8, 0x0, 0x6}, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) mount$9p_tcp(&(0x7f0000000640), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 0s ago: executing program 1 (id=3538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 0s ago: executing program 0 (id=3540): ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) rmdir(0x0) rmdir(0x0) rmdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00') userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) chdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1e9) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) mount$9p_virtio(0x0, 0x0, &(0x7f0000000180), 0x2010460, &(0x7f0000000300)=ANY=[@ANYBLOB="7472c9941481287fe2b5616e733d76597274696f2c66737575696450b7333233396500322d396632002d06367c322d560163382d38593336006465372c7569643dc9fa002899eb6a9ea55dcd193e77cfdb564396ec2249b4b6fb357e189af050e55a1e4e8db2fb5682f7c48754d8df", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) mount$bpf(0x0, 0x0, 0x0, 0x200, &(0x7f0000000640)={[{@gid}]}) kernel console output (not intermixed with test programs): 0x10 [ 221.187881][T13885] do_syscall_64+0x115/0x870 [ 221.187895][T13885] ? clear_bhb_loop+0x40/0x90 [ 221.187909][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.187921][T13885] RIP: 0033:0x7f53e255e84e [ 221.187948][T13885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.187959][T13885] RSP: 002b:00007f53e348bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.187970][T13885] RAX: ffffffffffffffda RBX: 00007f53e348c6c0 RCX: 00007f53e255e84e [ 221.187977][T13885] RDX: 000000000000000f RSI: 00007f53e348c0a0 RDI: 0000000000000003 [ 221.187984][T13885] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.187990][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.187996][T13885] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 221.188011][T13885] [ 221.188266][T13879] vcan0 speed is unknown, defaulting to 1000 [ 221.390876][T13895] FAULT_INJECTION: forcing a failure. [ 221.390876][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 221.396588][T13895] CPU: 3 UID: 0 PID: 13895 Comm: syz.2.2907 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.396607][T13895] Tainted: [L]=SOFTLOCKUP [ 221.396611][T13895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.396618][T13895] Call Trace: [ 221.396623][T13895] [ 221.396627][T13895] dump_stack_lvl+0x100/0x190 [ 221.396647][T13895] should_fail_ex.cold+0x5/0xa [ 221.396662][T13895] should_failslab+0xc2/0x120 [ 221.396677][T13895] kmem_cache_alloc_noprof+0x91/0x6a0 [ 221.396691][T13895] ? skb_clone+0x190/0x400 [ 221.396708][T13895] skb_clone+0x190/0x400 [ 221.396721][T13895] nfnetlink_rcv_batch+0x1c8/0x2880 [ 221.396738][T13895] ? kmem_cache_free+0x127/0x6b0 [ 221.396751][T13895] ? __lock_acquire+0x49f/0x1a40 [ 221.396766][T13895] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 221.396793][T13895] ? find_held_lock+0x2b/0x80 [ 221.396812][T13895] ? avc_has_perm_noaudit+0x145/0x3b0 [ 221.396827][T13895] ? __asan_memset+0x23/0x50 [ 221.396838][T13895] ? __nla_validate_parse+0x1e7/0x28b0 [ 221.396853][T13895] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.396864][T13895] ? rcu_is_watching+0x12/0xc0 [ 221.396881][T13895] ? cap_capable+0x107/0x430 [ 221.396898][T13895] ? __nla_parse+0x40/0x60 [ 221.396909][T13895] nfnetlink_rcv+0x3bd/0x440 [ 221.396923][T13895] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 221.396940][T13895] netlink_unicast+0x585/0x850 [ 221.396953][T13895] ? __pfx_netlink_unicast+0x10/0x10 [ 221.396967][T13895] netlink_sendmsg+0x8b0/0xda0 [ 221.396980][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.396992][T13895] ? selinux_socket_sendmsg+0x198/0x2f0 [ 221.397010][T13895] ____sys_sendmsg+0xa4d/0xbe0 [ 221.397026][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.397038][T13895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.397060][T13895] ___sys_sendmsg+0x190/0x1e0 [ 221.397077][T13895] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.397093][T13895] ? __lock_acquire+0x49f/0x1a40 [ 221.397106][T13895] ? get_pid_task+0x106/0x250 [ 221.397131][T13895] __sys_sendmsg+0x160/0x210 [ 221.397144][T13895] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.397165][T13895] do_syscall_64+0x115/0x870 [ 221.397179][T13895] ? clear_bhb_loop+0x40/0x90 [ 221.397192][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.397204][T13895] RIP: 0033:0x7f0783d9e019 [ 221.397214][T13895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.397225][T13895] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.397238][T13895] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 221.397245][T13895] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 221.397251][T13895] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 221.397258][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.397264][T13895] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 221.397278][T13895] [ 221.836396][T13916] geneve2: entered allmulticast mode [ 222.050917][T13887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.170707][T13927] vcan0 speed is unknown, defaulting to 1000 [ 222.296688][ T5743] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 222.382240][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 222.382256][ T42] audit: type=1400 audit(1785511771.079:1057): avc: denied { setopt } for pid=13964 comm="syz.0.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.382615][T13965] __nla_validate_parse: 3 callbacks suppressed [ 222.382626][T13965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2931'. [ 222.450773][T13972] FAULT_INJECTION: forcing a failure. [ 222.450773][T13972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.455011][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.0.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.455030][T13972] Tainted: [L]=SOFTLOCKUP [ 222.455034][T13972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.455041][T13972] Call Trace: [ 222.455046][T13972] [ 222.455050][T13972] dump_stack_lvl+0x100/0x190 [ 222.455070][T13972] should_fail_ex.cold+0x5/0xa [ 222.455085][T13972] _copy_from_user+0x2e/0xd0 [ 222.455101][T13972] userfaultfd_register+0x189/0xcf0 [ 222.455118][T13972] ? avc_has_extended_perms+0x484/0x1080 [ 222.455136][T13972] ? __pfx_userfaultfd_register+0x10/0x10 [ 222.455153][T13972] ? kasan_quarantine_put+0x104/0x240 [ 222.455172][T13972] ? tomoyo_path_number_perm+0x188/0x580 [ 222.455190][T13972] userfaultfd_ioctl+0x1884/0x5990 [ 222.455210][T13972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.455226][T13972] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 222.455242][T13972] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.455259][T13972] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.455280][T13972] ? __fget_files+0x215/0x3d0 [ 222.455290][T13972] ? hook_file_ioctl_common+0x140/0x440 [ 222.455306][T13972] ? selinux_file_ioctl+0x13b/0x290 [ 222.455322][T13972] ? selinux_file_ioctl+0xb6/0x290 [ 222.455338][T13972] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 222.455356][T13972] ? __x64_sys_ioctl+0x18e/0x210 [ 222.455371][T13972] __x64_sys_ioctl+0x18e/0x210 [ 222.455387][T13972] do_syscall_64+0x115/0x870 [ 222.455402][T13972] ? clear_bhb_loop+0x40/0x90 [ 222.455415][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.455427][T13972] RIP: 0033:0x7f95fa19e019 [ 222.455437][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.455448][T13972] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.455460][T13972] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 222.455471][T13972] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 222.455478][T13972] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 222.455484][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.455491][T13972] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 222.455504][T13972] [ 222.612144][ T42] audit: type=1400 audit(1785511771.309:1058): avc: denied { write } for pid=13978 comm="syz.2.2937" name="/" dev="9p" ino=78395271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.622963][ T42] audit: type=1400 audit(1785511771.309:1059): avc: denied { add_name } for pid=13978 comm="syz.2.2937" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.630963][ T42] audit: type=1400 audit(1785511771.309:1060): avc: denied { create } for pid=13978 comm="syz.2.2937" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.637982][ T42] audit: type=1400 audit(1785511771.309:1061): avc: denied { associate } for pid=13978 comm="syz.2.2937" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.645307][ T42] audit: type=1400 audit(1785511771.309:1062): avc: denied { read append open } for pid=13978 comm="syz.2.2937" path="/42/file0/cpuset.effective_cpus" dev="9p" ino=78395425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.180535][T13996] vcan0 speed is unknown, defaulting to 1000 [ 223.259646][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2944'. [ 223.467303][ T5743] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 223.521228][T14027] netlink: 'syz.4.2951': attribute type 2 has an invalid length. [ 223.589633][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2953'. [ 223.592526][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2953'. [ 223.622986][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2954'. [ 223.686228][T14038] vcan0 speed is unknown, defaulting to 1000 [ 223.761186][T14048] FAULT_INJECTION: forcing a failure. [ 223.761186][T14048] name failslab, interval 1, probability 0, space 0, times 0 [ 223.769840][T14048] CPU: 2 UID: 0 PID: 14048 Comm: syz.2.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.769861][T14048] Tainted: [L]=SOFTLOCKUP [ 223.769865][T14048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.769872][T14048] Call Trace: [ 223.769876][T14048] [ 223.769881][T14048] dump_stack_lvl+0x100/0x190 [ 223.769901][T14048] should_fail_ex.cold+0x5/0xa [ 223.769916][T14048] should_failslab+0xc2/0x120 [ 223.769931][T14048] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 223.769945][T14048] ? find_held_lock+0x2b/0x80 [ 223.769955][T14048] ? alloc_inode+0x183/0x250 [ 223.769972][T14048] alloc_inode+0x183/0x250 [ 223.769988][T14048] path_from_stashed+0x25b/0x750 [ 223.770001][T14048] ? do_raw_spin_unlock+0x145/0x1e0 [ 223.770018][T14048] ns_get_path+0x60/0x80 [ 223.770032][T14048] proc_ns_get_link+0x260/0x2e0 [ 223.770043][T14048] ? __pfx_proc_ns_get_link+0x10/0x10 [ 223.770058][T14048] pick_link+0xd17/0x13c0 [ 223.770075][T14048] ? __pfx_proc_ns_get_link+0x10/0x10 [ 223.770087][T14048] step_into_slowpath+0x9ba/0xf90 [ 223.770103][T14048] ? security_task_to_inode+0x7d/0x140 [ 223.770116][T14048] ? find_held_lock+0x2b/0x80 [ 223.770128][T14048] ? __pfx_step_into_slowpath+0x10/0x10 [ 223.770146][T14048] ? lookup_fast+0x2da/0x600 [ 223.770164][T14048] path_openat+0x13b5/0x4280 [ 223.770181][T14048] ? __pfx_path_openat+0x10/0x10 [ 223.770196][T14048] do_file_open+0x20e/0x430 [ 223.770209][T14048] ? __pfx_do_file_open+0x10/0x10 [ 223.770230][T14048] ? alloc_fd+0x471/0x7a0 [ 223.770242][T14048] ? do_getname+0x191/0x390 [ 223.770258][T14048] do_sys_openat2+0x10f/0x1e0 [ 223.770272][T14048] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.770286][T14048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.770301][T14048] ? __fget_files+0x21f/0x3d0 [ 223.770314][T14048] __x64_sys_openat+0x12d/0x210 [ 223.770328][T14048] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.770342][T14048] ? ksys_write+0x1ac/0x250 [ 223.770363][T14048] do_syscall_64+0x115/0x870 [ 223.770376][T14048] ? clear_bhb_loop+0x40/0x90 [ 223.770390][T14048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.770401][T14048] RIP: 0033:0x7f0783d5e84e [ 223.770411][T14048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.770422][T14048] RSP: 002b:00007f0784ba0f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.770433][T14048] RAX: ffffffffffffffda RBX: 00007f0784ba16c0 RCX: 00007f0783d5e84e [ 223.770440][T14048] RDX: 0000000000000000 RSI: 00007f0783e34747 RDI: ffffffffffffff9c [ 223.770447][T14048] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 223.770454][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.770460][T14048] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 223.770474][T14048] [ 223.941187][T14059] FAULT_INJECTION: forcing a failure. [ 223.941187][T14059] name failslab, interval 1, probability 0, space 0, times 0 [ 223.945405][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.2.2961 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.945423][T14059] Tainted: [L]=SOFTLOCKUP [ 223.945428][T14059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.945434][T14059] Call Trace: [ 223.945439][T14059] [ 223.945443][T14059] dump_stack_lvl+0x100/0x190 [ 223.945464][T14059] should_fail_ex.cold+0x5/0xa [ 223.945483][T14059] should_failslab+0xc2/0x120 [ 223.945499][T14059] __kmalloc_cache_noprof+0x91/0x6c0 [ 223.945517][T14059] ? rtnl_newlink+0x126/0x2380 [ 223.945534][T14059] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.945548][T14059] rtnl_newlink+0x126/0x2380 [ 223.945567][T14059] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.945580][T14059] ? find_held_lock+0x2b/0x80 [ 223.945591][T14059] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 223.945605][T14059] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 223.945619][T14059] ? avc_has_perm_noaudit+0x145/0x3b0 [ 223.945635][T14059] ? __lock_acquire+0x49f/0x1a40 [ 223.945655][T14059] ? find_held_lock+0x2b/0x80 [ 223.945664][T14059] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 223.945678][T14059] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 223.945693][T14059] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.945707][T14059] rtnetlink_rcv_msg+0x95e/0xe90 [ 223.945723][T14059] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.945740][T14059] ? ref_tracker_free+0x37e/0x6c0 [ 223.945758][T14059] netlink_rcv_skb+0x159/0x420 [ 223.945770][T14059] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.945785][T14059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.945800][T14059] ? netlink_deliver_tap+0x1ae/0xcc0 [ 223.945820][T14059] netlink_unicast+0x585/0x850 [ 223.945833][T14059] ? __pfx_netlink_unicast+0x10/0x10 [ 223.945843][T14059] ? __pfx_sock_has_perm+0x10/0x10 [ 223.945860][T14059] netlink_sendmsg+0x8b0/0xda0 [ 223.945873][T14059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.945885][T14059] ? selinux_socket_sendmsg+0x198/0x2f0 [ 223.945903][T14059] ____sys_sendmsg+0xa4d/0xbe0 [ 223.945920][T14059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.945931][T14059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.945953][T14059] ___sys_sendmsg+0x190/0x1e0 [ 223.945972][T14059] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.945989][T14059] ? __lock_acquire+0x49f/0x1a40 [ 223.946002][T14059] ? get_pid_task+0x106/0x250 [ 223.946026][T14059] __sys_sendmsg+0x160/0x210 [ 223.946040][T14059] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.946060][T14059] do_syscall_64+0x115/0x870 [ 223.946074][T14059] ? clear_bhb_loop+0x40/0x90 [ 223.946089][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.946100][T14059] RIP: 0033:0x7f0783d9e019 [ 223.946110][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.946121][T14059] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.946132][T14059] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 