last executing test programs: 3.671633671s ago: executing program 2 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x80) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_dellink={0x50, 0x11, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x54020, 0x1108}, [@IFLA_IFALIASn={0x4}, @IFLA_MAP={0x24, 0xe, {0x3, 0x7, 0x8001, 0x4, 0xae, 0x10}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4004044) 3.671389484s ago: executing program 2 (id=457): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x5, 0x6a4c7e51a99b0a1c, 0x1, "", [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x2, 0x6, 0x0, 0x2d, {{0x8, 0x24, 0x6, 0x0, 0x0, "cf35ee"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x3, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x100, 0x98}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x2, [0xffff, 0x8]}, @country_functional={0x6, 0x24, 0x7, 0xe, 0x3e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x4f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0xf0, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x6, 0x0, 0xff, 0x1}, 0x17b, &(0x7f0000000200)={0x5, 0xf, 0x17b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xf, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "30f79a56e394d9c333f1aa56ebd0ed36"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "7ac5ee4258a24b55d676e9547b57539b"}, @generic={0xdc, 0x10, 0x4, "2de21976e76b970e4d361890a3fc8625fce7f7c31081d53807821c453f56f9a2a0bdc058c1f0ae8ecd04de9613a8fdcba2025e3106340da4d9c7aaf2a9aaef892c0c60b54c405fff5555dec7398a114f13368ff10ad15a86a790fc5c51376329d6e1fed27fcd3a4a78e8409ef9dadb712c5a468ab38a5dbc65f5a173096408bcb4bc5118c52060a7d79f63e22fb57a7be9b4a7f8fed4074e746aea4ae2a0a65ff3c32397b0f6fe7093d8dc5d1c5931c305cb35ddbe6b2af3503112b383d33947bedf098f45be49b83ccb5c8847fc2942fff310f293f920c6d2"}, @ssp_cap={0x18, 0x10, 0xa, 0x6f, 0x3, 0x7, 0x7800, 0xe, [0xc0, 0xcf, 0x1e]}, @generic={0x53, 0x10, 0x3, "8986fa4d85a677bce99acf150c6c9c3acd67210b910d402dded3b4c6cf98402add984d04c307fd8dedb3d98361f2135321467dec8d829b472eff5efd070d7e2d9754efbc8e723efaee34488c33b45924"}]}, 0x1, [{0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "ab1942c5ee516cb36428960ed455c297a51fafe983d5eba0bf34c2486474570dd2d59fd36deced3c409894a04e1a11fd6f45824be21e48f36f73f454b643f3ba4302b565a8b2beae3f44af9efcdcbb6f425b66e2d16b1d8be12fa6179da7a61bcc486df5f1d1ed79987cf3ca18d7ca0729bd0c29f2216782d7ef5f6c2f691616c329cb43c978cc24068de80d9b70cc148867b534f509f16a87ec6c5c920c6861467b895c48061c8421aa4dc189b0d2d82beb4968ac0ef8065b72f90ac0586c661586af43c76d248fd15bdf936fb377"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x0, 0xc3055af5d3c4ad03, 0x86, {0x86, 0xa, "a62073e0474be7d0970ba4f61dcca3e8747a5f57b0d596058a2ac36ced4e925c4c3396bcdfe3d75a3792ef386f5304e1f60a4b48fafbf6457a0e1a3fb9c4dfeea406d5fc2ae3d441f69efbfcd376c46b4361c7a9a4c87295cd3df4e5d7b144e8de6e1802191c68c0dcaf12ed2e91b41f158a8c69ef066f23a4e1b8b8030498702b94732b"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000700)={0x40, 0xd, 0x13, "416bcaf92062e382c6d66abe37becb4c54bd20"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}}) pipe(&(0x7f0000000300)) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) 1.980690881s ago: executing program 0 (id=479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@n={0x0, 0x10, @generic=0x4b, 0x2}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RRENAME(r2, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x34000) shutdown(r0, 0x0) 1.536408464s ago: executing program 0 (id=488): syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/179, 0xb3) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 1.095805931s ago: executing program 2 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1.058874445s ago: executing program 2 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000c6a2d"], 0x0) 1.039982735s ago: executing program 3 (id=483): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbff2510ffe50008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d61637674617030"], 0x3c}, 0x1, 0x0, 0x0, 0x44014}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2c4, r5, 0x201, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "75ac885fd502306dd2ad6e9133bb5b02d619cbc2a2764ce33312dca51b1a3b74e77fde40b4a755ebc738910d567984d65f9b0b0c09a75309ec6d0ccda1df458c4a8cf1e5bb4e401d7f204991f0e9caf45998dbaadbb50e6a0e1fb78b814f98dbbe1b25121ee251b749217f0f73336368f650e70ffa9d1e9b49f5cdf7658ef5ce4d39ab469c0274e5dcf697054cf02e8115a036e7e5544bdb09e1901f4543b6fa861e8fd716286931ecf8384e960023be6a4a59686655af30888b59c06be048ab5805f482d3a1d8605c692662aa783e6690d0aa1420de31c904ad57d22e17c7e723b119e0b92e"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8001}, @ETHTOOL_A_LINKMODES_OURS={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "5bf4e65e4822eef6e8c58b3d5131d79399884995a78f7a5161797f2f401af4a9fa0deae6144ff1eb8238031b258fe4a0cf5da0d735f6c1b3af892406ba5f4e2f4710338e4a25b02492531b62045ef0146b69f768f8532ed15a22a913462b1414907a750aaacb13793e26ebdb3091f58fe4796d92f883cf54585686a686e57d5d3a2516ebddb58994e8ddf9c8d31252b6b7d3d81b36be40fd9bad39e136718115faf3e59721ce8df3fd5840c3a4884d41835a56f7f119c5697f877e2837186c0deefdc3daa9dfb6"}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "be8cbceb5d31c45f74730ba4e872104b6c5a436a82c66c57543cbbd63d3027b3aa2c3ac48446bace2e40af0cb5cf47082af13e94b58346b32e3ef3717e59c48be1f21c55c2821e933ddfdbf82a402f4f25817417df2f5b78f43e0580"}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "7e75dbb187cbd89cede94bf39f6f79104250e86daee96d6cf3810c7c0b7b67e7ad054941a160f89442584daf1d391d29b2b7e1b6db9b0b2fd3ed745e1efac50955c837cf60d1e2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x70}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0x20008804) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000228000/0x2000)=nil, 0x1000, 0x3}) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/202, 0xca}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x81}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r8, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa5eb}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0xd0}, 0x0) 1.039480259s ago: executing program 2 (id=484): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x10200, 0x5e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000300)={0x2, @vbi={0x10000, 0x8, 0x50424752, 0x47425247, [0xfffffffe, 0xfff], [0x8000, 0xfffffffd], 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs', 0xa) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)="03000000330000000700000001000000", 0x33) 941.673308ms ago: executing program 0 (id=485): mkdir(&(0x7f0000000700)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./mysys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mysys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000001100)='0000:00:04.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mysys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000001300)='amd5536udc-pci', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000001700)='0000:00:04.0', 0xc) 917.075769ms ago: executing program 0 (id=486): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 917.004781ms ago: executing program 3 (id=487): connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) 909.374639ms ago: executing program 3 (id=489): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x1, 0x5d, 0x0, 0x3, 0xfd, 0x4, 0x56, 0x62, 0x7, 0x6, 0x9, 0x0, 0xfffffff9, 0x80d4, 0xa5, 0xa, 0x0, 0x0, '\x00', 0x16, 0x1ff}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)=0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) write$9p(r10, &(0x7f0000000140)="c84db206f5b52c548b2b691ae1fc7804aacac28f1d668b0bc19e95461b90090f32296969626aa18364f05e6b3e1e78d5a4cca763ffda18a3cbbbaaf10b3219fb5ca9a4b3119e1b3278516abf8ab9bc25452d4fc7269dd592ba51", 0x5a) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000000)={0x2, 0x2, 0x5fd69280, 0x6, 0x6, "2febb950ea33f268654a9e60dc6fcc71eb3150", 0x1, 0x9600}) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r12 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r11, 0x3, 0x142011, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r12, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r12, 0x2) 900.152208ms ago: executing program 0 (id=490): mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000001400)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='* ./export_dir 2000000000 8194 0 0 \n', 0x25) 866.563508ms ago: executing program 0 (id=491): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x5, 0x6a4c7e51a99b0a1c, 0x1, "", [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x2, 0x6, 0x0, 0x2d, {{0x8, 0x24, 0x6, 0x0, 0x0, "cf35ee"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x3, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x100, 0x98}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x2, [0xffff, 0x8]}, @country_functional={0x6, 0x24, 0x7, 0xe, 0x3e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x4f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0xf0, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x6, 0x0, 0xff, 0x1}, 0x17b, &(0x7f0000000200)={0x5, 0xf, 0x17b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xf, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "30f79a56e394d9c333f1aa56ebd0ed36"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "7ac5ee4258a24b55d676e9547b57539b"}, @generic={0xdc, 0x10, 0x4, "2de21976e76b970e4d361890a3fc8625fce7f7c31081d53807821c453f56f9a2a0bdc058c1f0ae8ecd04de9613a8fdcba2025e3106340da4d9c7aaf2a9aaef892c0c60b54c405fff5555dec7398a114f13368ff10ad15a86a790fc5c51376329d6e1fed27fcd3a4a78e8409ef9dadb712c5a468ab38a5dbc65f5a173096408bcb4bc5118c52060a7d79f63e22fb57a7be9b4a7f8fed4074e746aea4ae2a0a65ff3c32397b0f6fe7093d8dc5d1c5931c305cb35ddbe6b2af3503112b383d33947bedf098f45be49b83ccb5c8847fc2942fff310f293f920c6d2"}, @ssp_cap={0x18, 0x10, 0xa, 0x6f, 0x3, 0x7, 0x7800, 0xe, [0xc0, 0xcf, 0x1e]}, @generic={0x53, 0x10, 0x3, "8986fa4d85a677bce99acf150c6c9c3acd67210b910d402dded3b4c6cf98402add984d04c307fd8dedb3d98361f2135321467dec8d829b472eff5efd070d7e2d9754efbc8e723efaee34488c33b45924"}]}, 0x1, [{0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "ab1942c5ee516cb36428960ed455c297a51fafe983d5eba0bf34c2486474570dd2d59fd36deced3c409894a04e1a11fd6f45824be21e48f36f73f454b643f3ba4302b565a8b2beae3f44af9efcdcbb6f425b66e2d16b1d8be12fa6179da7a61bcc486df5f1d1ed79987cf3ca18d7ca0729bd0c29f2216782d7ef5f6c2f691616c329cb43c978cc24068de80d9b70cc148867b534f509f16a87ec6c5c920c6861467b895c48061c8421aa4dc189b0d2d82beb4968ac0ef8065b72f90ac0586c661586af43c76d248fd15bdf936fb377"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x0, 0xc3055af5d3c4ad03, 0x86, {0x86, 0xa, "a62073e0474be7d0970ba4f61dcca3e8747a5f57b0d596058a2ac36ced4e925c4c3396bcdfe3d75a3792ef386f5304e1f60a4b48fafbf6457a0e1a3fb9c4dfeea406d5fc2ae3d441f69efbfcd376c46b4361c7a9a4c87295cd3df4e5d7b144e8de6e1802191c68c0dcaf12ed2e91b41f158a8c69ef066f23a4e1b8b8030498702b94732b"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000700)={0x40, 0xd, 0x13, "416bcaf92062e382c6d66abe37becb4c54bd20"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}}) pipe(&(0x7f0000000300)) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) 629.220984ms ago: executing program 1 (id=492): syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 619.401852ms ago: executing program 3 (id=493): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3\n', 0x2) 604.262852ms ago: executing program 1 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000c6a2d"], 0x0) 583.691391ms ago: executing program 3 (id=495): syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/179, 0xb3) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 581.43678ms ago: executing program 1 (id=496): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0xa840, 0x582) open(0x0, 0x8000, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 140.750111ms ago: executing program 2 (id=497): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000000a00)='1', 0x1) 41.255274ms ago: executing program 1 (id=498): r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000001700)='0000:00:04.0', 0xc) 31.140713ms ago: executing program 3 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYBLOB="f437074a1df3939e13711b6d996e1e9081067c8ec4810430ea29f8a35461c01733bd6c855416109f17e200d12b9719568945040fddef3a725fbf689ef61825bdeea8801dfc98dd99e2f9858483e398789f0e335e9a163856ec4e7932419fc236f4370556b0a7d3a1edea033e51b0cea90bfb8ca529c8b172d5c7a6f3291664c38d67b245efa28b4434695a7a266fc843210c3b48d60e14a167c04176a4aa70a3279f19da20bb2f138355e6ea84313b0bc7e44a0df161e128c64059f0ed71217f3bb4fabd0000000000000000", @ANYRES8=r1], 0x140}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000500)="0f0d700066b8710000000f23c80faa211717350000d0003b0f23878700008ec00f0159000f01c9c0a52e3e1a65f30f3466b9140300000f32f30fc731baf80c66b84245368666efbafc0ced", 0x4b}], 0x1, 0x69, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs$pagemap(r6, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)) timer_create(0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x9}, 0x1}) 29.932841ms ago: executing program 1 (id=499): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 0s ago: executing program 1 (id=500): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000f601000000000014"], 0x46) kernel console output (not intermixed with test programs): tp_copy_local_addr_list+0x349/0x550 [ 82.021867][ T7061] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 82.021885][ T7061] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 82.021903][ T7061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.021919][ T7061] sctp_bind_addr_copy+0xe0/0x530 [ 82.021936][ T7061] sctp_connect_new_asoc+0x1c9/0x770 [ 82.021956][ T7061] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.021976][ T7061] ? selinux_sctp_bind_connect+0xe0/0x230 [ 82.021997][ T7061] sctp_sendmsg+0x1743/0x22e0 [ 82.022011][ T7061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.022021][ T7061] ? sock_has_perm+0x25a/0x2f0 [ 82.022036][ T7061] ? __pfx_sock_has_perm+0x10/0x10 [ 82.022056][ T7061] ? __might_fault+0xc5/0x140 [ 82.022090][ T7061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.022103][ T7061] inet_sendmsg+0x11c/0x140 [ 82.022119][ T7061] __sys_sendto+0x453/0x4e0 [ 82.022132][ T7061] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.022148][ T7061] ? __pfx___sys_sendto+0x10/0x10 [ 82.022164][ T7061] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.022185][ T7061] ? ksys_write+0x1ac/0x250 [ 82.022203][ T7061] ? __pfx_ksys_write+0x10/0x10 [ 82.022223][ T7061] __x64_sys_sendto+0xe0/0x1c0 [ 82.022235][ T7061] ? do_syscall_64+0x90/0x870 [ 82.022247][ T7061] ? lockdep_hardirqs_on+0x78/0x100 [ 82.022259][ T7061] do_syscall_64+0x115/0x870 [ 82.022271][ T7061] ? clear_bhb_loop+0x40/0x90 [ 82.022285][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.022297][ T7061] RIP: 0033:0x7f87f059de99 [ 82.022307][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.022318][ T7061] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.022329][ T7061] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 82.022336][ T7061] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 82.022343][ T7061] RBP: 00007f87f1474090 R08: 0000200000000000 R09: 0000000000000010 [ 82.022349][ T7061] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 82.022356][ T7061] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 82.022369][ T7061] [ 82.362743][ T5757] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 82.395660][ T1042] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.545815][ T1042] usb 5-1: Using ep0 maxpacket: 32 [ 82.549279][ T1042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.552570][ T1042] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 82.555231][ T1042] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 82.558107][ T1042] usb 5-1: config 14 has no interface number 0 [ 82.560090][ T1042] usb 5-1: config 14 has no interface number 1 [ 82.562094][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 82.566387][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 82.571305][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 82.576164][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 82.576538][ T7086] FAULT_INJECTION: forcing a failure. [ 82.576538][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 82.581006][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 82.584916][ T7086] CPU: 2 UID: 0 PID: 7086 Comm: syz.3.