last executing test programs: 2m29.335761718s ago: executing program 3 (id=1313): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0x1c, 0x9, 0x8}, {0x0, 0x0, 0xfffffffe}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r8 = syz_open_dev$ublk_chdev(&(0x7f0000001b40), r7, 0x2) syz_ublk_setup_queues(r8, r6, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000800)=[{}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, &(0x7f0000000b00)=0x0) r10 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r10}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x1000005, 0x13, 0xffffffffffffffff, 0x8000000) syz_ublk_process_io(r9, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) 2m28.440393756s ago: executing program 3 (id=1325): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000240), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m28.366979718s ago: executing program 3 (id=1326): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000500)="303f28a0db6c3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a302d505245464552454e43453d6d4b785f61756469745f6c6f673d3000ff0755188b3f2c9230815b2e7b2fb4556a4e2fe5216e501ffb62b17606c08e121be3a228d036b606c9e04a594016d045758868a360217e3284a2d4a3437fb286e5484928f58e85a8342e40d0f47013d7cf88a815eb40f3f0b160b41f26f01050eea978e0011811aca8e5d5d65771166135406880d69833217f501b91956f4d7964d0945e27f5ff7b48d8c6a675c6447f1879e7ef699235d359812f186b2eef7e5ef9af77566787a8190a", 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f080002800100", 0x22) recvmmsg(r1, &(0x7f00000000c0), 0x1, 0x40002142, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r5, 0x0, r6, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$MEMGETOOBSEL(0xffffffffffffffff, 0x80c84d0a, 0x0) 2m26.771567618s ago: executing program 3 (id=1333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 2m26.569769118s ago: executing program 3 (id=1337): add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2m26.471709125s ago: executing program 3 (id=1338): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 2m19.800981632s ago: executing program 0 (id=1455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') 2m19.76518195s ago: executing program 0 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) 2m19.621745592s ago: executing program 0 (id=1457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x10, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x63}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x62, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) 2m19.481286354s ago: executing program 0 (id=1458): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x80045b09, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) 2m18.098676132s ago: executing program 0 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x922, 0x0) 2m18.031612977s ago: executing program 0 (id=1477): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, 0x0) 2m14.920712144s ago: executing program 2 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x58}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x2000808c) 2m14.918959674s ago: executing program 2 (id=1514): mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010006000000060002003039000006000300c0b4afde3400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e0800"], 0xbc}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 2m14.83143211s ago: executing program 2 (id=1515): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000000)) 2m14.629939917s ago: executing program 2 (id=1517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b805000000b91cb200000f01c1b8010000000f01d90f07470f01c4c482cd474f2066b823018ed8b92f0900000f32f30fa7d866b891008ed066b839018ec0", 0x3e}], 0xaaaaaaaaaaaaa22, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.441635056s ago: executing program 2 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0xff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x88602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) write(r0, &(0x7f0000000200)='2', 0x1) 2m14.091439203s ago: executing program 2 (id=1524): socket(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m11.406119985s ago: executing program 32 (id=1338): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 2m5.751182049s ago: executing program 1 (id=1577): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m5.737739563s ago: executing program 1 (id=1578): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m5.660264289s ago: executing program 1 (id=1579): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fab000/0x18000)=nil, &(0x7f0000001380)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 2m5.556316235s ago: executing program 1 (id=1581): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {&(0x7f0000001c00)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000700)=""/82, 0x52, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 2m5.489534707s ago: executing program 1 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2m5.404146023s ago: executing program 1 (id=1584): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x50) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x20000000) write(r5, &(0x7f0000000900)='0000:00:02.0', 0xc) close(r5) connect$inet6(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, 0x0, 0x4000000) 2m2.900159964s ago: executing program 33 (id=1477): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, 0x0) 1m58.888596592s ago: executing program 34 (id=1524): socket(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 1m50.353043063s ago: executing program 35 (id=1584): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x50) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c000280"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x20000000) write(r5, &(0x7f0000000900)='0000:00:02.0', 0xc) close(r5) connect$inet6(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, 0x0, 0x4000000) 27.848814153s ago: executing program 5 (id=3116): r0 = msgget(0x2, 0x1) msgget(0x2, 0x11) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/75) 27.848725203s ago: executing program 5 (id=3117): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) 27.848118936s ago: executing program 5 (id=3118): fsopen(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="2608a81bdd790b3d8fe7ca7249555faf05735d7d352d02663ff1f40d25ae98d81da5ebd52061c51f90ff68b5889159b8c216fe798f5f4a967474ae7d363bdf86fba4e52d5065b5fe42ac7fb6e08a2b552345e17030211019d6684b0a7ca9e675b739f72c129bc186dd898128ae117e07683c94a7904916c416fd41846424863c64fed6d5c11052f195e5c654d65da18820b590f170e7fcfd3713d87a0cf2aeb753c6a5e3e068f8", 0xa7, r2}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket(0x1, 0x803, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4c21, @multicast2}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @loopback}, 0x11a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 27.847903145s ago: executing program 5 (id=3119): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x18, '\x00', @st={0x4, [{0x0, @svalue=0x9}, {0x3, @svalue=0x7}, {0x0, @uvalue=0x44}, {0x0, @svalue=0xe}]}, 0xffffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x5, 0x3, 0x3e, 0xfffffff7, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0x3, 0x8, 0x3, 0x8000000000006, 0xffffffff, 0xffffffff00000001, 0x7}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r4, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xfffffffc, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x100004, 0x4, 0x4, 0x2000, 0x100, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = userfaultfd(0x801) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) syz_clone(0xc080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 27.847708843s ago: executing program 5 (id=3120): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1, 0xc03, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='source', &(0x7f0000000400)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x86\xf1\xcf|x\xb5\x03P0J\xd7\xbdR\x11\x86l\xbc\x0f\xcf\xc8\x1bIC\x0f\xca\xf3)\x8a\x1d\xe6\xe0I\x96\x8b\x9aY/\x9f\x11\xa32\xc4\xe6\xe5p\xb6\xa9\xca\x1bR:\xfb) 0\x17<\xf2\xa5?\xacy\xee(', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000004c0)=@urb_type_control={0x2, {0x8, 0x1}, 0x0, 0x40, &(0x7f0000000140)={0x0, 0xe, 0x9, 0x2, 0xd}, 0x8, 0x9, 0x9, 0x0, 0x6, 0x0, &(0x7f0000000400)="0625c3c0dbb1d7237f670bfb0eb63fd5790cb51ebf9db5c808765b28e3dbd0a2376fcb4db3391089608bec88f21d5a02e1dd062b63e88d323d5228a93906386ba083a1c73697c0f2809c3da6a8e185024f7d0d1890375d1d3282179006baf3b070045723374d9b5805a55d545a37d0e6aed643c7439bafb5b32b9a5915130a3da9566741010b0732e68e94830175609516e897dcd0670deb22d5"}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc000000110000012bbd7000fbdbdf2505000000100033800800a300", @ANYRES32=r0, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 27.847591542s ago: executing program 5 (id=3121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEA', 0x7, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 27.84752425s ago: executing program 36 (id=3121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEA', 0x7, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.170530989s ago: executing program 4 (id=3627): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff2d5, 0x6, 0xfff, 0xfffffff2, 0x6, "04001b00000000800000000000000002000007", 0x101, 0xfffffffe}) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0) 1.097341015s ago: executing program 4 (id=3629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58010}, 0x800) 1.020377359s ago: executing program 4 (id=3631): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x80, @buffer={0x0, 0xe2, &(0x7f0000000380)=""/226}, &(0x7f0000000040)="00060f000000", 0x0, 0x10001, 0x30520cf7f25f0c64, 0x0, 0x0}) 930.125ms ago: executing program 6 (id=3633): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) 780.945017ms ago: executing program 4 (id=3634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x44}}, 0x80) 780.748473ms ago: executing program 6 (id=3635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000090000000900010073797a3000000000140002800600010000020000050002000600000008000f00001bce290000002c0004800800010000000001200002800c000100706f6c69637930f508000200000000020800030000", 0x68}], 0x1}, 0x0) 780.491536ms ago: executing program 4 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 720.971019ms ago: executing program 6 (id=3638): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) 720.741446ms ago: executing program 6 (id=3640): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e21, @rand_addr=0xdffefc13}}) 720.657376ms ago: executing program 4 (id=3641): r0 = io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8001002, 0x3d6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000480)='nu', 0x2, 0x8000, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x700, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 660.310774ms ago: executing program 6 (id=3645): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fgetxattr(0xffffffffffffffff, &(0x7f0000000f40)=@known='security.selinux\x00', 0x0, 0x0) 570.014451ms ago: executing program 6 (id=3647): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x3, 0x3d77}, &(0x7f00000000c0)=0x8) 441.075056ms ago: executing program 8 (id=3653): openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioprio_set$uid(0x3, 0xee01, 0x4007) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 440.723872ms ago: executing program 8 (id=3655): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 360.575256ms ago: executing program 8 (id=3657): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @loopback}}]}, 0x110) 360.339544ms ago: executing program 8 (id=3659): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) 290.347256ms ago: executing program 7 (id=3660): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0xffffffffffffffff, 0x70bd29, 0x0, {0x27, 0x3, 0x0, 0x1, {0x4e22, 0x4e22, [0x10000, 0x180], [0x0, 0x0, 0x20000000], 0x0, [0x5, 0x3]}, 0x81, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 290.190955ms ago: executing program 8 (id=3661): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 290.093952ms ago: executing program 7 (id=3662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 210.841616ms ago: executing program 8 (id=3663): syz_usb_connect$hid(0xf467dc96e532133b, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xe1}}}}}]}}]}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 61.090225ms ago: executing program 7 (id=3664): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 60.888315ms ago: executing program 7 (id=3665): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002102, 0x0) 145.13µs ago: executing program 7 (id=3666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a000000021000100040000000000000000000000000000000000000000000001ff02000000000000000000000000000100000003000000000a0008a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e00000010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001ffffffff0000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 7 (id=3667): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3668): ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) r0 = io_uring_setup(0x1195, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0xb0090199) kernel console output (not intermixed with test programs): 20535][T13928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.229056][T13934] bond2: (slave veth0_to_bond): Releasing backup interface [ 249.241118][T13934] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 249.348914][T13941] FAULT_INJECTION: forcing a failure. [ 249.348914][T13941] name failslab, interval 1, probability 0, space 0, times 0 [ 249.364329][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.7.