last executing test programs: 30m48.67427509s ago: executing program 1 (id=1620): unshare(0x22020600) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 30m48.56713969s ago: executing program 1 (id=1621): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x80}}, 0x11) 30m48.419543442s ago: executing program 1 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004c80100000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000009c010380180000800c00018006000100d103000008000340000000010c000080080003400000000274"], 0x234}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7838e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000240)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000440)="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", 0x119}, {&(0x7f0000001480)="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", 0xdb2}], 0x5}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 30m48.240144613s ago: executing program 1 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00') 30m48.116456644s ago: executing program 1 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffd, 0x2}}]}]}]}, 0x50}}, 0x0) 30m47.807346026s ago: executing program 1 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) 30m47.807184706s ago: executing program 32 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) 22.446902925s ago: executing program 2 (id=3784): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f000000e0c0)=0x10, 0x4) 22.380890776s ago: executing program 2 (id=3785): r0 = socket(0xa, 0x3, 0xff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x20000041}, 0x40811) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4054850}, 0xc0c1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x10001, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000100, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92}) 12.048757936s ago: executing program 0 (id=3803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) socket$nl_route(0x10, 0x3, 0x0) 11.768826358s ago: executing program 2 (id=3804): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 11.710368729s ago: executing program 2 (id=3805): mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000040)=0xffffffdd) 6.825537937s ago: executing program 0 (id=3807): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {0x0}], 0x2}, 0x0) sendmsg$kcm(r0, 0x0, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 6.266793141s ago: executing program 0 (id=3808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) 6.125305252s ago: executing program 0 (id=3809): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x102100) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x400000000008001) 5.929604224s ago: executing program 0 (id=3810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7fff, 0x10, 0x10000000, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x20000800, 0x49, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x3, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x8, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x104000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x6, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb8b, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x8, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x1000, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x6, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x7ffe, 0x57, 0xfffe, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0x80000001, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0xffffffff, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0x249, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x8, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x7fff, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x200007, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0xdf2e, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0x80000000, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1001, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x450, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x9, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0x94d1, 0x9, 0x3, 0x7, 0xff, 0xa}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x10, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0xa}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x9}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x1}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0xabc2974b7b1167cf}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.544443017s ago: executing program 0 (id=3811): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x9, 0x4, 0x31b, 0xa}, 0x3, [0x0, 0x0, 0xa, 0x8, 0x8, 0xfffffffa, 0x3, 0xb71, 0x40, 0xa, 0x0, 0x0, 0x2, 0x1, 0x4, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x8000003, 0x6, 0xffffff83, 0x2000004, 0x9, 0x5, 0x0, 0x400000, 0xfffffffe, 0x3, 0x200006, 0x1, 0x30d7b9eb, 0x800000, 0x0, 0x1002000, 0x8, 0x0, 0x0, 0x6, 0x7ffffffd, 0xfffffffa, 0xfffffffd, 0xbf, 0x50000, 0x9, 0x8000, 0x1000, 0x10f, 0xc6, 0xfffffffe, 0x4, 0x3, 0x20000, 0x5, 0x401, 0x801, 0x6, 0xfffffffd, 0x4, 0x40000, 0x1, 0x9, 0x80], [0x0, 0x2, 0x402, 0x3, 0x40000000, 0x40fff, 0x8000, 0x5, 0x0, 0x3, 0x8001, 0x10000000, 0x0, 0x4009, 0x2, 0xa8, 0x4, 0x5, 0x7, 0x6, 0xbe19, 0x6, 0xfffffffa, 0x97a, 0x0, 0x3fd, 0x0, 0x5, 0x80000006, 0x4, 0x1, 0x4, 0x4, 0x100000, 0x0, 0xf13f, 0xfffffffa, 0xe1, 0x0, 0x27, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0xfffffffd, 0xfffffffe, 0xffffff59, 0xb, 0x0, 0x0, 0x0, 0x0, 0xa73, 0xffff0001, 0xfffffffe, 0xcf, 0xfffffefc, 0x0, 0x0, 0x43, 0xfffffffe], [0x5, 