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.584934][ T7086] Tainted: [L]=SOFTLOCKUP [ 82.584938][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.584944][ T7086] Call Trace: [ 82.584950][ T7086] [ 82.584955][ T7086] dump_stack_lvl+0x100/0x190 [ 82.584973][ T7086] should_fail_ex.cold+0x5/0xa [ 82.584987][ T7086] should_failslab+0xc2/0x120 [ 82.585003][ T7086] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.585021][ T7086] ? kasan_save_track+0x14/0x30 [ 82.585036][ T7086] ? rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 82.585055][ T7086] rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 82.585072][ T7086] xprt_switch_alloc+0x28e/0x3c0 [ 82.585085][ T7086] rpc_create_xprt+0x2dc/0x440 [ 82.585098][ T7086] rpc_create+0x46e/0x7f0 [ 82.585110][ T7086] ? __pfx_rpc_create+0x10/0x10 [ 82.585137][ T7086] ? rcu_is_watching+0x12/0xc0 [ 82.585155][ T7086] ? trace_contention_end+0x126/0x160 [ 82.585173][ T7086] rpcb_create_af_local+0x177/0x360 [ 82.585191][ T7086] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 82.585214][ T7086] ? find_held_lock+0x2b/0x80 [ 82.585231][ T7086] ? rpcb_create_local+0x1da/0x270 [ 82.585248][ T7086] ? rpcb_create_local+0x1da/0x270 [ 82.585268][ T7086] rpcb_create_local+0x1ee/0x270 [ 82.585286][ T7086] svc_bind+0x1e8/0x260 [ 82.585305][ T7086] nfsd_create_serv+0x2da/0x4a0 [ 82.585321][ T7086] ? __pfx_nfsd_create_serv+0x10/0x10 [ 82.585337][ T7086] ? net_generic+0xea/0x2a0 [ 82.585357][ T7086] write_ports+0x8c0/0xcc0 [ 82.585376][ T7086] ? __pfx_write_ports+0x10/0x10 [ 82.585396][ T7086] ? __might_fault+0xc5/0x140 [ 82.585411][ T7086] ? __might_fault+0xc5/0x140 [ 82.585426][ T7086] ? _copy_from_user+0x59/0xd0 [ 82.585442][ T7086] ? __pfx_write_ports+0x10/0x10 [ 82.585460][ T7086] nfsctl_transaction_write+0x106/0x1a0 [ 82.585478][ T7086] vfs_write+0x2aa/0x1050 [ 82.585496][ T7086] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 82.585515][ T7086] ? __pfx_vfs_write+0x10/0x10 [ 82.585532][ T7086] ? __fget_files+0x215/0x3d0 [ 82.585547][ T7086] ? __fget_files+0x21f/0x3d0 [ 82.585562][ T7086] ksys_write+0x12a/0x250 [ 82.585593][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 82.585615][ T7086] do_syscall_64+0x115/0x870 [ 82.585629][ T7086] ? clear_bhb_loop+0x40/0x90 [ 82.585642][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.585654][ T7086] RIP: 0033:0x7f8ba399de99 [ 82.585665][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.585675][ T7086] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.585687][ T7086] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 82.585694][ T7086] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 82.585700][ T7086] RBP: 00007f8ba48fc090 R08: 0000000000000000 R09: 0000000000000000 [ 82.585707][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.585713][ T7086] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 82.585727][ T7086] [ 82.593620][ T7086] svc: failed to register nfsdv3 RPC service (errno 111). [ 82.593799][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.595867][ T7086] svc: failed to register nfsaclv3 RPC service (errno 111). [ 82.599517][ T1042] usb 5-1: config 14 interface 57 has no altsetting 0 [ 82.717389][ T1042] usb 5-1: config 14 interface 228 has no altsetting 0 [ 82.723838][ T1042] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 82.726819][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.729272][ T1042] usb 5-1: Product: syz [ 82.730762][ T1042] usb 5-1: Manufacturer: syz [ 82.732295][ T1042] usb 5-1: SerialNumber: syz [ 82.807113][ T5757] Bluetooth: hci4: command 0xfc11 tx timeout [ 82.807154][ T5753] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 82.869880][ T7097] FAULT_INJECTION: forcing a failure. [ 82.869880][ T7097] name failslab, interval 1, probability 0, space 0, times 0 [ 82.873800][ T7097] CPU: 0 UID: 0 PID: 7097 Comm: syz.1.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.873817][ T7097] Tainted: [L]=SOFTLOCKUP [ 82.873821][ T7097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.873827][ T7097] Call Trace: [ 82.873832][ T7097] [ 82.873837][ T7097] dump_stack_lvl+0x100/0x190 [ 82.873859][ T7097] should_fail_ex.cold+0x5/0xa [ 82.873873][ T7097] should_failslab+0xc2/0x120 [ 82.873889][ T7097] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 82.873914][ T7097] ? __alloc_skb+0x5b7/0x710 [ 82.873929][ T7097] ? __alloc_skb+0x140/0x710 [ 82.873944][ T7097] __alloc_skb+0x140/0x710 [ 82.873956][ T7097] ? __alloc_skb+0x5b7/0x710 [ 82.873982][ T7097] ? __pfx___alloc_skb+0x10/0x10 [ 82.873999][ T7097] netlink_alloc_large_skb+0x69/0x150 [ 82.874012][ T7097] netlink_sendmsg+0x680/0xda0 [ 82.874025][ T7097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.874037][ T7097] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.874057][ T7097] ____sys_sendmsg+0xa4d/0xbe0 [ 82.874097][ T7097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.874115][ T7097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.874145][ T7097] ___sys_sendmsg+0x190/0x1e0 [ 82.874165][ T7097] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.874182][ T7097] ? __lock_acquire+0x49f/0x1a40 [ 82.874196][ T7097] ? get_pid_task+0x106/0x250 [ 82.874228][ T7097] __sys_sendmsg+0x160/0x210 [ 82.874243][ T7097] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.874264][ T7097] do_syscall_64+0x115/0x870 [ 82.874276][ T7097] ? clear_bhb_loop+0x40/0x90 [ 82.874290][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.874302][ T7097] RIP: 0033:0x7f159979de99 [ 82.874311][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.874322][ T7097] RSP: 002b:00007f159a685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.874334][ T7097] RAX: ffffffffffffffda RBX: 00007f1599a25fa0 RCX: 00007f159979de99 [ 82.874341][ T7097] RDX: 00000000240008c4 RSI: 0000200000000180 RDI: 0000000000000005 [ 82.874347][ T7097] RBP: 00007f159a685090 R08: 0000000000000000 R09: 0000000000000000 [ 82.874354][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.874360][ T7097] R13: 00007f1599a26038 R14: 00007f1599a25fa0 R15: 00007ffe86fec848 [ 82.874373][ T7097] [ 82.882970][ T7095] FAULT_INJECTION: forcing a failure. [ 82.882970][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 82.957347][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.3.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.957365][ T7095] Tainted: [L]=SOFTLOCKUP [ 82.957368][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.957375][ T7095] Call Trace: [ 82.957379][ T7095] [ 82.957385][ T7095] dump_stack_lvl+0x100/0x190 [ 82.957404][ T7095] should_fail_ex.cold+0x5/0xa [ 82.957418][ T7095] should_failslab+0xc2/0x120 [ 82.957434][ T7095] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.957467][ T7095] ? sctp_add_bind_addr+0xae/0x3e0 [ 82.957484][ T7095] sctp_add_bind_addr+0xae/0x3e0 [ 82.957499][ T7095] sctp_copy_local_addr_list+0x349/0x550 [ 82.957516][ T7095] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 82.957533][ T7095] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 82.957550][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.957566][ T7095] sctp_bind_addr_copy+0xe0/0x530 [ 82.957582][ T7095] sctp_connect_new_asoc+0x1c9/0x770 [ 82.957601][ T7095] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.957621][ T7095] ? selinux_sctp_bind_connect+0xe0/0x230 [ 82.957641][ T7095] sctp_sendmsg+0x1743/0x22e0 [ 82.957655][ T7095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.957664][ T7095] ? sock_has_perm+0x25a/0x2f0 [ 82.957679][ T7095] ? __pfx_sock_has_perm+0x10/0x10 [ 82.957698][ T7095] ? __might_fault+0xc5/0x140 [ 82.957712][ T7095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.957723][ T7095] inet_sendmsg+0x11c/0x140 [ 82.957739][ T7095] __sys_sendto+0x453/0x4e0 [ 82.957751][ T7095] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.957766][ T7095] ? __pfx___sys_sendto+0x10/0x10 [ 82.957782][ T7095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.957801][ T7095] ? ksys_write+0x1ac/0x250 [ 82.957819][ T7095] ? __pfx_ksys_write+0x10/0x10 [ 82.957838][ T7095] __x64_sys_sendto+0xe0/0x1c0 [ 82.957855][ T7095] ? do_syscall_64+0x90/0x870 [ 82.957867][ T7095] ? lockdep_hardirqs_on+0x78/0x100 [ 82.957880][ T7095] do_syscall_64+0x115/0x870 [ 82.957892][ T7095] ? clear_bhb_loop+0x40/0x90 [ 82.957906][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.957918][ T7095] RIP: 0033:0x7f8ba399de99 [ 82.957928][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.957939][ T7095] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.957951][ T7095] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 82.957958][ T7095] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 82.957964][ T7095] RBP: 00007f8ba48fc090 R08: 0000200000000000 R09: 0000000000000010 [ 82.957971][ T7095] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 82.957977][ T7095] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 82.957991][ T7095] [ 83.149889][ T1042] legousbtower 5-1:14.57: interrupt endpoints not found [ 83.419250][ T7101] netlink: 'syz.3.283': attribute type 8 has an invalid length. [ 83.505948][ T7109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.509386][ T7109] block device autoloading is deprecated and will be removed. [ 83.551651][ T1042] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 83.557579][ T1042] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 83.618576][ T7119] FAULT_INJECTION: forcing a failure. [ 83.618576][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 83.622410][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.1.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.622431][ T7119] Tainted: [L]=SOFTLOCKUP [ 83.622435][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.622442][ T7119] Call Trace: [ 83.622447][ T7119] [ 83.622452][ T7119] dump_stack_lvl+0x100/0x190 [ 83.622469][ T7119] should_fail_ex.cold+0x5/0xa [ 83.622484][ T7119] should_failslab+0xc2/0x120 [ 83.622500][ T7119] __kmalloc_cache_noprof+0x91/0x6c0 [ 83.622520][ T7119] ? sctp_add_bind_addr+0xae/0x3e0 [ 83.622536][ T7119] sctp_add_bind_addr+0xae/0x3e0 [ 83.622550][ T7119] sctp_copy_local_addr_list+0x349/0x550 [ 83.622568][ T7119] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 83.622586][ T7119] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 83.622602][ T7119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.622618][ T7119] sctp_bind_addr_copy+0xe0/0x530 [ 83.622635][ T7119] sctp_connect_new_asoc+0x1c9/0x770 [ 83.622654][ T7119] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 83.622673][ T7119] ? selinux_sctp_bind_connect+0xe0/0x230 [ 83.622694][ T7119] sctp_sendmsg+0x1743/0x22e0 [ 83.622707][ T7119] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.622717][ T7119] ? sock_has_perm+0x25a/0x2f0 [ 83.622732][ T7119] ? __pfx_sock_has_perm+0x10/0x10 [ 83.622750][ T7119] ? __might_fault+0xc5/0x140 [ 83.622765][ T7119] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.622776][ T7119] inet_sendmsg+0x11c/0x140 [ 83.622791][ T7119] __sys_sendto+0x453/0x4e0 [ 83.622803][ T7119] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.622818][ T7119] ? __pfx___sys_sendto+0x10/0x10 [ 83.622834][ T7119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.622854][ T7119] ? ksys_write+0x1ac/0x250 [ 83.622871][ T7119] ? __pfx_ksys_write+0x10/0x10 [ 83.622891][ T7119] __x64_sys_sendto+0xe0/0x1c0 [ 83.622903][ T7119] ? do_syscall_64+0x90/0x870 [ 83.622915][ T7119] ? lockdep_hardirqs_on+0x78/0x100 [ 83.622928][ T7119] do_syscall_64+0x115/0x870 [ 83.622939][ T7119] ? clear_bhb_loop+0x40/0x90 [ 83.622953][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.622965][ T7119] RIP: 0033:0x7f159979de99 [ 83.622975][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.622985][ T7119] RSP: 002b:00007f159a685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.622997][ T7119] RAX: ffffffffffffffda RBX: 00007f1599a25fa0 RCX: 00007f159979de99 [ 83.623004][ T7119] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 83.623011][ T7119] RBP: 00007f159a685090 R08: 0000200000000000 R09: 0000000000000010 [ 83.623017][ T7119] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 83.623024][ T7119] R13: 00007f1599a26038 R14: 00007f1599a25fa0 R15: 00007ffe86fec848 [ 83.623037][ T7119] [ 83.822987][ T7140] netlink: 280 bytes leftover after parsing attributes in process `syz.3.291'. [ 83.832753][ T7140] evm: overlay not supported [ 84.001848][ T1042] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.030538][ T7156] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 84.033534][ T7156] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.041339][ T7156] CIFS mount error: No usable UNC path provided in device string! [ 84.041339][ T7156] [ 84.044586][ T7156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.079417][ T7159] FAULT_INJECTION: forcing a failure. [ 84.079417][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 84.083333][ T7159] CPU: 3 UID: 0 PID: 7159 Comm: syz.3.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.083351][ T7159] Tainted: [L]=SOFTLOCKUP [ 84.083355][ T7159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.083361][ T7159] Call Trace: [ 84.083365][ T7159] [ 84.083370][ T7159] dump_stack_lvl+0x100/0x190 [ 84.083388][ T7159] should_fail_ex.cold+0x5/0xa [ 84.083402][ T7159] should_failslab+0xc2/0x120 [ 84.083417][ T7159] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 84.083432][ T7159] ? svc_bind+0x1e8/0x260 [ 84.083448][ T7159] ? nfsd_create_serv+0x2da/0x4a0 [ 84.083464][ T7159] ? write_ports+0x8c0/0xcc0 [ 84.083480][ T7159] ? nfsctl_transaction_write+0x106/0x1a0 [ 84.083497][ T7159] ? kstrdup_const+0x63/0x80 [ 84.083512][ T7159] kstrdup+0x51/0xe0 [ 84.083524][ T7159] kstrdup_const+0x63/0x80 [ 84.083536][ T7159] __kernfs_new_node+0x9b/0xa10 [ 84.083551][ T7159] ? __pfx___kernfs_new_node+0x10/0x10 [ 84.083567][ T7159] ? find_held_lock+0x2b/0x80 [ 84.083584][ T7159] ? kernfs_root+0xee/0x2a0 [ 84.083594][ T7159] ? kernfs_root+0xee/0x2a0 [ 84.083608][ T7159] kernfs_create_dir_ns+0xa6/0x2b0 [ 84.083624][ T7159] sysfs_create_dir_ns+0x13a/0x2b0 [ 84.083643][ T7159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.083661][ T7159] ? find_held_lock+0x2b/0x80 [ 84.083678][ T7159] ? kobject_add_internal+0x25f/0x930 [ 84.083695][ T7159] ? kobject_add_internal+0x25f/0x930 [ 84.083712][ T7159] ? rpc_sysfs_xprt_switch_namespace+0xd/0x40 [ 84.083728][ T7159] kobject_add_internal+0x2c8/0x930 [ 84.083746][ T7159] kobject_init_and_add+0x121/0x180 [ 84.083764][ T7159] ? __pfx_kobject_init_and_add+0x10/0x10 [ 84.083782][ T7159] ? __kasan_kmalloc+0xaa/0xb0 [ 84.083795][ T7159] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 84.083814][ T7159] ? rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 84.083833][ T7159] rpc_sysfs_xprt_switch_setup+0x189/0x370 [ 84.083855][ T7159] xprt_switch_alloc+0x28e/0x3c0 [ 84.083868][ T7159] rpc_create_xprt+0x2dc/0x440 [ 84.083881][ T7159] rpc_create+0x46e/0x7f0 [ 84.083894][ T7159] ? __pfx_rpc_create+0x10/0x10 [ 84.083920][ T7159] ? rcu_is_watching+0x12/0xc0 [ 84.083938][ T7159] ? trace_contention_end+0x126/0x160 [ 84.083955][ T7159] rpcb_create_af_local+0x177/0x360 [ 84.083973][ T7159] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 84.083996][ T7159] ? find_held_lock+0x2b/0x80 [ 84.084013][ T7159] ? rpcb_create_local+0x1da/0x270 [ 84.084029][ T7159] ? rpcb_create_local+0x1da/0x270 [ 84.084049][ T7159] rpcb_create_local+0x1ee/0x270 [ 84.084067][ T7159] svc_bind+0x1e8/0x260 [ 84.084085][ T7159] nfsd_create_serv+0x2da/0x4a0 [ 84.084101][ T7159] ? __pfx_nfsd_create_serv+0x10/0x10 [ 84.084116][ T7159] ? net_generic+0xea/0x2a0 [ 84.084137][ T7159] write_ports+0x8c0/0xcc0 [ 84.084155][ T7159] ? __pfx_write_ports+0x10/0x10 [ 84.084175][ T7159] ? __might_fault+0xc5/0x140 [ 84.084186][ T7159] ? __might_fault+0xc5/0x140 [ 84.084200][ T7159] ? _copy_from_user+0x59/0xd0 [ 84.084217][ T7159] ? __pfx_write_ports+0x10/0x10 [ 84.084234][ T7159] nfsctl_transaction_write+0x106/0x1a0 [ 84.084265][ T7159] vfs_write+0x2aa/0x1050 [ 84.084284][ T7159] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 84.084303][ T7159] ? __pfx_vfs_write+0x10/0x10 [ 84.084320][ T7159] ? __fget_files+0x215/0x3d0 [ 84.084334][ T7159] ? __fget_files+0x21f/0x3d0 [ 84.084350][ T7159] ksys_write+0x12a/0x250 [ 84.084367][ T7159] ? __pfx_ksys_write+0x10/0x10 [ 84.084388][ T7159] do_syscall_64+0x115/0x870 [ 84.084401][ T7159] ? clear_bhb_loop+0x40/0x90 [ 84.084414][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.084426][ T7159] RIP: 0033:0x7f8ba399de99 [ 84.084437][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.084447][ T7159] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.084458][ T7159] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 84.084465][ T7159] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 84.084472][ T7159] RBP: 00007f8ba48fc090 R08: 0000000000000000 R09: 0000000000000000 [ 84.084478][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.084484][ T7159] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 84.084498][ T7159] [ 84.122149][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.124322][ T7159] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 84.125864][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.143280][ T7159] svc: failed to register nfsdv3 RPC service (errno 111). [ 84.228658][ T1042] usb 6-1: Using ep0 maxpacket: 32 [ 84.231648][ T7159] svc: failed to register nfsaclv3 RPC service (errno 111). [ 84.232637][ T1042] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 84.239776][ T1042] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.242621][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.245302][ T1042] usb 6-1: Product: syz [ 84.246686][ T1042] usb 6-1: Manufacturer: syz [ 84.248184][ T1042] usb 6-1: SerialNumber: syz [ 84.252054][ T1042] usb 6-1: config 0 descriptor?? [ 84.255771][ T7133] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 84.355978][ T847] usb 5-1: USB disconnect, device number 4 [ 84.368712][ T847] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 84.467253][ T41] usb 6-1: USB disconnect, device number 6 [ 84.491565][ T34] usb 7-1: USB disconnect, device number 6 [ 85.067838][ T7190] FAULT_INJECTION: forcing a failure. [ 85.067838][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 85.071714][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.2.