223.946139][T14059] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 223.946159][T14059] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 223.946166][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.946172][T14059] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 223.946186][T14059] [ 224.056393][T14057] FAULT_INJECTION: forcing a failure. [ 224.056393][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 224.070637][T14057] CPU: 3 UID: 0 PID: 14057 Comm: syz.0.2960 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.070663][T14057] Tainted: [L]=SOFTLOCKUP [ 224.070669][T14057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.070678][T14057] Call Trace: [ 224.070683][T14057] [ 224.070690][T14057] dump_stack_lvl+0x100/0x190 [ 224.070718][T14057] should_fail_ex.cold+0x5/0xa [ 224.070733][T14057] should_failslab+0xc2/0x120 [ 224.070749][T14057] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 224.070763][T14057] ? __alloc_skb+0x5b7/0x710 [ 224.070776][T14057] ? __alloc_skb+0x140/0x710 [ 224.070790][T14057] __alloc_skb+0x140/0x710 [ 224.070801][T14057] ? __alloc_skb+0x5b7/0x710 [ 224.070813][T14057] ? __pfx___alloc_skb+0x10/0x10 [ 224.070829][T14057] netlink_ack+0x117/0xb80 [ 224.070844][T14057] netlink_rcv_skb+0x333/0x420 [ 224.070855][T14057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.070871][T14057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.070886][T14057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 224.070906][T14057] netlink_unicast+0x585/0x850 [ 224.070918][T14057] ? __pfx_netlink_unicast+0x10/0x10 [ 224.070933][T14057] netlink_sendmsg+0x8b0/0xda0 [ 224.070945][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.070957][T14057] ? selinux_socket_sendmsg+0x198/0x2f0 [ 224.070976][T14057] ____sys_sendmsg+0xa4d/0xbe0 [ 224.070992][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.071003][T14057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.071025][T14057] ___sys_sendmsg+0x190/0x1e0 [ 224.071043][T14057] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.071058][T14057] ? __lock_acquire+0x49f/0x1a40 [ 224.071072][T14057] ? get_pid_task+0x106/0x250 [ 224.071096][T14057] __sys_sendmsg+0x160/0x210 [ 224.071110][T14057] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.071130][T14057] do_syscall_64+0x115/0x870 [ 224.071143][T14057] ? clear_bhb_loop+0x40/0x90 [ 224.071156][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.071168][T14057] RIP: 0033:0x7f95fa19e019 [ 224.071177][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.071188][T14057] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.071200][T14057] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 224.071207][T14057] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 224.071213][T14057] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 224.071219][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.071226][T14057] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 224.071239][T14057] [ 224.115090][T14068] netlink: 'syz.4.2964': attribute type 4 has an invalid length. [ 224.148207][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'. [ 224.191806][T14067] vcan0 speed is unknown, defaulting to 1000 [ 224.396809][ T42] audit: type=1400 audit(1785511773.089:1063): avc: denied { accept } for pid=14087 comm="syz.1.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.420684][T14092] x_tables: duplicate underflow at hook 2 [ 224.495049][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2977'. [ 224.498703][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2977'. [ 224.550619][T14102] geneve0: entered promiscuous mode [ 224.551141][T14100] xt_connbytes: Forcing CT accounting to be enabled [ 224.638568][T14108] bond3 (unregistering): Released all slaves [ 224.798034][ T5743] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 225.068158][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 225.369195][T14142] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 225.604712][T14153] FAULT_INJECTION: forcing a failure. [ 225.604712][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 225.609842][T14153] CPU: 3 UID: 0 PID: 14153 Comm: syz.2.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.609863][T14153] Tainted: [L]=SOFTLOCKUP [ 225.609867][T14153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.609875][T14153] Call Trace: [ 225.609879][T14153] [ 225.609884][T14153] dump_stack_lvl+0x100/0x190 [ 225.609905][T14153] should_fail_ex.cold+0x5/0xa [ 225.609920][T14153] should_failslab+0xc2/0x120 [ 225.609936][T14153] __kmalloc_cache_noprof+0x91/0x6c0 [ 225.609955][T14153] ? ppp_register_net_channel+0x52/0x680 [ 225.609971][T14153] ppp_register_net_channel+0x52/0x680 [ 225.609983][T14153] pppol2tp_connect+0x11ca/0x1c20 [ 225.610013][T14153] ? __pfx_pppol2tp_connect+0x10/0x10 [ 225.610024][T14153] ? __pfx_find_held_lock+0x10/0x10 [ 225.610044][T14153] ? __local_bh_enable_ip+0x9e/0x120 [ 225.610061][T14153] ? selinux_netlbl_socket_connect+0x30/0x40 [ 225.610080][T14153] ? selinux_socket_connect+0x6b/0x80 [ 225.610097][T14153] ? __pfx_pppol2tp_connect+0x10/0x10 [ 225.610108][T14153] __sys_connect_file+0x141/0x1a0 [ 225.610129][T14153] __sys_connect+0x141/0x170 [ 225.610140][T14153] ? __pfx___sys_connect+0x10/0x10 [ 225.610151][T14153] ? __fget_files+0x21f/0x3d0 [ 225.610167][T14153] ? __pfx_ksys_write+0x10/0x10 [ 225.610188][T14153] __x64_sys_connect+0x72/0xb0 [ 225.610199][T14153] ? lockdep_hardirqs_on+0x78/0x100 [ 225.610213][T14153] do_syscall_64+0x115/0x870 [ 225.610225][T14153] ? clear_bhb_loop+0x40/0x90 [ 225.610239][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.610250][T14153] RIP: 0033:0x7f0783d9e019 [ 225.610260][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.610271][T14153] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.610284][T14153] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 225.610291][T14153] RDX: 0000000000000032 RSI: 0000200000000300 RDI: 0000000000000006 [ 225.610297][T14153] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 225.610304][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.610310][T14153] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 225.610324][T14153] [ 225.737661][T14158] vcan0 speed is unknown, defaulting to 1000 [ 225.842940][T14162] FAULT_INJECTION: forcing a failure. [ 225.842940][T14162] name failslab, interval 1, probability 0, space 0, times 0 [ 225.850408][T14162] CPU: 0 UID: 0 PID: 14162 Comm: syz.0.2995 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.850429][T14162] Tainted: [L]=SOFTLOCKUP [ 225.850433][T14162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.850440][T14162] Call Trace: [ 225.850444][T14162] [ 225.850450][T14162] dump_stack_lvl+0x100/0x190 [ 225.850470][T14162] should_fail_ex.cold+0x5/0xa [ 225.850486][T14162] should_failslab+0xc2/0x120 [ 225.850502][T14162] __kmalloc_cache_noprof+0x91/0x6c0 [ 225.850522][T14162] ? sctp_add_bind_addr+0xae/0x3e0 [ 225.850565][T14162] sctp_add_bind_addr+0xae/0x3e0 [ 225.850591][T14162] sctp_copy_local_addr_list+0x349/0x550 [ 225.850611][T14162] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 225.850629][T14162] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 225.850647][T14162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.850664][T14162] sctp_bind_addr_copy+0xe0/0x530 [ 225.850682][T14162] sctp_connect_new_asoc+0x1c9/0x770 [ 225.850694][T14162] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.850707][T14162] ? selinux_sctp_bind_connect+0xe0/0x230 [ 225.850728][T14162] sctp_sendmsg+0x1743/0x22e0 [ 225.850743][T14162] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.850753][T14162] ? sock_has_perm+0x25a/0x2f0 [ 225.850768][T14162] ? __pfx_sock_has_perm+0x10/0x10 [ 225.850793][T14162] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.850804][T14162] inet_sendmsg+0x11c/0x140 [ 225.850830][T14162] ____sys_sendmsg+0x9c9/0xbe0 [ 225.850847][T14162] ? __pfx_inet_sendmsg+0x10/0x10 [ 225.850877][T14162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.850901][T14162] ___sys_sendmsg+0x190/0x1e0 [ 225.850921][T14162] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.850937][T14162] ? __lock_acquire+0x49f/0x1a40 [ 225.850952][T14162] ? get_pid_task+0x106/0x250 [ 225.850979][T14162] __sys_sendmsg+0x160/0x210 [ 225.850994][T14162] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.851015][T14162] do_syscall_64+0x115/0x870 [ 225.851028][T14162] ? clear_bhb_loop+0x40/0x90 [ 225.851041][T14162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.851053][T14162] RIP: 0033:0x7f95fa19e019 [ 225.851063][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.851074][T14162] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.851086][T14162] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 225.851093][T14162] RDX: 000000002400c041 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.851099][T14162] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.851106][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.851112][T14162] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 225.851126][T14162] [ 226.059928][T14169] Mount JFS Failure: -5 [ 226.122714][T14166] loop5: detected capacity change from 0 to 2640 [ 226.144803][T14166] buffer_io_error: 10 callbacks suppressed [ 226.144827][T14166] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 226.156304][T14166] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 226.159436][T14166] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 226.159776][T14176] comedi comedi3: aio_iiro_16: I/O base address not correctly aligned [ 226.162565][T14166] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 226.168666][T14166] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 226.171203][T14166] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 226.174484][T14166] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 226.178242][T14166] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 226.182097][T14166] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 226.185674][T14166] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 226.300023][ T42] audit: type=1800 audit(1785511774.989:1064): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3000" name="file0" dev="overlay" ino=679 res=0 errno=0 [ 226.314648][T14182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 226.318610][T14182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.323045][T14182] IPv6: NLM_F_CREATE should be set when creating new route [ 226.325938][T14182] IPv6: NLM_F_CREATE should be set when creating new route [ 226.499709][T14191] vcan0 speed is unknown, defaulting to 1000 [ 226.792850][ T42] audit: type=1400 audit(1785511775.489:1065): avc: denied { getopt } for pid=14204 comm="syz.0.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.875611][T14208] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.166356][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 227.174292][T14221] xfrm1: entered promiscuous mode [ 227.175986][T14221] xfrm1: entered allmulticast mode [ 227.181757][T14221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.769920][T14238] gadgetfs: bound to dummy_udc driver [ 229.040394][T14170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.122011][ T42] audit: type=1400 audit(1785511777.819:1066): avc: denied { write } for pid=14249 comm="syz.0.3023" name="functions" dev="configfs" ino=18831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.139654][T14257] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 229.162096][T14251] sctp: [Deprecated]: syz.0.3023 (pid 14251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.162096][T14251] Use struct sctp_sack_info instead [ 229.173392][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3028'. [ 229.375964][T14284] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 229.399944][T14284] bond3: entered promiscuous mode [ 229.402044][T14284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.406273][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 229.431562][T14284] veth5: entered allmulticast mode [ 229.437822][T14284] bond3: (slave veth5): making interface the new active one [ 229.440615][T14284] veth5: entered promiscuous mode [ 229.443074][T14284] bond3: (slave veth5): Enslaving as an active interface with an up link [ 229.448640][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 229.452422][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 229.566244][T14296] vcan0 speed is unknown, defaulting to 1000 [ 229.817832][T14313] kvm: pic: single mode not supported [ 229.819975][T14313] kvm: pic: level sensitive irq not supported [ 229.828118][ T42] audit: type=1400 audit(1785511778.519:1067): avc: denied { read } for pid=14312 comm="syz.1.3042" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 229.953263][T14323] FAULT_INJECTION: forcing a failure. [ 229.953263][T14323] name failslab, interval 1, probability 0, space 0, times 0 [ 229.954466][T14322] vcan0 speed is unknown, defaulting to 1000 [ 229.957489][T14323] CPU: 2 UID: 0 PID: 14323 Comm: syz.1.3045 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.957507][T14323] Tainted: [L]=SOFTLOCKUP [ 229.957511][T14323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.957525][T14323] Call Trace: [ 229.957530][T14323] [ 229.957538][T14323] dump_stack_lvl+0x100/0x190 [ 229.957607][T14323] should_fail_ex.cold+0x5/0xa [ 229.957638][T14323] should_failslab+0xc2/0x120 [ 229.957670][T14323] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 229.957690][T14323] ? alloc_vmap_area+0x182f/0x2bb0 [ 229.957707][T14323] alloc_vmap_area+0x182f/0x2bb0 [ 229.957725][T14323] ? kasan_save_track+0x14/0x30 [ 229.957738][T14323] ? __kasan_kmalloc+0xaa/0xb0 [ 229.957750][T14323] ? __pfx_alloc_vmap_area+0x10/0x10 [ 229.957765][T14323] ? __get_vm_area_node+0x101/0x330 [ 229.957781][T14323] __get_vm_area_node+0x1ca/0x330 [ 229.957799][T14323] __vmalloc_node_range_noprof+0x228/0x1630 [ 229.957815][T14323] ? vhost_task_create+0x1db/0x370 [ 229.957840][T14323] ? rcu_is_watching+0x12/0xc0 [ 229.957866][T14323] ? vhost_task_create+0x1db/0x370 [ 229.957881][T14323] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 229.957906][T14323] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.957937][T14323] ? trace_kmem_cache_alloc+0xdd/0x100 [ 229.957957][T14323] ? vhost_task_create+0x1db/0x370 [ 229.957968][T14323] __vmalloc_node_noprof+0xad/0xf0 [ 229.957984][T14323] ? vhost_task_create+0x1db/0x370 [ 229.957998][T14323] copy_process+0x7fb/0x8030 [ 229.958028][T14323] ? __pfx_copy_process+0x10/0x10 [ 229.958045][T14323] ? __kasan_kmalloc+0xaa/0xb0 [ 229.958058][T14323] ? lockdep_init_map_type+0x5c/0x250 [ 229.958079][T14323] ? lockdep_init_map_type+0x5c/0x250 [ 229.958093][T14323] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 229.958114][T14323] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 229.958140][T14323] vhost_task_create+0x1db/0x370 [ 229.958163][T14323] ? __pfx_vhost_task_create+0x10/0x10 [ 229.958179][T14323] ? __pfx_vhost_task_fn+0x10/0x10 [ 229.958193][T14323] ? __pfx___mutex_lock+0x10/0x10 [ 229.958241][T14323] ? kasan_quarantine_put+0x104/0x240 [ 229.958256][T14323] kvm_mmu_post_init_vm+0x1b3/0x360 [ 229.958273][T14323] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 