0x40000002, 0x7b56e6ee, 0xae, 0x7fffffff, 0x2, 0xffffffff, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x100, 0xffdfffa2, 0x1ea, 0xa, 0x1, 0x1, 0xd3, 0xfffffffb, 0xb, 0x7, 0x8, 0x20, 0xffffff76, 0xd, 0x1, 0x100, 0xffffffc9, 0xfffffffe, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x640, 0x1, 0x0, 0x80010006, 0xfffffffe, 0x10001, 0x2, 0x400000, 0xffffffff, 0x9, 0x713e, 0x7ff, 0x10001, 0x0, 0xffffffff, 0xff, 0xfffffffe, 0x0, 0xffffffdc, 0x1, 0xfffffffd, 0xfffffffc, 0x1, 0x1, 0x4, 0xc], [0x2, 0x8001, 0x200007, 0x43, 0x80001, 0x0, 0x0, 0x200000, 0x1, 0x0, 0x8, 0x0, 0x3, 0x4000000, 0x4, 0x0, 0x8000, 0x4137, 0x4, 0x9, 0x0, 0x3e, 0x6, 0xbe, 0x7ffffffd, 0x4, 0x3, 0x0, 0xb, 0x6, 0x0, 0xffffffff, 0x1, 0x80000001, 0x0, 0xfffffffd, 0x5, 0xffffffff, 0x3, 0x7, 0x40014, 0x2, 0xbffffffc, 0x17, 0xf, 0x7, 0x0, 0x90003, 0x7ffffffc, 0x4d9e, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfff, 0x2, 0x3, 0x2, 0x0, 0x0, 0x6, 0xfffffffe]}, 0x45c) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000540), 0x9, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000580)) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x18) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGKBMODE(r6, 0x5421, &(0x7f0000000040)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x69042ae0786e5168, 0x1a3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x120a}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x25, 0x2, 0x4, 0x1e, 0x7, 0x2, 0x6, 0x16d, 0xffffffffffffffff}}) 101.896279ms ago: executing program 2 (id=3806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 0s ago: executing program 2 (id=3812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000186dd06"], 0x1c) kernel console output (not intermixed with test programs): syz0 as /devices/virtual/input/input720 [ 3681.275741][T13867] input: syz0 as /devices/virtual/input/input721 [ 3716.207597][T13903] syz.0.2988 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3716.207973][T13903] CPU: 1 UID: 0 PID: 13903 Comm: syz.0.2988 Tainted: G W L syzkaller #0 PREEMPT [ 3716.208097][T13903] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3716.208136][T13903] Hardware name: linux,dummy-virt (DT) [ 3716.208177][T13903] Call trace: [ 3716.208225][T13903] show_stack+0x18/0x24 (C) [ 3716.208344][T13903] dump_stack_lvl+0x60/0x80 [ 3716.208421][T13903] dump_stack+0x18/0x24 [ 3716.208499][T13903] dump_header+0x40/0x170 [ 3716.208573][T13903] oom_kill_process+0x220/0x2a0 [ 3716.208650][T13903] out_of_memory+0xec/0x58c [ 3716.208726][T13903] mem_cgroup_out_of_memory+0x108/0x118 [ 3716.208808][T13903] try_charge_memcg+0x3b4/0x590 [ 3716.208885][T13903] charge_memcg+0xe0/0x23c [ 3716.208959][T13903] __mem_cgroup_charge+0x38/0x128 [ 3716.209031][T13903] filemap_add_folio+0x64/0x2c0 [ 3716.209105][T13903] __filemap_get_folio_mpol+0x228/0x578 [ 3716.209178][T13903] filemap_fault+0x31c/0xb04 [ 3716.209260][T13903] __do_fault+0x3c/0x218 [ 3716.209334][T13903] do_fault+0x390/0x5e0 [ 3716.209405][T13903] __handle_mm_fault+0x3b8/0xec0 [ 3716.209478][T13903] handle_mm_fault+0x98/0x338 [ 3716.209551][T13903] __get_user_pages+0x3bc/0xc70 [ 3716.209617][T13903] get_dump_page+0xe4/0x154 [ 3716.209684][T13903] dump_user_range+0x224/0x304 [ 3716.209759][T13903] elf_core_dump+0xc68/0xf44 [ 3716.209882][T13903] vfs_coredump+0xf04/0x1de0 [ 3716.209962][T13903] get_signal+0x604/0x860 [ 3716.210037][T13903] arch_do_signal_or_restart+0x11c/0x3dc [ 3716.210114][T13903] exit_to_user_mode_loop+0x114/0x19c [ 3716.210195][T13903] el0_da+0xe8/0xf0 [ 3716.210291][T13903] el0t_64_sync_handler+0xd0/0xe4 [ 3716.210369][T13903] el0t_64_sync+0x1a4/0x1a8 [ 3716.210638][T13903] memory: usage 307200kB, limit 307200kB, failcnt 124818 [ 3716.210751][T13903] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 3716.210874][T13903] kmem: usage 1400kB, limit 9007199254740988kB, failcnt 0 [ 3716.210965][T13903] Memory cgroup stats for /syz0: [ 3716.211558][T13903] cache 182136832 [ 3716.211657][T13903] rss 130879488 [ 3716.211735][T13903] rss_huge 0 [ 3716.211821][T13903] shmem 182001664 [ 3716.211904][T13903] mapped_file 4096 [ 3716.211984][T13903] dirty 0 [ 3716.212059][T13903] writeback 0 [ 3716.212134][T13903] workingset_refault_anon 8497 [ 3716.212222][T13903] workingset_refault_file 6410 [ 3716.212300][T13903] swap 127868928 [ 3716.212376][T13903] swapcached 541138944 [ 3716.212452][T13903] pgpgin 3407772 [ 3716.212536][T13903] pgpgout 3331322 [ 3716.212616][T13903] pgfault 2892795 [ 3716.212694][T13903] pgmajfault 5391 [ 3716.212768][T13903] inactive_anon 183582720 [ 3716.212840][T13903] active_anon 114724864 [ 3716.212912][T13903] inactive_file 131072 [ 3716.212982][T13903] active_file 0 [ 3716.213055][T13903] unevictable 14700544 [ 3716.213128][T13903] hierarchical_memory_limit 314572800 [ 3716.213200][T13903] hierarchical_memsw_limit 9223372036854771712 [ 3716.213284][T13903] total_cache 182136832 [ 3716.213355][T13903] total_rss 130879488 [ 3716.213430][T13903] total_rss_huge 0 [ 3716.213507][T13903] total_shmem 182001664 [ 3716.213581][T13903] total_mapped_file 4096 [ 3716.213656][T13903] total_dirty 0 [ 3716.213739][T13903] total_writeback 0 [ 3716.213815][T13903] total_workingset_refault_anon 8497 [ 3716.213891][T13903] total_workingset_refault_file 6410 [ 3716.213972][T13903] total_swap 127868928 [ 3716.214049][T13903] total_swapcached 541138944 [ 3716.214124][T13903] total_pgpgin 3407796 [ 3716.214198][T13903] total_pgpgout 3331346 [ 3716.214289][T13903] total_pgfault 2892818 [ 3716.214368][T13903] total_pgmajfault 5391 [ 3716.214448][T13903] total_inactive_anon 