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.071732][ T7190] Tainted: [L]=SOFTLOCKUP [ 85.071736][ T7190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.071743][ T7190] Call Trace: [ 85.071747][ T7190] [ 85.071752][ T7190] dump_stack_lvl+0x100/0x190 [ 85.071770][ T7190] should_fail_ex.cold+0x5/0xa [ 85.071785][ T7190] should_failslab+0xc2/0x120 [ 85.071800][ T7190] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.071819][ T7190] ? sctp_add_bind_addr+0xae/0x3e0 [ 85.071835][ T7190] sctp_add_bind_addr+0xae/0x3e0 [ 85.071850][ T7190] sctp_copy_local_addr_list+0x349/0x550 [ 85.071867][ T7190] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 85.071888][ T7190] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 85.071905][ T7190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.071921][ T7190] sctp_bind_addr_copy+0xe0/0x530 [ 85.071937][ T7190] sctp_connect_new_asoc+0x1c9/0x770 [ 85.071957][ T7190] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 85.071976][ T7190] ? selinux_sctp_bind_connect+0xe0/0x230 [ 85.071997][ T7190] sctp_sendmsg+0x1743/0x22e0 [ 85.072010][ T7190] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.072020][ T7190] ? sock_has_perm+0x25a/0x2f0 [ 85.072035][ T7190] ? __pfx_sock_has_perm+0x10/0x10 [ 85.072053][ T7190] ? __might_fault+0xc5/0x140 [ 85.072068][ T7190] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.072078][ T7190] inet_sendmsg+0x11c/0x140 [ 85.072094][ T7190] __sys_sendto+0x453/0x4e0 [ 85.072106][ T7190] ? __pfx_inet_sendmsg+0x10/0x10 [ 85.072120][ T7190] ? __pfx___sys_sendto+0x10/0x10 [ 85.072136][ T7190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.072156][ T7190] ? ksys_write+0x1ac/0x250 [ 85.072174][ T7190] ? __pfx_ksys_write+0x10/0x10 [ 85.072193][ T7190] __x64_sys_sendto+0xe0/0x1c0 [ 85.072205][ T7190] ? do_syscall_64+0x90/0x870 [ 85.072217][ T7190] ? lockdep_hardirqs_on+0x78/0x100 [ 85.072230][ T7190] do_syscall_64+0x115/0x870 [ 85.072242][ T7190] ? clear_bhb_loop+0x40/0x90 [ 85.072255][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.072267][ T7190] RIP: 0033:0x7fe93699de99 [ 85.072276][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.072287][ T7190] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 85.072298][ T7190] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 85.072305][ T7190] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 85.072311][ T7190] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 85.072318][ T7190] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 85.072324][ T7190] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 85.072338][ T7190] [ 85.335197][ T7206] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 85.341728][ T7206] netlink: 232 bytes leftover after parsing attributes in process `syz.1.309'. [ 85.344489][ T7206] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 85.347556][ T7206] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 85.357990][ T5753] Bluetooth: hci1: Unexpected cc 0x00c8 with no status [ 85.362751][ T7206] bond2: entered promiscuous mode [ 85.365702][ T7206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.388820][ T7206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.391163][ T7206] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 85.397020][ T7206] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 85.401871][ T7206] bond2: (slave vti0): making interface the new active one [ 85.404153][ T7206] vti0: entered promiscuous mode [ 85.407668][ T7206] bond2: (slave vti0): Enslaving as an active interface with an up link [ 85.439532][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 85.448856][ T41] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 85.451481][ T7220] FAULT_INJECTION: forcing a failure. [ 85.451481][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 85.457550][ T7220] CPU: 2 UID: 0 PID: 7220 Comm: syz.0.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.457568][ T7220] Tainted: [L]=SOFTLOCKUP [ 85.457572][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.457579][ T7220] Call Trace: [ 85.457583][ T7220] [ 85.457587][ T7220] dump_stack_lvl+0x100/0x190 [ 85.457605][ T7220] should_fail_ex.cold+0x5/0xa [ 85.457623][ T7220] should_failslab+0xc2/0x120 [ 85.457639][ T7220] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.457653][ T7220] ? __asan_memcpy+0x3c/0x60 [ 85.457663][ T7220] ? __kernfs_new_node+0xd2/0xa10 [ 85.457679][ T7220] __kernfs_new_node+0xd2/0xa10 [ 85.457694][ T7220] ? __pfx___kernfs_new_node+0x10/0x10 [ 85.457710][ T7220] ? find_held_lock+0x2b/0x80 [ 85.457728][ T7220] ? kernfs_root+0xee/0x2a0 [ 85.457738][ T7220] ? kernfs_root+0xee/0x2a0 [ 85.457752][ T7220] kernfs_create_dir_ns+0xa6/0x2b0 [ 85.457769][ T7220] sysfs_create_dir_ns+0x13a/0x2b0 [ 85.457789][ T7220] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.457807][ T7220] ? find_held_lock+0x2b/0x80 [ 85.457824][ T7220] ? kobject_add_internal+0x25f/0x930 [ 85.457841][ T7220] ? kobject_add_internal+0x25f/0x930 [ 85.457859][ T7220] ? rpc_sysfs_xprt_switch_namespace+0xd/0x40 [ 85.457876][ T7220] kobject_add_internal+0x2c8/0x930 [ 85.457894][ T7220] kobject_init_and_add+0x121/0x180 [ 85.457912][ T7220] ? __pfx_kobject_init_and_add+0x10/0x10 [ 85.457930][ T7220] ? __kasan_kmalloc+0xaa/0xb0 [ 85.457943][ T7220] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 85.457962][ T7220] ? rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 85.457982][ T7220] rpc_sysfs_xprt_switch_setup+0x189/0x370 [ 85.458000][ T7220] xprt_switch_alloc+0x28e/0x3c0 [ 85.458012][ T7220] rpc_create_xprt+0x2dc/0x440 [ 85.458025][ T7220] rpc_create+0x46e/0x7f0 [ 85.458038][ T7220] ? __pfx_rpc_create+0x10/0x10 [ 85.458096][ T7220] ? rcu_is_watching+0x12/0xc0 [ 85.458115][ T7220] ? trace_contention_end+0x126/0x160 [ 85.458133][ T7220] rpcb_create_af_local+0x177/0x360 [ 85.458150][ T7220] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 85.458173][ T7220] ? find_held_lock+0x2b/0x80 [ 85.458191][ T7220] ? rpcb_create_local+0x1da/0x270 [ 85.458207][ T7220] ? rpcb_create_local+0x1da/0x270 [ 85.458227][ T7220] rpcb_create_local+0x1ee/0x270 [ 85.458245][ T7220] svc_bind+0x1e8/0x260 [ 85.458263][ T7220] nfsd_create_serv+0x2da/0x4a0 [ 85.458286][ T7220] ? __pfx_nfsd_create_serv+0x10/0x10 [ 85.458301][ T7220] ? net_generic+0xea/0x2a0 [ 85.458322][ T7220] write_ports+0x8c0/0xcc0 [ 85.458354][ T7220] ? __pfx_write_ports+0x10/0x10 [ 85.458374][ T7220] ? __might_fault+0xc5/0x140 [ 85.458385][ T7220] ? __might_fault+0xc5/0x140 [ 85.458400][ T7220] ? _copy_from_user+0x59/0xd0 [ 85.458417][ T7220] ? __pfx_write_ports+0x10/0x10 [ 85.458434][ T7220] nfsctl_transaction_write+0x106/0x1a0 [ 85.458452][ T7220] vfs_write+0x2aa/0x1050 [ 85.458471][ T7220] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 85.458490][ T7220] ? __pfx_vfs_write+0x10/0x10 [ 85.458507][ T7220] ? __fget_files+0x215/0x3d0 [ 85.458522][ T7220] ? __fget_files+0x21f/0x3d0 [ 85.458537][ T7220] ksys_write+0x12a/0x250 [ 85.458554][ T7220] ? __pfx_ksys_write+0x10/0x10 [ 85.458576][ T7220] do_syscall_64+0x115/0x870 [ 85.458588][ T7220] ? clear_bhb_loop+0x40/0x90 [ 85.458602][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.458615][ T7220] RIP: 0033:0x7f87f059de99 [ 85.458625][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.458636][ T7220] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.458648][ T7220] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 85.458655][ T7220] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 85.458662][ T7220] RBP: 00007f87f1474090 R08: 0000000000000000 R09: 0000000000000000 [ 85.458668][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.458674][ T7220] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 85.458689][ T7220] [ 85.458729][ T7220] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 85.600114][ T7220] svc: failed to register nfsdv3 RPC service (errno 111). [ 85.603215][ T7220] svc: failed to register nfsaclv3 RPC service (errno 111). [ 85.637468][ T7226] futex_wake_op: syz.0.315 tries to shift op by 32; fix this program [ 85.641185][ T7226] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 85.645282][ T1499] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 85.646279][ T5753] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 85.684772][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.687870][ T41] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.689723][ T7228] FAULT_INJECTION: forcing a failure. [ 85.689723][ T7228] name failslab, interval 1, probability 0, space 0, times 0 [ 85.690516][ T41] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.695652][ T7228] CPU: 3 UID: 0 PID: 7228 Comm: syz.0.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.695674][ T7228] Tainted: [L]=SOFTLOCKUP [ 85.695678][ T7228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.695685][ T7228] Call Trace: [ 85.695689][ T7228] [ 85.695694][ T7228] dump_stack_lvl+0x100/0x190 [ 85.695727][ T7228] should_fail_ex.cold+0x5/0xa [ 85.695742][ T7228] should_failslab+0xc2/0x120 [ 85.695758][ T7228] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.695779][ T7228] ? sctp_add_bind_addr+0xae/0x3e0 [ 85.695801][ T7228] sctp_add_bind_addr+0xae/0x3e0 [ 85.695816][ T7228] sctp_copy_local_addr_list+0x349/0x550 [ 85.695840][ T7228] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 85.695859][ T7228] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 85.695877][ T7228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.695894][ T7228] sctp_bind_addr_copy+0xe0/0x530 [ 85.695912][ T7228] sctp_connect_new_asoc+0x1c9/0x770 [ 85.695932][ T7228] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 85.695953][ T7228] ? selinux_sctp_bind_connect+0xe0/0x230 [ 85.695978][ T7228] sctp_sendmsg+0x1743/0x22e0 [ 85.695993][ T7228] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.696003][ T7228] ? sock_has_perm+0x25a/0x2f0 [ 85.696018][ T7228] ? __pfx_sock_has_perm+0x10/0x10 [ 85.696037][ T7228] ? __might_fault+0xc5/0x140 [ 85.696052][ T7228] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.696063][ T7228] inet_sendmsg+0x11c/0x140 [ 85.696079][ T7228] __sys_sendto+0x453/0x4e0 [ 85.696092][ T7228] ? __pfx_inet_sendmsg+0x10/0x10 [ 85.696106][ T7228] ? __pfx___sys_sendto+0x10/0x10 [ 85.696123][ T7228] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.696142][ T7228] ? ksys_write+0x1ac/0x250 [ 85.696160][ T7228] ? __pfx_ksys_write+0x10/0x10 [ 85.696180][ T7228] __x64_sys_sendto+0xe0/0x1c0 [ 85.696192][ T7228] ? do_syscall_64+0x90/0x870 [ 85.696204][ T7228] ? lockdep_hardirqs_on+0x78/0x100 [ 85.696217][ T7228] do_syscall_64+0x115/0x870 [ 85.696229][ T7228] ? clear_bhb_loop+0x40/0x90 [ 85.696242][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.696254][ T7228] RIP: 0033:0x7f87f059de99 [ 85.696264][ T7228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.696275][ T7228] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 85.696287][ T7228] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 85.696294][ T7228] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 85.696300][ T7228] RBP: 00007f87f1474090 R08: 0000200000000000 R09: 0000000000000010 [ 85.696307][ T7228] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 85.696313][ T7228] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 85.696327][ T7228] [ 85.783571][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.792809][ T41] usb 7-1: config 0 descriptor?? [ 85.797544][ T1499] usb 8-1: Using ep0 maxpacket: 32 [ 85.799547][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.800903][ T1499] usb 8-1: unable to get BOS descriptor or descriptor too short [ 85.801797][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 85.805023][ T1499] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 85.809432][ T1499] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 85.812115][ T1499] usb 8-1: config 14 has no interface number 0 [ 85.813181][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.814121][ T1499] usb 8-1: config 14 has no interface number 1 [ 85.814189][ T1499] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 85.819018][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.822326][ T1499] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 85.824276][ T41] usb 7-1: media controller created [ 85.828203][ T1499] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 85.831948][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.836072][ T1499] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 85.841981][ T1499] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 85.846612][ T1499] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.849170][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 85.853830][ T1499] usb 8-1: config 14 interface 57 has no altsetting 0 [ 85.854810][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 85.856064][ T1499] usb 8-1: config 14 interface 228 has no altsetting 0 [ 85.857983][ T1499] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 85.860202][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 85.860606][ T1499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.869573][ T1499] usb 8-1: Product: syz [ 85.871029][ T1499] usb 8-1: Manufacturer: syz [ 85.872487][ T1499] usb 8-1: SerialNumber: syz [ 85.876649][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 85.880526][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 85.891519][ T5753] Bluetooth: hci3: Unexpected cc 0x00c8 with no status [ 86.003486][ T7194] dvb-usb: bulk message failed: -22 (4/0) [ 86.007135][ T7194] overlayfs: missing 'lowerdir' [ 86.011426][ T1042] usb 7-1: USB disconnect, device number 7 [ 86.034215][ T1042] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 86.176640][ T34] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 86.295590][ T1499] legousbtower 8-1:14.57: interrupt endpoints not found [ 86.342593][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.345054][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.348289][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.352015][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.355541][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 86.359768][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.362120][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.365362][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.368910][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.372394][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 86.376555][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.378935][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.382302][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.385765][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.389036][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 86.395101][ T34] usb 5-1: string descriptor 0 read error: -22 [ 86.397804][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.401449][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.408917][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 86.676899][ T7242] netlink: 216 bytes leftover after parsing attributes in process `syz.0.321'. [ 86.708484][ T1499] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 86.712399][ T1499] legousbtower 8-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 86.798155][ T7251] bridge0: port 3(syz_tun) entered blocking state [ 86.800976][ T7251] bridge0: port 3(syz_tun) entered disabled state [ 86.804103][ T7251] syz_tun: entered allmulticast mode [ 86.807763][ T7251] syz_tun: entered promiscuous mode [ 86.821567][ T1499] bridge0: entered promiscuous mode [ 86.834700][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.000947][ T55] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 87.003857][ T55] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.007028][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.010842][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.013773][ T55] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.016660][ T55] usb 7-1: Product: syz [ 87.017998][ T55] usb 7-1: Manufacturer: syz [ 87.019613][ T55] usb 7-1: SerialNumber: syz [ 87.022503][ T55] usb 7-1: config 0 descriptor?? [ 87.026958][ T55] hub 7-1:0.0: bad descriptor, ignoring hub [ 87.028832][ T55] hub 7-1:0.0: probe with driver hub failed with error -5 [ 87.033347][ T55] usb 7-1: selecting invalid altsetting 0 [ 87.298033][ T42] kauditd_printk_skb: 76 callbacks suppressed [ 87.298062][ T42] audit: type=1400 audit(1785769116.396:637): avc: denied { write } for pid=7245 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.299587][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 87.300053][ T42] audit: type=1400 audit(1785769116.396:638): avc: denied { write } for pid=7245 comm="syz.2.323" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 87.329090][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.332867][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.675700][ T55] usb 7-1: USB disconnect, device number 8 [ 87.773269][ T7264] FAULT_INJECTION: forcing a failure. [ 87.773269][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 87.777324][ T7264] CPU: 2 UID: 0 PID: 7264 Comm: syz.1.