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.364352][T13941] Tainted: [L]=SOFTLOCKUP [ 249.364355][T13941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.364362][T13941] Call Trace: [ 249.364367][T13941] [ 249.364371][T13941] dump_stack_lvl+0x100/0x190 [ 249.364393][T13941] should_fail_ex.cold+0x5/0xa [ 249.364410][T13941] should_failslab+0xc2/0x120 [ 249.364428][T13941] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 249.364445][T13941] ? __css_rstat_updated+0x1ce/0x590 [ 249.364457][T13941] ? __get_vm_area_node+0x124/0x350 [ 249.364477][T13941] __get_vm_area_node+0x124/0x350 [ 249.364498][T13941] __vmalloc_node_range_noprof+0x262/0x1460 [ 249.364515][T13941] ? vhost_task_create+0x1db/0x370 [ 249.364539][T13941] ? find_held_lock+0x2b/0x80 [ 249.364560][T13941] ? rcu_read_unlock+0x17/0x60 [ 249.364577][T13941] ? vhost_task_create+0x1db/0x370 [ 249.364595][T13941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.364608][T13941] ? trace_kmem_cache_alloc+0xdd/0x100 [ 249.364628][T13941] ? vhost_task_create+0x1db/0x370 [ 249.364642][T13941] __vmalloc_node_noprof+0xad/0xf0 [ 249.364653][T13941] ? vhost_task_create+0x1db/0x370 [ 249.364669][T13941] copy_process+0x803/0x8370 [ 249.364698][T13941] ? __pfx_copy_process+0x10/0x10 [ 249.364716][T13941] ? __kasan_kmalloc+0xaa/0xb0 [ 249.364733][T13941] ? lockdep_init_map_type+0x5c/0x250 [ 249.364750][T13941] ? lockdep_init_map_type+0x5c/0x250 [ 249.364768][T13941] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 249.364785][T13941] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 249.364807][T13941] vhost_task_create+0x1db/0x370 [ 249.364822][T13941] ? __pfx_vhost_task_create+0x10/0x10 [ 249.364841][T13941] ? __pfx_vhost_task_fn+0x10/0x10 [ 249.364858][T13941] ? __pfx___mutex_lock+0x10/0x10 [ 249.364870][T13941] ? kasan_quarantine_put+0x104/0x240 [ 249.364888][T13941] kvm_mmu_post_init_vm+0x1b3/0x360 [ 249.364901][T13941] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 249.364912][T13941] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 249.364929][T13941] kvm_vcpu_ioctl+0x730/0x1700 [ 249.364945][T13941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 249.364959][T13941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.364977][T13941] ? do_vfs_ioctl+0x226/0x13e0 [ 249.364992][T13941] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.365005][T13941] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 249.365024][T13941] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.365050][T13941] ? selinux_file_ioctl+0x13b/0x290 [ 249.365065][T13941] ? selinux_file_ioctl+0xb6/0x290 [ 249.365081][T13941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 249.365096][T13941] __x64_sys_ioctl+0x18e/0x210 [ 249.365111][T13941] do_syscall_64+0x123/0x790 [ 249.365124][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.365136][T13941] RIP: 0033:0x7ff7f679e0d9 [ 249.365147][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.365157][T13941] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.365173][T13941] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 249.365180][T13941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 249.365186][T13941] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 249.365193][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.365199][T13941] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 249.365213][T13941] [ 249.365220][T13941] syz.7.2851: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 249.394913][T13953] __nla_validate_parse: 4 callbacks suppressed [ 249.394929][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 249.395365][T13941] ,cpuset= [ 249.426212][ T42] kauditd_printk_skb: 322 callbacks suppressed [ 249.426224][ T42] audit: type=1400 audit(249.356:3617): avc: denied { unmount } for pid=10057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 249.428737][T13941] / [ 249.431888][ T42] audit: type=1800 audit(249.356:3618): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 249.432300][T13941] ,mems_allowed=0-1 [ 249.470156][ T42] audit: type=1800 audit(249.406:3619): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 249.475572][T13941] [ 249.490130][ T42] audit: type=1800 audit(249.426:3620): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 249.491072][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.7.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.491098][T13941] Tainted: [L]=SOFTLOCKUP [ 249.491103][T13941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.491114][T13941] Call Trace: [ 249.491120][T13941] [ 249.491127][T13941] dump_stack_lvl+0x100/0x190 [ 249.491158][T13941] warn_alloc.cold+0x9e/0xb2 [ 249.491179][T13941] ? __pfx_warn_alloc+0x10/0x10 [ 249.491199][T13941] ? __kasan_kmalloc+0x8a/0xb0 [ 249.491248][T13941] ? __get_vm_area_node+0x22b/0x350 [ 249.491281][T13941] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 249.491302][T13941] ? find_held_lock+0x2b/0x80 [ 249.491324][T13941] ? rcu_read_unlock+0x17/0x60 [ 249.491353][T13941] ? vhost_task_create+0x1db/0x370 [ 249.491382][T13941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.491404][T13941] ? trace_kmem_cache_alloc+0xdd/0x100 [ 249.491435][T13941] ? vhost_task_create+0x1db/0x370 [ 249.491476][T13941] __vmalloc_node_noprof+0xad/0xf0 [ 249.491494][T13941] ? vhost_task_create+0x1db/0x370 [ 249.491520][T13941] copy_process+0x803/0x8370 [ 249.491562][T13941] ? __pfx_copy_process+0x10/0x10 [ 249.491590][T13941] ? __kasan_kmalloc+0xaa/0xb0 [ 249.491616][T13941] ? lockdep_init_map_type+0x5c/0x250 [ 249.491645][T13941] ? lockdep_init_map_type+0x5c/0x250 [ 249.491673][T13941] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 249.491722][T13941] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 249.491746][T13941] vhost_task_create+0x1db/0x370 [ 249.491769][T13941] ? __pfx_vhost_task_create+0x10/0x10 [ 249.491801][T13941] ? __pfx_vhost_task_fn+0x10/0x10 [ 249.491828][T13941] ? __pfx___mutex_lock+0x10/0x10 [ 249.491848][T13941] ? kasan_quarantine_put+0x104/0x240 [ 249.491879][T13941] kvm_mmu_post_init_vm+0x1b3/0x360 [ 249.491900][T13941] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 249.491917][T13941] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 249.491946][T13941] kvm_vcpu_ioctl+0x730/0x1700 [ 249.491970][T13941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 249.491994][T13941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.492024][T13941] ? do_vfs_ioctl+0x226/0x13e0 [ 249.492048][T13941] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.492071][T13941] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 249.492099][T13941] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.492143][T13941] ? selinux_file_ioctl+0x13b/0x290 [ 249.492167][T13941] ? selinux_file_ioctl+0xb6/0x290 [ 249.492195][T13941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 249.492218][T13941] __x64_sys_ioctl+0x18e/0x210 [ 249.492242][T13941] do_syscall_64+0x123/0x790 [ 249.492264][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.492283][T13941] RIP: 0033:0x7ff7f679e0d9 [ 249.492299][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.492316][T13941] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.492334][T13941] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 249.492346][T13941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 249.492365][T13941] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 249.492376][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.492386][T13941] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 249.492412][T13941] [ 249.493647][T13941] Mem-Info: [ 249.496810][ T42] audit: type=1400 audit(249.426:3621): avc: denied { module_request } for pid=13957 comm="syz.5.2859" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.497886][T13941] active_anon:12271 inactive_anon:2 isolated_anon:0 [ 249.497886][T13941] active_file:10368 inactive_file:21836 isolated_file:0 [ 249.497886][T13941] unevictable:1000 dirty:919 writeback:0 [ 249.497886][T13941] slab_reclaimable:8419 slab_unreclaimable:77587 [ 249.497886][T13941] mapped:32445 shmem:1565 pagetables:4180 [ 249.497886][T13941] sec_pagetables:299 bounce:0 [ 249.497886][T13941] kernel_misc_reclaimable:0 [ 249.497886][T13941] free:440841 free_pcp:15681 free_cma:0 [ 249.553784][ T42] audit: type=1800 audit(249.486:3622): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 249.554060][T13941] Node 0 active_anon:49120kB inactive_anon:8kB active_file:41472kB inactive_file:87144kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:72392kB dirty:3680kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15136kB pagetables:15900kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 249.577802][ T42] audit: type=1400 audit(249.506:3623): avc: denied { create } for pid=13963 comm="syz.5.2860" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.578083][T13941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:57344kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 249.631777][ T42] audit: type=1400 audit(249.566:3624): avc: denied { create } for pid=13963 comm="syz.5.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.636155][T13941] Node 0 [ 249.639071][T13965] netlink: 'syz.5.2860': attribute type 2 has an invalid length. [ 249.639550][ T42] audit: type=1400 audit(249.576:3625): avc: denied { write } for pid=13963 comm="syz.5.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.641302][T13941] DMA free:11216kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.662977][T13965] : entered promiscuous mode [ 249.672892][T13941] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 249.672925][T13941] Node 0 DMA32 free:258996kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49172kB inactive_anon:8kB active_file:41472kB inactive_file:87144kB unevictable:2000kB writepending:3680kB zspages:792kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:36476kB local_pcp:7628kB free_cma:0kB [ 249.749222][T13941] lowmem_reserve[]: 0 0 0 0 0 [ 249.751003][T13941] Node 1 Normal free:1494336kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:25304kB local_pcp:4096kB free_cma:0kB [ 249.761268][T13941] lowmem_reserve[]: 0 0 0 0 0 [ 249.762806][T13941] Node 0 DMA: 4*4kB (U) 4*8kB (U) 4*16kB (U) 5*32kB (U) 5*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 4*1024kB (U) 1*2048kB (M) 0*4096kB = 11216kB [ 249.767500][T13941] Node 0 DMA32: 510*4kB (UME) 467*8kB (ME) 202*16kB (UME) 83*32kB (UME) 89*64kB (UME) 81*128kB (UME) 46*256kB (UME) 57*512kB (UME) 26*1024kB (UM) 8*2048kB (M) 36*4096kB (UM) = 259152kB [ 249.770514][ T42] audit: type=1800 audit(249.706:3626): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 249.773303][T13941] Node 1 Normal: 164*4kB (UM) 200*8kB (UM) 197*16kB (UME) 231*32kB (UM) 217*64kB (UM) 208*128kB (UM) 195*256kB (UME) 189*512kB (UME) 164*1024kB (UME) 6*2048kB (UME) 272*4096kB (UM) = 1494336kB [ 249.786574][T13941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.789711][T13941] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 249.792669][T13941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.795813][T13941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 249.798968][T13941] 33785 total pagecache pages [ 249.800523][T13941] 20 pages in swap cache [ 249.801961][T13941] Free swap = 123964kB [ 249.803317][T13941] Total swap = 124996kB [ 249.804663][T13941] 1048443 pages RAM [ 249.805946][T13941] 0 pages HighMem/MovableOnly [ 249.807553][T13941] 285655 pages reserved [ 249.809257][T13941] 0 pages cma reserved [ 249.849399][T13969] netlink: 'syz.5.2861': attribute type 39 has an invalid length. [ 249.922734][T13970] IPVS: lc: FWM 3 0x00000003 - no destination available [ 250.029103][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.045933][T13974] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 250.054090][T13974] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 250.058659][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 250.104545][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2865'. [ 250.257763][T13992] netlink: 'syz.6.2869': attribute type 11 has an invalid length. [ 250.529588][T14007] netlink: 'syz.4.2875': attribute type 4 has an invalid length. [ 250.535659][T14007] netlink: 'syz.4.2875': attribute type 8 has an invalid length. [ 250.542729][T14007] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2875'. [ 250.605143][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2877'. [ 250.753612][T14028] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 250.767544][T14028] /dev/nullb0: Can't open blockdev [ 250.988715][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 251.002793][ T9] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 251.159458][ T9] usb 11-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 251.170241][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.178580][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.485421][ T9] qmi_wwan 11-1:1.0: cdc-wdm0: USB WDM device [ 251.499209][ T9] wwan wwan0: port wwan0qmi0 attached [ 251.538381][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2905'. [ 251.577775][T14102] FAULT_INJECTION: forcing a failure. [ 251.577775][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 251.589748][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.7.2907 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.589792][T14102] Tainted: [L]=SOFTLOCKUP [ 251.589798][T14102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.589809][T14102] Call Trace: [ 251.589815][T14102] [ 251.589822][T14102] dump_stack_lvl+0x100/0x190 [ 251.589863][T14102] should_fail_ex.cold+0x5/0xa [ 251.589888][T14102] should_failslab+0xc2/0x120 [ 251.589914][T14102] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 251.589940][T14102] ? sidtab_sid2str_get+0x17a/0x670 [ 251.589962][T14102] kmemdup_noprof+0x29/0x60 [ 251.589984][T14102] sidtab_sid2str_get+0x17a/0x670 [ 251.590004][T14102] security_sid_to_context_core+0x373/0x700 [ 251.590036][T14102] avc_audit_post_callback+0x109/0x910 [ 251.590058][T14102] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 251.590076][T14102] ? skb_put+0x138/0x180 [ 251.590107][T14102] ? audit_log_n_string+0x2a3/0x5a0 [ 251.590139][T14102] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 251.590157][T14102] common_lsm_audit+0x23f/0x2b0 [ 251.590185][T14102] ? __pfx_common_lsm_audit+0x10/0x10 [ 251.590208][T14102] ? find_held_lock+0x2b/0x80 [ 251.590231][T14102] ? rcu_is_watching+0x13/0xc0 [ 251.590254][T14102] slow_avc_audit+0x186/0x210 [ 251.590275][T14102] ? __pfx_slow_avc_audit+0x10/0x10 [ 251.590301][T14102] ? find_held_lock+0x2b/0x80 [ 251.590320][T14102] ? avc_has_extended_perms+0x33a/0x1080 [ 251.590340][T14102] ? avc_has_extended_perms+0x33a/0x1080 [ 251.590364][T14102] avc_has_extended_perms+0x9b7/0x1080 [ 251.590393][T14102] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 251.590416][T14102] ? kasan_quarantine_put+0x104/0x240 [ 251.590441][T14102] ? find_held_lock+0x2b/0x80 [ 251.590462][T14102] ? tomoyo_path_number_perm+0x28f/0x580 [ 251.590491][T14102] ? tomoyo_path_number_perm+0x188/0x580 [ 251.590541][T14102] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 251.590574][T14102] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 251.590622][T14102] ? selinux_file_ioctl+0x13b/0x290 [ 251.590646][T14102] selinux_file_ioctl+0x13b/0x290 [ 251.590673][T14102] security_file_ioctl+0xfb/0x230 [ 251.590701][T14102] __x64_sys_ioctl+0xb7/0x210 [ 251.590726][T14102] do_syscall_64+0x123/0x790 [ 251.590749][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.590767][T14102] RIP: 0033:0x7ff7f679e0d9 [ 251.590788][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.590808][T14102] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.590832][T14102] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 251.590843][T14102] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 251.590853][T14102] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 251.590864][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.590874][T14102] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 251.590919][T14102] [ 251.594792][T14104] FAULT_INJECTION: forcing a failure. [ 251.594792][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 251.707895][ T9] qmi_wwan 11-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 8a:41:fb:47:c5:1b [ 251.708920][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.4.2908 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.708941][T14104] Tainted: [L]=SOFTLOCKUP [ 251.708945][T14104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.708952][T14104] Call Trace: [ 251.708956][T14104] [ 251.708960][T14104] dump_stack_lvl+0x100/0x190 [ 251.708982][T14104] should_fail_ex.cold+0x5/0xa [ 251.708999][T14104] should_failslab+0xc2/0x120 [ 251.709022][T14104] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 251.709038][T14104] ? __alloc_skb+0x5b7/0x710 [ 251.709055][T14104] ? __alloc_skb+0x140/0x710 [ 251.709074][T14104] __alloc_skb+0x140/0x710 [ 251.709090][T14104] ? __alloc_skb+0x5b7/0x710 [ 251.709106][T14104] ? __pfx___alloc_skb+0x10/0x10 [ 251.709123][T14104] ? is_bpf_text_address+0x8a/0x1a0 [ 251.709135][T14104] ? bpf_ksym_find+0x128/0x1c0 [ 251.709150][T14104] alloc_skb_with_frags+0xdd/0x760 [ 251.709162][T14104] ? __lock_acquire+0x4c5/0x1ec0 [ 251.709182][T14104] sock_alloc_send_pskb+0x801/0x980 [ 251.709200][T14104] ? do_raw_spin_lock+0x128/0x260 [ 251.709213][T14104] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 251.709233][T14104] ? __lock_acquire+0x4c5/0x1ec0 [ 251.709250][T14104] __ip_append_data+0x23a5/0x44d0 [ 251.709265][T14104] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 251.709275][T14104] ? find_held_lock+0x2b/0x80 [ 251.709291][T14104] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 