183582720 [ 3716.214837][T13903] total_active_anon 114724864 [ 3716.214974][T13903] total_inactive_file 131072 [ 3716.215060][T13903] total_active_file 0 [ 3716.215142][T13903] total_unevictable 14700544 [ 3716.215235][T13903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2988,pid=13903,uid=0 [ 3716.216069][T13903] Memory cgroup out of memory: Killed process 13903 (syz.0.2988) total-vm:122744kB, anon-rss:110776kB, file-rss:4500kB, shmem-rss:0kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 3725.981857][T13930] syz.0.2999 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3725.982251][T13930] CPU: 1 UID: 0 PID: 13930 Comm: syz.0.2999 Tainted: G W L syzkaller #0 PREEMPT [ 3725.982378][T13930] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3725.982418][T13930] Hardware name: linux,dummy-virt (DT) [ 3725.982458][T13930] Call trace: [ 3725.982492][T13930] show_stack+0x18/0x24 (C) [ 3725.982608][T13930] dump_stack_lvl+0x60/0x80 [ 3725.982682][T13930] dump_stack+0x18/0x24 [ 3725.982760][T13930] dump_header+0x40/0x170 [ 3725.982890][T13930] oom_kill_process+0x220/0x2a0 [ 3725.982972][T13930] out_of_memory+0xec/0x58c [ 3725.983052][T13930] mem_cgroup_out_of_memory+0x108/0x118 [ 3725.983131][T13930] try_charge_memcg+0x3b4/0x590 [ 3725.983206][T13930] charge_memcg+0xe0/0x23c [ 3725.983280][T13930] __mem_cgroup_charge+0x38/0x128 [ 3725.983357][T13930] shmem_alloc_and_add_folio+0x140/0x628 [ 3725.983436][T13930] shmem_get_folio_gfp+0x114/0x758 [ 3725.983512][T13930] shmem_write_begin+0x6c/0x158 [ 3725.983587][T13930] generic_perform_write+0xb4/0x24c [ 3725.983666][T13930] shmem_file_write_iter+0xa0/0xa8 [ 3725.983742][T13930] __kernel_write_iter+0xfc/0x27c [ 3725.983833][T13930] dump_user_range+0xe4/0x304 [ 3725.983915][T13930] elf_core_dump+0xc68/0xf44 [ 3725.983996][T13930] vfs_coredump+0xf04/0x1de0 [ 3725.984062][T13930] get_signal+0x604/0x860 [ 3725.984128][T13930] arch_do_signal_or_restart+0x11c/0x3dc [ 3725.984194][T13930] exit_to_user_mode_loop+0x114/0x19c [ 3725.984275][T13930] el0_da+0xe8/0xf0 [ 3725.984362][T13930] el0t_64_sync_handler+0xd0/0xe4 [ 3725.984442][T13930] el0t_64_sync+0x1a4/0x1a8 [ 3725.985015][T13930] memory: usage 307200kB, limit 307200kB, failcnt 129203 [ 3725.985126][T13930] memory+swap: usage 431520kB, limit 9007199254740988kB, failcnt 0 [ 3725.985218][T13930] kmem: usage 1588kB, limit 9007199254740988kB, failcnt 0 [ 3725.985309][T13930] Memory cgroup stats for /syz0: [ 3725.985890][T13930] cache 184348672 [ 3725.985987][T13930] rss 127909888 [ 3725.986063][T13930] rss_huge 0 [ 3725.986140][T13930] shmem 184287232 [ 3725.986217][T13930] mapped_file 0 [ 3725.986297][T13930] dirty 0 [ 3725.986374][T13930] writeback 0 [ 3725.986441][T13930] workingset_refault_anon 11241 [ 3725.986473][T13930] workingset_refault_file 8504 [ 3725.986502][T13930] swap 127303680 [ 3725.986555][T13930] swapcached 553713664 [ 3725.986588][T13930] pgpgin 3469941 [ 3725.986630][T13930] pgpgout 3393538 [ 3725.986684][T13930] pgfault 2924172 [ 3725.986714][T13930] pgmajfault 5871 [ 3725.986772][T13930] inactive_anon 311705600 [ 3725.986804][T13930] active_anon 1105920 [ 3725.986867][T13930] inactive_file 0 [ 3725.986898][T13930] active_file 0 [ 3725.986925][T13930] unevictable 0 [ 3725.986952][T13930] hierarchical_memory_limit 314572800 [ 3725.986979][T13930] hierarchical_memsw_limit 9223372036854771712 [ 3725.987043][T13930] total_cache 184348672 [ 3725.987074][T13930] total_rss 127909888 [ 3725.987103][T13930] total_rss_huge 0 [ 3725.987145][T13930] total_shmem 184287232 [ 3725.987177][T13930] total_mapped_file 0 [ 3725.987209][T13930] total_dirty 0 [ 3725.987238][T13930] total_writeback 0 [ 3725.987267][T13930] total_workingset_refault_anon 11241 [ 3725.987297][T13930] total_workingset_refault_file 8504 [ 3725.987432][T13930] total_swap 127303680 [ 3725.987485][T13930] total_swapcached 553713664 [ 3725.987516][T13930] total_pgpgin 3469965 [ 3725.987555][T13930] total_pgpgout 3393562 [ 3725.987588][T13930] total_pgfault 2924195 [ 3725.987616][T13930] total_pgmajfault 5871 [ 3725.987643][T13930] total_inactive_anon 311705600 [ 3725.987672][T13930] total_active_anon 1105920 [ 3725.987699][T13930] total_inactive_file 0 [ 3725.987728][T13930] total_active_file 0 [ 3725.987765][T13930] total_unevictable 0 [ 3725.987805][T13930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2959,pid=13828,uid=0 [ 3725.988219][T13930] Memory cgroup out of memory: Killed process 13828 (syz.0.2959) total-vm:122744kB, anon-rss:15460kB, file-rss:4496kB, shmem-rss:0kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 3731.446262][T13950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3731.447828][T13950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3767.851329][T14022] input: syz0 as /devices/virtual/input/input723 [ 3777.448173][T14049] input: syz1 as /devices/virtual/input/input724 [ 3785.653651][T14074] input: syz0 as /devices/virtual/input/input725 [ 3787.930253][T14081] input: syz0 as /devices/virtual/input/input726 [ 3799.467818][T14100] input: syz0 as /devices/virtual/input/input727 [ 3804.356071][T14107] input: syz0 as /devices/virtual/input/input728 [ 3805.595180][T14109] FAULT_INJECTION: forcing a failure. [ 3805.595180][T14109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3805.606970][T14109] CPU: 0 UID: 0 PID: 14109 Comm: syz.2.3056 Tainted: G W L syzkaller #0 PREEMPT [ 3805.607158][T14109] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3805.607199][T14109] Hardware name: linux,dummy-virt (DT) [ 3805.607241][T14109] Call trace: [ 3805.607277][T14109] show_stack+0x18/0x24 (C) [ 3805.607390][T14109] dump_stack_lvl+0x60/0x80 [ 3805.607468][T14109] dump_stack+0x18/0x24 [ 3805.607539][T14109] should_fail_ex+0x1e0/0x238 [ 3805.607619][T14109] should_fail+0x14/0x40 [ 3805.607687][T14109] should_fail_usercopy+0x1c/0x40 [ 3805.607765][T14109] read_fpsimd_context+0x30/0x140 [ 3805.607832][T14109] restore_fpsimd_context+0x44/0xd0 [ 3805.607898][T14109] restore_sve_fpsimd_context+0x310/0x380 [ 3805.607965][T14109] restore_sigframe+0x548/0xc20 [ 3805.608030][T14109] __arm64_sys_rt_sigreturn+0xb8/0x224 [ 3805.608097][T14109] invoke_syscall+0x54/0x10c [ 3805.608164][T14109] el0_svc_common.constprop.0+0x40/0xe0 [ 3805.608233][T14109] do_el0_svc+0x1c/0x34 [ 3805.608297][T14109] el0_svc+0x38/0x1fc [ 3805.608380][T14109] el0t_64_sync_handler+0xa0/0xe4 [ 3805.608454][T14109] el0t_64_sync+0x1a4/0x1a8 [ 3815.938698][T14129] input: syz0 as /devices/virtual/input/input729 [ 3831.890850][T14153] input: syz0 as /devices/virtual/input/input730 [ 3852.841817][T14186] input: syz0 as /devices/virtual/input/input731 [ 3861.058343][T14196] 8021q: VLANs not supported on lo [ 3861.910595][T14206] input: syz0 as /devices/virtual/input/input732 [ 3870.477383][T14224] input: syz0 as /devices/virtual/input/input733 [ 3871.653700][T14226] FAULT_INJECTION: forcing a failure. [ 3871.653700][T14226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3871.658106][T14226] CPU: 1 UID: 0 PID: 14226 Comm: syz.0.3086 Tainted: G W L syzkaller #0 PREEMPT [ 3871.658287][T14226] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3871.658331][T14226] Hardware name: linux,dummy-virt (DT) [ 3871.658375][T14226] Call trace: [ 3871.658408][T14226] show_stack+0x18/0x24 (C) [ 3871.658513][T14226] dump_stack_lvl+0x60/0x80 [ 3871.658582][T14226] dump_stack+0x18/0x24 [ 3871.658650][T14226] should_fail_ex+0x1e0/0x238 [ 3871.658732][T14226] should_fail+0x14/0x40 [ 3871.658801][T14226] should_fail_usercopy+0x1c/0x40 [ 3871.658898][T14226] simple_read_from_buffer+0x5c/0x12c [ 3871.658980][T14226] proc_fail_nth_read+0xb4/0x140 [ 3871.659053][T14226] vfs_read+0xc4/0x31c [ 3871.659128][T14226] ksys_read+0x70/0x110 [ 3871.659205][T14226] __arm64_sys_read+0x18/0x24 [ 3871.659296][T14226] invoke_syscall+0x54/0x10c [ 3871.659366][T14226] el0_svc_common.constprop.0+0x40/0xe0 [ 3871.659437][T14226] do_el0_svc+0x1c/0x34 [ 3871.659505][T14226] el0_svc+0x38/0x1fc [ 3871.659580][T14226] el0t_64_sync_handler+0xa0/0xe4 [ 3871.659651][T14226] el0t_64_sync+0x1a4/0x1a8 [ 3872.137533][T14229] input: syz0 as /devices/virtual/input/input734 [ 3878.485768][T14239] input: syz0 as /devices/virtual/input/input735 [ 3895.811762][T14265] input: syz0 as /devices/virtual/input/input736 [ 3911.318799][T14297] FAULT_INJECTION: forcing a failure. [ 3911.318799][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3911.319232][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.2.3106 Tainted: G W L syzkaller #0 PREEMPT [ 3911.319360][T14297] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3911.319400][T14297] Hardware name: linux,dummy-virt (DT) [ 3911.319442][T14297] Call trace: [ 3911.319475][T14297] show_stack+0x18/0x24 (C) [ 3911.319578][T14297] dump_stack_lvl+0x60/0x80 [ 3911.319677][T14297] dump_stack+0x18/0x24 [ 3911.319763][T14297] should_fail_ex+0x1e0/0x238 [ 3911.319839][T14297] should_fail+0x14/0x40 [ 3911.319908][T14297] should_fail_usercopy+0x1c/0x40 [ 3911.319979][T14297] strncpy_from_user+0x24/0x1c0 [ 3911.320053][T14297] do_getname+0x5c/0x1a0 [ 3911.320125][T14297] getname_flags+0x14/0x20 [ 3911.320196][T14297] do_sys_openat2+0x5c/0x104 [ 3911.320274][T14297] __arm64_sys_openat+0x64/0xc0 [ 3911.320348][T14297] invoke_syscall+0x54/0x10c [ 3911.320421][T14297] el0_svc_common.constprop.0+0x40/0xe0 [ 3911.320491][T14297] do_el0_svc+0x1c/0x34 [ 3911.320559][T14297] el0_svc+0x38/0x1fc [ 3911.320637][T14297] el0t_64_sync_handler+0xa0/0xe4 [ 3911.320723][T14297] el0t_64_sync+0x1a4/0x1a8 [ 3913.965009][T14312] FAULT_INJECTION: forcing a failure. [ 3913.965009][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3913.966844][T14312] CPU: 0 UID: 0 PID: 14312 Comm: syz.0.3111 Tainted: G W L syzkaller #0 PREEMPT [ 3913.966994][T14312] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3913.967032][T14312] Hardware name: linux,dummy-virt (DT) [ 3913.967072][T14312] Call trace: [ 3913.967105][T14312] show_stack+0x18/0x24 (C) [ 3913.967214][T14312] dump_stack_lvl+0x60/0x80 [ 3913.967293][T14312] dump_stack+0x18/0x24 [ 3913.967366][T14312] should_fail_ex+0x1e0/0x238 [ 3913.967452][T14312] should_fail+0x14/0x40 [ 3913.967523][T14312] should_fail_usercopy+0x1c/0x40 [ 3913.967602][T14312] simple_read_from_buffer+0x5c/0x12c [ 3913.967699][T14312] proc_fail_nth_read+0xb4/0x140 [ 3913.967784][T14312] vfs_read+0xc4/0x31c [ 3913.967864][T14312] ksys_read+0x70/0x110 [ 3913.967941][T14312] __arm64_sys_read+0x18/0x24 [ 3913.968020][T14312] invoke_syscall+0x54/0x10c [ 3913.968096][T14312] el0_svc_common.constprop.0+0x40/0xe0 [ 3913.968172][T14312] do_el0_svc+0x1c/0x34 [ 3913.968248][T14312] el0_svc+0x38/0x1fc [ 3913.968330][T14312] el0t_64_sync_handler+0xa0/0xe4 [ 3913.968407][T14312] el0t_64_sync+0x1a4/0x1a8 [ 3914.757211][T14313] FAULT_INJECTION: forcing a failure. [ 3914.757211][T14313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3914.757640][T14313] CPU: 1 UID: 0 PID: 14313 Comm: syz.2.3107 Tainted: G W L syzkaller #0 PREEMPT [ 3914.757813][T14313] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3914.757854][T14313] Hardware name: linux,dummy-virt (DT) [ 3914.757922][T14313] Call trace: [ 