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.777353][ T7264] Tainted: [L]=SOFTLOCKUP [ 87.777359][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.777377][ T7264] Call Trace: [ 87.777383][ T7264] [ 87.777391][ T7264] dump_stack_lvl+0x100/0x190 [ 87.777418][ T7264] should_fail_ex.cold+0x5/0xa [ 87.777442][ T7264] should_failslab+0xc2/0x120 [ 87.777467][ T7264] __kmalloc_cache_noprof+0x91/0x6c0 [ 87.777514][ T7264] ? sctp_add_bind_addr+0xae/0x3e0 [ 87.777541][ T7264] sctp_add_bind_addr+0xae/0x3e0 [ 87.777564][ T7264] sctp_copy_local_addr_list+0x349/0x550 [ 87.777592][ T7264] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 87.777618][ T7264] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 87.777644][ T7264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.777669][ T7264] sctp_bind_addr_copy+0xe0/0x530 [ 87.777695][ T7264] sctp_connect_new_asoc+0x1c9/0x770 [ 87.777723][ T7264] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 87.777750][ T7264] ? selinux_sctp_bind_connect+0xe0/0x230 [ 87.777782][ T7264] sctp_sendmsg+0x1743/0x22e0 [ 87.777805][ T7264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.777820][ T7264] ? sock_has_perm+0x25a/0x2f0 [ 87.777844][ T7264] ? __pfx_sock_has_perm+0x10/0x10 [ 87.777874][ T7264] ? __might_fault+0xc5/0x140 [ 87.777898][ T7264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.777917][ T7264] inet_sendmsg+0x11c/0x140 [ 87.777942][ T7264] __sys_sendto+0x453/0x4e0 [ 87.777962][ T7264] ? __pfx_inet_sendmsg+0x10/0x10 [ 87.777985][ T7264] ? __pfx___sys_sendto+0x10/0x10 [ 87.778012][ T7264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.778069][ T7264] ? ksys_write+0x1ac/0x250 [ 87.778098][ T7264] ? __pfx_ksys_write+0x10/0x10 [ 87.778129][ T7264] __x64_sys_sendto+0xe0/0x1c0 [ 87.778148][ T7264] ? do_syscall_64+0x90/0x870 [ 87.778168][ T7264] ? lockdep_hardirqs_on+0x78/0x100 [ 87.778188][ T7264] do_syscall_64+0x115/0x870 [ 87.778206][ T7264] ? clear_bhb_loop+0x40/0x90 [ 87.778228][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.778247][ T7264] RIP: 0033:0x7f159979de99 [ 87.778264][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.778282][ T7264] RSP: 002b:00007f159a685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.778300][ T7264] RAX: ffffffffffffffda RBX: 00007f1599a25fa0 RCX: 00007f159979de99 [ 87.778312][ T7264] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 87.778323][ T7264] RBP: 00007f159a685090 R08: 0000200000000000 R09: 0000000000000010 [ 87.778334][ T7264] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 87.778345][ T7264] R13: 00007f1599a26038 R14: 00007f1599a25fa0 R15: 00007ffe86fec848 [ 87.778377][ T7264] [ 87.840711][ T55] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 87.893116][ T7267] io-wq is not configured for unbound workers [ 87.897353][ T7267] netlink: 'syz.1.329': attribute type 62 has an invalid length. [ 88.039382][ T55] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.042471][ T55] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 88.044820][ T55] usb 7-1: can't read configurations, error -71 [ 88.079292][ T42] audit: type=1400 audit(1785769117.156:639): avc: denied { create } for pid=7275 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.079831][ T7276] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.088596][ T7276] audit: out of memory in audit_log_start [ 88.484489][ T34] usb 8-1: USB disconnect, device number 5 [ 88.497916][ T34] legousbtower 8-1:14.228: LEGO USB Tower #-159 now disconnected [ 88.597765][ T7283] FAULT_INJECTION: forcing a failure. [ 88.597765][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 88.601851][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.2.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.601869][ T7283] Tainted: [L]=SOFTLOCKUP [ 88.601873][ T7283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.601880][ T7283] Call Trace: [ 88.601884][ T7283] [ 88.601889][ T7283] dump_stack_lvl+0x100/0x190 [ 88.601906][ T7283] should_fail_ex.cold+0x5/0xa [ 88.601920][ T7283] should_failslab+0xc2/0x120 [ 88.602014][ T7283] __kmalloc_cache_noprof+0x91/0x6c0 [ 88.602064][ T7283] ? sctp_add_bind_addr+0xae/0x3e0 [ 88.602082][ T7283] sctp_add_bind_addr+0xae/0x3e0 [ 88.602097][ T7283] sctp_copy_local_addr_list+0x349/0x550 [ 88.602115][ T7283] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 88.602194][ T7283] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 88.602212][ T7283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.602228][ T7283] sctp_bind_addr_copy+0xe0/0x530 [ 88.602244][ T7283] sctp_connect_new_asoc+0x1c9/0x770 [ 88.602264][ T7283] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 88.602283][ T7283] ? selinux_sctp_bind_connect+0xe0/0x230 [ 88.602303][ T7283] sctp_sendmsg+0x1743/0x22e0 [ 88.602317][ T7283] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.602326][ T7283] ? sock_has_perm+0x25a/0x2f0 [ 88.602341][ T7283] ? __pfx_sock_has_perm+0x10/0x10 [ 88.602360][ T7283] ? __might_fault+0xc5/0x140 [ 88.602374][ T7283] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.602391][ T7283] inet_sendmsg+0x11c/0x140 [ 88.602407][ T7283] __sys_sendto+0x453/0x4e0 [ 88.602419][ T7283] ? __pfx_inet_sendmsg+0x10/0x10 [ 88.602434][ T7283] ? __pfx___sys_sendto+0x10/0x10 [ 88.602450][ T7283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.602469][ T7283] ? ksys_write+0x1ac/0x250 [ 88.602487][ T7283] ? __pfx_ksys_write+0x10/0x10 [ 88.602506][ T7283] __x64_sys_sendto+0xe0/0x1c0 [ 88.602518][ T7283] ? do_syscall_64+0x90/0x870 [ 88.602533][ T7283] ? lockdep_hardirqs_on+0x78/0x100 [ 88.602545][ T7283] do_syscall_64+0x115/0x870 [ 88.602557][ T7283] ? clear_bhb_loop+0x40/0x90 [ 88.602571][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.602583][ T7283] RIP: 0033:0x7fe93699de99 [ 88.602593][ T7283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.602604][ T7283] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.602615][ T7283] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 88.602660][ T7283] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 88.602667][ T7283] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 88.602673][ T7283] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 88.602680][ T7283] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 88.602694][ T7283] [ 88.603378][ T42] audit: type=1400 audit(1785769117.664:640): avc: denied { append } for pid=7280 comm="syz.3.334" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.651764][ T7286] svc: failed to register nfsdv3 RPC service (errno 111). [ 88.704294][ T7286] svc: failed to register nfsaclv3 RPC service (errno 111). [ 88.790387][ T41] usb 5-1: USB disconnect, device number 5 [ 88.844230][ T42] audit: type=1400 audit(1785769117.898:641): avc: denied { write } for pid=7295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.888972][ T42] audit: type=1400 audit(1785769117.947:642): avc: denied { write } for pid=7298 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.893919][ T7300] FAULT_INJECTION: forcing a failure. [ 88.893919][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 88.901147][ T7300] CPU: 2 UID: 0 PID: 7300 Comm: syz.3.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.901166][ T7300] Tainted: [L]=SOFTLOCKUP [ 88.901170][ T7300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.901177][ T7300] Call Trace: [ 88.901181][ T7300] [ 88.901186][ T7300] dump_stack_lvl+0x100/0x190 [ 88.901205][ T7300] should_fail_ex.cold+0x5/0xa [ 88.901219][ T7300] should_failslab+0xc2/0x120 [ 88.901235][ T7300] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.901249][ T7300] ? __kernfs_new_node+0xd2/0xa10 [ 88.901264][ T7300] __kernfs_new_node+0xd2/0xa10 [ 88.901279][ T7300] ? __pfx___kernfs_new_node+0x10/0x10 [ 88.901296][ T7300] ? find_held_lock+0x2b/0x80 [ 88.901313][ T7300] ? kernfs_root+0xee/0x2a0 [ 88.901324][ T7300] ? kernfs_root+0xee/0x2a0 [ 88.901338][ T7300] kernfs_new_node+0x117/0x150 [ 88.901353][ T7300] __kernfs_create_file+0x53/0x350 [ 88.901371][ T7300] sysfs_add_file_mode_ns+0x207/0x3c0 [ 88.901393][ T7300] internal_create_group+0x593/0xfb0 [ 88.901407][ T7300] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 88.901421][ T7300] ? __pfx_internal_create_group+0x10/0x10 [ 88.901438][ T7300] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 88.901456][ T7300] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.901474][ T7300] ? find_held_lock+0x2b/0x80 [ 88.901491][ T7300] ? kobject_add_internal+0x25f/0x930 [ 88.901511][ T7300] internal_create_groups+0x9d/0x150 [ 88.901524][ T7300] kobject_add_internal+0x317/0x930 [ 88.901543][ T7300] kobject_init_and_add+0x121/0x180 [ 88.901560][ T7300] ? __pfx_kobject_init_and_add+0x10/0x10 [ 88.901578][ T7300] ? __kasan_kmalloc+0xaa/0xb0 [ 88.901593][ T7300] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 88.901612][ T7300] ? rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 88.901631][ T7300] rpc_sysfs_xprt_switch_setup+0x189/0x370 [ 88.901649][ T7300] xprt_switch_alloc+0x28e/0x3c0 [ 88.901662][ T7300] rpc_create_xprt+0x2dc/0x440 [ 88.901675][ T7300] rpc_create+0x46e/0x7f0 [ 88.901688][ T7300] ? __pfx_rpc_create+0x10/0x10 [ 88.901714][ T7300] ? rcu_is_watching+0x12/0xc0 [ 88.901732][ T7300] ? trace_contention_end+0x126/0x160 [ 88.901750][ T7300] rpcb_create_af_local+0x177/0x360 [ 88.901767][ T7300] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 88.901790][ T7300] ? find_held_lock+0x2b/0x80 [ 88.901808][ T7300] ? rpcb_create_local+0x1da/0x270 [ 88.901824][ T7300] ? rpcb_create_local+0x1da/0x270 [ 88.901844][ T7300] rpcb_create_local+0x1ee/0x270 [ 88.901862][ T7300] svc_bind+0x1e8/0x260 [ 88.901881][ T7300] nfsd_create_serv+0x2da/0x4a0 [ 88.901899][ T7300] ? __pfx_nfsd_create_serv+0x10/0x10 [ 88.901914][ T7300] ? net_generic+0xea/0x2a0 [ 88.901935][ T7300] write_ports+0x8c0/0xcc0 [ 88.901953][ T7300] ? __pfx_write_ports+0x10/0x10 [ 88.901974][ T7300] ? __might_fault+0xc5/0x140 [ 88.901984][ T7300] ? __might_fault+0xc5/0x140 [ 88.901999][ T7300] ? _copy_from_user+0x59/0xd0 [ 88.902016][ T7300] ? __pfx_write_ports+0x10/0x10 [ 88.902033][ T7300] nfsctl_transaction_write+0x106/0x1a0 [ 88.902080][ T7300] vfs_write+0x2aa/0x1050 [ 88.902105][ T7300] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 88.902126][ T7300] ? __pfx_vfs_write+0x10/0x10 [ 88.902144][ T7300] ? __fget_files+0x215/0x3d0 [ 88.902158][ T7300] ? __fget_files+0x21f/0x3d0 [ 88.902174][ T7300] ksys_write+0x12a/0x250 [ 88.902191][ T7300] ? __pfx_ksys_write+0x10/0x10 [ 88.902213][ T7300] do_syscall_64+0x115/0x870 [ 88.902226][ T7300] ? clear_bhb_loop+0x40/0x90 [ 88.902239][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.902251][ T7300] RIP: 0033:0x7f8ba399de99 [ 88.902262][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.902272][ T7300] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.902284][ T7300] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 88.902291][ T7300] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 88.902298][ T7300] RBP: 00007f8ba48fc090 R08: 0000000000000000 R09: 0000000000000000 [ 88.902304][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.902311][ T7300] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 88.902325][ T7300] [ 88.902647][ T7300] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 88.948277][ T42] audit: type=1400 audit(1785769118.005:643): avc: denied { write } for pid=7302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.959225][ T7300] svc: failed to register nfsdv3 RPC service (errno 111). [ 88.989430][ T42] audit: type=1400 audit(1785769118.034:644): avc: denied { write } for pid=7305 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.992983][ T7300] svc: failed to register nfsaclv3 RPC service (errno 111). [ 89.094348][ T7313] input: syz0 as /devices/virtual/input/input6 [ 89.109375][ T7313] loop2: detected capacity change from 0 to 7 [ 89.116141][ T7313] Dev loop2: unable to read RDB block 7 [ 89.118163][ T7313] loop2: AHDI p1 p2 p3 [ 89.119728][ T7313] loop2: partition table partially beyond EOD, truncated [ 89.122790][ T7313] loop2: p1 start 1601398130 is beyond EOD, truncated [ 89.125073][ T7313] loop2: p2 start 1702059890 is beyond EOD, truncated [ 89.295753][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.321039][ T7334] svc: failed to register nfsdv3 RPC service (errno 111). [ 89.324852][ T7334] svc: failed to register nfsaclv3 RPC service (errno 111). [ 89.352828][ T7007] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.423629][ T7345] FAULT_INJECTION: forcing a failure. [ 89.423629][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 89.427799][ T7345] CPU: 3 UID: 0 PID: 7345 Comm: syz.1.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.427818][ T7345] Tainted: [L]=SOFTLOCKUP [ 89.427822][ T7345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.427829][ T7345] Call Trace: [ 89.427834][ T7345] [ 89.427838][ T7345] dump_stack_lvl+0x100/0x190 [ 89.427856][ T7345] should_fail_ex.cold+0x5/0xa [ 89.427870][ T7345] should_failslab+0xc2/0x120 [ 89.427886][ T7345] __kmalloc_cache_noprof+0x91/0x6c0 [ 89.427905][ T7345] ? sctp_add_bind_addr+0xae/0x3e0 [ 89.427921][ T7345] sctp_add_bind_addr+0xae/0x3e0 [ 89.427936][ T7345] sctp_copy_local_addr_list+0x349/0x550 [ 89.427954][ T7345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 89.427971][ T7345] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 89.427988][ T7345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.428004][ T7345] sctp_bind_addr_copy+0xe0/0x530 [ 89.428020][ T7345] sctp_connect_new_asoc+0x1c9/0x770 [ 89.428040][ T7345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 89.428059][ T7345] ? selinux_sctp_bind_connect+0xe0/0x230 [ 89.428080][ T7345] sctp_sendmsg+0x1743/0x22e0 [ 89.428094][ T7345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.428103][ T7345] ? sock_has_perm+0x25a/0x2f0 [ 89.428118][ T7345] ? __pfx_sock_has_perm+0x10/0x10 [ 89.428137][ T7345] ? __might_fault+0xc5/0x140 [ 89.428151][ T7345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.428166][ T7345] inet_sendmsg+0x11c/0x140 [ 89.428182][ T7345] __sys_sendto+0x453/0x4e0 [ 89.428194][ T7345] ? __pfx_inet_sendmsg+0x10/0x10 [ 89.428209][ T7345] ? __pfx___sys_sendto+0x10/0x10 [ 89.428225][ T7345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.428244][ T7345] ? ksys_write+0x1ac/0x250 [ 89.428262][ T7345] ? __pfx_ksys_write+0x10/0x10 [ 89.428303][ T7345] __x64_sys_sendto+0xe0/0x1c0 [ 89.428317][ T7345] ? do_syscall_64+0x90/0x870 [ 89.428329][ T7345] ? lockdep_hardirqs_on+0x78/0x100 [ 89.428342][ T7345] do_syscall_64+0x115/0x870 [ 89.428354][ T7345] ? clear_bhb_loop+0x40/0x90 [ 89.428368][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.428380][ T7345] RIP: 0033:0x7f159979de99 [ 89.428390][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.428401][ T7345] RSP: 002b:00007f159a685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.428412][ T7345] RAX: ffffffffffffffda RBX: 00007f1599a25fa0 RCX: 00007f159979de99 [ 89.428419][ T7345] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.428425][ T7345] RBP: 00007f159a685090 R08: 0000200000000000 R09: 0000000000000010 [ 89.428432][ T7345] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 89.428439][ T7345] R13: 00007f1599a26038 R14: 00007f1599a25fa0 R15: 00007ffe86fec848 [ 89.428452][ T7345] [ 89.450130][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 89.524448][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.530312][ T41] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 89.532782][ T41] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 89.535228][ T41] usb 5-1: config 14 has no interface number 0 [ 89.537200][ T41] usb 5-1: config 14 has no interface number 1 [ 89.539252][ T41] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 89.542526][ T41] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 89.546345][ T41] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 89.549733][ T41] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 89.555239][ T41] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 89.558571][ T41] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.562681][ T41] usb 5-1: config 14 interface 57 has no altsetting 0 [ 89.565406][ T41] usb 5-1: config 14 interface 228 has no altsetting 0 [ 89.578252][ T41] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 89.581202][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.583916][ T41] usb 5-1: Product: syz [ 89.585389][ T41] usb 5-1: Manufacturer: syz [ 89.587089][ T41] usb 5-1: SerialNumber: syz [ 89.600667][ T7359] netlink: 'syz.3.350': attribute type 23 has an invalid length. [ 89.603746][ T55] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.688050][ T7366] FAULT_INJECTION: forcing a failure. [ 89.688050][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 89.692238][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.692258][ T7366] Tainted: [L]=SOFTLOCKUP [ 89.692262][ T7366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.692270][ T7366] Call Trace: [ 89.692275][ T7366] [ 89.692279][ T7366] dump_stack_lvl+0x100/0x190 [ 89.692297][ T7366] should_fail_ex.cold+0x5/0xa [ 89.692313][ T7366] should_failslab+0xc2/0x120 [ 89.692329][ T7366] __kmalloc_cache_noprof+0x91/0x6c0 [ 89.692349][ T7366] ? sctp_add_bind_addr+0xae/0x3e0 [ 89.692367][ T7366] sctp_add_bind_addr+0xae/0x3e0 [ 89.692382][ T7366] sctp_copy_local_addr_list+0x349/0x550 [ 89.692401][ T7366] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 89.692419][ T7366] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 89.692437][ T7366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.692454][ T7366] sctp_bind_addr_copy+0xe0/0x530 [ 89.692471][ T7366] sctp_connect_new_asoc+0x1c9/0x770 [ 89.692492][ T7366] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 89.692512][ T7366] ? selinux_sctp_bind_connect+0xe0/0x230 [ 89.692534][ T7366] sctp_sendmsg+0x1743/0x22e0 [ 89.692549][ T7366] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.692559][ T7366] ? sock_has_perm+0x25a/0x2f0 [ 89.692575][ T7366] ? __pfx_sock_has_perm+0x10/0x10 [ 89.692595][ T7366] ? __might_fault+0xc5/0x140 [ 89.692610][ T7366] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.692622][ T7366] inet_sendmsg+0x11c/0x140 [ 89.692638][ T7366] __sys_sendto+0x453/0x4e0 [ 89.692651][ T7366] ? __pfx_inet_sendmsg+0x10/0x10 [ 89.692667][ T7366] ? __pfx___sys_sendto+0x10/0x10 [ 89.692684][ T7366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.692704][ T7366] ? ksys_write+0x1ac/0x250 [ 89.692723][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 89.692743][ T7366] __x64_sys_sendto+0xe0/0x1c0 [ 89.692756][ T7366] ? do_syscall_64+0x90/0x870 [ 89.692769][ T7366] ? lockdep_hardirqs_on+0x78/0x100 [ 89.692782][ T7366] do_syscall_64+0x115/0x870 [ 89.692795][ T7366] ? clear_bhb_loop+0x40/0x90 [ 89.692810][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.692822][ T7366] RIP: 0033:0x7f8ba399de99 [ 89.692837][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.692848][ T7366] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.692860][ T7366] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 89.692868][ T7366] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.692874][ T7366] RBP: 00007f8ba48fc090 R08: 0000200000000000 R09: 0000000000000010 [ 89.692881][ T7366] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 89.692888][ T7366] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 89.692903][ T7366] [ 89.807082][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 89.810110][ T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.813348][ T55] usb 7-1: config 0 has no interfaces? [ 89.816667][ T55] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 89.820034][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.822562][ T55] usb 7-1: Product: syz [ 89.823883][ T55] usb 7-1: Manufacturer: syz [ 89.825382][ T55] usb 7-1: SerialNumber: syz [ 89.832852][ T55] usb 7-1: config 0 descriptor?? [ 90.010001][ T41] legousbtower 5-1:14.57: interrupt endpoints not found [ 90.071979][ T55] usb 7-1: USB disconnect, device number 11 [ 90.175129][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 90.329720][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.332833][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.337630][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.340858][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.343460][ T24] usb 8-1: Product: syz [ 90.344798][ T24] usb 8-1: Manufacturer: syz [ 90.346374][ T24] usb 8-1: SerialNumber: syz [ 90.350251][ T24] usb 8-1: config 0 descriptor?? [ 90.355260][ T24] usb 8-1: selecting invalid altsetting 0 [ 90.420028][ T41] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 90.424891][ T41] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 90.569722][ T41] usb 8-1: USB disconnect, device number 6 [ 90.620783][ T7395] svc: failed to register nfsdv3 RPC service (errno 111). [ 90.626642][ T7395] svc: failed to register nfsaclv3 RPC service (errno 111). [ 90.690129][ T7398] svc: failed to register nfsdv3 RPC service (errno 111). [ 90.692835][ T7398] svc: failed to register nfsaclv3 RPC service (errno 111). [ 90.752790][ T7400] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 90.985742][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.988560][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.188502][ T7425] FAULT_INJECTION: forcing a failure. [ 91.188502][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 91.192342][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.3.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.192359][ T7425] Tainted: [L]=SOFTLOCKUP [ 91.192363][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.192369][ T7425] Call Trace: [ 91.192374][ T7425] [ 91.192378][ T7425] dump_stack_lvl+0x100/0x190 [ 91.192395][ T7425] should_fail_ex.cold+0x5/0xa [ 91.192409][ T7425] should_failslab+0xc2/0x120 [ 91.192425][ T7425] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 91.192439][ T7425] ? __alloc_skb+0x5b7/0x710 [ 91.192452][ T7425] ? __alloc_skb+0x140/0x710 [ 91.192467][ T7425] __alloc_skb+0x140/0x710 [ 91.192479][ T7425] ? __alloc_skb+0x5b7/0x710 [ 91.192491][ T7425] ? __pfx___alloc_skb+0x10/0x10 [ 91.192507][ T7425] netlink_ack+0x117/0xb80 [ 91.192519][ T7425] ? avc_has_perm_noaudit+0x145/0x3b0 [ 91.192536][ T7425] netlink_rcv_skb+0x333/0x420 [ 91.192547][ T7425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.192563][ T7425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.192579][ T7425] ? ns_capable+0xd2/0xf0 [ 91.192595][ T7425] nfnetlink_rcv+0x1b3/0x440 [ 91.192609][ T7425] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 91.192624][ T7425] ? netlink_deliver_tap+0x1ae/0xcc0 [ 91.192644][ T7425] netlink_unicast+0x585/0x850 [ 91.192656][ T7425] ? __pfx_netlink_unicast+0x10/0x10 [ 91.192671][ T7425] netlink_sendmsg+0x8b0/0xda0 [ 91.192684][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.192696][ T7425] ? selinux_socket_sendmsg+0x198/0x2f0 [ 91.192715][ T7425] ____sys_sendmsg+0xa4d/0xbe0 [ 91.192731][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.192743][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.192766][ T7425] ___sys_sendmsg+0x190/0x1e0 [ 91.192788][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.192805][ T7425] ? __lock_acquire+0x49f/0x1a40 [ 91.192819][ T7425] ? get_pid_task+0x106/0x250 [ 91.192850][ T7425] __sys_sendmsg+0x160/0x210 [ 91.192864][ T7425] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.192885][ T7425] do_syscall_64+0x115/0x870 [ 91.192898][ T7425] ? clear_bhb_loop+0x40/0x90 [ 91.192911][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.192923][ T7425] RIP: 0033:0x7f8ba399de99 [ 91.192932][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.192943][ T7425] RSP: 002b:00007f8ba48fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.192954][ T7425] RAX: ffffffffffffffda RBX: 00007f8ba3c25fa0 RCX: 00007f8ba399de99 [ 91.192961][ T7425] RDX: 00000000240008c4 RSI: 0000200000000180 RDI: 0000000000000005 [ 91.192968][ T7425] RBP: 00007f8ba48fc090 R08: 0000000000000000 R09: 0000000000000000 [ 91.192974][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.192980][ T7425] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 91.192993][ T7425] [ 91.205149][ T41] usb 5-1: USB disconnect, device number 6 [ 91.213951][ T7426] svc: failed to register nfsdv3 RPC service (errno 111). [ 91.221205][ T41] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 91.223754][ T7426] svc: failed to register nfsaclv3 RPC service (errno 111). [ 91.342006][ T7428] tipc: Started in network mode [ 91.344116][ T7428] tipc: Node identity 36c322281437, cluster identity 4711 [ 91.347227][ T7428] tipc: Enabled bearer , priority 0 [ 91.366724][ T7428] syzkaller0: entered promiscuous mode [ 91.368371][ T7428] syzkaller0: entered allmulticast mode [ 91.386845][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 91.389462][ T7428] netlink: 'syz.1.367': attribute type 30 has an invalid length. [ 91.397574][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.398843][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 91.400997][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 91.401101][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.401143][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.401162][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.403629][ T7428] netlink: 'syz.1.367': attribute type 30 has an invalid length. [ 91.411628][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.422105][ T7427] tipc: Resetting bearer [ 91.756274][ T7432] FAULT_INJECTION: forcing a failure. [ 91.756274][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 91.761387][ T7432] CPU: 2 UID: 0 PID: 7432 Comm: syz.0.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.761405][ T7432] Tainted: [L]=SOFTLOCKUP [ 91.761409][ T7432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.761416][ T7432] Call Trace: [ 91.761419][ T7432] [ 91.761423][ T7432] dump_stack_lvl+0x100/0x190 [ 91.761441][ T7432] should_fail_ex.cold+0x5/0xa [ 91.761455][ T7432] should_failslab+0xc2/0x120 [ 91.761470][ T7432] __kmalloc_cache_noprof+0x91/0x6c0 [ 91.761490][ T7432] ? sctp_add_bind_addr+0xae/0x3e0 [ 91.761507][ T7432] sctp_add_bind_addr+0xae/0x3e0 [ 91.761521][ T7432] sctp_copy_local_addr_list+0x349/0x550 [ 91.761539][ T7432] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 91.761556][ T7432] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 91.761573][ T7432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.761588][ T7432] sctp_bind_addr_copy+0xe0/0x530 [ 91.761605][ T7432] sctp_connect_new_asoc+0x1c9/0x770 [ 91.761624][ T7432] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 91.761643][ T7432] ? selinux_sctp_bind_connect+0xe0/0x230 [ 91.761664][ T7432] sctp_sendmsg+0x1743/0x22e0 [ 91.761677][ T7432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.761687][ T7432] ? sock_has_perm+0x25a/0x2f0 [ 91.761702][ T7432] ? __pfx_sock_has_perm+0x10/0x10 [ 91.761721][ T7432] ? __might_fault+0xc5/0x140 [ 91.761735][ T7432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.761746][ T7432] inet_sendmsg+0x11c/0x140 [ 91.761762][ T7432] __sys_sendto+0x453/0x4e0 [ 91.761774][ T7432] ? __pfx_inet_sendmsg+0x10/0x10 [ 91.761789][ T7432] ? __pfx___sys_sendto+0x10/0x10 [ 91.761805][ T7432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.761824][ T7432] ? ksys_write+0x1ac/0x250 [ 91.761842][ T7432] ? __pfx_ksys_write+0x10/0x10 [ 91.761862][ T7432] __x64_sys_sendto+0xe0/0x1c0 [ 91.761874][ T7432] ? do_syscall_64+0x90/0x870 [ 91.761886][ T7432] ? lockdep_hardirqs_on+0x78/0x100 [ 91.761898][ T7432] do_syscall_64+0x115/0x870 [ 91.761910][ T7432] ? clear_bhb_loop+0x40/0x90 [ 91.761923][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.761935][ T7432] RIP: 0033:0x7f87f059de99 [ 91.761945][ T7432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.761955][ T7432] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 91.761967][ T7432] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 91.761974][ T7432] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 91.761980][ T7432] RBP: 00007f87f1474090 R08: 0000200000000000 R09: 0000000000000010 [ 91.761987][ T7432] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 91.761993][ T7432] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 91.762007][ T7432] [ 92.312034][ T7443] clocksource: Switched to clocksource acpi_pm [ 92.350288][ T7443] clocksource: Switched to clocksource tsc [ 92.555858][ T7427] tipc: Disabling bearer [ 92.560403][ T7440] tipc: Enabling of bearer rejected, failed to enable media [ 92.566169][ T7441] vlan2: entered allmulticast mode [ 92.571803][ T55] tipc: Node number set to 586424872 [ 92.593206][ T5753] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 92.620706][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 92.620717][ T42] audit: type=1400 audit(1785769121.600:674): avc: denied { write } for pid=7446 comm="syz.0.374" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.634736][ T7447] binder: 7446:7447 ioctl c0306201 2000000004c0 returned -11 [ 92.637744][ T7447] binder: 7446:7447 ioctl 4020ae46 200000000140 returned -22 [ 92.888807][ T42] audit: type=1400 audit(1785769121.870:675): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.909374][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.003938][ T42] audit: type=1400 audit(1785769121.980:676): avc: granted { setsecparam } for pid=7463 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 93.058331][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 93.062949][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.066240][ T55] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 93.069054][ T55] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 93.071731][ T55] usb 5-1: config 14 has no interface number 0 [ 93.073731][ T55] usb 5-1: config 14 has no interface number 1 [ 93.075774][ T55] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 93.079157][ T55] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 93.082745][ T55] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 93.086264][ T55] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 93.089852][ T55] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 93.093500][ T55] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.097548][ T55] usb 5-1: config 14 interface 57 has no altsetting 0 [ 93.099798][ T55] usb 5-1: config 14 interface 228 has no altsetting 0 [ 93.106243][ T55] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 93.109449][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.111915][ T55] usb 5-1: Product: syz [ 93.113206][ T55] usb 5-1: Manufacturer: syz [ 93.114684][ T55] usb 5-1: SerialNumber: syz [ 93.271470][ T7475] FAULT_INJECTION: forcing a failure. [ 93.271470][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 93.275383][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.2.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.275401][ T7475] Tainted: [L]=SOFTLOCKUP [ 93.275405][ T7475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.275412][ T7475] Call Trace: [ 93.275417][ T7475] [ 93.275422][ T7475] dump_stack_lvl+0x100/0x190 [ 93.275440][ T7475] should_fail_ex.cold+0x5/0xa [ 93.275455][ T7475] should_failslab+0xc2/0x120 [ 93.275472][ T7475] __kmalloc_cache_noprof+0x91/0x6c0 [ 93.275491][ T7475] ? sctp_add_bind_addr+0xae/0x3e0 [ 93.275508][ T7475] sctp_add_bind_addr+0xae/0x3e0 [ 93.275522][ T7475] sctp_copy_local_addr_list+0x349/0x550 [ 93.275540][ T7475] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 93.275562][ T7475] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 93.275584][ T7475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.275605][ T7475] sctp_bind_addr_copy+0xe0/0x530 [ 93.275628][ T7475] sctp_connect_new_asoc+0x1c9/0x770 [ 93.275658][ T7475] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 93.275687][ T7475] ? selinux_sctp_bind_connect+0xe0/0x230 [ 93.275709][ T7475] sctp_sendmsg+0x1743/0x22e0 [ 93.275723][ T7475] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.275733][ T7475] ? sock_has_perm+0x25a/0x2f0 [ 93.275747][ T7475] ? __pfx_sock_has_perm+0x10/0x10 [ 93.275767][ T7475] ? __might_fault+0xc5/0x140 [ 93.275782][ T7475] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.275793][ T7475] inet_sendmsg+0x11c/0x140 [ 93.275809][ T7475] __sys_sendto+0x453/0x4e0 [ 93.275821][ T7475] ? __pfx_inet_sendmsg+0x10/0x10 [ 93.275836][ T7475] ? __pfx___sys_sendto+0x10/0x10 [ 93.275853][ T7475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.275872][ T7475] ? ksys_write+0x1ac/0x250 [ 93.275889][ T7475] ? __pfx_ksys_write+0x10/0x10 [ 93.275908][ T7475] __x64_sys_sendto+0xe0/0x1c0 [ 93.275921][ T7475] ? do_syscall_64+0x90/0x870 [ 93.275933][ T7475] ? lockdep_hardirqs_on+0x78/0x100 [ 93.275945][ T7475] do_syscall_64+0x115/0x870 [ 93.275957][ T7475] ? clear_bhb_loop+0x40/0x90 [ 93.275971][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.275984][ T7475] RIP: 0033:0x7fe93699de99 [ 93.275993][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.276005][ T7475] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 93.276016][ T7475] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 93.276023][ T7475] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 93.276030][ T7475] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 93.276037][ T7475] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 93.276043][ T7475] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 93.276057][ T7475] [ 93.386192][ T42] audit: type=1400 audit(1785769122.360:677): avc: denied { read write } for pid=7476 comm="syz.2.385" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.395315][ T42] audit: type=1400 audit(1785769122.360:678): avc: denied { open } for pid=7476 comm="syz.2.385" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.404205][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 93.404300][ T42] audit: type=1400 audit(1785769122.360:679): avc: denied { ioctl } for pid=7476 comm="syz.2.385" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.416384][ T42] audit: type=1400 audit(1785769122.380:680): avc: denied { nlmsg_read } for pid=7476 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.523788][ T55] legousbtower 5-1:14.57: interrupt endpoints not found [ 93.541942][ T42] audit: type=1400 audit(1785769122.520:681): avc: denied { ioctl } for pid=7481 comm="syz.1.387" path="socket:[15243]" dev="sockfs" ino=15243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.549965][ T42] audit: type=1400 audit(1785769122.520:682): avc: denied { connect } for pid=7481 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.555938][ T42] audit: type=1400 audit(1785769122.520:683): avc: denied { write } for pid=7481 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.586390][ T7486] pimreg: entered allmulticast mode [ 93.597855][ T7485] pimreg: left allmulticast mode [ 93.701989][ T7489] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 93.709827][ T7488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.775002][ T5753] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 