251.709307][T14104] ? __pfx___ip_append_data+0x10/0x10 [ 251.709321][T14104] ip_make_skb+0x28b/0x310 [ 251.709334][T14104] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 251.709346][T14104] ? __pfx_ip_make_skb+0x10/0x10 [ 251.709365][T14104] ? udp_sendmsg+0x171c/0x2710 [ 251.709375][T14104] udp_sendmsg+0x171c/0x2710 [ 251.709389][T14104] ? __pfx_udp_sendmsg+0x10/0x10 [ 251.709400][T14104] ? vsnprintf+0x4c5/0x1300 [ 251.709413][T14104] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 251.709429][T14104] ? process_measurement+0x10a0/0x2350 [ 251.709450][T14104] udpv6_sendmsg+0x1420/0x2c20 [ 251.709466][T14104] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 251.709481][T14104] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 251.709494][T14104] ? avc_has_perm_noaudit+0x145/0x3b0 [ 251.709509][T14104] ? __pfx_avc_has_perm+0x10/0x10 [ 251.709525][T14104] ? sock_has_perm+0x25a/0x2f0 [ 251.709548][T14104] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 251.709562][T14104] ? inet6_sendmsg+0x105/0x140 [ 251.709575][T14104] inet6_sendmsg+0x105/0x140 [ 251.709672][T14104] ____sys_sendmsg+0x704/0xbe0 [ 251.709694][T14104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.709714][T14104] ___sys_sendmsg+0x190/0x1e0 [ 251.709729][T14104] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.709744][T14104] ? get_pid_task+0x106/0x250 [ 251.709762][T14104] ? find_held_lock+0x2b/0x80 [ 251.709782][T14104] __sys_sendmsg+0x160/0x210 [ 251.709794][T14104] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.709811][T14104] do_syscall_64+0x123/0x790 [ 251.709825][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.709837][T14104] RIP: 0033:0x7f02d6b9e0d9 [ 251.709848][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.709859][T14104] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.709871][T14104] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 251.709878][T14104] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 251.709884][T14104] RBP: 00007f02d7a56090 R08: 0000000000000000 R09: 0000000000000000 [ 251.709891][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.709897][T14104] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 251.709911][T14104] [ 251.900012][ T5838] usb 11-1: USB disconnect, device number 12 [ 251.906873][ T5838] qmi_wwan 11-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 251.913749][T14119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.937974][T14123] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 252.048697][T14119] bond6: (slave veth0_to_bond): Releasing backup interface [ 252.064522][T14119] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.124407][ T5838] wwan wwan0: port wwan0qmi0 disconnected [ 252.318921][T14144] batadv_slave_1: entered promiscuous mode [ 252.363419][T14143] batadv_slave_1: left promiscuous mode [ 252.369798][T14151] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 252.473539][T14155] FAULT_INJECTION: forcing a failure. [ 252.473539][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 252.477627][T14155] CPU: 0 UID: 0 PID: 14155 Comm: syz.5.2924 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.477645][T14155] Tainted: [L]=SOFTLOCKUP [ 252.477648][T14155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.477655][T14155] Call Trace: [ 252.477659][T14155] [ 252.477663][T14155] dump_stack_lvl+0x100/0x190 [ 252.477683][T14155] should_fail_ex.cold+0x5/0xa [ 252.477698][T14155] should_failslab+0xc2/0x120 [ 252.477720][T14155] kmem_cache_alloc_noprof+0x91/0x6a0 [ 252.477737][T14155] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 252.477755][T14155] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 252.477773][T14155] mmu_topup_memory_caches+0x25/0x170 [ 252.477793][T14155] kvm_mmu_load+0xe2/0x2570 [ 252.477809][T14155] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 252.477822][T14155] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 252.477838][T14155] ? __pfx_kvm_mmu_load+0x10/0x10 [ 252.477854][T14155] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 252.477869][T14155] ? kvm_check_and_inject_events+0x873/0x12a0 [ 252.477886][T14155] ? record_steal_time+0x3f0/0xbb0 [ 252.477901][T14155] vcpu_run+0x3ab0/0x5df0 [ 252.477917][T14155] ? __pfx_vcpu_run+0x10/0x10 [ 252.477931][T14155] ? rcu_is_watching+0x13/0xc0 [ 252.477947][T14155] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 252.477957][T14155] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 252.477971][T14155] kvm_vcpu_ioctl+0x730/0x1700 [ 252.477986][T14155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.478000][T14155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.478019][T14155] ? do_vfs_ioctl+0x226/0x13e0 [ 252.478033][T14155] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 252.478045][T14155] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 252.478064][T14155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 252.478089][T14155] ? selinux_file_ioctl+0x13b/0x290 [ 252.478105][T14155] ? selinux_file_ioctl+0xb6/0x290 [ 252.478121][T14155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.478136][T14155] __x64_sys_ioctl+0x18e/0x210 [ 252.478150][T14155] do_syscall_64+0x123/0x790 [ 252.478164][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.478175][T14155] RIP: 0033:0x7ffb30f9e0d9 [ 252.478185][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.478194][T14155] RSP: 002b:00007ffb31e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.478205][T14155] RAX: ffffffffffffffda RBX: 00007ffb31225fa0 RCX: 00007ffb30f9e0d9 [ 252.478214][T14155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 252.478220][T14155] RBP: 00007ffb31e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 252.478226][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.478232][T14155] R13: 00007ffb31226038 R14: 00007ffb31225fa0 R15: 00007ffff9642338 [ 252.478246][T14155] [ 252.496628][T14162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.567619][ T41] libceph: connect (1)[c::]:6789 error -101 [ 252.592136][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 252.606176][T14169] ceph: No mds server is up or the cluster is laggy [ 252.606755][T14167] bond7: (slave veth0_to_bond): Releasing backup interface [ 252.620073][T14167] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.766074][T14183] FAULT_INJECTION: forcing a failure. [ 252.766074][T14183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.773588][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.7.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.773615][T14183] Tainted: [L]=SOFTLOCKUP [ 252.773621][T14183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.773631][T14183] Call Trace: [ 252.773637][T14183] [ 252.773644][T14183] dump_stack_lvl+0x100/0x190 [ 252.773671][T14183] should_fail_ex.cold+0x5/0xa [ 252.773694][T14183] _copy_from_user+0x2e/0xd0 [ 252.773720][T14183] kstrtoul_from_user+0xc6/0x1c0 [ 252.773740][T14183] ? __pfx_kstrtoul_from_user+0x10/0x10 [ 252.773766][T14183] ? 0xffffffff81000000 [ 252.773779][T14183] ? get_pid_task+0xfc/0x250 [ 252.773798][T14183] ? get_pid_task+0xfc/0x250 [ 252.773820][T14183] system_enable_write+0xcd/0x300 [ 252.773839][T14183] ? __pfx_system_enable_write+0x10/0x10 [ 252.773862][T14183] vfs_write+0x2aa/0x1050 [ 252.773881][T14183] ? __pfx_system_enable_write+0x10/0x10 [ 252.773901][T14183] ? __pfx_vfs_write+0x10/0x10 [ 252.773919][T14183] ? find_held_lock+0x2b/0x80 [ 252.773938][T14183] ? __fget_files+0x215/0x3d0 [ 252.773960][T14183] ? __fget_files+0x215/0x3d0 [ 252.773987][T14183] ? __fget_files+0x21f/0x3d0 [ 252.774016][T14183] __x64_sys_pwrite64+0x1eb/0x250 [ 252.774039][T14183] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 252.774068][T14183] do_syscall_64+0x123/0x790 [ 252.774088][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.774105][T14183] RIP: 0033:0x7ff7f679e0d9 [ 252.774118][T14183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.774132][T14183] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 252.774150][T14183] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 252.774160][T14183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.774170][T14183] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 252.774180][T14183] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 252.774189][T14183] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 252.774213][T14183] [ 252.962604][T14187] overlay: ./file1 is not a directory [ 253.026682][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2937'. [ 253.142669][T14206] netlink: 'syz.6.2942': attribute type 11 has an invalid length. [ 253.149653][ T34] net_ratelimit: 14 callbacks suppressed [ 253.149664][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.393980][T14220] FAULT_INJECTION: forcing a failure. [ 253.393980][T14220] name failslab, interval 1, probability 0, space 0, times 0 [ 253.403237][T14220] CPU: 1 UID: 0 PID: 14220 Comm: syz.4.2946 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.403258][T14220] Tainted: [L]=SOFTLOCKUP [ 253.403262][T14220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.403268][T14220] Call Trace: [ 253.403272][T14220] [ 253.403277][T14220] dump_stack_lvl+0x100/0x190 [ 253.403303][T14220] should_fail_ex.cold+0x5/0xa [ 253.403319][T14220] should_failslab+0xc2/0x120 [ 253.403339][T14220] kmem_cache_alloc_noprof+0x91/0x6a0 [ 253.403355][T14220] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 253.403379][T14220] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 253.403398][T14220] mmu_topup_memory_caches+0x25/0x170 [ 253.403416][T14220] kvm_mmu_load+0xe2/0x2570 [ 253.403433][T14220] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 253.403446][T14220] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 253.403461][T14220] ? __pfx_kvm_mmu_load+0x10/0x10 [ 253.403477][T14220] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 253.403492][T14220] ? kvm_check_and_inject_events+0x873/0x12a0 [ 253.403510][T14220] ? record_steal_time+0x3f0/0xbb0 [ 253.403525][T14220] vcpu_run+0x3ab0/0x5df0 [ 253.403540][T14220] ? __pfx____ratelimit+0x10/0x10 [ 253.403554][T14220] ? __pfx_vcpu_run+0x10/0x10 [ 253.403569][T14220] ? rcu_is_watching+0x13/0xc0 [ 253.403584][T14220] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.403594][T14220] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.403609][T14220] kvm_vcpu_ioctl+0x730/0x1700 [ 253.403624][T14220] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.403638][T14220] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.403656][T14220] ? do_vfs_ioctl+0x226/0x13e0 [ 253.403670][T14220] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 253.403709][T14220] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 253.403737][T14220] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 253.403776][T14220] ? selinux_file_ioctl+0x13b/0x290 [ 253.403792][T14220] ? selinux_file_ioctl+0xb6/0x290 [ 253.403809][T14220] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.403823][T14220] __x64_sys_ioctl+0x18e/0x210 [ 253.403838][T14220] do_syscall_64+0x123/0x790 [ 253.403851][T14220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.403862][T14220] RIP: 0033:0x7f02d6b9e0d9 [ 253.403873][T14220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.403885][T14220] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.403897][T14220] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 253.403904][T14220] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 253.403911][T14220] RBP: 00007f02d7a56090 R08: 0000000000000000 R09: 0000000000000000 [ 253.403917][T14220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.403923][T14220] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 253.403937][T14220] [ 253.496452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.635790][T14237] validate_nla: 2 callbacks suppressed [ 253.635807][T14237] netlink: 'syz.6.2952': attribute type 1 has an invalid length. [ 253.654192][T14237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.672521][T14237] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.682477][T14242] IPVS: lc: FWM 3 0x00000003 - no destination available [ 254.191807][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.249684][T14263] netlink: 'syz.5.2962': attribute type 1 has an invalid length. [ 254.269064][T14263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.286809][T14263] bond3: (slave veth0_to_bond): Releasing backup interface [ 254.361959][T14268] netlink: 'syz.7.2963': attribute type 1 has an invalid length. [ 254.404517][T14268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.435867][ T42] kauditd_printk_skb: 474 callbacks suppressed [ 254.435882][ T42] audit: type=1400 audit(254.366:4101): avc: denied { create } for pid=14279 comm="syz.5.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.446225][ T42] audit: type=1400 audit(254.376:4102): avc: denied { write } for pid=14279 comm="syz.5.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.446607][T14280] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2966'. [ 254.469488][ T42] audit: type=1800 audit(254.406:4103): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 254.472097][T14277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.480615][T14277] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 254.485610][T14277] bond3: (slave wireguard1): Error -95 calling set_mac_address [ 254.486893][T14281] FAULT_INJECTION: forcing a failure. [ 254.486893][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 254.492907][T14281] CPU: 3 UID: 0 PID: 14281 Comm: syz.6.2965 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.492924][T14281] Tainted: [L]=SOFTLOCKUP [ 254.492928][T14281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.492934][T14281] Call Trace: [ 254.492938][T14281] [ 254.492943][T14281] dump_stack_lvl+0x100/0x190 [ 254.492961][T14281] should_fail_ex.cold+0x5/0xa [ 254.492991][T14281] should_failslab+0xc2/0x120 [ 254.493008][T14281] kmem_cache_alloc_noprof+0x91/0x6a0 [ 254.493024][T14281] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 254.493042][T14281] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 254.493062][T14281] mmu_topup_memory_caches+0x25/0x170 [ 254.493081][T14281] kvm_mmu_load+0xe2/0x2570 [ 254.493098][T14281] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 254.493112][T14281] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 254.493127][T14281] ? __pfx_kvm_mmu_load+0x10/0x10 [ 254.493143][T14281] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 254.493161][T14281] ? kvm_check_and_inject_events+0x873/0x12a0 [ 254.493178][T14281] ? record_steal_time+0x3f0/0xbb0 [ 254.493193][T14281] vcpu_run+0x3ab0/0x5df0 [ 254.493209][T14281] ? __pfx____ratelimit+0x10/0x10 [ 254.493220][T14281] ? __pfx_vcpu_run+0x10/0x10 [ 254.493235][T14281] ? rcu_is_watching+0x13/0xc0 [ 254.493249][T14281] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 254.493262][T14281] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 254.493277][T14281] kvm_vcpu_ioctl+0x730/0x1700 [ 254.493293][T14281] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 254.493307][T14281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.493325][T14281] ? do_vfs_ioctl+0x226/0x13e0 [ 254.493339][T14281] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 254.493351][T14281] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 254.493370][T14281] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 254.493396][T14281] ? selinux_file_ioctl+0x13b/0x290 [ 254.493411][T14281] ? selinux_file_ioctl+0xb6/0x290 [ 254.493433][T14281] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 254.493448][T14281] __x64_sys_ioctl+0x18e/0x210 [ 254.493463][T14281] do_syscall_64+0x123/0x790 [ 254.493476][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.493488][T14281] RIP: 0033:0x7f1023b9e0d9 [ 254.493498][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.493508][T14281] RSP: 002b:00007f1024aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.493519][T14281] RAX: ffffffffffffffda RBX: 00007f1023e26090 RCX: 00007f1023b9e0d9 [ 254.493526][T14281] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 254.493532][T14281] RBP: 00007f1024aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.493538][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.493544][T14281] R13: 00007f1023e26128 R14: 00007f1023e26090 R15: 00007fffa546b558 [ 254.493558][T14281] [ 254.493982][ T42] audit: type=1400 audit(254.426:4104): avc: denied { create } for pid=14283 comm="syz.4.