229.958290][T14323] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 229.958312][T14323] kvm_vcpu_ioctl+0x730/0x1700 [ 229.958325][T14323] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.958337][T14323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.958358][T14323] ? do_vfs_ioctl+0x226/0x13e0 [ 229.958378][T14323] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.958394][T14323] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.958435][T14323] ? __fget_files+0x215/0x3d0 [ 229.958446][T14323] ? hook_file_ioctl_common+0x140/0x440 [ 229.958462][T14323] ? selinux_file_ioctl+0x13b/0x290 [ 229.958478][T14323] ? selinux_file_ioctl+0xb6/0x290 [ 229.958495][T14323] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.958507][T14323] __x64_sys_ioctl+0x18e/0x210 [ 229.958524][T14323] do_syscall_64+0x115/0x870 [ 229.958541][T14323] ? clear_bhb_loop+0x40/0x90 [ 229.958555][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.958566][T14323] RIP: 0033:0x7f53e259e019 [ 229.958576][T14323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.958587][T14323] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.958605][T14323] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 229.958612][T14323] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 229.958618][T14323] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.958624][T14323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.958631][T14323] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 229.958645][T14323] [ 230.237656][ T2331] libceph: connect (2)127.0.0.1:6789 error -101 [ 230.240244][ T2331] libceph: ceph_tcp_connect failed: -101 [ 230.242030][ T2331] libceph: mon0 (2)127.0.0.1:6789 connect error [ 230.328396][T14338] FAULT_INJECTION: forcing a failure. [ 230.328396][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 230.338313][T14338] CPU: 2 UID: 0 PID: 14338 Comm: syz.0.3048 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.338333][T14338] Tainted: [L]=SOFTLOCKUP [ 230.338337][T14338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.338344][T14338] Call Trace: [ 230.338348][T14338] [ 230.338353][T14338] dump_stack_lvl+0x100/0x190 [ 230.338373][T14338] should_fail_ex.cold+0x5/0xa [ 230.338389][T14338] should_failslab+0xc2/0x120 [ 230.338404][T14338] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 230.338419][T14338] ? proc_alloc_inode+0x25/0x200 [ 230.338433][T14338] ? __pfx_proc_alloc_inode+0x10/0x10 [ 230.338446][T14338] proc_alloc_inode+0x25/0x200 [ 230.338457][T14338] alloc_inode+0x68/0x250 [ 230.338472][T14338] new_inode+0x22/0x1c0 [ 230.338488][T14338] proc_pid_make_inode+0x22/0x160 [ 230.338500][T14338] proc_pident_instantiate+0x85/0x310 [ 230.338514][T14338] proc_pident_lookup+0x1e3/0x270 [ 230.338526][T14338] ? __pfx_down_read+0x10/0x10 [ 230.338543][T14338] __lookup_slow+0x155/0x320 [ 230.338560][T14338] lookup_slow+0x50/0x70 [ 230.338574][T14338] link_path_walk+0x1377/0x1cc0 [ 230.338596][T14338] path_openat+0x1c9/0x4280 [ 230.338607][T14338] ? __kasan_slab_alloc+0x89/0x90 [ 230.338620][T14338] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 230.338632][T14338] ? do_getname+0x35/0x390 [ 230.338645][T14338] ? __x64_sys_openat+0x12d/0x210 [ 230.338664][T14338] ? __pfx_path_openat+0x10/0x10 [ 230.338679][T14338] do_file_open+0x20e/0x430 [ 230.338691][T14338] ? __pfx_do_file_open+0x10/0x10 [ 230.338708][T14338] ? __pfx_kfree_link+0x10/0x10 [ 230.338728][T14338] ? alloc_fd+0x471/0x7a0 [ 230.338741][T14338] ? do_getname+0x191/0x390 [ 230.338756][T14338] do_sys_openat2+0x10f/0x1e0 [ 230.338770][T14338] ? __pfx_do_sys_openat2+0x10/0x10 [ 230.338784][T14338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.338798][T14338] ? __fget_files+0x21f/0x3d0 [ 230.338811][T14338] __x64_sys_openat+0x12d/0x210 [ 230.338825][T14338] ? __pfx___x64_sys_openat+0x10/0x10 [ 230.338838][T14338] ? ksys_write+0x1ac/0x250 [ 230.338859][T14338] do_syscall_64+0x115/0x870 [ 230.338872][T14338] ? clear_bhb_loop+0x40/0x90 [ 230.338885][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.338896][T14338] RIP: 0033:0x7f95fa15e84e [ 230.338906][T14338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.338917][T14338] RSP: 002b:00007f95fafbfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.338929][T14338] RAX: ffffffffffffffda RBX: 00007f95fafc06c0 RCX: 00007f95fa15e84e [ 230.338936][T14338] RDX: 0000000000000002 RSI: 00007f95fafbff90 RDI: ffffffffffffff9c [ 230.338942][T14338] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 230.338949][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.338959][T14338] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 230.338973][T14338] [ 230.519024][ T2331] libceph: connect (2)127.0.0.1:6789 error -101 [ 230.522752][ T2331] libceph: ceph_tcp_connect failed: -101 [ 230.525201][ T2331] libceph: mon0 (2)127.0.0.1:6789 connect error [ 231.002218][T14371] vcan0 speed is unknown, defaulting to 1000 [ 231.041665][ T2331] libceph: connect (2)127.0.0.1:6789 error -101 [ 231.048098][ T2331] libceph: ceph_tcp_connect failed: -101 [ 231.049678][T14331] ceph: No mds server is up or the cluster is laggy [ 231.049927][ T2331] libceph: mon0 (2)127.0.0.1:6789 connect error [ 231.359962][ T42] audit: type=1400 audit(1785511780.059:1068): avc: denied { name_bind } for pid=14388 comm="syz.0.3064" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 231.587409][ T42] audit: type=1400 audit(1785511780.279:1069): avc: denied { setopt } for pid=14402 comm="syz.4.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 231.604399][T14405] FAULT_INJECTION: forcing a failure. [ 231.604399][T14405] name failslab, interval 1, probability 0, space 0, times 0 [ 231.608423][T14405] CPU: 1 UID: 0 PID: 14405 Comm: syz.1.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.608441][T14405] Tainted: [L]=SOFTLOCKUP [ 231.608445][T14405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.608452][T14405] Call Trace: [ 231.608457][T14405] [ 231.608461][T14405] dump_stack_lvl+0x100/0x190 [ 231.608481][T14405] should_fail_ex.cold+0x5/0xa [ 231.608496][T14405] should_failslab+0xc2/0x120 [ 231.608511][T14405] __kmalloc_cache_noprof+0x91/0x6c0 [ 231.608531][T14405] ? alloc_fs_context+0x57/0xf40 [ 231.608548][T14405] alloc_fs_context+0x57/0xf40 [ 231.608565][T14405] path_mount+0xcf7/0x23d0 [ 231.608581][T14405] ? __pfx_path_mount+0x10/0x10 [ 231.608594][T14405] ? lockdep_hardirqs_on+0x78/0x100 [ 231.608609][T14405] ? putname+0xb1/0x110 [ 231.608622][T14405] ? kmem_cache_free+0x127/0x6b0 [ 231.608637][T14405] ? __x64_sys_mount+0x293/0x310 [ 231.608650][T14405] __x64_sys_mount+0x293/0x310 [ 231.608664][T14405] ? __pfx___x64_sys_mount+0x10/0x10 [ 231.608682][T14405] do_syscall_64+0x115/0x870 [ 231.608694][T14405] ? clear_bhb_loop+0x40/0x90 [ 231.608708][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.608720][T14405] RIP: 0033:0x7f53e259e019 [ 231.608730][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.608741][T14405] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.608752][T14405] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 231.608759][T14405] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 231.608766][T14405] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 231.608772][T14405] R10: 00000000028104b4 R11: 0000000000000246 R12: 0000000000000001 [ 231.608778][T14405] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 231.608792][T14405] [ 231.610320][T14407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29858 sclass=netlink_route_socket pid=14407 comm=syz.4.3072 [ 231.723143][T14410] sit0: entered promiscuous mode [ 231.726812][T14410] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 231.729490][T14410] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3073'. [ 231.794304][T14418] overlayfs: failed to clone upperpath [ 231.825287][ T42] audit: type=1400 audit(1785511780.519:1070): avc: denied { read } for pid=14419 comm="syz.4.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.949868][T14432] vcan0 speed is unknown, defaulting to 1000 [ 231.968327][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 232.082564][T14431] vcan0 speed is unknown, defaulting to 1000 [ 232.100028][ T5890] usb 6-1: device descriptor read/64, error -71 [ 232.274521][T14447] netlink: 'syz.2.3087': attribute type 1 has an invalid length. [ 232.276996][T14447] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3087'. [ 232.297103][ T42] audit: type=1400 audit(1785511780.989:1071): avc: denied { attach_queue } for pid=14446 comm="syz.2.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 232.304847][ T42] audit: type=1400 audit(1785511780.999:1072): avc: denied { getopt } for pid=14446 comm="syz.2.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 232.343863][ T5890] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 232.478161][ T5890] usb 6-1: device descriptor read/64, error -71 [ 232.591978][ T5890] usb usb6-port1: attempt power cycle [ 232.928052][ T5890] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 232.948572][ T5890] usb 6-1: device descriptor read/8, error -71 [ 233.131843][T14480] vcan0 speed is unknown, defaulting to 1000 [ 233.188067][ T5890] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 233.208687][ T5890] usb 6-1: device descriptor read/8, error -71 [ 233.263791][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 233.318289][ T5890] usb usb6-port1: unable to enumerate USB device [ 233.433432][T14493] FAULT_INJECTION: forcing a failure. [ 233.433432][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 233.437360][T14493] CPU: 2 UID: 0 PID: 14493 Comm: syz.2.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.437377][T14493] Tainted: [L]=SOFTLOCKUP [ 233.437381][T14493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.437392][T14493] Call Trace: [ 233.437397][T14493] [ 233.437402][T14493] dump_stack_lvl+0x100/0x190 [ 233.437422][T14493] should_fail_ex.cold+0x5/0xa [ 233.437438][T14493] should_failslab+0xc2/0x120 [ 233.437453][T14493] __kvmalloc_node_noprof+0x116/0x970 [ 233.437467][T14493] ? __lock_acquire+0x49f/0x1a40 [ 233.437481][T14493] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 233.437499][T14493] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 233.437516][T14493] mmu_topup_memory_caches+0x25/0x170 [ 233.437533][T14493] kvm_mmu_load+0xe2/0x2570 [ 233.437548][T14493] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 233.437559][T14493] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 233.437573][T14493] ? __pfx_kvm_mmu_load+0x10/0x10 [ 233.437587][T14493] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 233.437600][T14493] ? kvm_check_and_inject_events+0x873/0x12a0 [ 233.437615][T14493] ? record_steal_time+0x3a0/0xbb0 [ 233.437629][T14493] vcpu_run+0x3aaa/0x5de0 [ 233.437650][T14493] ? __pfx_vcpu_run+0x10/0x10 [ 233.437674][T14493] ? rcu_is_watching+0x12/0xc0 [ 233.437702][T14493] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.437724][T14493] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.437748][T14493] kvm_vcpu_ioctl+0x730/0x1700 [ 233.437761][T14493] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.437773][T14493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.437788][T14493] ? do_vfs_ioctl+0x226/0x13e0 [ 233.437804][T14493] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.437819][T14493] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.437842][T14493] ? __fget_files+0x215/0x3d0 [ 233.437853][T14493] ? hook_file_ioctl_common+0x140/0x440 [ 233.437869][T14493] ? selinux_file_ioctl+0x13b/0x290 [ 233.437885][T14493] ? selinux_file_ioctl+0xb6/0x290 [ 233.437905][T14493] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.437917][T14493] __x64_sys_ioctl+0x18e/0x210 [ 233.437950][T14493] do_syscall_64+0x115/0x870 [ 233.437968][T14493] ? clear_bhb_loop+0x40/0x90 [ 233.437988][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.438000][T14493] RIP: 0033:0x7f0783d9e019 [ 233.438011][T14493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.438022][T14493] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.438035][T14493] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 233.438046][T14493] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 233.438055][T14493] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.438066][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.438075][T14493] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 233.438090][T14493] [ 233.706249][T14504] FAULT_INJECTION: forcing a failure. [ 233.706249][T14504] name failslab, interval 1, probability 0, space 0, times 0 [ 233.711541][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.2.3104 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.711561][T14504] Tainted: [L]=SOFTLOCKUP [ 233.711566][T14504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.711574][T14504] Call Trace: [ 233.711579][T14504] [ 233.711583][T14504] dump_stack_lvl+0x100/0x190 [ 233.711604][T14504] should_fail_ex.cold+0x5/0xa [ 233.711620][T14504] should_failslab+0xc2/0x120 [ 233.711635][T14504] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 233.711651][T14504] ? __d_alloc+0x35/0xa50 [ 233.711666][T14504] __d_alloc+0x35/0xa50 [ 233.711680][T14504] d_alloc+0x4a/0x1e0 [ 233.711694][T14504] lookup_one_qstr_excl+0x171/0x250 [ 233.711710][T14504] start_dirop+0x59/0xb0 [ 233.711721][T14504] simple_start_creating+0xf9/0x110 [ 233.711732][T14504] ? __pfx_simple_start_creating+0x10/0x10 [ 233.711745][T14504] ? mntput+0x70/0xa0 [ 233.711755][T14504] ? simple_pin_fs+0xa3/0x190 [ 233.711766][T14504] debugfs_start_creating.part.0+0x82/0x170 [ 233.711798][T14504] __debugfs_create_file+0xb3/0x4f0 [ 233.711818][T14504] debugfs_create_file_full+0x41/0x60 [ 233.711838][T14504] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 233.711856][T14504] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 233.711885][T14504] ? lockdep_init_map_type+0x5c/0x250 [ 233.711903][T14504] ? __pfx_wg_setup+0x10/0x10 [ 233.711939][T14504] alloc_netdev_mqs+0x314/0x15c0 [ 233.711976][T14504] rtnl_create_link+0xc13/0xf80 [ 233.711997][T14504] rtnl_newlink+0x13bd/0x2380 [ 233.712017][T14504] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.712030][T14504] ? find_held_lock+0x2b/0x80 [ 233.712039][T14504] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.712052][T14504] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.712072][T14504] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.712103][T14504] ? find_held_lock+0x2b/0x80 [ 233.712116][T14504] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.712135][T14504] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.712155][T14504] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.712176][T14504] rtnetlink_rcv_msg+0x95e/0xe90 [ 233.712200][T14504] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.712227][T14504] ? ref_tracker_free+0x37e/0x6c0 [ 233.712280][T14504] netlink_rcv_skb+0x159/0x420 [ 233.712319][T14504] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.712342][T14504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.712361][T14504] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.712381][T14504] netlink_unicast+0x585/0x850 [ 233.712394][T14504] ? __pfx_netlink_unicast+0x10/0x10 [ 233.712409][T14504] netlink_sendmsg+0x8b0/0xda0 [ 233.712422][T14504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.712434][T14504] ? selinux_socket_sendmsg+0x198/0x2f0 [ 233.712453][T14504] ____sys_sendmsg+0xa4d/0xbe0 [ 233.712470][T14504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.712482][T14504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.712504][T14504] ___sys_sendmsg+0x190/0x1e0 [ 233.712522][T14504] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.712538][T14504] ? __lock_acquire+0x49f/0x1a40 [ 233.712551][T14504] ? get_pid_task+0x106/0x250 [ 233.712577][T14504] __sys_sendmsg+0x160/0x210 [ 233.712591][T14504] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.712612][T14504] do_syscall_64+0x115/0x870 [ 233.712626][T14504] ? clear_bhb_loop+0x40/0x90 [ 233.712639][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.712651][T14504] RIP: 0033:0x7f0783d9e019 [ 233.712661][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.712672][T14504] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.712684][T14504] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 233.712691][T14504] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 233.712698][T14504] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.712704][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.712710][T14504] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 233.712724][T14504] [ 233.934705][T14509] vcan0 speed is unknown, defaulting to 1000 [ 233.949372][T14512] netlink: 'syz.0.3107': attribute type 12 has an invalid length. [ 233.951887][T14512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3107'. [ 234.105431][T14524] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.105533][ T42] audit: type=1400 audit(1785511782.799:1073): avc: denied { listen } for pid=14521 comm="syz.0.