93.810160][ T7493] tipc: Started in network mode [ 93.812274][ T7493] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.816922][ T7493] tipc: New replicast peer: 172.20.20.187 [ 93.822189][ T7493] tipc: Enabled bearer , priority 10 [ 93.871312][ T7495] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 93.925285][ T55] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 93.930364][ T55] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 94.170315][ T7505] netlink: 'syz.2.396': attribute type 12 has an invalid length. [ 94.172516][ T7505] netlink: 'syz.2.396': attribute type 29 has an invalid length. [ 94.174717][ T7505] netlink: 148 bytes leftover after parsing attributes in process `syz.2.396'. [ 94.177267][ T7505] netlink: 'syz.2.396': attribute type 3 has an invalid length. [ 94.179574][ T7505] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 94.181855][ T7505] netlink: 35 bytes leftover after parsing attributes in process `syz.2.396'. [ 94.184884][ T7505] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 94.285136][ T7510] FAULT_INJECTION: forcing a failure. [ 94.285136][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 94.289303][ T7510] CPU: 2 UID: 0 PID: 7510 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.289321][ T7510] Tainted: [L]=SOFTLOCKUP [ 94.289325][ T7510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.289332][ T7510] Call Trace: [ 94.289335][ T7510] [ 94.289340][ T7510] dump_stack_lvl+0x100/0x190 [ 94.289357][ T7510] should_fail_ex.cold+0x5/0xa [ 94.289377][ T7510] should_failslab+0xc2/0x120 [ 94.289393][ T7510] __kmalloc_cache_noprof+0x91/0x6c0 [ 94.289426][ T7510] ? sctp_add_bind_addr+0xae/0x3e0 [ 94.289443][ T7510] sctp_add_bind_addr+0xae/0x3e0 [ 94.289458][ T7510] sctp_copy_local_addr_list+0x349/0x550 [ 94.289476][ T7510] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 94.289493][ T7510] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 94.289511][ T7510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.289527][ T7510] sctp_bind_addr_copy+0xe0/0x530 [ 94.289544][ T7510] sctp_connect_new_asoc+0x1c9/0x770 [ 94.289564][ T7510] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 94.289583][ T7510] ? selinux_sctp_bind_connect+0xe0/0x230 [ 94.289604][ T7510] sctp_sendmsg+0x1743/0x22e0 [ 94.289618][ T7510] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.289628][ T7510] ? sock_has_perm+0x25a/0x2f0 [ 94.289643][ T7510] ? __pfx_sock_has_perm+0x10/0x10 [ 94.289663][ T7510] ? __might_fault+0xc5/0x140 [ 94.289677][ T7510] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.289689][ T7510] inet_sendmsg+0x11c/0x140 [ 94.289704][ T7510] __sys_sendto+0x453/0x4e0 [ 94.289717][ T7510] ? __pfx_inet_sendmsg+0x10/0x10 [ 94.289732][ T7510] ? __pfx___sys_sendto+0x10/0x10 [ 94.289748][ T7510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.289768][ T7510] ? ksys_write+0x1ac/0x250 [ 94.289786][ T7510] ? __pfx_ksys_write+0x10/0x10 [ 94.289806][ T7510] __x64_sys_sendto+0xe0/0x1c0 [ 94.289818][ T7510] ? do_syscall_64+0x90/0x870 [ 94.289831][ T7510] ? lockdep_hardirqs_on+0x78/0x100 [ 94.289844][ T7510] do_syscall_64+0x115/0x870 [ 94.289856][ T7510] ? clear_bhb_loop+0x40/0x90 [ 94.289870][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.289882][ T7510] RIP: 0033:0x7f159979de99 [ 94.289892][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.289904][ T7510] RSP: 002b:00007f159a685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.289915][ T7510] RAX: ffffffffffffffda RBX: 00007f1599a25fa0 RCX: 00007f159979de99 [ 94.289923][ T7510] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 94.289930][ T7510] RBP: 00007f159a685090 R08: 0000200000000000 R09: 0000000000000010 [ 94.289936][ T7510] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 94.289943][ T7510] R13: 00007f1599a26038 R14: 00007f1599a25fa0 R15: 00007ffe86fec848 [ 94.289957][ T7510] [ 94.410131][ T7515] FAULT_INJECTION: forcing a failure. [ 94.410131][ T7515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.415238][ T7515] CPU: 1 UID: 0 PID: 7515 Comm: syz.3.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.415257][ T7515] Tainted: [L]=SOFTLOCKUP [ 94.415261][ T7515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.415268][ T7515] Call Trace: [ 94.415273][ T7515] [ 94.415278][ T7515] dump_stack_lvl+0x100/0x190 [ 94.415297][ T7515] should_fail_ex.cold+0x5/0xa [ 94.415311][ T7515] _copy_from_user+0x2e/0xd0 [ 94.415328][ T7515] kstrtouint_from_user+0xd6/0x1d0 [ 94.415340][ T7515] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 94.415352][ T7515] ? __lock_acquire+0x49f/0x1a40 [ 94.415372][ T7515] proc_fail_nth_write+0x83/0x220 [ 94.415395][ T7515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.415416][ T7515] vfs_write+0x2aa/0x1050 [ 94.415434][ T7515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.415453][ T7515] ? __pfx_vfs_write+0x10/0x10 [ 94.415470][ T7515] ? __fget_files+0x215/0x3d0 [ 94.415485][ T7515] ? __fget_files+0x21f/0x3d0 [ 94.415500][ T7515] ksys_write+0x12a/0x250 [ 94.415517][ T7515] ? __pfx_ksys_write+0x10/0x10 [ 94.415539][ T7515] do_syscall_64+0x115/0x870 [ 94.415557][ T7515] ? clear_bhb_loop+0x40/0x90 [ 94.415573][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.415585][ T7515] RIP: 0033:0x7f8ba395e6ce [ 94.415597][ T7515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.415607][ T7515] RSP: 002b:00007f8ba48fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.415619][ T7515] RAX: ffffffffffffffda RBX: 00007f8ba48fc6c0 RCX: 00007f8ba395e6ce [ 94.415626][ T7515] RDX: 0000000000000001 RSI: 00007f8ba48fc0a0 RDI: 0000000000000006 [ 94.415633][ T7515] RBP: 00007f8ba48fc090 R08: 0000000000000000 R09: 0000000000000000 [ 94.415639][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.415645][ T7515] R13: 00007f8ba3c26038 R14: 00007f8ba3c25fa0 R15: 00007fffbcd87628 [ 94.415659][ T7515] [ 94.480661][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.484718][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.700960][ T1354] usb 5-1: USB disconnect, device number 7 [ 94.710088][ T7525] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size. [ 94.719664][ T1354] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 94.934205][ T7532] /dev/sg0: Can't lookup blockdev [ 94.938548][ T1499] tipc: Node number set to 2886997162 [ 94.975834][ T7534] macvlan0: entered allmulticast mode [ 94.977629][ T7534] veth1_vlan: entered allmulticast mode [ 95.041874][ T7538] FAULT_INJECTION: forcing a failure. [ 95.041874][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 95.045792][ T7538] CPU: 2 UID: 0 PID: 7538 Comm: syz.2.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.045810][ T7538] Tainted: [L]=SOFTLOCKUP [ 95.045814][ T7538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.045821][ T7538] Call Trace: [ 95.045825][ T7538] [ 95.045830][ T7538] dump_stack_lvl+0x100/0x190 [ 95.045847][ T7538] should_fail_ex.cold+0x5/0xa [ 95.045862][ T7538] should_failslab+0xc2/0x120 [ 95.045878][ T7538] __kmalloc_cache_noprof+0x91/0x6c0 [ 95.045897][ T7538] ? sctp_add_bind_addr+0xae/0x3e0 [ 95.045913][ T7538] sctp_add_bind_addr+0xae/0x3e0 [ 95.045928][ T7538] sctp_copy_local_addr_list+0x349/0x550 [ 95.045945][ T7538] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.045962][ T7538] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 95.045979][ T7538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.045995][ T7538] sctp_bind_addr_copy+0xe0/0x530 [ 95.046031][ T7538] sctp_connect_new_asoc+0x1c9/0x770 [ 95.046051][ T7538] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.046070][ T7538] ? selinux_sctp_bind_connect+0xe0/0x230 [ 95.046091][ T7538] sctp_sendmsg+0x1743/0x22e0 [ 95.046104][ T7538] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.046114][ T7538] ? sock_has_perm+0x25a/0x2f0 [ 95.046129][ T7538] ? __pfx_sock_has_perm+0x10/0x10 [ 95.046148][ T7538] ? __might_fault+0xc5/0x140 [ 95.046162][ T7538] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.046173][ T7538] inet_sendmsg+0x11c/0x140 [ 95.046189][ T7538] __sys_sendto+0x453/0x4e0 [ 95.046201][ T7538] ? __pfx_inet_sendmsg+0x10/0x10 [ 95.046215][ T7538] ? __pfx___sys_sendto+0x10/0x10 [ 95.046231][ T7538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.046251][ T7538] ? ksys_write+0x1ac/0x250 [ 95.046269][ T7538] ? __pfx_ksys_write+0x10/0x10 [ 95.046288][ T7538] __x64_sys_sendto+0xe0/0x1c0 [ 95.046300][ T7538] ? do_syscall_64+0x90/0x870 [ 95.046313][ T7538] ? lockdep_hardirqs_on+0x78/0x100 [ 95.046325][ T7538] do_syscall_64+0x115/0x870 [ 95.046337][ T7538] ? clear_bhb_loop+0x40/0x90 [ 95.046350][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.046362][ T7538] RIP: 0033:0x7fe93699de99 [ 95.046372][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.046383][ T7538] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.046394][ T7538] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 95.046401][ T7538] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 95.046408][ T7538] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 95.046414][ T7538] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 95.046421][ T7538] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 95.046434][ T7538] [ 95.305386][ T7553] PM: Enabling pm_trace changes system date and time during resume. [ 95.305386][ T7553] PM: Correct system time has to be restored manually after resume. [ 95.461691][ T7569] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 95.464724][ T7569] SELinux: invalid class [ 95.471505][ T7569] SELinux: failed to load policy [ 95.477240][ T7574] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 95.480159][ T7574] SELinux: invalid class [ 95.484280][ T7574] SELinux: failed to load policy [ 95.526340][ T7577] FAULT_INJECTION: forcing a failure. [ 95.526340][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 95.530362][ T7577] CPU: 3 UID: 0 PID: 7577 Comm: syz.2.422 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.530379][ T7577] Tainted: [L]=SOFTLOCKUP [ 95.530383][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.530389][ T7577] Call Trace: [ 95.530393][ T7577] [ 95.530397][ T7577] dump_stack_lvl+0x100/0x190 [ 95.530416][ T7577] should_fail_ex.cold+0x5/0xa [ 95.530431][ T7577] should_failslab+0xc2/0x120 [ 95.530446][ T7577] __kmalloc_cache_noprof+0x91/0x6c0 [ 95.530465][ T7577] ? sctp_add_bind_addr+0xae/0x3e0 [ 95.530481][ T7577] sctp_add_bind_addr+0xae/0x3e0 [ 95.530496][ T7577] sctp_copy_local_addr_list+0x349/0x550 [ 95.530513][ T7577] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.530530][ T7577] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 95.530547][ T7577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.530563][ T7577] sctp_bind_addr_copy+0xe0/0x530 [ 95.530580][ T7577] sctp_connect_new_asoc+0x1c9/0x770 [ 95.530599][ T7577] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.530618][ T7577] ? selinux_sctp_bind_connect+0xe0/0x230 [ 95.530638][ T7577] sctp_sendmsg+0x1743/0x22e0 [ 95.530652][ T7577] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.530665][ T7577] ? sock_has_perm+0x25a/0x2f0 [ 95.530680][ T7577] ? __pfx_sock_has_perm+0x10/0x10 [ 95.530699][ T7577] ? __might_fault+0xc5/0x140 [ 95.530714][ T7577] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.530725][ T7577] inet_sendmsg+0x11c/0x140 [ 95.530740][ T7577] __sys_sendto+0x453/0x4e0 [ 95.530752][ T7577] ? __pfx_inet_sendmsg+0x10/0x10 [ 95.530767][ T7577] ? __pfx___sys_sendto+0x10/0x10 [ 95.530783][ T7577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.530802][ T7577] ? ksys_write+0x1ac/0x250 [ 95.530820][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 95.530839][ T7577] __x64_sys_sendto+0xe0/0x1c0 [ 95.530852][ T7577] ? do_syscall_64+0x90/0x870 [ 95.530864][ T7577] ? lockdep_hardirqs_on+0x78/0x100 [ 95.530876][ T7577] do_syscall_64+0x115/0x870 [ 95.530888][ T7577] ? clear_bhb_loop+0x40/0x90 [ 95.530901][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.530913][ T7577] RIP: 0033:0x7fe93699de99 [ 95.530923][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.530933][ T7577] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.530944][ T7577] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 95.530951][ T7577] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 95.530957][ T7577] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 95.530964][ T7577] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 95.530970][ T7577] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 95.530984][ T7577] [ 95.669382][ T55] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 95.818421][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 95.821634][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.824846][ T55] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 95.827507][ T55] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 95.830372][ T55] usb 6-1: config 14 has no interface number 0 [ 95.832350][ T55] usb 6-1: config 14 has no interface number 1 [ 95.834356][ T55] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 95.837643][ T55] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 95.841434][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 95.844903][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 95.848482][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 95.852442][ T55] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.856500][ T55] usb 6-1: config 14 interface 57 has no altsetting 0 [ 95.859478][ T55] usb 6-1: config 14 interface 228 has no altsetting 0 [ 95.864756][ T55] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 95.867749][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.870396][ T55] usb 6-1: Product: syz [ 95.871937][ T55] usb 6-1: Manufacturer: syz [ 95.873383][ T55] usb 6-1: SerialNumber: syz [ 96.199971][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 96.202935][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 96.213843][ T7596] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 96.285116][ T55] legousbtower 6-1:14.57: interrupt endpoints not found [ 96.534683][ T7604] Cannot find add_set index 0 as target [ 96.681312][ T7610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.684215][ T55] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 96.690966][ T55] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 96.762831][ T7614] FAULT_INJECTION: forcing a failure. [ 96.762831][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 96.766993][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.0.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.767011][ T7614] Tainted: [L]=SOFTLOCKUP [ 96.767015][ T7614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.767021][ T7614] Call Trace: [ 96.767026][ T7614] [ 96.767031][ T7614] dump_stack_lvl+0x100/0x190 [ 96.767049][ T7614] should_fail_ex.cold+0x5/0xa [ 96.767063][ T7614] should_failslab+0xc2/0x120 [ 96.767079][ T7614] __kmalloc_cache_noprof+0x91/0x6c0 [ 96.767098][ T7614] ? sctp_add_bind_addr+0xae/0x3e0 [ 96.767114][ T7614] sctp_add_bind_addr+0xae/0x3e0 [ 96.767129][ T7614] sctp_copy_local_addr_list+0x349/0x550 [ 96.767146][ T7614] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 96.767176][ T7614] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 96.767195][ T7614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.767210][ T7614] sctp_bind_addr_copy+0xe0/0x530 [ 96.767227][ T7614] sctp_connect_new_asoc+0x1c9/0x770 [ 96.767247][ T7614] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.767266][ T7614] ? selinux_sctp_bind_connect+0xe0/0x230 [ 96.767286][ T7614] sctp_sendmsg+0x1743/0x22e0 [ 96.767300][ T7614] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.767310][ T7614] ? sock_has_perm+0x25a/0x2f0 [ 96.767324][ T7614] ? __pfx_sock_has_perm+0x10/0x10 [ 96.767348][ T7614] ? __might_fault+0xc5/0x140 [ 96.767363][ T7614] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.767373][ T7614] inet_sendmsg+0x11c/0x140 [ 96.767393][ T7614] __sys_sendto+0x453/0x4e0 [ 96.767411][ T7614] ? __pfx_inet_sendmsg+0x10/0x10 [ 96.767435][ T7614] ? __pfx___sys_sendto+0x10/0x10 [ 96.767462][ T7614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.767495][ T7614] ? ksys_write+0x1ac/0x250 [ 96.767521][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 96.767551][ T7614] __x64_sys_sendto+0xe0/0x1c0 [ 96.767565][ T7614] ? do_syscall_64+0x90/0x870 [ 96.767578][ T7614] ? lockdep_hardirqs_on+0x78/0x100 [ 96.767590][ T7614] do_syscall_64+0x115/0x870 [ 96.767601][ T7614] ? clear_bhb_loop+0x40/0x90 [ 96.767615][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.767627][ T7614] RIP: 0033:0x7f87f059de99 [ 96.767637][ T7614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.767647][ T7614] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.767658][ T7614] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 96.767665][ T7614] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 96.767671][ T7614] RBP: 00007f87f1474090 R08: 0000200000000000 R09: 0000000000000010 [ 96.767677][ T7614] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 96.767683][ T7614] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 96.767698][ T7614] [ 97.239654][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.243544][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.450260][ T10] usb 6-1: USB disconnect, device number 7 [ 97.468234][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 97.513279][ T7633] 8021q: VLANs not supported on gre0 [ 97.718447][ T1354] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 97.822397][ T7644] FAULT_INJECTION: forcing a failure. [ 97.822397][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 97.829455][ T7644] CPU: 3 UID: 0 PID: 7644 Comm: syz.2.