3914.757959][T14313] show_stack+0x18/0x24 (C) [ 3914.758104][T14313] dump_stack_lvl+0x60/0x80 [ 3914.758179][T14313] dump_stack+0x18/0x24 [ 3914.758250][T14313] should_fail_ex+0x1e0/0x238 [ 3914.758328][T14313] should_fail+0x14/0x40 [ 3914.758400][T14313] should_fail_usercopy+0x1c/0x40 [ 3914.758472][T14313] _copy_from_iter+0x60/0x6a0 [ 3914.758592][T14313] netlink_sendmsg+0x15c/0x410 [ 3914.758678][T14313] __sock_sendmsg+0x54/0x60 [ 3914.758755][T14313] ____sys_sendmsg+0x250/0x2a8 [ 3914.758855][T14313] ___sys_sendmsg+0xb0/0x108 [ 3914.758964][T14313] __sys_sendmsg+0x9c/0x100 [ 3914.759091][T14313] __arm64_sys_sendmsg+0x20/0x38 [ 3914.759168][T14313] invoke_syscall+0x54/0x10c [ 3914.759243][T14313] el0_svc_common.constprop.0+0x40/0xe0 [ 3914.759353][T14313] do_el0_svc+0x1c/0x34 [ 3914.759438][T14313] el0_svc+0x38/0x1fc [ 3914.759520][T14313] el0t_64_sync_handler+0xa0/0xe4 [ 3914.759596][T14313] el0t_64_sync+0x1a4/0x1a8 [ 3915.872593][ T2670] blk_print_req_error: 24 callbacks suppressed [ 3915.873036][ T2670] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.873192][ T2670] buffer_io_error: 26 callbacks suppressed [ 3915.873292][ T2670] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3915.886383][ T2670] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.886772][ T2670] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3915.895765][ T2670] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.896085][ T2670] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3915.905488][ T2670] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.906968][ T2670] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3915.911487][ T2670] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.913114][ T2670] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3915.921150][ T2670] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.922920][ T2670] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3915.930051][ T2670] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.933618][ T2670] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3915.948407][ T2670] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3915.948743][ T2670] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3915.949241][T14318] nbd0: unable to read partition table [ 3919.271006][T14338] random: crng reseeded on system resumption [ 3920.109375][T14345] input: syz0 as /devices/virtual/input/input737 [ 3922.736914][T14363] FAULT_INJECTION: forcing a failure. [ 3922.736914][T14363] name failslab, interval 1, probability 0, space 0, times 0 [ 3922.739013][T14363] CPU: 1 UID: 0 PID: 14363 Comm: syz.2.3123 Tainted: G W L syzkaller #0 PREEMPT [ 3922.739174][T14363] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3922.739213][T14363] Hardware name: linux,dummy-virt (DT) [ 3922.739250][T14363] Call trace: [ 3922.739295][T14363] show_stack+0x18/0x24 (C) [ 3922.739404][T14363] dump_stack_lvl+0x60/0x80 [ 3922.739474][T14363] dump_stack+0x18/0x24 [ 3922.739543][T14363] should_fail_ex+0x1e0/0x238 [ 3922.739615][T14363] should_failslab+0x54/0x80 [ 3922.739689][T14363] kmem_cache_alloc_node_noprof+0x5c/0x448 [ 3922.739768][T14363] __alloc_skb+0x74/0x2e0 [ 3922.739848][T14363] netlink_alloc_large_skb+0x94/0xd4 [ 3922.739933][T14363] netlink_sendmsg+0x10c/0x410 [ 3922.740011][T14363] __sock_sendmsg+0x54/0x60 [ 3922.740081][T14363] ____sys_sendmsg+0x250/0x2a8 [ 3922.740150][T14363] ___sys_sendmsg+0xb0/0x108 [ 3922.740219][T14363] __sys_sendmsg+0x9c/0x100 [ 3922.740300][T14363] __arm64_sys_sendmsg+0x20/0x38 [ 3922.740374][T14363] invoke_syscall+0x54/0x10c [ 3922.740446][T14363] el0_svc_common.constprop.0+0x40/0xe0 [ 3922.740517][T14363] do_el0_svc+0x1c/0x34 [ 3922.740585][T14363] el0_svc+0x38/0x1fc [ 3922.740664][T14363] el0t_64_sync_handler+0xa0/0xe4 [ 3922.740740][T14363] el0t_64_sync+0x1a4/0x1a8 [ 3923.298992][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.300495][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.322534][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.324092][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.358979][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.361807][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.397264][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.399023][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.420701][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.422140][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.588187][T14372] input: syz0 as /devices/virtual/input/input738 [ 3924.695848][T14373] FAULT_INJECTION: forcing a failure. [ 3924.695848][T14373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3924.696471][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.2.3127 Tainted: G W L syzkaller #0 PREEMPT [ 3924.696628][T14373] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3924.696670][T14373] Hardware name: linux,dummy-virt (DT) [ 3924.696724][T14373] Call trace: [ 3924.696760][T14373] show_stack+0x18/0x24 (C) [ 3924.696866][T14373] dump_stack_lvl+0x60/0x80 [ 3924.696940][T14373] dump_stack+0x18/0x24 [ 3924.697008][T14373] should_fail_ex+0x1e0/0x238 [ 3924.697085][T14373] should_fail+0x14/0x40 [ 3924.697156][T14373] should_fail_usercopy+0x1c/0x40 [ 3924.697224][T14373] setup_rt_frame+0x6f4/0x1120 [ 3924.697293][T14373] arch_do_signal_or_restart+0x220/0x3dc [ 3924.697361][T14373] exit_to_user_mode_loop+0x114/0x19c [ 3924.697432][T14373] el0_svc+0x1f0/0x1fc [ 3924.697510][T14373] el0t_64_sync_handler+0xa0/0xe4 [ 3924.697585][T14373] el0t_64_sync+0x1a4/0x1a8 [ 3928.568929][T14377] input: syz0 as /devices/virtual/input/input739 [ 3930.111026][T14390] input: syz0 as /devices/virtual/input/input741 [ 3931.115891][T14391] FAULT_INJECTION: forcing a failure. [ 3931.115891][T14391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3931.116320][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.0.3132 Tainted: G W L syzkaller #0 PREEMPT [ 3931.116450][T14391] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3931.116490][T14391] Hardware name: linux,dummy-virt (DT) [ 3931.116529][T14391] Call trace: [ 3931.116605][T14391] show_stack+0x18/0x24 (C) [ 3931.116713][T14391] dump_stack_lvl+0x60/0x80 [ 3931.116801][T14391] dump_stack+0x18/0x24 [ 3931.116894][T14391] should_fail_ex+0x1e0/0x238 [ 3931.116978][T14391] should_fail+0x14/0x40 [ 3931.117069][T14391] should_fail_usercopy+0x1c/0x40 [ 3931.117195][T14391] setup_rt_frame+0x350/0x1120 [ 3931.117294][T14391] arch_do_signal_or_restart+0x220/0x3dc [ 3931.117378][T14391] exit_to_user_mode_loop+0x114/0x19c [ 3931.117522][T14391] el0_svc+0x1f0/0x1fc [ 3931.117611][T14391] el0t_64_sync_handler+0xa0/0xe4 [ 3931.117690][T14391] el0t_64_sync+0x1a4/0x1a8 [ 3933.886722][T14396] input: syz0 as /devices/virtual/input/input742 [ 3939.411332][T14405] input: syz0 as /devices/virtual/input/input743 [ 3945.688795][T14418] input: syz0 as /devices/virtual/input/input744 [ 3946.951247][T14423] input: syz0 as /devices/virtual/input/input745 [ 3948.552861][T14430] input: syz0 as /devices/virtual/input/input746 [ 3957.548583][T14442] input: syz0 as /devices/virtual/input/input748 [ 3958.622955][T14447] input: syz0 as /devices/virtual/input/input747 [ 3963.783313][T14465] input: syz0 as /devices/virtual/input/input749 [ 3966.730918][T14483] input: syz0 as /devices/virtual/input/input751 [ 3967.425790][T14486] input: syz0 as /devices/virtual/input/input750 [ 3969.548091][T14492] input: syz0 as /devices/virtual/input/input752 [ 3975.678240][T14507] FAULT_INJECTION: forcing a failure. [ 3975.678240][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 3975.678535][T14507] CPU: 0 UID: 0 PID: 14507 Comm: syz.2.3166 Tainted: G W L syzkaller #0 PREEMPT [ 3975.678659][T14507] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3975.678701][T14507] Hardware name: linux,dummy-virt (DT) [ 3975.678740][T14507] Call trace: [ 3975.678759][T14507] show_stack+0x18/0x24 (C) [ 3975.678867][T14507] dump_stack_lvl+0x60/0x80 [ 3975.678955][T14507] dump_stack+0x18/0x24 [ 3975.678996][T14507] should_fail_ex+0x1e0/0x238 [ 3975.679067][T14507] should_failslab+0x54/0x80 [ 3975.679158][T14507] __kmalloc_noprof+0xac/0x520 [ 3975.679279][T14507] tomoyo_realpath_from_path+0x44/0x1d4 [ 3975.679358][T14507] tomoyo_path_number_perm+0xe0/0x21c [ 3975.679430][T14507] tomoyo_file_ioctl+0x1c/0x30 [ 3975.679490][T14507] security_file_ioctl+0x8c/0x19c [ 3975.679545][T14507] __arm64_sys_ioctl+0x44/0x100 [ 3975.679625][T14507] invoke_syscall+0x54/0x10c [ 3975.679702][T14507] el0_svc_common.constprop.0+0x40/0xe0 [ 3975.679757][T14507] do_el0_svc+0x1c/0x34 [ 3975.679826][T14507] el0_svc+0x38/0x1fc [ 3975.679933][T14507] el0t_64_sync_handler+0xa0/0xe4 [ 3975.679997][T14507] el0t_64_sync+0x1a4/0x1a8 [ 3975.688471][T14507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3976.199377][T14513] input: syz0 as /devices/virtual/input/input753 [ 3976.200633][T14507] FAULT_INJECTION: forcing a failure. [ 3976.200633][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 3976.201996][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.2.3166 Tainted: G W L syzkaller #0 PREEMPT [ 3976.202143][T14507] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3976.202178][T14507] Hardware name: linux,dummy-virt (DT) [ 3976.202214][T14507] Call trace: [ 3976.202248][T14507] show_stack+0x18/0x24 (C) [ 3976.202401][T14507] dump_stack_lvl+0x60/0x80 [ 3976.202488][T14507] dump_stack+0x18/0x24 [ 3976.202572][T14507] should_fail_ex+0x1e0/0x238 [ 3976.202692][T14507] should_failslab+0x54/0x80 [ 3976.202760][T14507] __kmalloc_noprof+0xac/0x520 [ 3976.202922][T14507] kobj_map+0x78/0x184 [ 3976.203015][T14507] cdev_add+0x44/0x9c [ 3976.204568][T14507] tty_cdev_add+0x70/0xcc [ 3976.204746][T14507] tty_register_device_attr+0x144/0x240 [ 3976.204823][T14507] tty_register_device+0x18/0x24 [ 3976.204895][T14507] gsm_activate_mux+0x94/0x144 [ 3976.204970][T14507] gsmld_ioctl+0x3a8/0x5e8 [ 3976.205037][T14507] tty_ioctl+0x108/0x998 [ 3976.205103][T14507] __arm64_sys_ioctl+0xa8/0x100 [ 3976.205179][T14507] invoke_syscall+0x54/0x10c [ 3976.205264][T14507] el0_svc_common.constprop.0+0x40/0xe0 [ 3976.205336][T14507] do_el0_svc+0x1c/0x34 [ 3976.205404][T14507] el0_svc+0x38/0x1fc [ 3976.205490][T14507] el0t_64_sync_handler+0xa0/0xe4 [ 3976.205570][T14507] el0t_64_sync+0x1a4/0x1a8 [ 3977.428465][ T5098] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 3977.447397][ T5098] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3979.010157][T14531] input: syz0 as /devices/virtual/input/input754 [ 3979.719315][T14534] fuse: Unknown parameter 'use00000000000000000000' [ 3984.470115][T14545] FAULT_INJECTION: forcing a failure. [ 3984.470115][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 3984.471443][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.0.3174 Tainted: G W L syzkaller #0 PREEMPT [ 3984.471534][T14545] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3984.471555][T14545] Hardware name: linux,dummy-virt (DT) [ 3984.471576][T14545] Call trace: [ 3984.471594][T14545] show_stack+0x18/0x24 (C) [ 3984.471653][T14545] dump_stack_lvl+0x60/0x80 [ 3984.471692][T14545] dump_stack+0x18/0x24 [ 3984.471776][T14545] should_fail_ex+0x1e0/0x238 [ 