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.533028][T14284] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 254.534101][ T42] audit: type=1400 audit(254.466:4105): avc: denied { create } for pid=14279 comm="syz.5.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.535870][T14284] audit: out of memory in audit_log_start [ 254.537861][ T42] audit: type=1400 audit(254.466:4106): avc: denied { write } for pid=14279 comm="syz.5.2966" name="ip_vs" dev="proc" ino=4026534060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 254.637052][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 254.644846][ T42] audit: type=1400 audit(254.466:4107): avc: denied { read write } for pid=14279 comm="syz.5.2966" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.648394][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 254.654774][ T42] audit: type=1400 audit(254.466:4108): avc: denied { open } for pid=14279 comm="syz.5.2966" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.670815][T14268] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 254.676508][T14268] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 254.829438][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.912672][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 254.992633][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.242637][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.251920][T14304] netlink: 'syz.6.2973': attribute type 1 has an invalid length. [ 255.272023][T14287] ceph: No mds server is up or the cluster is laggy [ 255.276290][T14304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.313841][T14304] bond2: (slave veth0_to_bond): Releasing backup interface [ 255.473342][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.475528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.791653][T14343] netlink: 'syz.6.2985': attribute type 1 has an invalid length. [ 255.839523][T14343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.110826][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.268747][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.470157][ T9] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 256.620005][ T9] usb 12-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 256.624574][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49577, setting to 1024 [ 256.631513][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 256.634152][ T9] usb 12-1: Product: syz [ 256.635498][ T9] usb 12-1: Manufacturer: syz [ 256.645774][ T9] navman 12-1:1.0: navman converter detected [ 256.651292][ T9] usb 12-1: navman converter now attached to ttyUSB0 [ 256.775876][T14391] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3002'. [ 256.779267][T14391] batman_adv: batadv0: Interface deactivated: dummy0 [ 256.790801][T14391] batman_adv: batadv0: Removing interface: dummy0 [ 256.852470][ T9] usb 12-1: USB disconnect, device number 12 [ 256.882302][ T9] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 256.891039][ T9] navman 12-1:1.0: device disconnected [ 256.907489][T14396] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 256.928323][T14396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.955706][T14396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.957986][T14396] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 256.961654][T14396] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 256.992881][T14400] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 256.998305][T14400] bond5: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 257.439990][T14419] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 257.442843][T14419] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 257.446558][T14419] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 257.452532][T14419] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 257.461541][T14419] udc dummy_udc.0: failed to start g1: -22 [ 257.466185][T14419] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 257.474983][T14419] UDC core: g1: couldn't find an available UDC or it's busy [ 257.613665][T14435] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 257.621990][T14435] SELinux: failed to load policy [ 257.767547][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3025'. [ 257.809052][T14450] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 257.866210][T14455] overlayfs: failed to resolve './file1': -2 [ 257.926969][T14463] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3032'. [ 257.994988][T14463] syzkaller0: entered promiscuous mode [ 257.996723][T14463] syzkaller0: entered allmulticast mode [ 258.010374][T14459] tmpfs: Unknown parameter 'Ý' [ 258.076813][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3036'. [ 258.083695][T14472] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 258.086599][T14472] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 258.094853][T14472] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 258.098372][T14472] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 258.105339][T14472] udc dummy_udc.0: failed to start g1: -22 [ 258.107328][T14472] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 258.117129][T14472] UDC core: g1: couldn't find an available UDC or it's busy [ 258.305459][T14488] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 258.349414][ T34] net_ratelimit: 3 callbacks suppressed [ 258.349427][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.542115][T14494] netlink: 'syz.6.3043': attribute type 1 has an invalid length. [ 258.567355][T14494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.584262][T14494] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 258.989013][ T41] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 259.100283][T14532] overlayfs: failed to resolve './file1': -2 [ 259.156085][ T41] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 259.161957][ T41] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 259.164777][ T41] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.165424][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.167815][ T41] usb 12-1: config 0 has no interfaces? [ 259.167837][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.169834][ T41] usb 12-1: config 0 descriptor?? [ 259.389253][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.408906][T14557] FAULT_INJECTION: forcing a failure. [ 259.408906][T14557] name failslab, interval 1, probability 0, space 0, times 0 [ 259.417571][T14557] CPU: 3 UID: 0 PID: 14557 Comm: syz.6.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.417605][T14557] Tainted: [L]=SOFTLOCKUP [ 259.417612][T14557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.417625][T14557] Call Trace: [ 259.417634][T14557] [ 259.417644][T14557] dump_stack_lvl+0x100/0x190 [ 259.417693][T14557] should_fail_ex.cold+0x5/0xa [ 259.417720][T14557] should_failslab+0xc2/0x120 [ 259.417754][T14557] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 259.417781][T14557] ? selinux_inode_alloc_security+0x109/0x290 [ 259.417804][T14557] ? __d_alloc+0x35/0xa50 [ 259.417828][T14557] __d_alloc+0x35/0xa50 [ 259.417845][T14557] ? __ns_ref_active_get+0x9f/0x1b0 [ 259.417870][T14557] path_from_stashed+0x431/0x760 [ 259.417890][T14557] ? do_raw_spin_unlock+0x145/0x1e0 [ 259.417916][T14557] ns_get_path+0x60/0x80 [ 259.417934][T14557] proc_ns_get_link+0x260/0x2e0 [ 259.417954][T14557] ? __pfx_proc_ns_get_link+0x10/0x10 [ 259.417980][T14557] pick_link+0xd17/0x13c0 [ 259.418002][T14557] ? rcu_is_watching+0x13/0xc0 [ 259.418022][T14557] ? __pfx_proc_ns_get_link+0x10/0x10 [ 259.418044][T14557] step_into_slowpath+0x9ba/0xf90 [ 259.418067][T14557] ? proc_ns_dir_lookup+0x1da/0x390 [ 259.418090][T14557] ? __pfx_step_into_slowpath+0x10/0x10 [ 259.418124][T14557] path_openat+0xfab/0x2440 [ 259.418155][T14557] ? __pfx_path_openat+0x10/0x10 [ 259.418189][T14557] do_file_open+0x20e/0x430 [ 259.418217][T14557] ? __pfx_do_file_open+0x10/0x10 [ 259.418263][T14557] ? _raw_spin_unlock+0x28/0x50 [ 259.418297][T14557] ? alloc_fd+0x471/0x7a0 [ 259.418332][T14557] do_sys_openat2+0x10f/0x1e0 [ 259.418352][T14557] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.418370][T14557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.418392][T14557] ? __fget_files+0x21f/0x3d0 [ 259.418439][T14557] __x64_sys_openat+0x12d/0x210 [ 259.418476][T14557] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.418493][T14557] ? ksys_write+0x1ac/0x250 [ 259.418523][T14557] do_syscall_64+0x123/0x790 [ 259.418544][T14557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.418562][T14557] RIP: 0033:0x7f1023b5e90e [ 259.418580][T14557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.418597][T14557] RSP: 002b:00007f1024ac6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.418617][T14557] RAX: ffffffffffffffda RBX: 00007f1024ac76c0 RCX: 00007f1023b5e90e [ 259.418629][T14557] RDX: 0000000000000000 RSI: 00007f1023c3475f RDI: ffffffffffffff9c [ 259.418640][T14557] RBP: 00007f1024ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.418652][T14557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.418663][T14557] R13: 00007f1023e26038 R14: 00007f1023e25fa0 R15: 00007fffa546b558 [ 259.418689][T14557] [ 259.441978][ T42] kauditd_printk_skb: 381 callbacks suppressed [ 259.441998][ T42] audit: type=1400 audit(259.376:4490): avc: denied { read write } for pid=14511 comm="syz.7.3049" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 259.447096][ T41] usb 12-1: USB disconnect, device number 13 [ 259.458659][ T42] audit: type=1400 audit(259.376:4491): avc: denied { open } for pid=14511 comm="syz.7.3049" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 259.553998][ T42] audit: type=1400 audit(259.376:4492): avc: denied { create } for pid=14511 comm="syz.7.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.554046][ T42] audit: type=1400 audit(259.376:4493): avc: denied { map_create } for pid=14511 comm="syz.7.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.554083][ T42] audit: type=1400 audit(259.386:4494): avc: denied { unmount } for pid=10216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.554125][ T42] audit: type=1400 audit(259.406:4495): avc: denied { read write } for pid=10340 comm="syz-executor" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.554164][ T42] audit: type=1400 audit(259.406:4496): avc: denied { open } for pid=10340 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.554204][ T42] audit: type=1400 audit(259.406:4497): avc: denied { ioctl } for pid=10340 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.554243][ T42] audit: type=1800 audit(259.416:4498): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 259.554280][ T42] audit: type=1400 audit(259.446:4499): avc: denied { read write } for pid=14559 comm="syz.6.3069" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 259.582054][T14563] IPVS: lc: FWM 3 0x00000003 - no destination available [ 259.624140][T14565] netlink: 'syz.6.3070': attribute type 1 has an invalid length. [ 259.667361][T14565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.690575][T14570] IPVS: lc: FWM 3 0x00000003 - no destination available [ 259.709387][T14573] overlayfs: failed to resolve 'lower1': -2 [ 259.718049][T14565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.722680][T14565] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 259.727907][T14565] bond6: (slave wireguard1): Error -95 calling set_mac_address [ 259.767229][T14576] bond6: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 259.776082][T14580] jffs2: notice: (14580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 259.843106][T14583] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3077'. [ 259.853304][T14583] bond1: (slave ): Releasing active interface [ 259.948697][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.040053][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3081'. [ 260.132225][T14603] netlink: 'syz.7.3083': attribute type 4 has an invalid length. [ 260.175164][T14607] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 260.438903][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.488812][ T5833] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 260.628931][ T5833] usb 12-1: device descriptor read/64, error -71 [ 260.878873][ T5833] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 261.028894][ T5833] usb 12-1: device descriptor read/64, error -71 [ 261.141101][ T5833] usb usb12-port1: attempt power cycle [ 261.287056][T14649] netlink: 484 bytes leftover after parsing attributes in process `syz.6.3100'. [ 261.480994][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.489436][ T5833] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 261.520018][ T5833] usb 12-1: device descriptor read/8, error -71 [ 261.768679][ T5833] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 261.789588][ T5833] usb 12-1: device descriptor read/8, error -71 [ 261.898720][ T5833] usb usb12-port1: unable to enumerate USB device [ 261.971630][T14701] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.988757][T14701] Invalid argument reading file caps for ./file0 [ 262.122824][T10511] syz_tun (unregistering): left allmulticast mode [ 262.199156][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.409351][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.413732][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.421131][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.424122][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.426796][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.509534][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.815501][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.818150][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.820651][T14705] bridge_slave_0: entered allmulticast mode [ 262.824487][T14705] bridge_slave_0: entered promiscuous mode [ 262.828967][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.831412][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.833703][T14705] bridge_slave_1: entered allmulticast mode [ 262.836529][T14705] bridge_slave_1: entered promiscuous mode [ 262.854013][T14705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.858695][T14705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.873323][T14705] team0: Port device team_slave_0 added [ 262.876477][T14705] team0: Port device team_slave_1 added [ 262.889660][T14705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.891825][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.899860][T14705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.904118][T14705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.906273][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.914069][T14705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.935969][T14705] hsr_slave_0: entered promiscuous mode [ 262.938305][T14705] hsr_slave_1: entered promiscuous mode [ 263.047486][T14705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 263.051769][T14705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.054461][T14705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 