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.829474][ T7644] Tainted: [L]=SOFTLOCKUP [ 97.829478][ T7644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.829485][ T7644] Call Trace: [ 97.829488][ T7644] [ 97.829493][ T7644] dump_stack_lvl+0x100/0x190 [ 97.829510][ T7644] should_fail_ex.cold+0x5/0xa [ 97.829525][ T7644] should_failslab+0xc2/0x120 [ 97.829540][ T7644] __kmalloc_cache_noprof+0x91/0x6c0 [ 97.829560][ T7644] ? sctp_add_bind_addr+0xae/0x3e0 [ 97.829576][ T7644] sctp_add_bind_addr+0xae/0x3e0 [ 97.829591][ T7644] sctp_copy_local_addr_list+0x349/0x550 [ 97.829608][ T7644] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 97.829625][ T7644] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 97.829642][ T7644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.829658][ T7644] sctp_bind_addr_copy+0xe0/0x530 [ 97.829674][ T7644] sctp_connect_new_asoc+0x1c9/0x770 [ 97.829694][ T7644] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 97.829713][ T7644] ? selinux_sctp_bind_connect+0xe0/0x230 [ 97.829733][ T7644] sctp_sendmsg+0x1743/0x22e0 [ 97.829752][ T7644] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.829762][ T7644] ? sock_has_perm+0x25a/0x2f0 [ 97.829777][ T7644] ? __pfx_sock_has_perm+0x10/0x10 [ 97.829796][ T7644] ? __might_fault+0xc5/0x140 [ 97.829810][ T7644] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.829821][ T7644] inet_sendmsg+0x11c/0x140 [ 97.829836][ T7644] __sys_sendto+0x453/0x4e0 [ 97.829849][ T7644] ? __pfx_inet_sendmsg+0x10/0x10 [ 97.829863][ T7644] ? __pfx___sys_sendto+0x10/0x10 [ 97.829880][ T7644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.829899][ T7644] ? ksys_write+0x1ac/0x250 [ 97.829917][ T7644] ? __pfx_ksys_write+0x10/0x10 [ 97.829936][ T7644] __x64_sys_sendto+0xe0/0x1c0 [ 97.829948][ T7644] ? do_syscall_64+0x90/0x870 [ 97.829960][ T7644] ? lockdep_hardirqs_on+0x78/0x100 [ 97.829973][ T7644] do_syscall_64+0x115/0x870 [ 97.829984][ T7644] ? clear_bhb_loop+0x40/0x90 [ 97.830021][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.830033][ T7644] RIP: 0033:0x7fe93699de99 [ 97.830043][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.830054][ T7644] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.830065][ T7644] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 97.830072][ T7644] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 97.830078][ T7644] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 97.830085][ T7644] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 97.830091][ T7644] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 97.830105][ T7644] [ 97.842432][ T7646] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 97.878316][ T1354] usb 8-1: Using ep0 maxpacket: 32 [ 97.884605][ T1354] usb 8-1: config index 0 descriptor too short (expected 15270, got 18) [ 97.942287][ T1354] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 97.945340][ T1354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.947878][ T1354] usb 8-1: Product: syz [ 97.947888][ T1354] usb 8-1: Manufacturer: syz [ 97.947897][ T1354] usb 8-1: SerialNumber: syz [ 97.949650][ T1354] usb 8-1: config 0 descriptor?? [ 97.959584][ T1354] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 97.962382][ T1354] dvb-usb: bulk message failed: -22 (4/0) [ 97.964160][ T1354] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 97.967382][ T1354] dvb-usb: bulk message failed: -22 (5/0) [ 97.969746][ T1354] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 97.974750][ T1354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.977960][ T1354] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 97.980601][ T1354] usb 8-1: media controller created [ 97.988149][ T1354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.999216][ T1354] usb 8-1: selecting invalid altsetting 3 [ 98.000957][ T1354] ttusb2: set interface to alts=3 failed [ 98.003631][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 98.003641][ T42] audit: type=1400 audit(1785769126.980:718): avc: denied { create } for pid=7655 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.023469][ T1354] DVB: Unable to find symbol tda10086_attach() [ 98.025413][ T1354] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 98.028457][ T1354] dvb-usb: bulk message failed: -22 (4/0) [ 98.030258][ T1354] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.033366][ T1354] dvb-usb: bulk message failed: -22 (5/0) [ 98.035143][ T1354] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.038328][ T1354] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 98.152033][ T7631] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 98.155614][ T7631] dvb-usb: bulk message failed: -22 (7/0) [ 98.157416][ T7631] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 98.162537][ T7631] ttusb2: i2c transfer failed. [ 98.175976][ T7631] netdevsim netdevsim3: Direct firmware load for . [ 98.175976][ T7631] failed with error -2 [ 98.181377][ T42] audit: type=1400 audit(1785769127.160:719): avc: denied { firmware_load } for pid=7630 comm="syz.3.440" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 98.184069][ T7631] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 98.184069][ T7631] [ 98.206400][ T7667] binder: 7666:7667 ioctl 82307202 200000000580 returned -22 [ 98.208765][ T7668] binder: 7666:7668 ioctl c0306201 200000000080 returned -14 [ 98.216737][ T7667] binder: 7666:7667 ioctl c0306201 2000000003c0 returned -14 [ 98.219688][ T7668] befs: (nullb0): No write support. Marking filesystem read-only [ 98.224866][ T7668] befs: (nullb0): invalid magic header [ 98.326139][ T7672] FAULT_INJECTION: forcing a failure. [ 98.326139][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 98.330409][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.2.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.330439][ T7672] Tainted: [L]=SOFTLOCKUP [ 98.330459][ T7672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.330469][ T7672] Call Trace: [ 98.330487][ T7672] [ 98.330492][ T7672] dump_stack_lvl+0x100/0x190 [ 98.330515][ T7672] should_fail_ex.cold+0x5/0xa [ 98.330534][ T7672] should_failslab+0xc2/0x120 [ 98.330554][ T7672] __kmalloc_cache_noprof+0x91/0x6c0 [ 98.330577][ T7672] ? sctp_add_bind_addr+0xae/0x3e0 [ 98.330598][ T7672] sctp_add_bind_addr+0xae/0x3e0 [ 98.330616][ T7672] sctp_copy_local_addr_list+0x349/0x550 [ 98.330638][ T7672] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 98.330659][ T7672] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 98.330681][ T7672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.330700][ T7672] sctp_bind_addr_copy+0xe0/0x530 [ 98.330721][ T7672] sctp_connect_new_asoc+0x1c9/0x770 [ 98.330745][ T7672] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 98.330769][ T7672] ? selinux_sctp_bind_connect+0xe0/0x230 [ 98.330796][ T7672] sctp_sendmsg+0x1743/0x22e0 [ 98.330814][ T7672] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.330826][ T7672] ? sock_has_perm+0x25a/0x2f0 [ 98.330844][ T7672] ? __pfx_sock_has_perm+0x10/0x10 [ 98.330869][ T7672] ? __might_fault+0xc5/0x140 [ 98.330888][ T7672] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.330903][ T7672] inet_sendmsg+0x11c/0x140 [ 98.330923][ T7672] __sys_sendto+0x453/0x4e0 [ 98.330938][ T7672] ? __pfx_inet_sendmsg+0x10/0x10 [ 98.330956][ T7672] ? __pfx___sys_sendto+0x10/0x10 [ 98.330977][ T7672] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.331003][ T7672] ? ksys_write+0x1ac/0x250 [ 98.331025][ T7672] ? __pfx_ksys_write+0x10/0x10 [ 98.331049][ T7672] __x64_sys_sendto+0xe0/0x1c0 [ 98.331064][ T7672] ? do_syscall_64+0x90/0x870 [ 98.331079][ T7672] ? lockdep_hardirqs_on+0x78/0x100 [ 98.331094][ T7672] do_syscall_64+0x115/0x870 [ 98.331109][ T7672] ? clear_bhb_loop+0x40/0x90 [ 98.331126][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.331140][ T7672] RIP: 0033:0x7fe93699de99 [ 98.331153][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.331166][ T7672] RSP: 002b:00007fe9377fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 98.331181][ T7672] RAX: ffffffffffffffda RBX: 00007fe936c25fa0 RCX: 00007fe93699de99 [ 98.331190][ T7672] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 98.331199][ T7672] RBP: 00007fe9377fa090 R08: 0000200000000000 R09: 0000000000000010 [ 98.331208][ T7672] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 98.331216][ T7672] R13: 00007fe936c26038 R14: 00007fe936c25fa0 R15: 00007ffd35297f18 [ 98.331235][ T7672] [ 98.515759][ T42] audit: type=1400 audit(1785769127.490:720): avc: denied { ioctl } for pid=7679 comm="syz.0.459" path="socket:[19691]" dev="sockfs" ino=19691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.728449][ T847] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 98.734239][ T7688] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 98.786760][ T7693] tmpfs: Group quota block hardlimit too large. [ 98.811862][ T7696] tmpfs: Bad value for 'mpol' [ 98.898340][ T847] usb 7-1: Using ep0 maxpacket: 32 [ 98.901640][ T847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 98.904900][ T847] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 98.907659][ T847] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 98.910785][ T847] usb 7-1: config 14 has no interface number 0 [ 98.912789][ T847] usb 7-1: config 14 has no interface number 1 [ 98.914834][ T847] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 98.918259][ T847] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 98.921928][ T847] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 98.925595][ T847] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 98.930179][ T847] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 98.935890][ T847] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.940104][ T847] usb 7-1: config 14 interface 57 has no altsetting 0 [ 98.942467][ T847] usb 7-1: config 14 interface 228 has no altsetting 0 [ 98.946242][ T847] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 98.949080][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.951580][ T847] usb 7-1: Product: syz [ 98.952906][ T847] usb 7-1: Manufacturer: syz [ 98.954399][ T847] usb 7-1: SerialNumber: syz [ 99.036208][ T7698] FAULT_INJECTION: forcing a failure. [ 99.036208][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 99.040263][ T7698] CPU: 2 UID: 0 PID: 7698 Comm: syz.0.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.040296][ T7698] Tainted: [L]=SOFTLOCKUP [ 99.040302][ T7698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.040311][ T7698] Call Trace: [ 99.040317][ T7698] [ 99.040324][ T7698] dump_stack_lvl+0x100/0x190 [ 99.040351][ T7698] should_fail_ex.cold+0x5/0xa [ 99.040375][ T7698] should_failslab+0xc2/0x120 [ 99.040400][ T7698] __kmalloc_cache_noprof+0x91/0x6c0 [ 99.040428][ T7698] ? sctp_add_bind_addr+0xae/0x3e0 [ 99.040448][ T7698] sctp_add_bind_addr+0xae/0x3e0 [ 99.040464][ T7698] sctp_copy_local_addr_list+0x349/0x550 [ 99.040482][ T7698] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 99.040499][ T7698] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 99.040516][ T7698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.040532][ T7698] sctp_bind_addr_copy+0xe0/0x530 [ 99.040549][ T7698] sctp_connect_new_asoc+0x1c9/0x770 [ 99.040569][ T7698] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 99.040588][ T7698] ? selinux_sctp_bind_connect+0xe0/0x230 [ 99.040609][ T7698] sctp_sendmsg+0x1743/0x22e0 [ 99.040622][ T7698] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.040632][ T7698] ? sock_has_perm+0x25a/0x2f0 [ 99.040647][ T7698] ? __pfx_sock_has_perm+0x10/0x10 [ 99.040667][ T7698] ? __might_fault+0xc5/0x140 [ 99.040685][ T7698] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.040696][ T7698] inet_sendmsg+0x11c/0x140 [ 99.040712][ T7698] __sys_sendto+0x453/0x4e0 [ 99.040725][ T7698] ? __pfx_inet_sendmsg+0x10/0x10 [ 99.040739][ T7698] ? __pfx___sys_sendto+0x10/0x10 [ 99.040756][ T7698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.040776][ T7698] ? ksys_write+0x1ac/0x250 [ 99.040793][ T7698] ? __pfx_ksys_write+0x10/0x10 [ 99.040813][ T7698] __x64_sys_sendto+0xe0/0x1c0 [ 99.040825][ T7698] ? do_syscall_64+0x90/0x870 [ 99.040837][ T7698] ? lockdep_hardirqs_on+0x78/0x100 [ 99.040849][ T7698] do_syscall_64+0x115/0x870 [ 99.040861][ T7698] ? clear_bhb_loop+0x40/0x90 [ 99.040875][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.040887][ T7698] RIP: 0033:0x7f87f059de99 [ 99.040897][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.040909][ T7698] RSP: 002b:00007f87f1474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.040921][ T7698] RAX: ffffffffffffffda RBX: 00007f87f0825fa0 RCX: 00007f87f059de99 [ 99.040928][ T7698] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.040934][ T7698] RBP: 00007f87f1474090 R08: 0000200000000000 R09: 0000000000000010 [ 99.040941][ T7698] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 99.040947][ T7698] R13: 00007f87f0826038 R14: 00007f87f0825fa0 R15: 00007ffd79e76ee8 [ 99.040961][ T7698] [ 99.139572][ T42] audit: type=1400 audit(1785769128.120:721): avc: denied { create } for pid=7699 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.147132][ T42] audit: type=1400 audit(1785769128.120:722): avc: denied { setopt } for pid=7699 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.154404][ T42] audit: type=1400 audit(1785769128.130:723): avc: denied { write } for pid=7699 comm="syz.0.466" path="socket:[18665]" dev="sockfs" ino=18665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.161659][ T42] audit: type=1400 audit(1785769128.130:724): avc: denied { map } for pid=7699 comm="syz.0.466" path="socket:[18666]" dev="sockfs" ino=18666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.169151][ T42] audit: type=1400 audit(1785769128.130:725): avc: denied { read } for pid=7699 comm="syz.0.466" path="socket:[18666]" dev="sockfs" ino=18666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.176420][ T42] audit: type=1400 audit(1785769128.130:726): avc: denied { ioctl } for pid=7699 comm="syz.0.466" path="socket:[18665]" dev="sockfs" ino=18665 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.370833][ T847] legousbtower 7-1:14.57: interrupt endpoints not found [ 99.771614][ T847] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 99.775426][ T847] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 99.903222][ T7713] loop0: detected capacity change from 0 to 131072 [ 99.907635][ T7713] sysfs: Unknown parameter '' [ 100.329638][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.332588][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.540596][ T1042] usb 7-1: USB disconnect, device number 12 [ 100.550934][ T1042] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 100.559307][ T10] usb 8-1: USB disconnect, device number 7 [ 100.576688][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 100.588398][ T1354] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 100.739984][ T1354] usb 6-1: unable to get BOS descriptor or descriptor too short [ 100.743762][ T1354] usb 6-1: not running at top speed; connect to a high speed hub [ 100.747880][ T1354] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 100.754320][ T1354] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.758116][ T1354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.761468][ T1354] usb 6-1: Product: syz [ 100.763219][ T1354] usb 6-1: Manufacturer: syz [ 100.765283][ T1354] usb 6-1: SerialNumber: syz [ 100.993207][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.996267][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.003650][ T1354] cdc_ncm 6-1:1.0: bind() failure [ 101.010146][ T1354] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 101.012320][ T1354] cdc_ncm 6-1:1.1: bind() failure [ 101.016073][ T1354] usb 6-1: USB disconnect, device number 8 [ 101.110641][ T42] audit: type=1400 audit(1785769130.090:727): avc: denied { open } for pid=7743 comm="syz.3.483" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 101.203037][ T7748] amd5536udc-pci 0000:00:04.0: PCI INT A: failed to register GSI [ 101.236871][ T5753] Bluetooth: hci3: unexpected event for opcode 0x2060 M,T+ixf F 2)iibjd^k>xդ̧c˻ 2\2xQj%E-O&ՒQ[ 101.548337][ T1042] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.728227][ T1042] usb 5-1: Using ep0 maxpacket: 32 [ 101.731330][ T1042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.734557][ T1042] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 101.737167][ T1042] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 101.740167][ T1042] usb 5-1: config 14 has no interface number 0 [ 101.742091][ T1042] usb 5-1: config 14 has no interface number 1 [ 101.744040][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 101.747311][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 101.751490][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 101.755290][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 101.758959][ T1042] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 101.762360][ T1042] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.766268][ T1042] usb 5-1: config 14 interface 57 has no altsetting 0 [ 101.768540][ T1042] usb 5-1: config 14 interface 228 has no altsetting 0 [ 101.772214][ T1042] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 101.775098][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.777607][ T1042] usb 5-1: Product: syz [ 101.779094][ T1042] usb 5-1: Manufacturer: syz [ 101.780562][ T1042] usb 5-1: SerialNumber: syz [ 102.054441][ T7776] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 102.066726][ T7776] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 102.070123][ T7776] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 102.072732][ T7776] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 102.074911][ T7776] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 102.077450][ T7776] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 102.087421][ T7776] pci 0000:00:01.0: Adding to iommu group 1 [ 102.092851][ T7776] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 102.094988][ T7776] pci 0000:00:01.0: vgaarb: bridge control possible [ 102.097023][ T7776] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 102.104338][ T7776] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 102.106945][ T7776] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 102.116683][ T7776] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 102.120419][ T7776] pci 0000:00:04.0: PCI bridge to [bus 01] [ 102.122749][ T7776] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 102.126489][ T7776] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 102.130008][ T7776] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 102.138042][ T5753] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 102.171291][ T7776] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 102.173625][ T7776] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 102.176719][ T7776] [drm] features: -virgl +edid -resource_blob -host_visible [ 102.176730][ T7776] [drm] features: -context_init -blob_alignment [ 102.187194][ T7776] ------------[ cut here ]------------ [ 102.189395][ T7776] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 102.191530][ T7776] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#1: syz.2.497/7776 [ 102.194765][ T7776] Modules linked in: [ 102.196939][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.2.