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 234.115550][T14524] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 234.967098][T14531] FAULT_INJECTION: forcing a failure. [ 234.967098][T14531] name failslab, interval 1, probability 0, space 0, times 0 [ 234.973812][T14531] CPU: 1 UID: 0 PID: 14531 Comm: syz.2.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.973843][T14531] Tainted: [L]=SOFTLOCKUP [ 234.973850][T14531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.973861][T14531] Call Trace: [ 234.973868][T14531] [ 234.973876][T14531] dump_stack_lvl+0x100/0x190 [ 234.973909][T14531] should_fail_ex.cold+0x5/0xa [ 234.973934][T14531] should_failslab+0xc2/0x120 [ 234.973969][T14531] __kmalloc_cache_noprof+0x91/0x6c0 [ 234.974003][T14531] ? sctp_endpoint_new+0xfc/0xb20 [ 234.974058][T14531] sctp_endpoint_new+0xfc/0xb20 [ 234.974087][T14531] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 234.974112][T14531] ? sctp_v6_copy_ip_options+0x280/0x460 [ 234.974141][T14531] ? sctp_v6_copy_ip_options+0x280/0x460 [ 234.974171][T14531] ? lockdep_init_map_type+0x5c/0x250 [ 234.974200][T14531] sctp_clone_sock+0x45a/0x1970 [ 234.974247][T14531] ? sock_create_lite+0x48/0x120 [ 234.974275][T14531] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 234.974306][T14531] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 234.974341][T14531] sctp_getsockopt+0x2fb2/0x7110 [ 234.974366][T14531] ? find_held_lock+0x2b/0x80 [ 234.974382][T14531] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 234.974406][T14531] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 234.974430][T14531] ? __pfx_sctp_getsockopt+0x10/0x10 [ 234.974454][T14531] ? avc_has_perm_noaudit+0x145/0x3b0 [ 234.974475][T14531] ? __lock_acquire+0x49f/0x1a40 [ 234.974500][T14531] ? __pfx_avc_has_perm+0x10/0x10 [ 234.974528][T14531] ? find_held_lock+0x2b/0x80 [ 234.974545][T14531] ? __might_fault+0xc5/0x140 [ 234.974565][T14531] ? __might_fault+0xc5/0x140 [ 234.974589][T14531] ? _copy_from_user+0x59/0xd0 [ 234.974617][T14531] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 234.974646][T14531] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 234.974677][T14531] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 234.974706][T14531] do_sock_getsockopt+0x50a/0x6e0 [ 234.974732][T14531] ? __lock_acquire+0x49f/0x1a40 [ 234.974757][T14531] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 234.974784][T14531] ? rcu_read_lock_any_held+0x6a/0xa0 [ 234.974811][T14531] ? find_held_lock+0x2b/0x80 [ 234.974834][T14531] ? __fget_files+0x21f/0x3d0 [ 234.974859][T14531] __sys_getsockopt+0x148/0x260 [ 234.974904][T14531] ? __x64_sys_getsockopt+0xbd/0x160 [ 234.974927][T14531] __x64_sys_getsockopt+0xbd/0x160 [ 234.974948][T14531] ? do_syscall_64+0x90/0x870 [ 234.974977][T14531] ? lockdep_hardirqs_on+0x78/0x100 [ 234.974998][T14531] do_syscall_64+0x115/0x870 [ 234.975018][T14531] ? clear_bhb_loop+0x40/0x90 [ 234.975040][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.975059][T14531] RIP: 0033:0x7f0783d9e019 [ 234.975075][T14531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.975093][T14531] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 234.975112][T14531] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 234.975125][T14531] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 234.975136][T14531] RBP: 00007f0784ba1090 R08: 0000200000000040 R09: 0000000000000000 [ 234.975149][T14531] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 234.975159][T14531] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 234.975184][T14531] [ 235.121754][T14535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3114'. [ 235.124597][T14535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3114'. [ 235.193047][T14542] netlink: 'syz.4.3119': attribute type 7 has an invalid length. [ 235.213775][T14538] vcan0 speed is unknown, defaulting to 1000 [ 235.220012][T14545] netlink: 'syz.1.3118': attribute type 4 has an invalid length. [ 235.226070][T14545] netlink: 'syz.1.3118': attribute type 4 has an invalid length. [ 235.466959][T14569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.750106][T14691] vcan0 speed is unknown, defaulting to 1000 [ 235.808742][T14696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.902382][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 236.005417][T14771] FAULT_INJECTION: forcing a failure. [ 236.005417][T14771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.013123][T14771] CPU: 1 UID: 0 PID: 14771 Comm: syz.1.3143 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.013142][T14771] Tainted: [L]=SOFTLOCKUP [ 236.013147][T14771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.013153][T14771] Call Trace: [ 236.013157][T14771] [ 236.013162][T14771] dump_stack_lvl+0x100/0x190 [ 236.013182][T14771] should_fail_ex.cold+0x5/0xa [ 236.013197][T14771] _copy_from_user+0x2e/0xd0 [ 236.013213][T14771] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 236.013241][T14771] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 236.013256][T14771] ? __local_bh_enable_ip+0x9e/0x120 [ 236.013272][T14771] ? lockdep_hardirqs_on+0x78/0x100 [ 236.013288][T14771] do_ipv6_setsockopt+0x3018/0x44a0 [ 236.013303][T14771] ? avc_has_perm_noaudit+0x30/0x3b0 [ 236.013316][T14771] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 236.013331][T14771] ? avc_has_perm_noaudit+0x145/0x3b0 [ 236.013345][T14771] ? avc_has_perm+0x135/0x1e0 [ 236.013357][T14771] ? __pfx_avc_has_perm+0x10/0x10 [ 236.013385][T14771] ? get_pid_task+0x106/0x250 [ 236.013398][T14771] ? sock_has_perm+0x25a/0x2f0 [ 236.013416][T14771] ? __pfx_sock_has_perm+0x10/0x10 [ 236.013431][T14771] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 236.013449][T14771] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 236.013470][T14771] ? ipv6_setsockopt+0xcb/0x170 [ 236.013482][T14771] ipv6_setsockopt+0xcb/0x170 [ 236.013496][T14771] tcp_setsockopt+0xa7/0x100 [ 236.013521][T14771] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 236.013539][T14771] do_sock_setsockopt+0xf3/0x1d0 [ 236.013557][T14771] __sys_setsockopt+0x195/0x220 [ 236.013572][T14771] __x64_sys_setsockopt+0xbd/0x160 [ 236.013585][T14771] ? do_syscall_64+0x90/0x870 [ 236.013597][T14771] ? lockdep_hardirqs_on+0x78/0x100 [ 236.013609][T14771] do_syscall_64+0x115/0x870 [ 236.013621][T14771] ? clear_bhb_loop+0x40/0x90 [ 236.013634][T14771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.013645][T14771] RIP: 0033:0x7f53e259e019 [ 236.013655][T14771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.013666][T14771] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.013677][T14771] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 236.013684][T14771] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 236.013690][T14771] RBP: 00007f53e348c090 R08: 0000000000000014 R09: 0000000000000000 [ 236.013697][T14771] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 236.013703][T14771] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 236.013717][T14771] [ 236.100744][T14806] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 236.175923][T14806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.185509][T14806] bond4: (slave bond5): making interface the new active one [ 236.188829][T14806] bond4: (slave bond5): Enslaving as an active interface with an up link [ 236.228392][T14835] FAULT_INJECTION: forcing a failure. [ 236.228392][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 236.235787][T14835] CPU: 0 UID: 0 PID: 14835 Comm: syz.0.3145 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.235806][T14835] Tainted: [L]=SOFTLOCKUP [ 236.235810][T14835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.235817][T14835] Call Trace: [ 236.235822][T14835] [ 236.235826][T14835] dump_stack_lvl+0x100/0x190 [ 236.235847][T14835] should_fail_ex.cold+0x5/0xa [ 236.235862][T14835] should_failslab+0xc2/0x120 [ 236.235878][T14835] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 236.235892][T14835] ? alloc_vmap_area+0x182f/0x2bb0 [ 236.235909][T14835] alloc_vmap_area+0x182f/0x2bb0 [ 236.235927][T14835] ? kasan_save_track+0x14/0x30 [ 236.235939][T14835] ? __kasan_kmalloc+0xaa/0xb0 [ 236.235952][T14835] ? __pfx_alloc_vmap_area+0x10/0x10 [ 236.235966][T14835] ? __get_vm_area_node+0x101/0x330 [ 236.235982][T14835] __get_vm_area_node+0x1ca/0x330 [ 236.235999][T14835] __vmalloc_node_range_noprof+0x228/0x1630 [ 236.236015][T14835] ? vhost_task_create+0x1db/0x370 [ 236.236046][T14835] ? rcu_is_watching+0x12/0xc0 [ 236.236070][T14835] ? vhost_task_create+0x1db/0x370 [ 236.236084][T14835] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 236.236102][T14835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.236121][T14835] ? trace_kmem_cache_alloc+0xdd/0x100 [ 236.236138][T14835] ? vhost_task_create+0x1db/0x370 [ 236.236149][T14835] __vmalloc_node_noprof+0xad/0xf0 [ 236.236165][T14835] ? vhost_task_create+0x1db/0x370 [ 236.236178][T14835] copy_process+0x7fb/0x8030 [ 236.236202][T14835] ? __pfx_copy_process+0x10/0x10 [ 236.236217][T14835] ? __kasan_kmalloc+0xaa/0xb0 [ 236.236252][T14835] ? lockdep_init_map_type+0x5c/0x250 [ 236.236267][T14835] ? lockdep_init_map_type+0x5c/0x250 [ 236.236282][T14835] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 236.236296][T14835] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 236.236315][T14835] vhost_task_create+0x1db/0x370 [ 236.236328][T14835] ? __pfx_vhost_task_create+0x10/0x10 [ 236.236345][T14835] ? __pfx_vhost_task_fn+0x10/0x10 [ 236.236358][T14835] ? __pfx___mutex_lock+0x10/0x10 [ 236.236373][T14835] ? kasan_quarantine_put+0x104/0x240 [ 236.236388][T14835] kvm_mmu_post_init_vm+0x1b3/0x360 [ 236.236410][T14835] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 236.236427][T14835] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 236.236442][T14835] kvm_vcpu_ioctl+0x730/0x1700 [ 236.236456][T14835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.236468][T14835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.236482][T14835] ? do_vfs_ioctl+0x226/0x13e0 [ 236.236498][T14835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.236514][T14835] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.236537][T14835] ? __fget_files+0x215/0x3d0 [ 236.236547][T14835] ? hook_file_ioctl_common+0x140/0x440 [ 236.236563][T14835] ? selinux_file_ioctl+0x13b/0x290 [ 236.236579][T14835] ? selinux_file_ioctl+0xb6/0x290 [ 236.236596][T14835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.236608][T14835] __x64_sys_ioctl+0x18e/0x210 [ 236.236625][T14835] do_syscall_64+0x115/0x870 [ 236.236638][T14835] ? clear_bhb_loop+0x40/0x90 [ 236.236651][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.236663][T14835] RIP: 0033:0x7f95fa19e019 [ 236.236674][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.236686][T14835] RSP: 002b:00007f95faf9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.236698][T14835] RAX: ffffffffffffffda RBX: 00007f95fa426090 RCX: 00007f95fa19e019 [ 236.236705][T14835] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 236.236711][T14835] RBP: 00007f95faf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.236718][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.236724][T14835] R13: 00007f95fa426128 R14: 00007f95fa426090 R15: 00007ffc0a9bb998 [ 236.236738][T14835] [ 236.239111][T14834] netlink: 'syz.1.3148': attribute type 4 has an invalid length. [ 236.383619][T14839] vcan0 speed is unknown, defaulting to 1000 [ 236.522309][T14845] bond2 (unregistering): Released all slaves [ 236.716195][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'. [ 236.779939][T14859] XFS (sr0): Invalid superblock magic number [ 237.024664][T14982] vcan0 speed is unknown, defaulting to 1000 [ 237.152289][T14999] fuse: Bad value for 'fd' [ 237.377037][T15018] FAULT_INJECTION: forcing a failure. [ 237.377037][T15018] name failslab, interval 1, probability 0, space 0, times 0 [ 237.383775][T15018] CPU: 1 UID: 0 PID: 15018 Comm: syz.1.3174 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.383795][T15018] Tainted: [L]=SOFTLOCKUP [ 237.383799][T15018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.383806][T15018] Call Trace: [ 237.383811][T15018] [ 237.383815][T15018] dump_stack_lvl+0x100/0x190 [ 237.383835][T15018] should_fail_ex.cold+0x5/0xa [ 237.383850][T15018] should_failslab+0xc2/0x120 [ 237.383865][T15018] __kmalloc_noprof+0xfc/0x820 [ 237.383878][T15018] ? rcu_is_watching+0x12/0xc0 [ 237.383895][T15018] ? tomoyo_realpath_from_path+0xb6/0x690 [ 237.383909][T15018] tomoyo_realpath_from_path+0xb6/0x690 [ 237.383923][T15018] tomoyo_mount_acl+0x1b6/0x8b0 [ 237.383939][T15018] ? is_bpf_text_address+0x8a/0x1a0 [ 237.383969][T15018] ? bpf_ksym_find+0x128/0x1c0 [ 237.383985][T15018] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 237.384000][T15018] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 237.384015][T15018] ? kernel_text_address+0x8d/0x100 [ 237.384029][T15018] ? unwind_get_return_address+0x59/0xa0 [ 237.384060][T15018] ? tomoyo_domain+0xb2/0x150 [ 237.384071][T15018] ? tomoyo_profile+0x47/0x60 [ 237.384085][T15018] tomoyo_mount_permission+0x214/0x460 [ 237.384101][T15018] ? tomoyo_mount_permission+0x1f6/0x460 [ 237.384118][T15018] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 237.384142][T15018] security_sb_mount+0xdd/0x270 [ 237.384160][T15018] path_mount+0x158/0x23d0 [ 237.384177][T15018] ? __pfx_path_mount+0x10/0x10 [ 237.384189][T15018] ? lockdep_hardirqs_on+0x78/0x100 [ 237.384206][T15018] ? putname+0xb1/0x110 [ 237.384242][T15018] ? kmem_cache_free+0x127/0x6b0 [ 237.384258][T15018] ? __x64_sys_mount+0x293/0x310 [ 