263.058185][T14705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.061127][T14705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 263.064926][T14705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.067541][T14705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 263.071487][T14705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.084783][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.087019][T14705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.089437][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.091609][T14705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.122792][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.130715][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.133470][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.140985][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.146881][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.149899][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.157859][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.160795][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.272992][T14740] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3125'. [ 263.348349][T14740] nvme nvme0: rdma connection establishment failed (-104) [ 263.371711][T14752] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3131'. [ 263.375244][T14752] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.404645][T14752] batman_adv: batadv0: Removing interface: dummy0 [ 263.464226][T14756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3132'. [ 263.560795][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.576201][T14705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.745968][T14705] veth0_vlan: entered promiscuous mode [ 263.753149][T14777] syzkaller0: entered promiscuous mode [ 263.755829][T14777] syzkaller0: entered allmulticast mode [ 263.772441][T14705] veth1_vlan: entered promiscuous mode [ 263.802409][T14705] veth0_macvtap: entered promiscuous mode [ 263.810427][T14705] veth1_macvtap: entered promiscuous mode [ 263.825956][T14705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.839265][T14705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.863092][T14786] kvm: user requested TSC rate below hardware speed [ 263.941175][ T5805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.945165][ T5805] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.959946][ T5805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.967720][ T5805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.999603][ T62] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 264.010004][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.013169][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.041728][ T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.044823][ T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.149232][ T62] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 264.153038][ T62] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 264.157074][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.162901][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.167533][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.173938][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.177977][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.183246][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.187093][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.193129][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.197520][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.201867][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.205433][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.211569][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.215311][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.219295][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.223806][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.227607][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.231726][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.236138][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.240729][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.244545][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.249156][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.252902][ T62] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.256774][ T62] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.261693][ T62] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.266172][ T62] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 264.269779][ T62] usb 11-1: Product: syz [ 264.271507][ T62] usb 11-1: Manufacturer: syz [ 264.273649][ T62] usb 11-1: SerialNumber: syz [ 264.277640][ T62] usb 11-1: config 0 descriptor?? [ 264.288098][ T62] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 264.495030][T14777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 264.501292][T14777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3636772828 (465506921984 ns) > initial count (76220649728 ns). Using initial count to start timer. [ 264.508659][ T65] Bluetooth: hci0: command tx timeout [ 264.510881][ T42] kauditd_printk_skb: 280 callbacks suppressed [ 264.510897][ T42] audit: type=1400 audit(264.446:4780): avc: denied { write } for pid=14776 comm="syz.6.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.520874][ T42] audit: type=1400 audit(264.446:4781): avc: denied { read } for pid=14776 comm="syz.6.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.527562][ T42] audit: type=1400 audit(264.446:4782): avc: denied { create } for pid=14776 comm="syz.6.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 264.535096][ T42] audit: type=1400 audit(264.446:4783): avc: denied { module_request } for pid=14776 comm="syz.6.3137" kmod="net-pf-34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 264.589467][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.612953][ T62] usb 11-1: USB disconnect, device number 13 [ 264.620214][ T62] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 265.050839][ T42] audit: type=1400 audit(264.986:4784): avc: denied { create } for pid=14793 comm="syz.7.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.058581][ T42] audit: type=1400 audit(264.986:4785): avc: denied { read } for pid=14793 comm="syz.7.3142" name="event1" dev="devtmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.065715][ T42] audit: type=1400 audit(264.986:4786): avc: denied { open } for pid=14793 comm="syz.7.3142" path="/dev/input/event1" dev="devtmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.073729][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.076468][ T42] audit: type=1400 audit(264.986:4787): avc: denied { read write } for pid=14793 comm="syz.7.3142" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.083712][ T42] audit: type=1400 audit(264.986:4788): avc: denied { open } for pid=14793 comm="syz.7.3142" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.091806][ T42] audit: type=1400 audit(264.986:4789): avc: denied { ioctl } for pid=14793 comm="syz.7.3142" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.193414][T14803] netlink: 'syz.8.3144': attribute type 1 has an invalid length. [ 265.229203][ T1478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.288879][T14809] overlayfs: missing 'lowerdir' [ 265.288947][ T5875] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 265.317638][ T222] IPVS: starting estimator thread 0... [ 265.338071][T14811] lo speed is unknown, defaulting to 1000 [ 265.353254][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 265.365582][T14811] lo speed is unknown, defaulting to 1000 [ 265.372065][T14811] lo speed is unknown, defaulting to 1000 [ 265.418908][T14812] IPVS: using max 44 ests per chain, 105600 per kthread [ 265.421979][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 265.430186][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3148'. [ 265.438634][ T5875] usb 12-1: Using ep0 maxpacket: 16 [ 265.499998][T14794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.516455][T14794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.537863][ T5875] usb 12-1: unable to get BOS descriptor or descriptor too short [ 265.542077][ T5875] usb 12-1: New USB device found, idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 265.547040][ T5875] usb 12-1: no configurations [ 265.552288][ T5875] usb 12-1: can't read configurations, error -22 [ 265.559745][T14825] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 265.641550][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.674702][T14811] infiniband sz1: set active [ 265.678511][T14811] infiniband sz1: added lo [ 265.682032][T14836] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 265.700587][T14836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.721793][T14811] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 265.722414][T14836] bond8: (slave veth0_to_bond): Releasing backup interface [ 265.731220][T14811] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 265.736428][T14811] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 265.755830][T14836] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 265.779244][ T9] lo speed is unknown, defaulting to 1000 [ 265.810766][T14811] RDS/IB: sz1: added [ 265.821874][T14811] smc: adding ib device sz1 with port count 1 [ 265.824729][T14811] smc: ib device sz1 port 1 has no pnetid [ 265.833203][ T62] lo speed is unknown, defaulting to 1000 [ 265.878297][T14811] lo speed is unknown, defaulting to 1000 [ 266.004611][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3159'. [ 266.016609][T14811] lo speed is unknown, defaulting to 1000 [ 266.068794][T14853] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3161'. [ 266.162428][T14861] UDC core: g1: couldn't find an available UDC or it's busy [ 266.295977][T14811] lo speed is unknown, defaulting to 1000 [ 266.360709][T14879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3173'. [ 266.401971][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 266.431745][T14811] lo speed is unknown, defaulting to 1000 [ 266.458568][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 266.539110][T14811] lo speed is unknown, defaulting to 1000 [ 266.550475][T14887] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3176'. [ 266.556955][T14887] Mass Storage Function, version: 2009/09/11 [ 266.560389][T14887] LUN: removable file: (no medium) [ 266.599218][ T65] Bluetooth: hci0: command tx timeout [ 266.603670][T14889] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 266.607634][T14889] FAULT_INJECTION: forcing a failure. [ 266.607634][T14889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.619484][T14889] CPU: 0 UID: 0 PID: 14889 Comm: syz.7.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.619504][T14889] Tainted: [L]=SOFTLOCKUP [ 266.619508][T14889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.619514][T14889] Call Trace: [ 266.619518][T14889] [ 266.619523][T14889] dump_stack_lvl+0x100/0x190 [ 266.619543][T14889] should_fail_ex.cold+0x5/0xa [ 266.619559][T14889] _copy_to_user+0x32/0xd0 [ 266.619578][T14889] ctl_ioctl+0x69c/0xcc0 [ 266.619603][T14889] ? __pfx_ctl_ioctl+0x10/0x10 [ 266.619657][T14889] ? selinux_file_ioctl+0x13b/0x290 [ 266.619674][T14889] ? selinux_file_ioctl+0xb6/0x290 [ 266.619692][T14889] dm_ctl_ioctl+0x22/0x30 [ 266.619706][T14889] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 266.619721][T14889] __x64_sys_ioctl+0x18e/0x210 [ 266.619736][T14889] do_syscall_64+0x123/0x790 [ 266.619751][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.619762][T14889] RIP: 0033:0x7ff7f679e0d9 [ 266.619773][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.619783][T14889] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.619795][T14889] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 266.619803][T14889] RDX: 0000200000000100 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 266.619812][T14889] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 266.619818][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.619825][T14889] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 266.619901][T14889] [ 266.625166][ T34] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 266.684758][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.688808][T14893] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.688814][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 266.692659][T14811] lo speed is unknown, defaulting to 1000 [ 266.694863][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.694878][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.694899][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.696814][T14865] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.697951][ T34] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 266.699802][ T34] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 266.901414][ T34] usb 11-1: USB disconnect, device number 14 [ 266.922490][ T34] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 266.927551][ T34] cyberjack 11-1:1.0: device disconnected [ 266.952508][ T5875] syz1: Port: 1 Link DOWN [ 266.955046][T14817] infiniband syz1: set down [ 266.956501][T14817] infiniband syz1: added syz_tun [ 266.957520][T14899] lo speed is unknown, defaulting to 1000 [ 266.968032][T14817] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 266.972759][T14817] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 266.977977][T14817] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 267.012353][T14817] RDS/IB: syz1: added [ 267.013701][T14817] smc: adding ib device syz1 with port count 1 [ 267.015592][T14817] smc: ib device syz1 port 1 has no pnetid [ 267.649143][T14926] netlink: 'syz.7.3190': attribute type 1 has an invalid length. [ 267.656686][T14926] bond2: (slave veth0_to_bond): Releasing backup interface [ 267.709326][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.737948][T14930] overlayfs: missing 'lowerdir' [ 267.785590][T14934] gadgetfs: bound to dummy_udc driver [ 267.903952][T14941] Bluetooth: MGMT ver 1.23 [ 267.971291][ T222] smc: removing ib device syz1 [ 268.027895][ T222] smbdirect: ib_dev[syz1] removed [ 268.048117][T14945] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3199'. [ 268.272173][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.591708][T14963] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.653246][T14970] jffs2: notice: (14970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 268.669120][ T65] Bluetooth: hci0: command tx timeout [ 268.738258][T14978] UDC core: g1: couldn't find an available UDC or it's busy [ 268.749053][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.942108][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3212'. [ 269.085783][T14996] netlink: 'syz.4.3218': attribute type 1 has an invalid length. [ 269.097874][T14996] bond9: (slave veth0_to_bond): Releasing backup interface [ 269.127503][T14998] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 269.173599][T15001] UDC core: g1: couldn't find an available UDC or it's busy [ 269.296109][T15015] overlay: ./file1 is not a directory [ 269.419981][T15022] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 269.469115][ T5735] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 269.523093][ T42] kauditd_printk_skb: 303 callbacks suppressed [ 269.523104][ T42] audit: type=1800 audit(269.456:5093): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16645 res=0 errno=0 [ 269.629395][ T5735] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.636653][ T5735] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.641822][ T5735] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.647999][ T5735] usb 11-1: config 0 descriptor?? [ 269.649205][ T42] audit: type=1800 audit(269.586:5094): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248949 res=0 errno=0 [ 269.656130][ T42] audit: type=1800 audit(269.586:5095): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=248978 res=0 errno=0 [ 269.662724][ T42] audit: type=1800 audit(269.586:5096): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248956 res=0 errno=0 [ 269.669347][ T42] audit: type=1800 audit(269.586:5097): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248957 res=0 errno=0 [ 269.675734][ T42] audit: type=1800 audit(269.586:5098): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248958 res=0 errno=0 [ 269.682279][ T42] audit: type=1800 audit(269.586:5099): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248998 res=0 errno=0 [ 269.798763][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.860831][ T5735] usbhid 11-1:0.0: can't add hid device: -71 [ 269.868614][ T5735] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 269.876496][ T5735] usb 11-1: USB disconnect, device number 15 [ 269.905390][ T42] audit: type=1800 audit(269.836:5100): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 269.931273][ T42] audit: type=1800 audit(269.866:5101): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 269.960796][ T42] audit: type=1800 audit(269.896:5102): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 269.973663][T15034] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 269.976269][T15034] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 269.979054][T15034] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 269.981316][T15034] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 269.990380][T15034] udc dummy_udc.0: failed to start g1: -22 [ 269.992342][T15034] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 269.995798][T15034] UDC core: g1: couldn't find an available UDC or it's busy [ 270.318639][ T5735] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 270.498515][ T5735] usb 11-1: Using ep0 maxpacket: 32 [ 270.502461][ T5735] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 270.510947][ T5735] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.517721][ T5735] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.529639][ T5735] usb 11-1: config 0 descriptor?? [ 270.533528][ T5735] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 270.545530][ T5735] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 270.748628][ T65] Bluetooth: hci0: command tx timeout [ 270.838942][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.877644][T15056] FAULT_INJECTION: forcing a failure. [ 270.877644][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.883275][T15056] CPU: 2 UID: 0 PID: 15056 Comm: syz.4.3243 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.883295][T15056] Tainted: [L]=SOFTLOCKUP [ 270.883300][T15056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.883307][T15056] Call Trace: [ 270.883311][T15056] [ 270.883317][T15056] dump_stack_lvl+0x100/0x190 [ 270.883340][T15056] should_fail_ex.cold+0x5/0xa [ 270.883357][T15056] _copy_from_iter+0x1f4/0x1690 [ 270.883372][T15056] ? __pfx__copy_from_iter+0x10/0x10 [ 270.883382][T15056] ? kasan_save_track+0x14/0x30 [ 270.883398][T15056] ? __kasan_kmalloc+0xaa/0xb0 [ 270.883414][T15056] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 270.883428][T15056] ? configfs_write_iter+0x388/0x4e0 [ 270.883444][T15056] configfs_write_iter+0xb3/0x4e0 [ 270.883458][T15056] vfs_write+0x6af/0x1050 [ 270.883473][T15056] ? __pfx_configfs_write_iter+0x10/0x10 [ 270.883540][T15056] ? __pfx_vfs_write+0x10/0x10 [ 270.883555][T15056] ? find_held_lock+0x2b/0x80 [ 270.883577][T15056] ksys_write+0x12a/0x250 [ 270.883592][T15056] ? __pfx_ksys_write+0x10/0x10 [ 270.883648][T15056] do_syscall_64+0x123/0x790 [ 270.883672][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.883684][T15056] RIP: 0033:0x7f02d6b9e0d9 [ 270.883695][T15056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.883705][T15056] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.883719][T15056] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 270.883726][T15056] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000004 [ 270.883732][T15056] RBP: 00007f02d7a56090 R08: 0000000000000000 R09: 0000000000000000 [ 270.883738][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.883745][T15056] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 270.883762][T15056] [ 270.947623][ T5833] usb 11-1: USB disconnect, device number 16 [ 270.966187][ T5833] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 270.999721][T15064] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 271.003469][T15064] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 271.006533][T15064] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 271.017352][T15064] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 271.022866][T15064] udc dummy_udc.0: failed to start g1: -22 [ 271.025411][T15064] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 271.030800][T15064] UDC core: g1: couldn't find an available UDC or it's busy [ 271.104193][T15069] __nla_validate_parse: 2 callbacks suppressed [ 271.104215][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 271.309963][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.373908][T15091] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 271.378067][T15091] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 271.382886][T15091] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 271.385509][T15091] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 271.394522][T15091] udc dummy_udc.0: failed to start g1: -22 [ 271.396672][T15091] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 271.402312][T15091] UDC core: g1: couldn't find an available UDC or it's busy [ 271.487249][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3259'. [ 271.493223][T15096] MTRR 2 not used [ 271.504189][T15096] jffs2: notice: (15096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 271.531899][T15101] bond5: (slave veth0_to_bond): Releasing backup interface [ 271.570965][T15104] FAULT_INJECTION: forcing a failure. [ 271.570965][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 271.574843][T15104] CPU: 3 UID: 0 PID: 15104 Comm: syz.7.3261 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.574861][T15104] Tainted: [L]=SOFTLOCKUP [ 271.574865][T15104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.574872][T15104] Call Trace: [ 271.574876][T15104] [ 271.574881][T15104] dump_stack_lvl+0x100/0x190 [ 271.574901][T15104] should_fail_ex.cold+0x5/0xa [ 271.574917][T15104] should_failslab+0xc2/0x120 [ 271.574935][T15104] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 271.574952][T15104] ? __d_alloc+0x35/0xa50 [ 271.574966][T15104] __d_alloc+0x35/0xa50 [ 271.574979][T15104] d_alloc_pseudo+0x1c/0xc0 [ 271.574994][T15104] alloc_file_pseudo+0x118/0x290 [ 271.575006][T15104] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 271.575018][T15104] ? hugetlbfs_get_inode+0x3f5/0x700 [ 271.575034][T15104] ? __mutex_unlock_slowpath+0x35d/0x930 [ 271.575050][T15104] hugetlb_file_setup+0x2a8/0x5b0 [ 271.575068][T15104] ksys_mmap_pgoff+0x242/0x610 [ 271.575086][T15104] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 271.575102][T15104] ? fput+0x7c/0x100 [ 271.575118][T15104] ? ksys_write+0x1ac/0x250 [ 271.575132][T15104] ? __pfx_ksys_write+0x10/0x10 [ 271.575148][T15104] __x64_sys_mmap+0x125/0x190 [ 271.575168][T15104] do_syscall_64+0x123/0x790 [ 271.575181][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.575193][T15104] RIP: 0033:0x7ff7f679e0d9 [ 271.575203][T15104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.575214][T15104] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 271.575225][T15104] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 271.575232][T15104] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000200000800000 [ 271.575239][T15104] RBP: 00007ff7f7701090 R08: ffffffffffffffff R09: 0000000000000000 [ 271.575248][T15104] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 271.575255][T15104] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 271.575269][T15104] [ 271.745923][T15116] jffs2: notice: (15116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 271.764299][T15119] FAULT_INJECTION: forcing a failure. [ 271.764299][T15119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.770533][T15119] CPU: 3 UID: 0 PID: 15119 Comm: syz.4.3267 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.770558][T15119] Tainted: [L]=SOFTLOCKUP [ 271.770564][T15119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.770573][T15119] Call Trace: [ 271.770580][T15119] [ 271.770587][T15119] dump_stack_lvl+0x100/0x190 [ 271.770617][T15119] should_fail_ex.cold+0x5/0xa [ 271.770642][T15119] _copy_from_user+0x2e/0xd0 [ 271.770672][T15119] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 271.770699][T15119] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 271.770729][T15119] do_sock_getsockopt+0x530/0x6e0 [ 271.770749][T15119] ? __lock_acquire+0x4c5/0x1ec0 [ 271.770779][T15119] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 271.770809][T15119] ? find_held_lock+0x2b/0x80 [ 271.770842][T15119] ? __fget_files+0x21f/0x3d0 [ 271.770875][T15119] __sys_getsockopt+0x148/0x260 [ 271.770897][T15119] ? __x64_sys_getsockopt+0xbd/0x160 [ 271.770912][T15119] __x64_sys_getsockopt+0xbd/0x160 [ 271.770928][T15119] ? do_syscall_64+0xae/0x790 [ 271.770947][T15119] ? lockdep_hardirqs_on+0x7d/0x110 [ 271.770971][T15119] do_syscall_64+0x123/0x790 [ 271.770993][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.771012][T15119] RIP: 0033:0x7f02d6b9e0d9 [ 271.771029][T15119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.771045][T15119] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 271.771062][T15119] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 271.771072][T15119] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000004 [ 271.771083][T15119] RBP: 00007f02d7a56090 R08: 0000200000000080 R09: 0000000000000000 [ 271.771094][T15119] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 271.771105][T15119] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 271.771138][T15119] [ 271.869025][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.884379][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3268'. [ 271.887414][T15123] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 271.973583][T15127] lo speed is unknown, defaulting to 1000 [ 272.154097][T15135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.264543][T15144] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3275'. [ 272.329495][T15148] FAULT_INJECTION: forcing a failure. [ 272.329495][T15148] name failslab, interval 1, probability 0, space 0, times 0 [ 272.337576][T15148] CPU: 0 UID: 0 PID: 15148 Comm: syz.8.3277 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.337606][T15148] Tainted: [L]=SOFTLOCKUP [ 272.337613][T15148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.337625][T15148] Call Trace: [ 272.337632][T15148] [ 272.337640][T15148] dump_stack_lvl+0x100/0x190 [ 272.337669][T15148] should_fail_ex.cold+0x5/0xa [ 272.337694][T15148] should_failslab+0xc2/0x120 [ 272.337722][T15148] __kmalloc_cache_noprof+0x91/0x6b0 [ 272.337746][T15148] ? bus_add_driver+0x92/0x5b0 [ 272.337778][T15148] bus_add_driver+0x92/0x5b0 [ 272.337809][T15148] driver_register+0x1e2/0x360 [ 272.337833][T15148] usb_gadget_register_driver_owner+0x132/0x210 [ 272.337863][T15148] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 272.337893][T15148] configfs_write_iter+0x302/0x4e0 [ 272.337919][T15148] vfs_write+0x6af/0x1050 [ 272.337942][T15148] ? __pfx_configfs_write_iter+0x10/0x10 [ 272.337963][T15148] ? __pfx_vfs_write+0x10/0x10 [ 272.337984][T15148] ? find_held_lock+0x2b/0x80 [ 272.338023][T15148] ksys_write+0x12a/0x250 [ 272.338045][T15148] ? __pfx_ksys_write+0x10/0x10 [ 272.338074][T15148] do_syscall_64+0x123/0x790 [ 272.338097][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.338117][T15148] RIP: 0033:0x7fcb0619e0d9 [ 272.338132][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.338147][T15148] RSP: 002b:00007fcb070f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.338171][T15148] RAX: ffffffffffffffda RBX: 00007fcb06425fa0 RCX: 00007fcb0619e0d9 [ 272.338183][T15148] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000004 [ 272.338194][T15148] RBP: 00007fcb070f3090 R08: 0000000000000000 R09: 0000000000000000 [ 272.338205][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.338217][T15148] R13: 00007fcb06426038 R14: 00007fcb06425fa0 R15: 00007fff6dd57188 [ 272.338241][T15148] [ 272.338249][T15148] UDC core: g1: driver registration failed: -12 [ 272.379314][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3279'. [ 272.535514][T15159] sctp: [Deprecated]: syz.8.3282 (pid 15159) Use of int in max_burst socket option deprecated. [ 272.535514][T15159] Use struct sctp_assoc_value instead [ 272.649859][T15168] netlink: 'syz.7.3284': attribute type 11 has an invalid length. [ 272.723692][T15173] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3286'. [ 272.745157][T15165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.824888][T15177] kAFS: Can only specify source 'none' with -o dyn [ 272.920117][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.967175][T15183] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3290'. [ 272.986752][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3291'. [ 273.111964][T15193] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3295'. [ 273.360483][T15214] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3302'. [ 273.605704][T15237] overlay: ./file1 is not a directory [ 273.738609][ T1360] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 273.898886][ T1360] usb 12-1: Using ep0 maxpacket: 32 [ 273.900501][T15258] IPv6: syztnl0: Disabled Multicast RS [ 273.949632][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.966497][T15265] futex_wake_op: syz.8.3321 tries to shift op by 144; fix this program [ 273.976340][T15266] loop2: detected capacity change from 0 to 7 [ 273.980850][T15266] Dev loop2: unable to read RDB block 7 [ 273.982961][T15266] loop2: unable to read partition table [ 273.985505][T15266] loop2: partition table beyond EOD, truncated [ 273.987792][T15266] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.031040][ T1360] usb 12-1: unable to get BOS descriptor or descriptor too short [ 274.039413][ T1360] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 274.048975][ T1360] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 274.057292][ T1360] usb 12-1: can't read configurations, error -71 [ 274.195721][T15278] overlay: ./file1 is not a directory [ 274.354262][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.511894][T15284] FAULT_INJECTION: forcing a failure. [ 274.511894][T15284] name failslab, interval 1, probability 0, space 0, times 0 [ 274.517008][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.8.3328 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.517038][T15284] Tainted: [L]=SOFTLOCKUP [ 274.517044][T15284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.517056][T15284] Call Trace: [ 274.517063][T15284] [ 274.517071][T15284] dump_stack_lvl+0x100/0x190 [ 274.517115][T15284] should_fail_ex.cold+0x5/0xa [ 274.517140][T15284] should_failslab+0xc2/0x120 [ 274.517174][T15284] __kmalloc_noprof+0xfc/0x820 [ 274.517199][T15284] ? tomoyo_encode2+0xfb/0x3c0 [ 274.517236][T15284] tomoyo_encode2+0xfb/0x3c0 [ 274.517262][T15284] ? __get_fs_type+0xe3/0x200 [ 274.517288][T15284] tomoyo_encode+0x29/0x50 [ 274.517314][T15284] tomoyo_mount_acl+0x388/0x8b0 [ 274.517339][T15284] ? is_bpf_text_address+0x8a/0x1a0 [ 274.517359][T15284] ? is_bpf_text_address+0x8a/0x1a0 [ 274.517380][T15284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.517406][T15284] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 274.517432][T15284] ? kernel_text_address+0x8d/0x100 [ 274.517478][T15284] ? unwind_get_return_address+0x59/0xa0 [ 274.517501][T15284] ? arch_stack_walk+0xa6/0xf0 [ 274.517543][T15284] ? tomoyo_domain+0xb2/0x150 [ 274.517562][T15284] ? tomoyo_profile+0x47/0x60 [ 274.517584][T15284] tomoyo_mount_permission+0x214/0x460 [ 274.517610][T15284] ? tomoyo_mount_permission+0x1f6/0x460 [ 274.517638][T15284] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 274.517681][T15284] security_sb_mount+0xdd/0x270 [ 274.517706][T15284] path_mount+0x158/0x24c0 [ 274.517730][T15284] ? __pfx_path_mount+0x10/0x10 [ 274.517758][T15284] ? lockdep_hardirqs_on+0x7d/0x110 [ 274.517794][T15284] ? putname+0xb1/0x110 [ 274.517813][T15284] ? kmem_cache_free+0x127/0x6b0 [ 274.517849][T15284] ? __x64_sys_mount+0x293/0x310 [ 274.517868][T15284] __x64_sys_mount+0x293/0x310 [ 274.517889][T15284] ? __pfx___x64_sys_mount+0x10/0x10 [ 274.517917][T15284] do_syscall_64+0x123/0x790 [ 274.517939][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.517959][T15284] RIP: 0033:0x7fcb0619e0d9 [ 274.517975][T15284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.517992][T15284] RSP: 002b:00007fcb070f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.518011][T15284] RAX: ffffffffffffffda RBX: 00007fcb06425fa0 RCX: 00007fcb0619e0d9 [ 274.518023][T15284] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 0000000000000000 [ 274.518035][T15284] RBP: 00007fcb070f3090 R08: 0000200000000d00 R09: 0000000000000000 [ 274.518046][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.518057][T15284] R13: 00007fcb06426038 R14: 00007fcb06425fa0 R15: 00007fff6dd57188 [ 274.518084][T15284] [ 274.600691][ T42] kauditd_printk_skb: 396 callbacks suppressed [ 274.600708][ T42] audit: type=1800 audit(274.516:5499): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 274.647799][ T42] audit: type=1800 audit(274.566:5500): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 274.664659][ T42] audit: type=1800 audit(274.596:5501): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16645 res=0 errno=0 [ 274.669985][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.678566][ T42] audit: type=1400 audit(274.606:5502): avc: denied { allowed } for pid=15296 comm="syz.7.