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.198745][ T1042] legousbtower 5-1:14.57: interrupt endpoints not found [ 102.200290][ T7776] Tainted: [L]=SOFTLOCKUP [ 102.203752][ T7776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.207115][ T7776] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 102.209279][ T7776] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2b ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 102.215219][ T7776] RSP: 0018:ffffc9000615ef58 EFLAGS: 00010246 [ 102.217118][ T7776] RAX: 0000000000000000 RBX: ffff88802bb44500 RCX: fffff52000c2bdc6 [ 102.219918][ T7776] RDX: 0000000000000000 RSI: ffffffff8c6f79e0 RDI: ffffffff91274ec0 [ 102.222409][ T7776] RBP: ffffffff8c6f79e0 R08: 0000000000000000 R09: fffffbfff2244efa [ 102.224845][ T7776] R10: ffffc9000615ef58 R11: 0000000000000000 R12: 0000000000000000 [ 102.227301][ T7776] R13: ffffc9000615efc8 R14: 00000000000000d8 R15: 0000000000000000 [ 102.230789][ T7776] FS: 00007fe9377d96c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 102.233592][ T7776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.235692][ T7776] CR2: 00007fe9377d8ff8 CR3: 000000005aa8a000 CR4: 0000000000352ef0 [ 102.238159][ T7776] Call Trace: [ 102.239289][ T7776] [ 102.240261][ T7776] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 102.241945][ T7776] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.243812][ T7776] ? vp_modern_set_queue_enable+0x43/0x90 [ 102.245602][ T7776] ? iowrite16+0x33/0xb0 [ 102.246959][ T7776] ? vp_modern_find_vqs+0xd2/0x100 [ 102.248619][ T7776] virtio_gpu_init.cold+0x51c/0x126e [ 102.250468][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.252463][ T7776] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.254162][ T7776] ? console_unlock+0x1c9/0x260 [ 102.255723][ T7776] ? __pfx_console_unlock+0x10/0x10 [ 102.257353][ T7776] ? con_is_bound+0x141/0x190 [ 102.258919][ T7776] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.260671][ T7776] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.262532][ T7776] ? vga_remove_vgacon+0x21/0x30 [ 102.264106][ T7776] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 102.266326][ T7776] virtio_gpu_probe+0x21c/0x360 [ 102.267832][ T7776] virtio_dev_probe+0x6a2/0xbe0 [ 102.269402][ T7776] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.271090][ T7776] ? kernfs_create_link+0x1bd/0x240 [ 102.272712][ T7776] ? kernfs_put+0x3f/0x60 [ 102.274113][ T7776] ? sysfs_do_create_link_sd+0xbb/0x140 [ 102.275845][ T7776] ? sysfs_create_link+0x68/0xc0 [ 102.277385][ T7776] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.279146][ T7776] really_probe+0x241/0xa60 [ 102.280573][ T7776] __driver_probe_device+0x20e/0x450 [ 102.282237][ T7776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.284083][ T7776] driver_probe_device+0x4a/0x140 [ 102.285658][ T7776] __device_attach_driver+0x1df/0x320 [ 102.287342][ T7776] ? __pfx___device_attach_driver+0x10/0x10 [ 102.289265][ T7776] bus_for_each_drv+0x159/0x1e0 [ 102.290834][ T7776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.292506][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.294176][ T7776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.295991][ T7776] __device_attach+0x1e4/0x4d0 [ 102.297476][ T7776] ? __pfx___device_attach+0x10/0x10 [ 102.299401][ T7776] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.301031][ T7776] device_initial_probe+0xaf/0xd0 [ 102.302622][ T7776] bus_probe_device+0x64/0x160 [ 102.304130][ T7776] device_add+0x121d/0x1970 [ 102.305607][ T7776] ? __pfx_device_add+0x10/0x10 [ 102.307159][ T7776] ? __pfx___might_resched+0x10/0x10 [ 102.309035][ T7776] ? __init_waitqueue_head+0xca/0x150 [ 102.310728][ T7776] ? ioread8+0x8f/0xd0 [ 102.312016][ T7776] register_virtio_device+0x4f0/0x5d0 [ 102.313683][ T7776] ? __pfx_register_virtio_device+0x10/0x10 [ 102.315566][ T7776] ? __pfx_pcibios_set_master+0x10/0x10 [ 102.317279][ T7776] ? __raw_spin_lock_init+0x3a/0x110 [ 102.319139][ T7776] ? __pfx_virtio_pci_probe+0x10/0x10 [ 102.320800][ T7776] virtio_pci_probe+0x255/0x410 [ 102.322342][ T7776] local_pci_probe+0xdd/0x1b0 [ 102.323823][ T7776] pci_call_probe+0x176/0x800 [ 102.325293][ T7776] ? __pfx_pci_call_probe+0x10/0x10 [ 102.326933][ T7776] ? find_held_lock+0x2b/0x80 [ 102.328473][ T7776] ? pci_match_device+0x450/0x5f0 [ 102.330053][ T7776] ? pci_match_device+0x450/0x5f0 [ 102.331618][ T7776] ? pci_match_id+0x34d/0x3f0 [ 102.333103][ T7776] ? pci_match_device+0xb4/0x5f0 [ 102.334678][ T7776] pci_device_probe+0x1cd/0x370 [ 102.336210][ T7776] ? __pfx_pci_device_probe+0x10/0x10 [ 102.337873][ T7776] really_probe+0x241/0xa60 [ 102.339379][ T7776] __driver_probe_device+0x20e/0x450 [ 102.341026][ T7776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.342883][ T7776] driver_probe_device+0x4a/0x140 [ 102.344460][ T7776] __device_attach_driver+0x1df/0x320 [ 102.346174][ T7776] ? __pfx___device_attach_driver+0x10/0x10 [ 102.348004][ T7776] bus_for_each_drv+0x159/0x1e0 [ 102.349561][ T7776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.351237][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.352845][ T7776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.354702][ T7776] __device_attach+0x1e4/0x4d0 [ 102.356233][ T7776] ? __pfx___device_attach+0x10/0x10 [ 102.357870][ T7776] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.359570][ T7776] device_initial_probe+0xaf/0xd0 [ 102.361141][ T7776] pci_bus_add_device+0xc5/0x100 [ 102.362654][ T7776] pci_bus_add_devices+0x9a/0x1f0 [ 102.364188][ T7776] pci_rescan_bus+0x2a/0x40 [ 102.365631][ T7776] rescan_store+0xfb/0x130 [ 102.367055][ T7776] ? __pfx_rescan_store+0x10/0x10 [ 102.368678][ T7776] ? sysfs_file_kobj+0xe4/0x290 [ 102.370224][ T7776] ? __pfx_rescan_store+0x10/0x10 [ 102.371790][ T7776] bus_attr_store+0x74/0xb0 [ 102.373260][ T7776] ? __pfx_bus_attr_store+0x10/0x10 [ 102.374921][ T7776] sysfs_kf_write+0xf2/0x150 [ 102.376404][ T7776] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.378068][ T7776] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.379750][ T7776] vfs_write+0x6ac/0x1050 [ 102.381110][ T7776] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.382951][ T7776] ? __pfx_vfs_write+0x10/0x10 [ 102.384441][ T7776] ksys_write+0x12a/0x250 [ 102.385760][ T7776] ? __pfx_ksys_write+0x10/0x10 [ 102.387247][ T7776] ? kcov_ioctl+0x17a/0x750 [ 102.388683][ T7776] do_syscall_64+0x115/0x870 [ 102.390102][ T7776] ? clear_bhb_loop+0x40/0x90 [ 102.391521][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.393337][ T7776] RIP: 0033:0x7fe93699de99 [ 102.394729][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.400522][ T7776] RSP: 002b:00007fe9377d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.403065][ T7776] RAX: ffffffffffffffda RBX: 00007fe936c26090 RCX: 00007fe93699de99 [ 102.405552][ T7776] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000004 [ 102.408033][ T7776] RBP: 00007fe936a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 102.410576][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.413225][ T7776] R13: 00007fe936c26128 R14: 00007fe936c26090 R15: 00007ffd35297f18 [ 102.415725][ T7776] [ 102.416711][ T7776] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.419003][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.2.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.422223][ T7776] Tainted: [L]=SOFTLOCKUP [ 102.423523][ T7776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.426654][ T7776] Call Trace: [ 102.427697][ T7776] [ 102.428582][ T7776] dump_stack_lvl+0x100/0x190 [ 102.429953][ T7776] vpanic+0x552/0x970 [ 102.431203][ T7776] ? __pfx_vpanic+0x10/0x10 [ 102.432619][ T7776] panic+0xd1/0xe0 [ 102.433810][ T7776] ? __pfx_panic+0x10/0x10 [ 102.435244][ T7776] check_panic_on_warn.cold+0x19/0x34 [ 102.436924][ T7776] ? __kmem_cache_create_args+0xa6/0x420 [ 102.438672][ T7776] __warn.cold+0x191/0x318 [ 102.440057][ T7776] __report_bug+0x30f/0x440 [ 102.441468][ T7776] ? __kmem_cache_create_args+0xa6/0x420 [ 102.443235][ T7776] ? __pfx___report_bug+0x10/0x10 [ 102.444789][ T7776] ? __mutex_lock+0x26d/0x1bd0 [ 102.446326][ T7776] ? __kmem_cache_create_args+0x44/0x420 [ 102.448060][ T7776] report_bug_entry+0xe1/0x290 [ 102.449513][ T7776] ? __kmem_cache_create_args+0xa9/0x420 [ 102.451204][ T7776] handle_bug+0x1cd/0x2a0 [ 102.452568][ T7776] exc_invalid_op+0x17/0x50 [ 102.454056][ T7776] asm_exc_invalid_op+0x1a/0x20 [ 102.455602][ T7776] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 102.457554][ T7776] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2b ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 102.463482][ T7776] RSP: 0018:ffffc9000615ef58 EFLAGS: 00010246 [ 102.465389][ T7776] RAX: 0000000000000000 RBX: ffff88802bb44500 RCX: fffff52000c2bdc6 [ 102.467832][ T7776] RDX: 0000000000000000 RSI: ffffffff8c6f79e0 RDI: ffffffff91274ec0 [ 102.470212][ T7776] RBP: ffffffff8c6f79e0 R08: 0000000000000000 R09: fffffbfff2244efa [ 102.472520][ T7776] R10: ffffc9000615ef58 R11: 0000000000000000 R12: 0000000000000000 [ 102.475008][ T7776] R13: ffffc9000615efc8 R14: 00000000000000d8 R15: 0000000000000000 [ 102.477461][ T7776] ? __kmem_cache_create_args+0x9b/0x420 [ 102.479184][ T7776] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 102.480836][ T7776] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.482704][ T7776] ? vp_modern_set_queue_enable+0x43/0x90 [ 102.484486][ T7776] ? iowrite16+0x33/0xb0 [ 102.485838][ T7776] ? vp_modern_find_vqs+0xd2/0x100 [ 102.487460][ T7776] virtio_gpu_init.cold+0x51c/0x126e [ 102.489105][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.490736][ T7776] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.492372][ T7776] ? console_unlock+0x1c9/0x260 [ 102.493923][ T7776] ? __pfx_console_unlock+0x10/0x10 [ 102.495600][ T7776] ? con_is_bound+0x141/0x190 [ 102.497080][ T7776] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.498841][ T7776] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.500645][ T7776] ? vga_remove_vgacon+0x21/0x30 [ 102.502210][ T7776] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 102.504279][ T7776] virtio_gpu_probe+0x21c/0x360 [ 102.505756][ T7776] virtio_dev_probe+0x6a2/0xbe0 [ 102.507216][ T7776] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.508769][ T7776] ? kernfs_create_link+0x1bd/0x240 [ 102.510340][ T7776] ? kernfs_put+0x3f/0x60 [ 102.511613][ T7776] ? sysfs_do_create_link_sd+0xbb/0x140 [ 102.513323][ T7776] ? sysfs_create_link+0x68/0xc0 [ 102.514890][ T7776] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.516585][ T7776] really_probe+0x241/0xa60 [ 102.517925][ T7776] __driver_probe_device+0x20e/0x450 [ 102.519478][ T7776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.521316][ T7776] driver_probe_device+0x4a/0x140 [ 102.522945][ T7776] __device_attach_driver+0x1df/0x320 [ 102.524623][ T7776] ? __pfx___device_attach_driver+0x10/0x10 [ 102.526474][ T7776] bus_for_each_drv+0x159/0x1e0 [ 102.527901][ T7776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.529518][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.531077][ T7776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.532769][ T7776] __device_attach+0x1e4/0x4d0 [ 102.534229][ T7776] ? __pfx___device_attach+0x10/0x10 [ 102.535784][ T7776] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.537389][ T7776] device_initial_probe+0xaf/0xd0 [ 102.538874][ T7776] bus_probe_device+0x64/0x160 [ 102.540278][ T7776] device_add+0x121d/0x1970 [ 102.541700][ T7776] ? __pfx_device_add+0x10/0x10 [ 102.543270][ T7776] ? __pfx___might_resched+0x10/0x10 [ 102.544907][ T7776] ? __init_waitqueue_head+0xca/0x150 [ 102.546621][ T7776] ? ioread8+0x8f/0xd0 [ 102.547904][ T7776] register_virtio_device+0x4f0/0x5d0 [ 102.549558][ T7776] ? __pfx_register_virtio_device+0x10/0x10 [ 102.551426][ T7776] ? __pfx_pcibios_set_master+0x10/0x10 [ 102.553160][ T7776] ? __raw_spin_lock_init+0x3a/0x110 [ 102.554842][ T7776] ? __pfx_virtio_pci_probe+0x10/0x10 [ 102.556511][ T7776] virtio_pci_probe+0x255/0x410 [ 102.558046][ T7776] local_pci_probe+0xdd/0x1b0 [ 102.559509][ T7776] pci_call_probe+0x176/0x800 [ 102.560977][ T7776] ? __pfx_pci_call_probe+0x10/0x10 [ 102.562607][ T7776] ? find_held_lock+0x2b/0x80 [ 102.564010][ T7776] ? pci_match_device+0x450/0x5f0 [ 102.565597][ T7776] ? pci_match_device+0x450/0x5f0 [ 102.567187][ T7776] ? pci_match_id+0x34d/0x3f0 [ 102.568577][ T7776] ? pci_match_device+0xb4/0x5f0 [ 102.570112][ T7776] pci_device_probe+0x1cd/0x370 [ 102.571564][ T7776] ? __pfx_pci_device_probe+0x10/0x10 [ 102.573195][ T7776] really_probe+0x241/0xa60 [ 102.574649][ T7776] __driver_probe_device+0x20e/0x450 [ 102.576312][ T7776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.578166][ T7776] driver_probe_device+0x4a/0x140 [ 102.579721][ T7776] __device_attach_driver+0x1df/0x320 [ 102.581388][ T7776] ? __pfx___device_attach_driver+0x10/0x10 [ 102.583254][ T7776] bus_for_each_drv+0x159/0x1e0 [ 102.584768][ T7776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.586463][ T7776] ? lockdep_hardirqs_on+0x78/0x100 [ 102.588074][ T7776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.589872][ T7776] __device_attach+0x1e4/0x4d0 [ 102.591382][ T7776] ? __pfx___device_attach+0x10/0x10 [ 102.593025][ T7776] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.594674][ T7776] device_initial_probe+0xaf/0xd0 [ 102.596247][ T7776] pci_bus_add_device+0xc5/0x100 [ 102.597785][ T7776] pci_bus_add_devices+0x9a/0x1f0 [ 102.599370][ T7776] pci_rescan_bus+0x2a/0x40 [ 102.600775][ T7776] rescan_store+0xfb/0x130 [ 102.602191][ T7776] ? __pfx_rescan_store+0x10/0x10 [ 102.603765][ T7776] ? sysfs_file_kobj+0xe4/0x290 [ 102.605282][ T7776] ? __pfx_rescan_store+0x10/0x10 [ 102.606883][ T7776] bus_attr_store+0x74/0xb0 [ 102.608302][ T7776] ? __pfx_bus_attr_store+0x10/0x10 [ 102.609910][ T7776] sysfs_kf_write+0xf2/0x150 [ 102.611385][ T7776] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.613036][ T7776] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.614690][ T7776] vfs_write+0x6ac/0x1050 [ 102.616072][ T7776] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.617872][ T7776] ? __pfx_vfs_write+0x10/0x10 [ 102.619394][ T7776] ksys_write+0x12a/0x250 [ 102.620742][ T7776] ? __pfx_ksys_write+0x10/0x10 [ 102.622283][ T7776] ? kcov_ioctl+0x17a/0x750 [ 102.623716][ T7776] do_syscall_64+0x115/0x870 [ 102.625154][ T7776] ? clear_bhb_loop+0x40/0x90 [ 102.626667][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.628519][ T7776] RIP: 0033:0x7fe93699de99 [ 102.629908][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.635806][ T7776] RSP: 002b:00007fe9377d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.638389][ T7776] RAX: ffffffffffffffda RBX: 00007fe936c26090 RCX: 00007fe93699de99 [ 102.640798][ T7776] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000004 [ 102.643254][ T7776] RBP: 00007fe936a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 102.645694][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.648131][ T7776] R13: 00007fe936c26128 R14: 00007fe936c26090 R15: 00007ffd35297f18 [ 102.650578][ T7776] [ 102.652113][ T7776] Kernel Offset: disabled [ 102.653463][ T7776] Rebooting in 86400 seconds..