237.384271][T15018] __x64_sys_mount+0x293/0x310 [ 237.384285][T15018] ? __pfx___x64_sys_mount+0x10/0x10 [ 237.384303][T15018] do_syscall_64+0x115/0x870 [ 237.384315][T15018] ? clear_bhb_loop+0x40/0x90 [ 237.384329][T15018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.384340][T15018] RIP: 0033:0x7f53e259e019 [ 237.384351][T15018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.384363][T15018] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.384375][T15018] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 237.384382][T15018] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 237.384390][T15018] RBP: 00007f53e348c090 R08: 0000200000000400 R09: 0000000000000000 [ 237.384397][T15018] R10: 0000000001004014 R11: 0000000000000246 R12: 0000000000000001 [ 237.384403][T15018] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 237.384417][T15018] [ 237.384422][T15018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.543011][T15028] vcan0 speed is unknown, defaulting to 1000 [ 237.839527][T15142] FAULT_INJECTION: forcing a failure. [ 237.839527][T15142] name failslab, interval 1, probability 0, space 0, times 0 [ 237.845074][T15142] CPU: 3 UID: 0 PID: 15142 Comm: syz.1.3184 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.845103][T15142] Tainted: [L]=SOFTLOCKUP [ 237.845111][T15142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.845130][T15142] Call Trace: [ 237.845151][T15142] [ 237.845159][T15142] dump_stack_lvl+0x100/0x190 [ 237.845260][T15142] should_fail_ex.cold+0x5/0xa [ 237.845316][T15142] should_failslab+0xc2/0x120 [ 237.845363][T15142] kmem_cache_alloc_noprof+0x91/0x6a0 [ 237.845392][T15142] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 237.845455][T15142] ? skb_clone+0x190/0x400 [ 237.845495][T15142] skb_clone+0x190/0x400 [ 237.845518][T15142] ip6_finish_output2+0x1559/0x1ce0 [ 237.845551][T15142] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 237.845583][T15142] __ip6_finish_output+0x357/0xdf0 [ 237.845610][T15142] ip6_output+0x2aa/0xa60 [ 237.845634][T15142] ? __pfx_ip6_output+0x10/0x10 [ 237.845659][T15142] ? __pfx_ip6_finish_output+0x10/0x10 [ 237.845681][T15142] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 237.845729][T15142] ip6_mr_output+0x233/0x1180 [ 237.845761][T15142] ? __pfx_ip6_mr_output+0x10/0x10 [ 237.845784][T15142] ? __ip6_local_out+0x4f4/0xaf0 [ 237.845808][T15142] ? __ip6_local_out+0x4f4/0xaf0 [ 237.845846][T15142] ? __pfx_dst_output+0x10/0x10 [ 237.845871][T15142] ? __pfx_ip6_mr_output+0x10/0x10 [ 237.845904][T15142] ? ip6_local_out+0x1ad/0x1f0 [ 237.845926][T15142] ip6_local_out+0x1ad/0x1f0 [ 237.845953][T15142] ip6_send_skb+0x112/0x430 [ 237.845980][T15142] ip6_push_pending_frames+0x3b/0x50 [ 237.846004][T15142] icmpv6_push_pending_frames+0x2c1/0x450 [ 237.846031][T15142] ping_v6_sendmsg+0x116c/0x1600 [ 237.846054][T15142] ? look_up_lock_class+0x64/0x120 [ 237.846120][T15142] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 237.846150][T15142] ? reacquire_held_locks+0xce/0x1e0 [ 237.846193][T15142] ? release_sock+0x21/0x280 [ 237.846221][T15142] ? inet_autobind+0x145/0x1a0 [ 237.846252][T15142] ? lockdep_hardirqs_on+0x78/0x100 [ 237.846270][T15142] ? inet_autobind+0x145/0x1a0 [ 237.846286][T15142] ? __local_bh_enable_ip+0x9e/0x120 [ 237.846316][T15142] ? inet_autobind+0x14a/0x1a0 [ 237.846334][T15142] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 237.846359][T15142] inet_sendmsg+0x11c/0x140 [ 237.846385][T15142] ____sys_sendmsg+0x9c9/0xbe0 [ 237.846413][T15142] ? __pfx_inet_sendmsg+0x10/0x10 [ 237.846438][T15142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.846476][T15142] ___sys_sendmsg+0x190/0x1e0 [ 237.846504][T15142] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.846532][T15142] ? __lock_acquire+0x49f/0x1a40 [ 237.846555][T15142] ? get_pid_task+0x106/0x250 [ 237.846602][T15142] __sys_sendmsg+0x160/0x210 [ 237.846623][T15142] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.846652][T15142] do_syscall_64+0x115/0x870 [ 237.846669][T15142] ? clear_bhb_loop+0x40/0x90 [ 237.846687][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.846702][T15142] RIP: 0033:0x7f53e259e019 [ 237.846720][T15142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.846734][T15142] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.846760][T15142] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 237.846769][T15142] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 237.846777][T15142] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.846786][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.846794][T15142] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 237.846816][T15142] [ 238.063670][ T42] audit: type=1400 audit(1785511786.759:1074): avc: denied { watch } for pid=15143 comm="syz.1.3185" path="/161/file0" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.072974][ T42] audit: type=1400 audit(1785511786.769:1075): avc: denied { watch_reads } for pid=15143 comm="syz.1.3185" path="/161" dev="tmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 238.083888][ T42] audit: type=1400 audit(1785511786.769:1076): avc: denied { setattr } for pid=15143 comm="syz.1.3185" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.132699][ T42] audit: type=1326 audit(1785511786.829:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.1.3187" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53e259e019 code=0x0 [ 238.232768][T15156] netlink: 'syz.1.3189': attribute type 11 has an invalid length. [ 238.235245][T15156] FAULT_INJECTION: forcing a failure. [ 238.235245][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 238.241177][T15156] CPU: 3 UID: 0 PID: 15156 Comm: syz.1.3189 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.241195][T15156] Tainted: [L]=SOFTLOCKUP [ 238.241199][T15156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.241213][T15156] Call Trace: [ 238.241221][T15156] [ 238.241226][T15156] dump_stack_lvl+0x100/0x190 [ 238.241300][T15156] should_fail_ex.cold+0x5/0xa [ 238.241345][T15156] should_failslab+0xc2/0x120 [ 238.241384][T15156] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 238.241411][T15156] ? __alloc_skb+0x140/0x710 [ 238.241457][T15156] __alloc_skb+0x140/0x710 [ 238.241468][T15156] ? __alloc_skb+0x5b7/0x710 [ 238.241480][T15156] ? __pfx___alloc_skb+0x10/0x10 [ 238.241492][T15156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.241564][T15156] nl80211_new_interface+0x46a/0x1130 [ 238.241610][T15156] ? __pfx_nl80211_new_interface+0x10/0x10 [ 238.241625][T15156] ? __nla_parse+0x40/0x60 [ 238.241655][T15156] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 238.241668][T15156] ? nl80211_pre_doit+0x19a/0xae0 [ 238.241682][T15156] genl_family_rcv_msg_doit+0x214/0x300 [ 238.241710][T15156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.241727][T15156] ? bpf_lsm_capable+0x9/0x10 [ 238.241747][T15156] ? security_capable+0x80/0x260 [ 238.241767][T15156] ? ns_capable+0xd2/0xf0 [ 238.241792][T15156] genl_rcv_msg+0x560/0x800 [ 238.241806][T15156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.241854][T15156] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 238.241874][T15156] ? __pfx_nl80211_new_interface+0x10/0x10 [ 238.241906][T15156] ? __pfx_nl80211_post_doit+0x10/0x10 [ 238.241921][T15156] ? ref_tracker_free+0x72/0x6c0 [ 238.241936][T15156] ? ref_tracker_free+0x8f/0x6c0 [ 238.241954][T15156] netlink_rcv_skb+0x159/0x420 [ 238.241965][T15156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.241991][T15156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.242002][T15156] ? rcu_is_watching+0x12/0xc0 [ 238.242030][T15156] ? __rcu_read_unlock+0x26a/0x5e0 [ 238.242044][T15156] ? rcu_is_watching+0x12/0xc0 [ 238.242063][T15156] genl_rcv+0x28/0x40 [ 238.242074][T15156] netlink_unicast+0x585/0x850 [ 238.242087][T15156] ? __pfx_netlink_unicast+0x10/0x10 [ 238.242097][T15156] ? __pfx_sock_has_perm+0x10/0x10 [ 238.242119][T15156] netlink_sendmsg+0x8b0/0xda0 [ 238.242132][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.242144][T15156] ? selinux_socket_sendmsg+0x198/0x2f0 [ 238.242163][T15156] ____sys_sendmsg+0xa4d/0xbe0 [ 238.242179][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.242191][T15156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.242214][T15156] ___sys_sendmsg+0x190/0x1e0 [ 238.242232][T15156] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.242247][T15156] ? __lock_acquire+0x49f/0x1a40 [ 238.242266][T15156] ? get_pid_task+0x106/0x250 [ 238.242292][T15156] __sys_sendmsg+0x160/0x210 [ 238.242326][T15156] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.242348][T15156] do_syscall_64+0x115/0x870 [ 238.242375][T15156] ? clear_bhb_loop+0x40/0x90 [ 238.242389][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.242400][T15156] RIP: 0033:0x7f53e259e019 [ 238.242410][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.242422][T15156] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.242440][T15156] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 238.242447][T15156] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 238.242453][T15156] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.242459][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.242466][T15156] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 238.242480][T15156] [ 238.467686][T15166] FAULT_INJECTION: forcing a failure. [ 238.467686][T15166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.472534][T15166] CPU: 0 UID: 0 PID: 15166 Comm: syz.1.3194 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.472552][T15166] Tainted: [L]=SOFTLOCKUP [ 238.472561][T15166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.472568][T15166] Call Trace: [ 238.472572][T15166] [ 238.472577][T15166] dump_stack_lvl+0x100/0x190 [ 238.472596][T15166] should_fail_ex.cold+0x5/0xa [ 238.472611][T15166] _copy_from_user+0x2e/0xd0 [ 238.472627][T15166] copy_msghdr_from_user+0x9f/0x4c0 [ 238.472646][T15166] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 238.472669][T15166] ___sys_sendmsg+0x106/0x1e0 [ 238.472686][T15166] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.472702][T15166] ? __lock_acquire+0x49f/0x1a40 [ 238.472717][T15166] ? get_pid_task+0x106/0x250 [ 238.472741][T15166] __sys_sendmsg+0x160/0x210 [ 238.472755][T15166] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.472775][T15166] do_syscall_64+0x115/0x870 [ 238.472789][T15166] ? clear_bhb_loop+0x40/0x90 [ 238.472802][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.472814][T15166] RIP: 0033:0x7f53e259e019 [ 238.472823][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.472835][T15166] RSP: 002b:00007f53e348c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.472846][T15166] RAX: ffffffffffffffda RBX: 00007f53e2825fa0 RCX: 00007f53e259e019 [ 238.472853][T15166] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000005 [ 238.472860][T15166] RBP: 00007f53e348c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.472866][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.472873][T15166] R13: 00007f53e2826038 R14: 00007f53e2825fa0 R15: 00007ffea5d619c8 [ 238.472886][T15166] [ 238.579535][T15256] bond1: ARP target 9.0.0.0 is already present [ 238.581497][T15256] bond1: option arp_ip_target: invalid value (9) [ 238.590903][T15256] bond1 (unregistering): Released all slaves [ 238.601416][T15199] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 238.611981][T15199] xt_bpf: check failed: parse error [ 238.616102][ T42] audit: type=1400 audit(1785511787.309:1078): avc: denied { create } for pid=15189 comm="syz.2.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 238.759681][T15286] bond1 (unregistering): Released all slaves [ 238.857806][T15294] Mount JFS Failure: -5 [ 238.891901][T15300] syz_tun: entered allmulticast mode [ 238.984006][ T42] audit: type=1400 audit(1785511787.679:1079): avc: denied { map } for pid=15314 comm="syz.2.3210" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.996682][ T42] audit: type=1400 audit(1785511787.679:1080): avc: denied { execute } for pid=15314 comm="syz.2.3210" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 239.113450][T15330] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3217'. [ 239.116322][T15330] geneve0: left promiscuous mode [ 239.159146][ T42] audit: type=1400 audit(1785511787.859:1081): avc: denied { bind } for pid=15360 comm="syz.4.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.165407][ T42] audit: type=1400 audit(1785511787.859:1082): avc: denied { read } for pid=15360 comm="syz.4.3219" path="socket:[73986]" dev="sockfs" ino=73986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.169666][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 239.208761][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3221'. [ 239.214115][T15402] vcan0 speed is unknown, defaulting to 1000 [ 239.217167][ T42] audit: type=1400 audit(1785511787.909:1083): avc: denied { read } for pid=15438 comm="syz.2.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.333147][T15557] unsupported nla_type 4111 [ 239.413914][T15568] bridge_slave_1: default FDB implementation only supports local addresses [ 239.497848][T15584] FAULT_INJECTION: forcing a failure. [ 239.497848][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 239.502162][T15584] CPU: 3 UID: 0 PID: 15584 Comm: syz.2.3236 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.502181][T15584] Tainted: [L]=SOFTLOCKUP [ 239.502185][T15584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.502198][T15584] Call Trace: [ 239.502203][T15584] [ 239.502208][T15584] dump_stack_lvl+0x100/0x190 [ 239.502278][T15584] should_fail_ex.cold+0x5/0xa [ 239.502310][T15584] should_failslab+0xc2/0x120 [ 239.502341][T15584] kmem_cache_alloc_noprof+0x91/0x6a0 [ 239.502364][T15584] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 239.502387][T15584] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 239.502403][T15584] mmu_topup_memory_caches+0x25/0x170 [ 239.502426][T15584] kvm_mmu_load+0xe2/0x2570 [ 239.502441][T15584] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 239.502457][T15584] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 239.502470][T15584] ? __pfx_kvm_mmu_load+0x10/0x10 [ 239.502484][T15584] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 239.502498][T15584] ? kvm_check_and_inject_events+0x873/0x12a0 [ 239.502514][T15584] ? record_steal_time+0x3a0/0xbb0 [ 239.502528][T15584] vcpu_run+0x3aaa/0x5de0 [ 239.502549][T15584] ? __pfx_vcpu_run+0x10/0x10 [ 239.502569][T15584] ? rcu_is_watching+0x12/0xc0 [ 239.502601][T15584] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 239.502617][T15584] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 239.502637][T15584] kvm_vcpu_ioctl+0x730/0x1700 [ 239.502650][T15584] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.502663][T15584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.502684][T15584] ? do_vfs_ioctl+0x226/0x13e0 [ 239.502705][T15584] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 239.502721][T15584] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 239.502760][T15584] ? __fget_files+0x215/0x3d0 [ 239.502771][T15584] ? hook_file_ioctl_common+0x140/0x440 [ 239.502787][T15584] ? selinux_file_ioctl+0x13b/0x290 [ 239.502803][T15584] ? selinux_file_ioctl+0xb6/0x290 [ 