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 274.687724][ T42] audit: type=1400 audit(274.616:5503): avc: denied { create } for pid=15298 comm="syz.6.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 274.709837][ T42] audit: type=1800 audit(274.626:5504): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 274.716376][ T42] audit: type=1400 audit(274.626:5505): avc: denied { ioctl } for pid=15298 comm="syz.6.3335" path="socket:[100409]" dev="sockfs" ino=100409 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.725322][ T42] audit: type=1800 audit(274.626:5506): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 274.731680][ T42] audit: type=1400 audit(274.666:5507): avc: denied { sys_module } for pid=15298 comm="syz.6.3335" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.740453][ T42] audit: type=1400 audit(274.676:5508): avc: denied { create } for pid=15296 comm="syz.7.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.809084][T15311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 274.814803][T15313] ublk_ctrl_add_dev: invalid recovery flags 10 [ 274.908696][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.989915][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.033968][T15327] FAULT_INJECTION: forcing a failure. [ 275.033968][T15327] name failslab, interval 1, probability 0, space 0, times 0 [ 275.041057][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.6.3343 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.041084][T15327] Tainted: [L]=SOFTLOCKUP [ 275.041091][T15327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.041102][T15327] Call Trace: [ 275.041108][T15327] [ 275.041116][T15327] dump_stack_lvl+0x100/0x190 [ 275.041146][T15327] should_fail_ex.cold+0x5/0xa [ 275.041171][T15327] should_failslab+0xc2/0x120 [ 275.041198][T15327] __kmalloc_cache_noprof+0x91/0x6b0 [ 275.041220][T15327] ? find_held_lock+0x2b/0x80 [ 275.041241][T15327] ? alloc_fs_context+0x57/0xf40 [ 275.041268][T15327] alloc_fs_context+0x57/0xf40 [ 275.041287][T15327] ? __get_fs_type+0xe3/0x200 [ 275.041310][T15327] path_mount+0xdbd/0x24c0 [ 275.041335][T15327] ? __pfx_path_mount+0x10/0x10 [ 275.041353][T15327] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.041375][T15327] ? putname+0xb1/0x110 [ 275.041391][T15327] ? kmem_cache_free+0x127/0x6b0 [ 275.041420][T15327] ? __x64_sys_mount+0x293/0x310 [ 275.041440][T15327] __x64_sys_mount+0x293/0x310 [ 275.041456][T15327] ? __pfx___x64_sys_mount+0x10/0x10 [ 275.041483][T15327] do_syscall_64+0x123/0x790 [ 275.041504][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.041524][T15327] RIP: 0033:0x7f1023b9e0d9 [ 275.041539][T15327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.041557][T15327] RSP: 002b:00007f1024ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.041576][T15327] RAX: ffffffffffffffda RBX: 00007f1023e25fa0 RCX: 00007f1023b9e0d9 [ 275.041588][T15327] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 0000000000000000 [ 275.041600][T15327] RBP: 00007f1024ac7090 R08: 0000200000000d00 R09: 0000000000000000 [ 275.041612][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.041623][T15327] R13: 00007f1023e26038 R14: 00007f1023e25fa0 R15: 00007fffa546b558 [ 275.041647][T15327] [ 275.237621][T15334] 8021q: VLANs not supported on ip6gre0 [ 275.871715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.875759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.989261][T15389] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 275.993222][T15389] syzkaller0: left promiscuous mode [ 275.995422][T15389] syzkaller0: left allmulticast mode [ 276.008027][T15389] bond1: left promiscuous mode [ 276.015434][T15389] ip6gre1: left promiscuous mode [ 276.036764][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.126574][T15397] netlink: 'syz.8.3367': attribute type 8 has an invalid length. [ 276.147436][T15397] __nla_validate_parse: 9 callbacks suppressed [ 276.147447][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3367'. [ 276.196163][T15352] ceph: No mds server is up or the cluster is laggy [ 276.201156][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.210492][T15347] ceph: No mds server is up or the cluster is laggy [ 276.218321][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.348065][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 276.365808][T15415] netlink: 'syz.8.3376': attribute type 1 has an invalid length. [ 276.375107][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 276.396809][T15417] x_tables: duplicate entry at hook 2 [ 276.588687][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.116402][T15458] futex_wake_op: syz.6.3395 tries to shift op by 144; fix this program [ 277.900581][T15515] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3422'. [ 277.919075][T15517] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3421'. [ 277.930662][T15517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3421'. [ 278.072437][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3427'. [ 278.140608][T15532] bridge_slave_0: left allmulticast mode [ 278.142678][T15532] bridge_slave_0: left promiscuous mode [ 278.144760][T15532] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.153618][T15532] bridge_slave_1: left allmulticast mode [ 278.155639][T15532] bridge_slave_1: left promiscuous mode [ 278.157588][T15532] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.164378][T15532] bond0: (slave bond_slave_0): Releasing backup interface [ 278.174879][T15532] bond0: (slave bond_slave_1): Releasing backup interface [ 278.201601][T15532] team0: Port device team_slave_0 removed [ 278.211680][T15532] team0: Port device team_slave_1 removed [ 278.215049][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.220284][T15532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.225776][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.230302][T15532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.238439][ T62] lo speed is unknown, defaulting to 1000 [ 278.854666][T15548] Unsupported ieee802154 address type: 0 [ 279.137570][T15562] lo speed is unknown, defaulting to 1000 [ 279.148679][ C1] net_ratelimit: 1055 callbacks suppressed [ 279.148695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.153924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.226450][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.596187][ T42] kauditd_printk_skb: 307 callbacks suppressed [ 279.596199][ T42] audit: type=1800 audit(279.526:5816): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 279.638240][ T42] audit: type=1800 audit(279.566:5817): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 279.658667][ T42] audit: type=1800 audit(279.586:5818): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 279.691199][ T42] audit: type=1400 audit(279.626:5819): avc: denied { name_bind } for pid=15594 comm="syz.8.3454" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 279.703206][ T42] audit: type=1400 audit(279.626:5820): avc: denied { name_connect } for pid=15594 comm="syz.8.3454" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 279.714627][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.718817][ T42] audit: type=1800 audit(279.636:5821): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 279.727223][ T42] audit: type=1800 audit(279.646:5822): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 279.735783][ T42] audit: type=1800 audit(279.656:5823): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 279.743953][ T42] audit: type=1800 audit(279.666:5824): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 279.757743][ T42] audit: type=1800 audit(279.676:5825): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16645 res=0 errno=0 [ 279.994183][ T41] lo speed is unknown, defaulting to 1000 [ 279.996536][ T41] sz1: Port: 1 Link DOWN [ 280.006125][ T41] lo speed is unknown, defaulting to 1000 [ 280.018740][ T5777] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.021707][ T5777] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.024620][ T5777] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.027435][ T5777] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.109207][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.117339][T15616] FAULT_INJECTION: forcing a failure. [ 280.117339][T15616] name fail_futex, interval 1, probability 0, space 0, times 0 [ 280.122545][T15616] CPU: 3 UID: 0 PID: 15616 Comm: syz.8.3462 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.122584][T15616] Tainted: [L]=SOFTLOCKUP [ 280.122590][T15616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.122601][T15616] Call Trace: [ 280.122610][T15616] [ 280.122617][T15616] dump_stack_lvl+0x100/0x190 [ 280.122668][T15616] should_fail_ex.cold+0x5/0xa [ 280.122693][T15616] get_futex_key+0x1d0/0x14f0 [ 280.122714][T15616] ? __pfx_get_futex_key+0x10/0x10 [ 280.122732][T15616] ? trace_save_cmdline+0x2d7/0x490 [ 280.122757][T15616] ? __pfx_trace_save_cmdline+0x10/0x10 [ 280.122788][T15616] futex_wait_setup+0x91/0x540 [ 280.122819][T15616] __futex_wait+0x19f/0x300 [ 280.122844][T15616] ? __pfx___futex_wait+0x10/0x10 [ 280.122867][T15616] ? __pfx_try_to_wake_up+0x10/0x10 [ 280.122885][T15616] ? futex_hash+0x311/0x400 [ 280.122903][T15616] ? __pfx_futex_wake_mark+0x10/0x10 [ 280.122929][T15616] ? find_held_lock+0x2b/0x80 [ 280.122948][T15616] ? futex_wake+0x4ea/0x5e0 [ 280.122978][T15616] futex_wait+0xe6/0x370 [ 280.123004][T15616] ? __pfx_futex_wait+0x10/0x10 [ 280.123035][T15616] ? rcu_read_lock_any_held+0x6a/0x90 [ 280.123059][T15616] ? find_held_lock+0x2b/0x80 [ 280.123079][T15616] ? ksys_write+0x190/0x250 [ 280.123110][T15616] ? ksys_write+0x190/0x250 [ 280.123134][T15616] do_futex+0x265/0x440 [ 280.123155][T15616] ? __pfx_do_futex+0x10/0x10 [ 280.123175][T15616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.123209][T15616] __x64_sys_futex+0x34f/0x4d0 [ 280.123233][T15616] ? fput+0x7c/0x100 [ 280.123262][T15616] ? __pfx___x64_sys_futex+0x10/0x10 [ 280.123280][T15616] ? ksys_write+0x1ac/0x250 [ 280.123301][T15616] ? __pfx_ksys_write+0x10/0x10 [ 280.123330][T15616] do_syscall_64+0x123/0x790 [ 280.123350][T15616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.123368][T15616] RIP: 0033:0x7fcb0619e0d9 [ 280.123386][T15616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.123404][T15616] RSP: 002b:00007fcb070f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.123437][T15616] RAX: ffffffffffffffda RBX: 00007fcb06425fa8 RCX: 00007fcb0619e0d9 [ 280.123451][T15616] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb06425fa8 [ 280.123463][T15616] RBP: 00007fcb06425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.123475][T15616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.123486][T15616] R13: 00007fcb06426038 R14: 00007fff6dd570a0 R15: 00007fff6dd57188 [ 280.123513][T15616] [ 280.279357][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.508925][ T3271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.541358][T15643] lo speed is unknown, defaulting to 1000 [ 280.687546][T15650] SELinux: ebitmap: truncated map [ 280.695501][T15650] SELinux: failed to load policy [ 280.760249][T15641] infiniband syz0: set active [ 280.765435][T15641] infiniband syz0: added ipvlan1 [ 280.782891][T15641] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 280.790154][T15641] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 280.795823][T15641] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 280.826758][T15652] lo speed is unknown, defaulting to 1000 [ 280.866036][T15641] RDS/IB: syz0: added [ 280.871622][T15641] smc: adding ib device syz0 with port count 1 [ 280.875309][T15641] smc: ib device syz0 port 1 has no pnetid [ 280.908934][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.321147][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.421991][T15673] tun0: tun_chr_ioctl cmd 35108 [ 281.443646][T15677] netlink: 'syz.8.3486': attribute type 10 has an invalid length. [ 281.455067][T15677] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 281.743676][T15704] db_root: cannot open: ./dev/mapper/control [ 281.750945][T15704] db_root: not a directory: ./dev/mapper/control [ 282.348779][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.647338][T15742] jffs2: notice: (15742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 282.654196][T15742] FAULT_INJECTION: forcing a failure. [ 282.654196][T15742] name failslab, interval 1, probability 0, space 0, times 0 [ 282.662484][T15742] CPU: 3 UID: 0 PID: 15742 Comm: syz.7.3513 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.662503][T15742] Tainted: [L]=SOFTLOCKUP [ 282.662507][T15742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.662514][T15742] Call Trace: [ 282.662518][T15742] [ 282.662522][T15742] dump_stack_lvl+0x100/0x190 [ 282.662543][T15742] should_fail_ex.cold+0x5/0xa [ 282.662559][T15742] should_failslab+0xc2/0x120 [ 282.662577][T15742] __kmalloc_noprof+0xfc/0x820 [ 282.662592][T15742] ? rcu_is_watching+0x13/0xc0 [ 282.662605][T15742] ? tomoyo_realpath_from_path+0xb6/0x690 [ 282.662627][T15742] tomoyo_realpath_from_path+0xb6/0x690 [ 282.662648][T15742] tomoyo_path_number_perm+0x23c/0x580 [ 282.662663][T15742] ? tomoyo_path_number_perm+0x22e/0x580 [ 282.662694][T15742] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.662716][T15742] ? __lock_acquire+0x4c5/0x1ec0 [ 282.662740][T15742] ? current_check_access_path+0x269/0x430 [ 