239.502821][T15584] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.502833][T15584] __x64_sys_ioctl+0x18e/0x210 [ 239.502850][T15584] do_syscall_64+0x115/0x870 [ 239.502895][T15584] ? clear_bhb_loop+0x40/0x90 [ 239.502910][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.502921][T15584] RIP: 0033:0x7f0783d9e019 [ 239.502931][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.502942][T15584] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.502961][T15584] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 239.502968][T15584] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 239.502975][T15584] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 239.502981][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.502987][T15584] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 239.503006][T15584] [ 239.695982][T15599] FAULT_INJECTION: forcing a failure. [ 239.695982][T15599] name failslab, interval 1, probability 0, space 0, times 0 [ 239.700629][T15599] CPU: 2 UID: 0 PID: 15599 Comm: syz.2.3242 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.700647][T15599] Tainted: [L]=SOFTLOCKUP [ 239.700651][T15599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.700658][T15599] Call Trace: [ 239.700663][T15599] [ 239.700668][T15599] dump_stack_lvl+0x100/0x190 [ 239.700687][T15599] should_fail_ex.cold+0x5/0xa [ 239.700702][T15599] should_failslab+0xc2/0x120 [ 239.700717][T15599] kmem_cache_alloc_noprof+0x91/0x6a0 [ 239.700730][T15599] ? __pfx_map_id_range_down+0x10/0x10 [ 239.700744][T15599] ? rcu_is_watching+0x12/0xc0 [ 239.700760][T15599] ? security_inode_alloc+0x3b/0x2c0 [ 239.700787][T15599] security_inode_alloc+0x3b/0x2c0 [ 239.700803][T15599] inode_init_always_gfp+0xc77/0xfb0 [ 239.700818][T15599] alloc_inode+0x8e/0x250 [ 239.700834][T15599] new_inode+0x22/0x1c0 [ 239.700850][T15599] proc_pid_make_inode+0x22/0x160 [ 239.700863][T15599] proc_pident_instantiate+0x85/0x310 [ 239.700877][T15599] proc_pident_lookup+0x1e3/0x270 [ 239.700889][T15599] ? __pfx_down_read+0x10/0x10 [ 239.700906][T15599] __lookup_slow+0x155/0x320 [ 239.700929][T15599] lookup_slow+0x50/0x70 [ 239.700943][T15599] link_path_walk+0x1377/0x1cc0 [ 239.700964][T15599] path_openat+0x1c9/0x4280 [ 239.700975][T15599] ? __kasan_slab_alloc+0x89/0x90 [ 239.700989][T15599] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 239.701001][T15599] ? do_getname+0x35/0x390 [ 239.701014][T15599] ? __x64_sys_openat+0x12d/0x210 [ 239.701032][T15599] ? __pfx_path_openat+0x10/0x10 [ 239.701048][T15599] do_file_open+0x20e/0x430 [ 239.701060][T15599] ? __pfx_do_file_open+0x10/0x10 [ 239.701077][T15599] ? __pfx_kfree_link+0x10/0x10 [ 239.701097][T15599] ? alloc_fd+0x471/0x7a0 [ 239.701110][T15599] ? do_getname+0x191/0x390 [ 239.701139][T15599] do_sys_openat2+0x10f/0x1e0 [ 239.701153][T15599] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.701167][T15599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.701181][T15599] ? __fget_files+0x21f/0x3d0 [ 239.701194][T15599] __x64_sys_openat+0x12d/0x210 [ 239.701208][T15599] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.701221][T15599] ? ksys_write+0x1ac/0x250 [ 239.701242][T15599] do_syscall_64+0x115/0x870 [ 239.701254][T15599] ? clear_bhb_loop+0x40/0x90 [ 239.701268][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.701279][T15599] RIP: 0033:0x7f0783d5e84e [ 239.701289][T15599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.701300][T15599] RSP: 002b:00007f0784ba0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.701312][T15599] RAX: ffffffffffffffda RBX: 00007f0784ba16c0 RCX: 00007f0783d5e84e [ 239.701319][T15599] RDX: 0000000000000002 RSI: 00007f0784ba0f90 RDI: ffffffffffffff9c [ 239.701326][T15599] RBP: 00007f0784ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 239.701332][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.701338][T15599] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 239.701352][T15599] [ 239.855236][T15713] vcan0 speed is unknown, defaulting to 1000 [ 239.971174][T15701] vcan0 speed is unknown, defaulting to 1000 [ 240.285880][T15915] vcan0 speed is unknown, defaulting to 1000 [ 240.487242][T15931] xt_hashlimit: size too large, truncated to 1048576 [ 240.564087][T15936] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.585983][T15936] bridge_slave_0 (unregistering): left allmulticast mode [ 240.590640][T15936] bridge_slave_0 (unregistering): left promiscuous mode [ 240.602853][T15936] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.691795][T15940] vcan0 speed is unknown, defaulting to 1000 [ 240.910303][T16065] ceph: No mds server is up or the cluster is laggy [ 240.914109][T16067] vcan0 speed is unknown, defaulting to 1000 [ 241.120801][T16074] syzkaller0: entered promiscuous mode [ 241.123419][T16074] syzkaller0: entered allmulticast mode [ 241.158703][T16075] tipc: Started in network mode [ 241.160174][T16075] tipc: Node identity 26ac78418f97, cluster identity 4711 [ 241.162842][T16075] tipc: Enabled bearer , priority 0 [ 241.187266][T16072] tipc: Resetting bearer [ 241.202686][T16072] tipc: Disabling bearer [ 241.363619][T16088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3273'. [ 241.370462][T16088] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.409679][T16090] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.490753][T16099] vcan0 speed is unknown, defaulting to 1000 [ 241.574236][T16220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3286'. [ 241.626429][T16226] xt_hashlimit: size too large, truncated to 1048576 [ 241.680338][T16227] overlayfs: failed to resolve './cgroup': -2 [ 241.719003][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3290'. [ 241.756646][T16335] nftables ruleset with unbound chain [ 242.118837][ T5818] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.208059][ T5890] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 242.269671][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.273590][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 242.277826][ T5818] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 242.281484][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 242.284339][ T5818] usb 5-1: Product: syz [ 242.285726][ T5818] usb 5-1: Manufacturer: syz [ 242.294815][ T5818] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 242.304426][ T5818] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 242.358459][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 242.362358][ T5890] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 242.365892][ T5890] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 242.371460][ T5890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.375300][ T5890] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 242.380096][ T5890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 242.384366][ T5890] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.391212][ T5890] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.395036][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.407091][T16355] xt_hashlimit: size too large, truncated to 1048576 [ 242.438874][T16354] vcan0 speed is unknown, defaulting to 1000 [ 242.497861][T16345] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 3 is not a unsigned long [ 242.505313][ T848] usb 5-1: USB disconnect, device number 21 [ 242.517412][ T848] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 242.522724][ T848] iuu_phoenix 5-1:1.0: device disconnected [ 242.640087][ T5890] usb 7-1: GET_CAPABILITIES returned 0 [ 242.641818][ T5890] usbtmc 7-1:16.0: can't read capabilities [ 242.684305][T16367] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 242.845259][T16351] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 242.847834][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.850613][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.853331][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.856031][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.858731][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.861372][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.864043][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.866708][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 242.870131][T16351] usbtmc 7-1:16.0: Unable to send data, error -71 [ 242.882041][ T848] usb 7-1: USB disconnect, device number 16 [ 243.066539][T16399] hfsplus: unable to find HFS+ superblock [ 243.071870][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 243.071886][ T42] audit: type=1400 audit(1785511791.769:1094): avc: denied { accept } for pid=16398 comm="syz.0.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.136292][ T42] audit: type=1400 audit(1785511791.829:1095): avc: denied { getopt } for pid=16400 comm="syz.1.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.136417][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'. [ 243.468007][ T5818] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 243.493765][T16528] fuse: fd is not a fuse device [ 243.606553][T16536] ceph: No mds server is up or the cluster is laggy [ 243.618145][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 243.622403][ T5818] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 243.625032][ T5818] usb 5-1: config 0 has no interface number 0 [ 243.626970][ T5818] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.630518][ T5818] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.633547][ T5818] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 243.637295][ T5818] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 243.641074][ T5818] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.647409][ T5818] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 243.651262][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.653868][ T5818] usb 5-1: Product: syz [ 243.655798][ T5818] usb 5-1: Manufacturer: syz [ 243.659567][ T5818] usb 5-1: SerialNumber: syz [ 243.662447][ T5818] usb 5-1: config 0 descriptor?? [ 243.688255][T16549] bond6 (unregistering): Released all slaves [ 243.870340][ T5818] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 244.023064][T16577] cgroup: Unknown subsys name 'smackfsdef' [ 244.030358][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 244.142906][ T848] usb 5-1: USB disconnect, device number 22 [ 244.202090][ T42] audit: type=1400 audit(1785511792.899:1096): avc: denied { mount } for pid=16584 comm="syz.1.3347" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 244.561198][T16601] vcan0 speed is unknown, defaulting to 1000 [ 244.674056][T16607] netlink: 'syz.4.3354': attribute type 11 has an invalid length. [ 244.721755][T16613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=16613 comm=syz.4.3357 [ 244.728984][T16613] netlink: 750 bytes leftover after parsing attributes in process `syz.4.3357'. [ 244.732551][T16613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16613 comm=syz.4.3357 [ 244.736433][T16614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16614 comm=syz.4.3357 [ 244.911357][ T5890] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 245.038149][ T5890] usb 7-1: device descriptor read/64, error -71 [ 245.095521][T16741] FAULT_INJECTION: forcing a failure. [ 245.095521][T16741] name failslab, interval 1, probability 0, space 0, times 0 [ 245.099670][T16741] CPU: 0 UID: 0 PID: 16741 Comm: syz.0.3364 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.099688][T16741] Tainted: [L]=SOFTLOCKUP [ 245.099692][T16741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.099699][T16741] Call Trace: [ 245.099703][T16741] [ 245.099708][T16741] dump_stack_lvl+0x100/0x190 [ 245.099727][T16741] should_fail_ex.cold+0x5/0xa [ 245.099743][T16741] should_failslab+0xc2/0x120 [ 245.099758][T16741] __kmalloc_noprof+0xfc/0x820 [ 245.099770][T16741] ? kasan_save_track+0x14/0x30 [ 245.099783][T16741] ? ethnl_default_start+0x114/0x3f0 [ 245.099840][T16741] ethnl_default_start+0x114/0x3f0 [ 245.099858][T16741] ? __pfx_ethnl_default_start+0x10/0x10 [ 245.099875][T16741] genl_start+0x601/0x970 [ 245.099889][T16741] __netlink_dump_start+0x60e/0x990 [ 245.099910][T16741] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 245.099924][T16741] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 245.099940][T16741] ? __pfx_genl_get_cmd+0x10/0x10 [ 245.099951][T16741] ? __pfx_genl_start+0x10/0x10 [ 245.099962][T16741] ? __pfx_genl_dumpit+0x10/0x10 [ 245.099972][T16741] ? __pfx_genl_done+0x10/0x10 [ 245.099985][T16741] ? __dev_queue_xmit+0xa33/0x4970 [ 245.100007][T16741] ? __radix_tree_lookup+0x217/0x2b0 [ 245.100032][T16741] genl_rcv_msg+0x471/0x800 [ 245.100046][T16741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.100059][T16741] ? __pfx_ethnl_default_start+0x10/0x10 [ 245.100074][T16741] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 245.100090][T16741] ? __pfx_ethnl_default_done+0x10/0x10 [ 245.100111][T16741] netlink_rcv_skb+0x159/0x420 [ 245.100121][T16741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.100134][T16741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.100150][T16741] ? netlink_deliver_tap+0x1ae/0xcc0 [ 245.100169][T16741] genl_rcv+0x28/0x40 [ 245.100200][T16741] netlink_unicast+0x585/0x850 [ 245.100215][T16741] ? __pfx_netlink_unicast+0x10/0x10 [ 245.100230][T16741] netlink_sendmsg+0x8b0/0xda0 [ 245.100243][T16741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.100255][T16741] ? selinux_socket_sendmsg+0x198/0x2f0 [ 245.100274][T16741] ____sys_sendmsg+0xa4d/0xbe0 [ 245.100293][T16741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.100304][T16741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.100327][T16741] ___sys_sendmsg+0x190/0x1e0 [ 245.100345][T16741] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.100360][T16741] ? __lock_acquire+0x49f/0x1a40 [ 245.100382][T16741] ? get_pid_task+0x106/0x250 [ 245.100413][T16741] __sys_sendmsg+0x160/0x210 [ 245.100427][T16741] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.100448][T16741] do_syscall_64+0x115/0x870 [ 245.100460][T16741] ? clear_bhb_loop+0x40/0x90 [ 245.100474][T16741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.100485][T16741] RIP: 0033:0x7f95fa19e019 [ 245.100495][T16741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.100506][T16741] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.100518][T16741] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 245.100525][T16741] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.100536][T16741] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 245.100542][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.100548][T16741] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 245.100563][T16741] [ 245.288036][ T5890] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 245.288768][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3367'. [ 245.418547][ T5890] usb 7-1: device descriptor read/64, error -71 [ 245.441931][T16750] vcan0 speed is unknown, defaulting to 1000 [ 245.531924][ T5890] usb usb7-port1: attempt power cycle [ 245.898603][ T5890] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 245.918592][ T5890] usb 7-1: device descriptor read/8, error -71 [ 246.068485][T16967] team0 (unregistering): Port device team_slave_0 removed [ 246.074752][T16967] team0 (unregistering): Port device team_slave_1 removed [ 246.173862][T17075] netlink: 'syz.1.3376': attribute type 2 has an invalid length. [ 246.178033][ T5890] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 246.199344][ T5890] usb 7-1: device descriptor read/8, error -71 [ 246.308269][ T5890] usb usb7-port1: unable to enumerate USB device [ 246.401163][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3379'. [ 246.404044][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3379'. [ 246.672448][T17187] vcan0 speed is unknown, defaulting to 1000 [ 247.070249][ T42] audit: type=1400 audit(1785511795.769:1097): avc: denied { write } for pid=17231 comm="syz.4.3385" path="socket:[76957]" dev="sockfs" ino=76957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 247.174606][T17318] vcan0 speed is unknown, defaulting to 1000 [ 247.353059][T17427] vcan0 speed is unknown, defaulting to 1000 [ 247.658952][T17536] fuse: Unknown parameter 'f$<0x0000000000000006' [ 247.670222][ T42] audit: type=1400 audit(1785511796.369:1098): avc: denied { getopt } for pid=17535 comm="syz.1.