282.662755][T15742] ? __pfx_current_check_access_path+0x10/0x10 [ 282.662770][T15742] ? d_alloc_parallel+0x9f6/0x14c0 [ 282.662791][T15742] tomoyo_path_mknod+0x164/0x190 [ 282.662809][T15742] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 282.662827][T15742] ? __d_lookup+0x25c/0x4a0 [ 282.662845][T15742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.662873][T15742] security_path_mknod+0x161/0x300 [ 282.662891][T15742] may_o_create+0x30/0x3a0 [ 282.662906][T15742] lookup_open+0xe35/0x1990 [ 282.662925][T15742] path_openat+0xa2c/0x2440 [ 282.662944][T15742] ? __pfx_path_openat+0x10/0x10 [ 282.662964][T15742] do_file_open+0x20e/0x430 [ 282.662986][T15742] ? __pfx_do_file_open+0x10/0x10 [ 282.663029][T15742] ? _raw_spin_unlock+0x28/0x50 [ 282.663051][T15742] ? alloc_fd+0x471/0x7a0 [ 282.663072][T15742] do_sys_openat2+0x10f/0x1e0 [ 282.663083][T15742] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.663095][T15742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.663108][T15742] ? __fget_files+0x21f/0x3d0 [ 282.663126][T15742] __x64_sys_openat+0x12d/0x210 [ 282.663138][T15742] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.663148][T15742] ? ksys_write+0x1ac/0x250 [ 282.663167][T15742] do_syscall_64+0x123/0x790 [ 282.663181][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.663192][T15742] RIP: 0033:0x7ff7f679e0d9 [ 282.663203][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.663218][T15742] RSP: 002b:00007ff7f7701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.663234][T15742] RAX: ffffffffffffffda RBX: 00007ff7f6a25fa0 RCX: 00007ff7f679e0d9 [ 282.663245][T15742] RDX: 0000000000000042 RSI: 0000200000000400 RDI: 0000000000000003 [ 282.663256][T15742] RBP: 00007ff7f7701090 R08: 0000000000000000 R09: 0000000000000000 [ 282.663264][T15742] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 282.663270][T15742] R13: 00007ff7f6a26038 R14: 00007ff7f6a25fa0 R15: 00007ffc6fc54038 [ 282.663290][T15742] [ 282.663309][T15742] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.883198][T15751] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 283.164889][T15769] netlink: 'syz.7.3523': attribute type 11 has an invalid length. [ 283.167510][T15769] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3523'. [ 284.440437][ T34] net_ratelimit: 7 callbacks suppressed [ 284.440456][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.475384][T15840] lo: entered allmulticast mode [ 284.738991][ T24] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 284.815631][ T42] kauditd_printk_skb: 265 callbacks suppressed [ 284.815731][ T42] audit: type=1800 audit(284.736:6091): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16645 res=0 errno=0 [ 284.888548][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 284.890965][ T24] usb 11-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 284.894861][ T24] usb 11-1: config 0 has an invalid interface number: 31 but max is 0 [ 284.897578][ T24] usb 11-1: config 0 has no interface number 0 [ 284.902618][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.905488][ T24] usb 11-1: Product: syz [ 284.906921][ T24] usb 11-1: Manufacturer: syz [ 284.908846][ T24] usb 11-1: SerialNumber: syz [ 284.917346][ T24] usb 11-1: config 0 descriptor?? [ 284.921003][ T42] audit: type=1800 audit(284.856:6092): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294709 res=0 errno=0 [ 284.927569][ T42] audit: type=1800 audit(284.856:6093): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=294741 res=0 errno=0 [ 284.934253][ T42] audit: type=1800 audit(284.856:6094): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=294716 res=0 errno=0 [ 284.940904][ T42] audit: type=1800 audit(284.856:6095): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=294717 res=0 errno=0 [ 284.987720][ T42] audit: type=1800 audit(284.916:6096): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 285.016454][T15852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3557'. [ 285.074143][ T42] audit: type=1800 audit(285.006:6097): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 285.131397][ T42] audit: type=1800 audit(285.066:6098): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 285.152323][ T42] audit: type=1800 audit(285.086:6099): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 285.177072][ T42] audit: type=1400 audit(285.106:6100): avc: denied { setopt } for pid=15857 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.290331][T15865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3561'. [ 285.469108][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.201272][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.223267][T15910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.228168][T15910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.233544][T15910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.236286][T15910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.239523][T15910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.245493][T15908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.463832][T15926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15926 comm=syz.4.3589 [ 286.468161][T15926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15926 comm=syz.4.3589 [ 286.478916][T15926] netlink: 'syz.4.3589': attribute type 29 has an invalid length. [ 286.510487][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.682250][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3594'. [ 287.241515][T15973] syzkaller0: entered promiscuous mode [ 287.243487][T15973] syzkaller0: entered allmulticast mode [ 287.418050][ T24] uvcvideo 11-1:0.31: probe with driver uvcvideo failed with error -22 [ 287.421314][T15839] lo: left allmulticast mode [ 287.438428][ T24] usb 11-1: USB disconnect, device number 17 [ 287.720291][T15993] syzkaller0: entered promiscuous mode [ 287.727052][T15993] syzkaller0: entered allmulticast mode [ 287.996135][T16013] netlink: 'syz.7.3621': attribute type 4 has an invalid length. [ 289.632209][ T34] net_ratelimit: 6 callbacks suppressed [ 289.632223][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.824416][ T42] kauditd_printk_skb: 148 callbacks suppressed [ 289.824435][ T42] audit: type=1800 audit(289.756:6249): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16774 res=0 errno=0 [ 289.842173][ T42] audit: type=1400 audit(289.756:6250): avc: denied { mounton } for pid=16018 comm="syz.8.3624" path="/117/dev" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.854543][ T42] audit: type=1400 audit(289.756:6251): avc: denied { mount } for pid=16018 comm="syz.8.3624" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 289.865461][ T42] audit: type=1400 audit(289.756:6252): avc: denied { read write } for pid=16018 comm="syz.8.3624" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.877258][ T42] audit: type=1400 audit(289.756:6253): avc: denied { open } for pid=16018 comm="syz.8.3624" path="/117/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.888612][ T42] audit: type=1400 audit(289.756:6254): avc: denied { ioctl } for pid=16018 comm="syz.8.3624" path="/117/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.899903][ T42] audit: type=1400 audit(289.766:6255): avc: denied { connect } for pid=16020 comm="syz.4.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.907758][ T42] audit: type=1800 audit(289.776:6256): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16645 res=0 errno=0 [ 289.916339][ T42] audit: type=1800 audit(289.786:6257): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16258 res=0 errno=0 [ 289.924296][ T42] audit: type=1800 audit(289.826:6258): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 290.100077][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 290.107710][ T24] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 290.223224][T16050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3634'. [ 290.233232][T16052] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3635'. [ 290.254208][T16054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3637'. [ 290.269502][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.272000][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.507072][T16087] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3651'. [ 291.180947][T16125] ------------[ cut here ]------------ [ 291.183105][T16125] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 291.187818][T16125] WARNING: kernel/sched/core.c:9157 at __might_sleep+0x94/0xc0, CPU#0: syz.4.3668/16125 [ 291.192162][T16125] Modules linked in: [ 291.193766][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.4.3668 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.198367][T16125] Tainted: [L]=SOFTLOCKUP [ 291.200165][T16125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.204042][T16125] RIP: 0010:__might_sleep+0x97/0xc0 [ 291.206057][T16125] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 291.213475][T16125] RSP: 0018:ffffc9000c797b88 EFLAGS: 00010282 [ 291.215831][T16125] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 291.219037][T16125] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 291.222188][T16125] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 291.225335][T16125] R10: ffffc9000c797d40 R11: 0000000000000000 R12: ffff88802b1d8000 [ 291.228557][T16125] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0ecb0 [ 291.231681][T16125] FS: 00007f02d7a566c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 291.235156][T16125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.237775][T16125] CR2: 00007f02d7a55ff8 CR3: 000000004aa1e000 CR4: 0000000000352ef0 [ 291.241134][T16125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.244338][T16125] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 291.247418][T16125] Call Trace: [ 291.248860][T16125] [ 291.249997][T16125] __mutex_lock+0x10e/0x1bc0 [ 291.251893][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.253972][T16125] ? find_held_lock+0x2b/0x80 [ 291.255839][T16125] ? futex_hash_allocate+0x6fc/0x1120 [ 291.257974][T16125] ? __pfx___mutex_lock+0x10/0x10 [ 291.260068][T16125] ? do_raw_spin_lock+0x128/0x260 [ 291.262049][T16125] ? find_held_lock+0x2b/0x80 [ 291.263861][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.265513][T16125] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.267212][T16125] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.269345][T16125] ? prepare_to_wait_event+0xbe/0x720 [ 291.271118][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.272990][T16125] futex_hash_allocate+0xd22/0x1120 [ 291.274680][T16125] ? __pfx_futex_hash_allocate+0x10/0x10 [ 291.276442][T16125] ? __pfx_var_wake_function+0x10/0x10 [ 291.278143][T16125] ? static_key_count+0x5a/0x70 [ 291.279761][T16125] futex_hash_prctl+0x1b8/0x390 [ 291.281276][T16125] __do_sys_prctl+0x16dd/0x2270 [ 291.282767][T16125] ? __pfx___do_sys_prctl+0x10/0x10 [ 291.284380][T16125] do_syscall_64+0x123/0x790 [ 291.285811][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.287637][T16125] RIP: 0033:0x7f02d6b9e0d9 [ 291.289124][T16125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.294972][T16125] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 291.297631][T16125] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 291.300229][T16125] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 291.302640][T16125] RBP: 00007f02d6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 291.305152][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.307576][T16125] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 291.311196][T16125] [ 291.312195][T16125] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.314495][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.4.3668 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.317878][T16125] Tainted: [L]=SOFTLOCKUP [ 291.319223][T16125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.322286][T16125] Call Trace: [ 291.323329][T16125] [ 291.324437][T16125] dump_stack_lvl+0x100/0x190 [ 291.326150][T16125] vpanic+0x553/0x970 [ 291.327565][T16125] ? __pfx_vpanic+0x10/0x10 [ 291.329297][T16125] panic+0xd1/0xe0 [ 291.330593][T16125] ? __pfx_panic+0x10/0x10 [ 291.332022][T16125] check_panic_on_warn.cold+0x19/0x34 [ 291.333682][T16125] ? __might_sleep+0x94/0xc0 [ 291.335066][T16125] __warn.cold+0x191/0x318 [ 291.336470][T16125] __report_bug+0x30f/0x440 [ 291.337891][T16125] ? __might_sleep+0x94/0xc0 [ 291.339194][T16125] ? __pfx___report_bug+0x10/0x10 [ 291.340750][T16125] ? lock_acquire+0x1b9/0x370 [ 291.342215][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.343872][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.345524][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.347184][T16125] ? mark_held_locks+0x40/0x70 [ 291.348693][T16125] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 291.350481][T16125] report_bug_entry+0xe2/0x290 [ 291.351987][T16125] ? __might_sleep+0x97/0xc0 [ 291.353420][T16125] handle_bug+0x1cd/0x2a0 [ 291.354758][T16125] exc_invalid_op+0x17/0x50 [ 291.356176][T16125] asm_exc_invalid_op+0x1a/0x20 [ 291.357726][T16125] RIP: 0010:__might_sleep+0x97/0xc0 [ 291.359334][T16125] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 291.365538][T16125] RSP: 0018:ffffc9000c797b88 EFLAGS: 00010282 [ 291.367422][T16125] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 291.369874][T16125] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 291.372319][T16125] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 291.374742][T16125] R10: ffffc9000c797d40 R11: 0000000000000000 R12: ffff88802b1d8000 [ 291.377186][T16125] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0ecb0 [ 291.379631][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.381302][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.383224][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.384989][T16125] ? __lock_acquire+0x4c5/0x1ec0 [ 291.386582][T16125] __mutex_lock+0x10e/0x1bc0 [ 291.388004][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.389557][T16125] ? find_held_lock+0x2b/0x80 [ 291.390978][T16125] ? futex_hash_allocate+0x6fc/0x1120 [ 291.392620][T16125] ? __pfx___mutex_lock+0x10/0x10 [ 291.394159][T16125] ? do_raw_spin_lock+0x128/0x260 [ 291.395700][T16125] ? find_held_lock+0x2b/0x80 [ 291.397159][T16125] ? prepare_to_wait_event+0x8d/0x720 [ 291.398822][T16125] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.400429][T16125] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.402221][T16125] ? prepare_to_wait_event+0xbe/0x720 [ 291.403844][T16125] ? futex_hash_allocate+0xd22/0x1120 [ 291.405500][T16125] futex_hash_allocate+0xd22/0x1120 [ 291.407093][T16125] ? __pfx_futex_hash_allocate+0x10/0x10 [ 291.408834][T16125] ? __pfx_var_wake_function+0x10/0x10 [ 291.410474][T16125] ? static_key_count+0x5a/0x70 [ 291.411963][T16125] futex_hash_prctl+0x1b8/0x390 [ 291.413446][T16125] __do_sys_prctl+0x16dd/0x2270 [ 291.414887][T16125] ? __pfx___do_sys_prctl+0x10/0x10 [ 291.416504][T16125] do_syscall_64+0x123/0x790 [ 291.417946][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.419743][T16125] RIP: 0033:0x7f02d6b9e0d9 [ 291.421117][T16125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.426678][T16125] RSP: 002b:00007f02d7a56028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 291.429128][T16125] RAX: ffffffffffffffda RBX: 00007f02d6e25fa0 RCX: 00007f02d6b9e0d9 [ 291.431456][T16125] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 291.433799][T16125] RBP: 00007f02d6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 291.436082][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.438424][T16125] R13: 00007f02d6e26038 R14: 00007f02d6e25fa0 R15: 00007ffe16c5e5b8 [ 291.440803][T16125] [ 291.442420][T16125] Kernel Offset: disabled [ 291.443697][T16125] Rebooting in 86400 seconds..