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.749403][T17549] netlink: 'syz.2.3399': attribute type 2 has an invalid length. [ 247.752018][T17547] netlink: 'syz.2.3399': attribute type 2 has an invalid length. [ 247.767765][T17549] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 247.780370][T17546] vcan0 speed is unknown, defaulting to 1000 [ 247.921561][T17562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55880 sclass=netlink_route_socket pid=17562 comm=syz.2.3405 [ 248.179526][T17681] FAULT_INJECTION: forcing a failure. [ 248.179526][T17681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.183569][T17681] CPU: 0 UID: 0 PID: 17681 Comm: syz.0.3412 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.183587][T17681] Tainted: [L]=SOFTLOCKUP [ 248.183591][T17681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.183599][T17681] Call Trace: [ 248.183603][T17681] [ 248.183607][T17681] dump_stack_lvl+0x100/0x190 [ 248.183628][T17681] should_fail_ex.cold+0x5/0xa [ 248.183643][T17681] strncpy_from_user+0x3b/0x2d0 [ 248.183662][T17681] do_getname+0x78/0x390 [ 248.183678][T17681] user_path_at+0x26/0x60 [ 248.183689][T17681] __x64_sys_mount+0x1fb/0x310 [ 248.183703][T17681] ? __pfx___x64_sys_mount+0x10/0x10 [ 248.183721][T17681] do_syscall_64+0x115/0x870 [ 248.183735][T17681] ? clear_bhb_loop+0x40/0x90 [ 248.183749][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.183761][T17681] RIP: 0033:0x7f95fa19e019 [ 248.183770][T17681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.183782][T17681] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.183794][T17681] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 248.183801][T17681] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 0000000000000000 [ 248.183807][T17681] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 248.183814][T17681] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 248.183820][T17681] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 248.183834][T17681] [ 248.349926][T17689] vcan0 speed is unknown, defaulting to 1000 [ 248.353750][T17691] openvswitch: netlink: IP tunnel TTL not specified. [ 248.397303][T17779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.250715][T17913] netlink: 'syz.0.3425': attribute type 21 has an invalid length. [ 249.358320][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 249.362195][T17917] netlink: zone id is out of range [ 249.364212][T17917] netlink: del zone limit has 8 unknown bytes [ 249.412575][T17923] FAULT_INJECTION: forcing a failure. [ 249.412575][T17923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.416617][T17923] CPU: 3 UID: 0 PID: 17923 Comm: syz.0.3429 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.416634][T17923] Tainted: [L]=SOFTLOCKUP [ 249.416638][T17923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.416645][T17923] Call Trace: [ 249.416650][T17923] [ 249.416655][T17923] dump_stack_lvl+0x100/0x190 [ 249.416674][T17923] should_fail_ex.cold+0x5/0xa [ 249.416690][T17923] _copy_from_user+0x2e/0xd0 [ 249.416707][T17923] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 249.416731][T17923] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 249.416748][T17923] ? trace_kmalloc+0xeb/0x110 [ 249.416763][T17923] ? __kasan_kmalloc+0xaa/0xb0 [ 249.416777][T17923] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 249.416792][T17923] ? __kasan_slab_alloc+0x89/0x90 [ 249.416805][T17923] ? __alloc_skb+0x185/0x710 [ 249.416818][T17923] ip_generic_getfrag+0x172/0x270 [ 249.416843][T17923] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 249.416854][T17923] ? __asan_memset+0x23/0x50 [ 249.416866][T17923] ? __alloc_skb+0x4e9/0x710 [ 249.416876][T17923] ? __alloc_skb+0x5b7/0x710 [ 249.416889][T17923] raw6_getfrag+0x235/0x2a0 [ 249.416917][T17923] __ip6_append_data+0x387f/0x4bd0 [ 249.416941][T17923] ? __pfx_raw6_getfrag+0x10/0x10 [ 249.416963][T17923] ? __pfx___ip6_append_data+0x10/0x10 [ 249.416976][T17923] ? __pfx_ip6_mtu+0x10/0x10 [ 249.416987][T17923] ? ip6_setup_cork+0x5be/0x14c0 [ 249.417001][T17923] ip6_append_data+0x10b/0x410 [ 249.417015][T17923] ? __pfx_raw6_getfrag+0x10/0x10 [ 249.417033][T17923] rawv6_sendmsg+0x169c/0x4420 [ 249.417043][T17923] ? find_held_lock+0x2b/0x80 [ 249.417058][T17923] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 249.417078][T17923] ? __pfx_sock_has_perm+0x10/0x10 [ 249.417101][T17923] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 249.417113][T17923] ? inet_sendmsg+0x11c/0x140 [ 249.417132][T17923] inet_sendmsg+0x11c/0x140 [ 249.417146][T17923] sock_write_iter+0x4ea/0x5b0 [ 249.417162][T17923] ? __pfx_inet_sendmsg+0x10/0x10 [ 249.417176][T17923] ? __pfx_sock_write_iter+0x10/0x10 [ 249.417196][T17923] ? __pfx___file_has_perm+0x10/0x10 [ 249.417213][T17923] do_iter_readv_writev+0x6f7/0x930 [ 249.417231][T17923] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 249.417246][T17923] ? selinux_file_permission+0x8f/0x6d0 [ 249.417264][T17923] ? bpf_lsm_file_permission+0x9/0x10 [ 249.417294][T17923] ? security_file_permission+0x76/0x210 [ 249.417306][T17923] ? rw_verify_area+0xce/0x6d0 [ 249.417322][T17923] vfs_writev+0x360/0xdd0 [ 249.417341][T17923] ? __pfx_vfs_writev+0x10/0x10 [ 249.417358][T17923] ? rcu_read_lock_any_held+0x6a/0xa0 [ 249.417377][T17923] ? __fget_files+0x21f/0x3d0 [ 249.417392][T17923] ? do_writev+0x28a/0x340 [ 249.417407][T17923] do_writev+0x28a/0x340 [ 249.417423][T17923] ? __pfx_do_writev+0x10/0x10 [ 249.417442][T17923] do_syscall_64+0x115/0x870 [ 249.417457][T17923] ? clear_bhb_loop+0x40/0x90 [ 249.417474][T17923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.417486][T17923] RIP: 0033:0x7f95fa19e019 [ 249.417496][T17923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.417511][T17923] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 249.417527][T17923] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 249.417538][T17923] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 249.417547][T17923] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.417556][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.417565][T17923] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 249.417587][T17923] [ 249.658123][ T2331] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 249.808056][ T2331] usb 7-1: Using ep0 maxpacket: 32 [ 249.811527][ T2331] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.817026][ T2331] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.822959][ T2331] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 249.825864][ T2331] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 249.828868][ T2331] usb 7-1: Product: syz [ 249.830265][ T2331] usb 7-1: Manufacturer: syz [ 249.831801][ T2331] usb 7-1: SerialNumber: syz [ 249.840330][ T2331] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input18 [ 249.978241][T17943] FAULT_INJECTION: forcing a failure. [ 249.978241][T17943] name failslab, interval 1, probability 0, space 0, times 0 [ 249.984354][T17943] CPU: 3 UID: 0 PID: 17943 Comm: syz.0.3437 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.984374][T17943] Tainted: [L]=SOFTLOCKUP [ 249.984379][T17943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.984386][T17943] Call Trace: [ 249.984391][T17943] [ 249.984408][T17943] dump_stack_lvl+0x100/0x190 [ 249.984430][T17943] should_fail_ex.cold+0x5/0xa [ 249.984446][T17943] should_failslab+0xc2/0x120 [ 249.984461][T17943] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 249.984475][T17943] ? start_dirop+0x79/0xb0 [ 249.984488][T17943] ? alloc_inode+0x68/0x250 [ 249.984504][T17943] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 249.984523][T17943] alloc_inode+0x68/0x250 [ 249.984538][T17943] new_inode+0x22/0x1c0 [ 249.984554][T17943] __debugfs_create_file+0x105/0x4f0 [ 249.984574][T17943] debugfs_create_file_full+0x41/0x60 [ 249.984593][T17943] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 249.984610][T17943] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 249.984638][T17943] ? lockdep_init_map_type+0x5c/0x250 [ 249.984655][T17943] ? __pfx_wg_setup+0x10/0x10 [ 249.984693][T17943] alloc_netdev_mqs+0x314/0x15c0 [ 249.984711][T17943] rtnl_create_link+0xc13/0xf80 [ 249.984734][T17943] rtnl_newlink+0x13bd/0x2380 [ 249.984754][T17943] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.984767][T17943] ? find_held_lock+0x2b/0x80 [ 249.984776][T17943] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 249.984790][T17943] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 249.984805][T17943] ? avc_has_perm_noaudit+0x145/0x3b0 [ 249.984829][T17943] ? find_held_lock+0x2b/0x80 [ 249.984838][T17943] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 249.984864][T17943] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 249.984880][T17943] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.984895][T17943] rtnetlink_rcv_msg+0x95e/0xe90 [ 249.984910][T17943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.984932][T17943] ? ref_tracker_free+0x37e/0x6c0 [ 249.984950][T17943] netlink_rcv_skb+0x159/0x420 [ 249.984962][T17943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.984977][T17943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.984993][T17943] ? netlink_deliver_tap+0x1ae/0xcc0 [ 249.985012][T17943] netlink_unicast+0x585/0x850 [ 249.985025][T17943] ? __pfx_netlink_unicast+0x10/0x10 [ 249.985040][T17943] netlink_sendmsg+0x8b0/0xda0 [ 249.985053][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.985065][T17943] ? selinux_socket_sendmsg+0x198/0x2f0 [ 249.985084][T17943] ____sys_sendmsg+0xa4d/0xbe0 [ 249.985100][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.985112][T17943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.985135][T17943] ___sys_sendmsg+0x190/0x1e0 [ 249.985153][T17943] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.985168][T17943] ? __lock_acquire+0x49f/0x1a40 [ 249.985182][T17943] ? get_pid_task+0x106/0x250 [ 249.985207][T17943] __sys_sendmsg+0x160/0x210 [ 249.985221][T17943] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.985242][T17943] do_syscall_64+0x115/0x870 [ 249.985256][T17943] ? clear_bhb_loop+0x40/0x90 [ 249.985270][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.985281][T17943] RIP: 0033:0x7f95fa19e019 [ 249.985292][T17943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.985303][T17943] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.985315][T17943] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 249.985322][T17943] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 249.985328][T17943] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.985335][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.985341][T17943] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 249.985355][T17943] [ 249.985504][T17943] debugfs: out of free dentries, can not create file 'netdev@ffff888057528700' [ 250.142500][ T42] audit: type=1400 audit(1785511798.839:1099): avc: denied { write } for pid=17920 comm="syz.2.3428" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 250.146597][ T848] usb 7-1: USB disconnect, device number 21 [ 250.183228][T17953] »»»»»»: renamed from vlan0 (while UP) [ 250.196073][ T848] appletouch 7-1:1.0: input: appletouch disconnected [ 250.255254][T17962] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 250.262814][T17966] coredump: 639(syz.1.3443): Core dump to core aborted: cannot preserve file permissions [ 250.293952][T17962] JFS: discard option not supported on device [ 250.296623][T17962] Mount JFS Failure: -5 [ 250.648172][ T41] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 250.709074][T17996] vcan0 speed is unknown, defaulting to 1000 [ 250.713280][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3454'. [ 250.716280][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3454'. [ 250.719859][T18001] geneve0: entered promiscuous mode [ 250.751514][ T42] audit: type=1400 audit(1785511799.449:1100): avc: denied { unmount } for pid=13293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 250.775017][T18007] FAULT_INJECTION: forcing a failure. [ 250.775017][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 250.779434][T18007] CPU: 3 UID: 0 PID: 18007 Comm: syz.2.3456 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.779452][T18007] Tainted: [L]=SOFTLOCKUP [ 250.779456][T18007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.779463][T18007] Call Trace: [ 250.779468][T18007] [ 250.779473][T18007] dump_stack_lvl+0x100/0x190 [ 250.779492][T18007] should_fail_ex.cold+0x5/0xa [ 250.779513][T18007] should_failslab+0xc2/0x120 [ 250.779528][T18007] kmem_cache_alloc_noprof+0x91/0x6a0 [ 250.779543][T18007] ? dst_alloc+0x99/0x1a0 [ 250.779556][T18007] ? __pfx_ip6_dst_gc+0x10/0x10 [ 250.779575][T18007] dst_alloc+0x99/0x1a0 [ 250.779587][T18007] ip6_create_rt_rcu+0x293/0x5a0 [ 250.779600][T18007] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 250.779616][T18007] ip6_pol_route_lookup+0xc90/0x1fa0 [ 250.779631][T18007] ? stack_trace_save+0x8e/0xc0 [ 250.779646][T18007] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 250.779662][T18007] ? kasan_save_track+0x14/0x30 [ 250.779675][T18007] ? __kasan_kmalloc+0xaa/0xb0 [ 250.779686][T18007] ? __kmalloc_noprof+0x322/0x820 [ 250.779697][T18007] ? sock_kmalloc+0x111/0x170 [ 250.779712][T18007] ? ipv6_sock_ac_join+0x257/0x10d0 [ 250.779724][T18007] ? do_ipv6_setsockopt+0x3874/0x44a0 [ 250.779742][T18007] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 250.779755][T18007] fib6_rule_lookup+0x5fd/0x720 [ 250.779769][T18007] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 250.779789][T18007] rt6_lookup+0x175/0x230 [ 250.779806][T18007] ? __pfx_rt6_lookup+0x10/0x10 [ 250.779828][T18007] ipv6_sock_ac_join+0xa1b/0x10d0 [ 250.779842][T18007] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 250.779853][T18007] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 250.779868][T18007] ? __local_bh_enable_ip+0x9e/0x120 [ 250.779884][T18007] ? lockdep_hardirqs_on+0x78/0x100 [ 250.779900][T18007] do_ipv6_setsockopt+0x3874/0x44a0 [ 250.779915][T18007] ? avc_has_perm_noaudit+0x30/0x3b0 [ 250.779929][T18007] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 250.779943][T18007] ? avc_has_perm_noaudit+0x145/0x3b0 [ 250.779957][T18007] ? avc_has_perm+0x135/0x1e0 [ 250.779970][T18007] ? __pfx_avc_has_perm+0x10/0x10 [ 250.779983][T18007] ? get_pid_task+0x106/0x250 [ 250.779995][T18007] ? sock_has_perm+0x25a/0x2f0 [ 250.780009][T18007] ? __pfx_sock_has_perm+0x10/0x10 [ 250.780023][T18007] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 250.780042][T18007] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 250.780064][T18007] ? ipv6_setsockopt+0xcb/0x170 [ 250.780075][T18007] ipv6_setsockopt+0xcb/0x170 [ 250.780089][T18007] tcp_setsockopt+0xa7/0x100 [ 250.780106][T18007] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 250.780123][T18007] do_sock_setsockopt+0xf3/0x1d0 [ 250.780141][T18007] __sys_setsockopt+0x195/0x220 [ 250.780177][T18007] __x64_sys_setsockopt+0xbd/0x160 [ 250.780192][T18007] ? do_syscall_64+0x90/0x870 [ 250.780204][T18007] ? lockdep_hardirqs_on+0x78/0x100 [ 250.780216][T18007] do_syscall_64+0x115/0x870 [ 250.780227][T18007] ? clear_bhb_loop+0x40/0x90 [ 250.780241][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.780253][T18007] RIP: 0033:0x7f0783d9e019 [ 250.780262][T18007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.780273][T18007] RSP: 002b:00007f0784ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.780285][T18007] RAX: ffffffffffffffda RBX: 00007f0784025fa0 RCX: 00007f0783d9e019 [ 250.780292][T18007] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 250.780299][T18007] RBP: 00007f0784ba1090 R08: 0000000000000014 R09: 0000000000000000 [ 250.780305][T18007] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 250.780312][T18007] R13: 00007f0784026038 R14: 00007f0784025fa0 R15: 00007fffc82f2218 [ 250.780326][T18007] [ 250.838649][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 250.918952][ T41] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 250.921836][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.924296][ T41] usb 5-1: Product: syz [ 250.925626][ T41] usb 5-1: Manufacturer: syz [ 250.927098][ T41] usb 5-1: SerialNumber: syz [ 250.931871][ T41] usb 5-1: config 0 descriptor?? [ 250.947451][ T42] audit: type=1400 audit(1785511799.639:1101): avc: denied { connect } for pid=18018 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 250.962435][T18021] netlink: 'syz.2.3460': attribute type 4 has an invalid length. [ 251.023262][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 251.050147][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 251.059268][T18030] bond0: entered promiscuous mode [ 251.060980][T18030] bond_slave_0: entered promiscuous mode [ 251.063202][T18030] bond_slave_1: entered promiscuous mode [ 251.068979][T18030] gretap0: entered promiscuous mode [ 251.075738][T18030] hsr1: entered promiscuous mode [ 251.227751][T18039] vcan0 speed is unknown, defaulting to 1000 [ 251.364140][ T42] audit: type=1400 audit(1785511800.059:1102): avc: denied { create } for pid=18042 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 251.365085][ T41] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 251.377389][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.383450][ T41] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 251.390587][ T41] usb 5-1: media controller created [ 251.397852][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.444920][T18053] netlink: 'syz.4.3471': attribute type 32 has an invalid length. [ 251.454528][T18050] bond2 (unregistering): Released all slaves [ 251.564510][ T41] zl10353_read_register: readreg error (reg=127, ret==0) [ 251.572377][ T41] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 251.579914][ T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 251.634137][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'. [ 251.660315][T18066] hsr_slave_1 (unregistering): left promiscuous mode [ 251.697747][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3473'. [ 251.831547][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3478'. [ 251.893876][T18082] vcan0 speed is unknown, defaulting to 1000 [ 251.950870][ T848] usb 5-1: USB disconnect, device number 23 [ 251.989988][ T848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 252.040237][T18187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 252.087035][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 252.509220][T18227] netlink: 'syz.0.3496': attribute type 11 has an invalid length. [ 252.693065][T18242] cgroup: fork rejected by pids controller in /syz4 [ 252.810289][T18360] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 252.941152][T18465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3510'. [ 253.023870][T18472] vcan0 speed is unknown, defaulting to 1000 [ 253.153708][T18583] No such timeout policy "syz1" [ 253.432398][T18613] netlink: 'syz.1.3527': attribute type 5 has an invalid length. [ 253.449526][T18613] ip6erspan0: entered promiscuous mode [ 253.517498][T18622] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 253.569659][T18728] FAULT_INJECTION: forcing a failure. [ 253.569659][T18728] name failslab, interval 1, probability 0, space 0, times 0 [ 253.582500][T18728] CPU: 2 UID: 0 PID: 18728 Comm: syz.0.3533 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.582521][T18728] Tainted: [L]=SOFTLOCKUP [ 253.582525][T18728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.582532][T18728] Call Trace: [ 253.582537][T18728] [ 253.582542][T18728] dump_stack_lvl+0x100/0x190 [ 253.582562][T18728] should_fail_ex.cold+0x5/0xa [ 253.582579][T18728] should_failslab+0xc2/0x120 [ 253.582594][T18728] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 253.582608][T18728] ? d_alloc_parallel+0x9ed/0x14b0 [ 253.582625][T18728] ? proc_alloc_inode+0x25/0x200 [ 253.582637][T18728] ? __pfx_proc_alloc_inode+0x10/0x10 [ 253.582650][T18728] proc_alloc_inode+0x25/0x200 [ 253.582661][T18728] alloc_inode+0x68/0x250 [ 253.582676][T18728] new_inode+0x22/0x1c0 [ 253.582692][T18728] proc_get_inode+0x1d/0x780 [ 253.582705][T18728] proc_lookup_de+0x236/0x360 [ 253.582721][T18728] proc_tgid_net_lookup+0x61/0x90 [ 253.582735][T18728] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 253.582750][T18728] path_openat+0x241f/0x4280 [ 253.582768][T18728] ? __pfx_path_openat+0x10/0x10 [ 253.582783][T18728] do_file_open+0x20e/0x430 [ 253.582796][T18728] ? __pfx_do_file_open+0x10/0x10 [ 253.582812][T18728] ? __pfx_kfree_link+0x10/0x10 [ 253.582833][T18728] ? alloc_fd+0x471/0x7a0 [ 253.582846][T18728] ? do_getname+0x191/0x390 [ 253.582862][T18728] do_sys_openat2+0x10f/0x1e0 [ 253.582876][T18728] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.582891][T18728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.582906][T18728] ? __fget_files+0x21f/0x3d0 [ 253.582923][T18728] __x64_sys_openat+0x12d/0x210 [ 253.582937][T18728] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.582951][T18728] ? ksys_write+0x1ac/0x250 [ 253.582973][T18728] do_syscall_64+0x115/0x870 [ 253.582985][T18728] ? clear_bhb_loop+0x40/0x90 [ 253.583011][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.583023][T18728] RIP: 0033:0x7f95fa15e84e [ 253.583033][T18728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.583043][T18728] RSP: 002b:00007f95fafbfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.583055][T18728] RAX: ffffffffffffffda RBX: 00007f95fafc06c0 RCX: 00007f95fa15e84e [ 253.583062][T18728] RDX: 0000000000000002 RSI: 00007f95fafbff90 RDI: ffffffffffffff9c [ 253.583068][T18728] RBP: 00007f95fafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 253.583075][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.583081][T18728] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 253.583095][T18728] [ 253.597376][T18732] syzkaller1: entered promiscuous mode [ 253.687190][T18732] syzkaller1: entered allmulticast mode [ 253.697623][ T42] audit: type=1400 audit(1785511802.389:1103): avc: denied { write } for pid=18730 comm="syz.2.3534" name="functions" dev="configfs" ino=18831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.717584][ T42] audit: type=1400 audit(1785511802.399:1104): avc: denied { write } for pid=18730 comm="syz.2.3534" name="c.1" dev="configfs" ino=18837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.726983][ T42] audit: type=1400 audit(1785511802.399:1105): avc: denied { create } for pid=18730 comm="syz.2.3534" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 253.734925][ T42] audit: type=1400 audit(1785511802.399:1106): avc: denied { write } for pid=18730 comm="syz.2.3534" name="c.1" dev="configfs" ino=18837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.747526][ T42] audit: type=1400 audit(1785511802.439:1107): avc: denied { write } for pid=18843 comm="syz.0.3540" name="strings" dev="configfs" ino=18833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.749055][T18845] [ 253.754720][ T42] audit: type=1400 audit(1785511802.439:1108): avc: denied { write } for pid=18843 comm="syz.0.3540" name="strings" dev="configfs" ino=18833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.755349][T18845] ====================================================== [ 253.764857][T18845] WARNING: possible circular locking dependency detected [ 253.767015][T18845] syzkaller #0 Tainted: G L [ 253.769241][T18845] ------------------------------------------------------ [ 253.771540][T18845] syz.0.3540/18845 is trying to acquire lock: [ 253.773525][T18845] ffff88802de4d370 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3fa/0x950 [ 253.776312][T18845] [ 253.776312][T18845] but task is already holding lock: [ 253.778601][T18845] ffff88803953a740 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 253.781572][T18845] [ 253.781572][T18845] which lock already depends on the new lock. [ 253.781572][T18845] [ 253.784764][T18845] [ 253.784764][T18845] the existing dependency chain (in reverse order) is: [ 253.787536][T18845] [ 253.787536][T18845] -> #3 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 253.790248][T18845] lock_acquire+0x1b9/0x370 [ 253.791834][T18845] down_write+0x8b/0x1f0 [ 253.793347][T18845] configfs_depend_item_unlocked+0xf3/0x6a0 [ 253.795346][T18845] usbg_make_tpg+0x261/0x620 [ 253.796979][T18845] target_fabric_make_tpg+0xab/0x8c0 [ 253.798839][T18845] configfs_mkdir+0x51e/0xb70 [ 253.800485][T18845] vfs_mkdir+0x361/0x850 [ 253.801995][T18845] filename_mkdirat+0x48b/0x5e0 [ 253.803695][T18845] __x64_sys_mkdir+0x6b/0x90 [ 253.805416][T18845] do_syscall_64+0x115/0x870 [ 253.807048][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.809087][T18845] [ 253.809087][T18845] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 253.811485][T18845] lock_acquire+0x1b9/0x370 [ 253.813118][T18845] __mutex_lock+0x1a4/0x1bd0 [ 253.814734][T18845] tcm_set_name+0x29/0xb0 [ 253.816280][T18845] function_make+0x21c/0x3f0 [ 253.817916][T18845] configfs_mkdir+0x51e/0xb70 [ 253.819590][T18845] vfs_mkdir+0x361/0x850 [ 253.821113][T18845] filename_mkdirat+0x48b/0x5e0 [ 253.822797][T18845] __x64_sys_mkdir+0x6b/0x90 [ 253.824417][T18845] do_syscall_64+0x115/0x870 [ 253.826030][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.828043][T18845] [ 253.828043][T18845] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 253.830609][T18845] lock_acquire+0x1b9/0x370 [ 253.832203][T18845] __mutex_lock+0x1a4/0x1bd0 [ 253.833825][T18845] uvcg_default_processing_bm_controls_store+0xbd/0x430 [ 253.836178][T18845] configfs_write_iter+0x302/0x4e0 [ 253.837950][T18845] vfs_write+0x6ac/0x1050 [ 253.839496][T18845] ksys_write+0x12a/0x250 [ 253.841046][T18845] do_syscall_64+0x115/0x870 [ 253.842657][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.844664][T18845] [ 253.844664][T18845] -> #0 (&p->frag_sem){++++}-{4:4}: [ 253.846956][T18845] check_prev_add+0xeb/0xe60 [ 253.848595][T18845] __lock_acquire+0x136c/0x1a40 [ 253.850271][T18845] lock_acquire+0x1b9/0x370 [ 253.851887][T18845] down_write_killable+0x93/0x250 [ 253.854051][T18845] configfs_rmdir+0x3fa/0x950 [ 253.855685][T18845] vfs_rmdir+0x328/0x8a0 [ 253.857215][T18845] filename_rmdir+0x31a/0x5c0 [ 253.858896][T18845] __x64_sys_rmdir+0x46/0x70 [ 253.860523][T18845] do_syscall_64+0x115/0x870 [ 253.862124][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.864126][T18845] [ 253.864126][T18845] other info that might help us debug this: [ 253.864126][T18845] [ 253.867270][T18845] Chain exists of: [ 253.867270][T18845] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#28 [ 253.867270][T18845] [ 253.871499][T18845] Possible unsafe locking scenario: [ 253.871499][T18845] [ 253.873806][T18845] CPU0 CPU1 [ 253.875486][T18845] ---- ---- [ 253.877153][T18845] lock(&sb->s_type->i_mutex_key#28); [ 253.878887][T18845] lock(&opts->dep_lock); [ 253.881027][T18845] lock(&sb->s_type->i_mutex_key#28); [ 253.883490][T18845] lock(&p->frag_sem); [ 253.884807][T18845] [ 253.884807][T18845] *** DEADLOCK *** [ 253.884807][T18845] [ 253.887336][T18845] 3 locks held by syz.0.3540/18845: [ 253.888979][T18845] #0: ffff888023a8c450 (sb_writers#16){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 253.891885][T18845] #1: ffff888038b6e9c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 253.895368][T18845] #2: ffff88803953a740 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 253.898535][T18845] [ 253.898535][T18845] stack backtrace: [ 253.900396][T18845] CPU: 0 UID: 0 PID: 18845 Comm: syz.0.3540 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.900413][T18845] Tainted: [L]=SOFTLOCKUP [ 253.900417][T18845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.900425][T18845] Call Trace: [ 253.900430][T18845] [ 253.900435][T18845] dump_stack_lvl+0x100/0x190 [ 253.900451][T18845] print_circular_bug.cold+0x178/0x1c7 [ 253.900470][T18845] check_noncircular+0x146/0x160 [ 253.900485][T18845] check_prev_add+0xeb/0xe60 [ 253.900498][T18845] __lock_acquire+0x136c/0x1a40 [ 253.900513][T18845] lock_acquire+0x1b9/0x370 [ 253.900525][T18845] ? configfs_rmdir+0x3fa/0x950 [ 253.900539][T18845] ? __pfx___might_resched+0x10/0x10 [ 253.900564][T18845] down_write_killable+0x93/0x250 [ 253.900580][T18845] ? configfs_rmdir+0x3fa/0x950 [ 253.900593][T18845] ? __pfx_down_write_killable+0x10/0x10 [ 253.900607][T18845] ? configfs_rmdir+0x3be/0x950 [ 253.900621][T18845] configfs_rmdir+0x3fa/0x950 [ 253.900636][T18845] ? __pfx_configfs_rmdir+0x10/0x10 [ 253.900650][T18845] ? __pfx_down_write+0x10/0x10 [ 253.900664][T18845] vfs_rmdir+0x328/0x8a0 [ 253.900679][T18845] filename_rmdir+0x31a/0x5c0 [ 253.900691][T18845] ? __pfx_filename_rmdir+0x10/0x10 [ 253.900705][T18845] ? do_getname+0x191/0x390 [ 253.900718][T18845] __x64_sys_rmdir+0x46/0x70 [ 253.900730][T18845] do_syscall_64+0x115/0x870 [ 253.900742][T18845] ? clear_bhb_loop+0x40/0x90 [ 253.900754][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.900766][T18845] RIP: 0033:0x7f95fa19e019 [ 253.900776][T18845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.900787][T18845] RSP: 002b:00007f95fafc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 253.900799][T18845] RAX: ffffffffffffffda RBX: 00007f95fa425fa0 RCX: 00007f95fa19e019 [ 253.900806][T18845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 253.900813][T18845] RBP: 00007f95fa23500c R08: 0000000000000000 R09: 0000000000000000 [ 253.900819][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.900826][T18845] R13: 00007f95fa426038 R14: 00007f95fa425fa0 R15: 00007ffc0a9bb998 [ 253.900835][T18845] [ 254.508160][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 255.549263][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.628378][ T64] Bluetooth: hci3: command 0x0406 tx timeout