3984.471824][T14545] should_failslab+0x54/0x80 [ 3984.471860][T14545] __kmalloc_noprof+0xac/0x520 [ 3984.471899][T14545] tomoyo_encode2+0x7c/0x13c [ 3984.471952][T14545] tomoyo_encode+0x28/0x40 [ 3984.472023][T14545] tomoyo_realpath_from_path+0x80/0x1d4 [ 3984.472071][T14545] tomoyo_check_open_permission+0x128/0x190 [ 3984.472108][T14545] tomoyo_file_open+0x30/0x3c [ 3984.472148][T14545] security_file_open+0x74/0x148 [ 3984.472228][T14545] do_dentry_open+0xe0/0x4fc [ 3984.472277][T14545] vfs_open+0x2c/0xe8 [ 3984.472314][T14545] path_openat+0x5b4/0x960 [ 3984.472350][T14545] do_file_open+0xb0/0x168 [ 3984.472385][T14545] do_sys_openat2+0x84/0x104 [ 3984.472421][T14545] __arm64_sys_openat+0x64/0xc0 [ 3984.472458][T14545] invoke_syscall+0x54/0x10c [ 3984.472494][T14545] el0_svc_common.constprop.0+0x40/0xe0 [ 3984.472555][T14545] do_el0_svc+0x1c/0x34 [ 3984.472618][T14545] el0_svc+0x38/0x1fc [ 3984.472661][T14545] el0t_64_sync_handler+0xa0/0xe4 [ 3984.472698][T14545] el0t_64_sync+0x1a4/0x1a8 [ 3984.488809][T14545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3986.061557][T14550] input: syz0 as /devices/virtual/input/input755 [ 3986.443435][T14555] fuse: Unknown parameter 'user_i00000000000000000000' [ 3986.602951][T14559] input: syz0 as /devices/virtual/input/input756 [ 3987.786066][ T3192] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.786532][ T3192] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3987.787796][ T3192] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.787948][ T3192] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3987.788816][ T3192] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.788939][ T3192] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3987.789762][ T3192] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.789877][ T3192] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3987.791952][ T3192] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.792109][ T3192] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3987.793512][ T3192] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.793647][ T3192] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3987.794456][ T3192] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.795296][ T3192] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3987.796214][ T3192] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3987.796334][ T3192] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3987.796655][T14564] nbd0: unable to read partition table [ 3987.906384][T14566] input: syz0 as /devices/virtual/input/input757 [ 3992.607354][T14570] fuse: Unknown parameter 'user_i00000000000000000000' [ 3994.240474][T14577] input: syz0 as /devices/virtual/input/input758 [ 3996.130522][T14584] input: syz0 as /devices/virtual/input/input759 [ 3996.939256][T14585] FAULT_INJECTION: forcing a failure. [ 3996.939256][T14585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3996.939695][T14585] CPU: 0 UID: 0 PID: 14585 Comm: syz.2.3185 Tainted: G W L syzkaller #0 PREEMPT [ 3996.939833][T14585] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3996.939872][T14585] Hardware name: linux,dummy-virt (DT) [ 3996.939913][T14585] Call trace: [ 3996.939946][T14585] show_stack+0x18/0x24 (C) [ 3996.940054][T14585] dump_stack_lvl+0x60/0x80 [ 3996.940152][T14585] dump_stack+0x18/0x24 [ 3996.940262][T14585] should_fail_ex+0x1e0/0x238 [ 3996.940342][T14585] should_fail+0x14/0x40 [ 3996.940459][T14585] should_fail_usercopy+0x1c/0x40 [ 3996.940537][T14585] setup_rt_frame+0x6f4/0x1120 [ 3996.940640][T14585] arch_do_signal_or_restart+0x220/0x3dc [ 3996.940744][T14585] exit_to_user_mode_loop+0x114/0x19c [ 3996.940828][T14585] el0_svc+0x1f0/0x1fc [ 3996.940976][T14585] el0t_64_sync_handler+0xa0/0xe4 [ 3996.941075][T14585] el0t_64_sync+0x1a4/0x1a8 [ 3999.297725][T14587] fuse: Unknown parameter 'user_i00000000000000000000' [ 3999.502837][T14591] input: syz0 as /devices/virtual/input/input760 [ 4004.939133][T14599] input: syz0 as /devices/virtual/input/input761 [ 4005.708747][T14602] input: syz0 as /devices/virtual/input/input762 [ 4007.181732][T14606] fuse: Unknown parameter 'user_id00000000000000000000' [ 4007.479232][T14612] input: syz0 as /devices/virtual/input/input763 [ 4013.557791][T14620] fuse: Unknown parameter 'user_id00000000000000000000' [ 4013.762168][T14625] input: syz0 as /devices/virtual/input/input764 [ 4013.958974][T14629] input: syz0 as /devices/virtual/input/input765 [ 4015.988231][T14636] fuse: Unknown parameter 'user_id00000000000000000000' [ 4016.579918][T14646] input: syz0 as /devices/virtual/input/input766 [ 4023.419589][T14656] fuse: Bad value for 'fd' [ 4024.050703][T14665] input: syz0 as /devices/virtual/input/input768 [ 4025.282066][T14674] fuse: Bad value for 'fd' [ 4029.316064][T14686] input: syz0 as /devices/virtual/input/input771 [ 4029.855309][T14689] fuse: Bad value for 'fd' [ 4030.275596][ T3480] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 4030.433832][ T3480] usb 1-1: New USB device found, idVendor=056a, idProduct=0033, bcdDevice= 0.40 [ 4030.458286][ T3480] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1999, setting to 64 [ 4030.461097][ T3480] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4030.467390][ T3480] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4030.497907][ T3480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4030.498686][ T3480] usb 1-1: Product: 䠊 [ 4030.500108][ T3480] usb 1-1: Manufacturer:  [ 4030.502495][ T3480] usb 1-1: SerialNumber: ఊ [ 4030.524142][T14694] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4030.771127][ T3480] usbhid 1-1:1.0: can't add hid device: -71 [ 4030.771522][ T3480] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4030.781931][ T3480] usb 1-1: USB disconnect, device number 59 [ 4030.870073][T14701] input: syz0 as /devices/virtual/input/input773 [ 4034.566456][T14707] fuse: Unknown parameter '00000000000000000003' [ 4035.108713][T14717] input: syz0 as /devices/virtual/input/input774 [ 4038.975332][T14722] fuse: Unknown parameter '00000000000000000003' [ 4045.226924][T14732] input: syz0 as /devices/virtual/input/input778 [ 4046.344191][T14737] fuse: Unknown parameter '00000000000000000003' [ 4052.723308][T14782] FAULT_INJECTION: forcing a failure. [ 4052.723308][T14782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4052.725618][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.2.3235 Tainted: G W L syzkaller #0 PREEMPT [ 4052.725708][T14782] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4052.725729][T14782] Hardware name: linux,dummy-virt (DT) [ 4052.725750][T14782] Call trace: [ 4052.725767][T14782] show_stack+0x18/0x24 (C) [ 4052.725830][T14782] dump_stack_lvl+0x60/0x80 [ 4052.725868][T14782] dump_stack+0x18/0x24 [ 4052.725903][T14782] should_fail_ex+0x1e0/0x238 [ 4052.725941][T14782] should_fail+0x14/0x40 [ 4052.725980][T14782] should_fail_usercopy+0x1c/0x40 [ 4052.726052][T14782] _copy_from_iter+0x60/0x6a0 [ 4052.726124][T14782] netlink_sendmsg+0x15c/0x410 [ 4052.726208][T14782] __sock_sendmsg+0x54/0x60 [ 4052.726249][T14782] ____sys_sendmsg+0x250/0x2a8 [ 4052.726299][T14782] ___sys_sendmsg+0xb0/0x108 [ 4052.726334][T14782] __sys_sendmsg+0x9c/0x100 [ 4052.726377][T14782] __arm64_sys_sendmsg+0x20/0x38 [ 4052.726439][T14782] invoke_syscall+0x54/0x10c [ 4052.726476][T14782] el0_svc_common.constprop.0+0x40/0xe0 [ 4052.726511][T14782] do_el0_svc+0x1c/0x34 [ 4052.726562][T14782] el0_svc+0x38/0x1fc [ 4052.726606][T14782] el0t_64_sync_handler+0xa0/0xe4 [ 4052.726644][T14782] el0t_64_sync+0x1a4/0x1a8 [ 4052.816117][T14785] fuse: Unknown parameter '00000000000000000003' [ 4053.039903][T14796] input: syz0 as /devices/virtual/input/input781 [ 4059.752947][T14805] fuse: Unknown parameter '00000000000000000003' [ 4060.382260][T14815] fuse: Unknown parameter '00000000000000000003' [ 4061.365611][ T3480] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 4061.535358][ T3480] usb 1-1: Using ep0 maxpacket: 8 [ 4061.548237][ T3480] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1063, bcdDevice=2d.b7 [ 4061.585193][ T3480] usb 1-1: config 127 has an invalid interface number: 222 but max is 1 [ 4061.585588][ T3480] usb 1-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 4061.585839][ T3480] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 4061.585999][ T3480] usb 1-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 4061.586447][ T3480] usb 1-1: config 127 has no interface number 0 [ 4061.586733][ T3480] usb 1-1: config 127 interface 222 altsetting 33 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 4061.586930][ T3480] usb 1-1: config 127 interface 222 altsetting 33 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 4061.587065][ T3480] usb 1-1: config 127 interface 222 altsetting 33 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 4061.587200][ T3480] usb 1-1: config 127 interface 222 altsetting 33 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 4061.587353][ T3480] usb 1-1: config 127 interface 222 has no altsetting 0 [ 4061.625419][ T3480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4061.629229][ T3480] usb 1-1: Product: syz [ 4061.630295][ T3480] usb 1-1: Manufacturer: syz [ 4061.633053][ T3480] usb 1-1: SerialNumber: syz [ 4061.899608][ T3480] option 1-1:127.222: GSM modem (1-port) converter detected [ 4061.961705][ T3480] usb 1-1: USB disconnect, device number 60 [ 4061.983985][ T3480] option 1-1:127.222: device disconnected [ 4062.171451][T14833] fuse: Unknown parameter 'fd00000000000000000003' [ 4064.955964][T14830] FAULT_INJECTION: forcing a failure. [ 4064.955964][T14830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4064.956297][T14830] CPU: 0 UID: 0 PID: 14830 Comm: syz.2.3250 Tainted: G W L syzkaller #0 PREEMPT [ 4064.956423][T14830] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4064.956465][T14830] Hardware name: linux,dummy-virt (DT) [ 4064.956505][T14830] Call trace: [ 4064.956574][T14830] show_stack+0x18/0x24 (C) [ 4064.956759][T14830] dump_stack_lvl+0x60/0x80 [ 4064.956866][T14830] dump_stack+0x18/0x24 [ 4064.956944][T14830] should_fail_ex+0x1e0/0x238 [ 4064.957018][T14830] should_fail+0x14/0x40 [ 4064.957093][T14830] should_fail_usercopy+0x1c/0x40 [ 4064.957235][T14830] simple_read_from_buffer+0x5c/0x12c [ 4064.957331][T14830] proc_fail_nth_read+0xb4/0x140 [ 4064.957450][T14830] vfs_read+0xc4/0x31c [ 4064.957542][T14830] ksys_read+0x70/0x110 [ 4064.957635][T14830] __arm64_sys_read+0x18/0x24 [ 4064.957781][T14830] invoke_syscall+0x54/0x10c [ 4064.957877][T14830] el0_svc_common.constprop.0+0x40/0xe0 [ 4064.957950][T14830] do_el0_svc+0x1c/0x34 [ 4064.958019][T14830] el0_svc+0x38/0x1fc [ 4064.958133][T14830] el0t_64_sync_handler+0xa0/0xe4 [ 4064.958232][T14830] el0t_64_sync+0x1a4/0x1a8 [ 4066.845611][T14843] input: syz0 as /devices/virtual/input/input785 [ 4071.175829][T14854] input: syz0 as /devices/virtual/input/input786 [ 4078.942490][T14870] input: syz0 as /devices/virtual/input/input788 [ 4079.912078][T14875] input: syz0 as /devices/virtual/input/input789 [ 4088.346365][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4088.351792][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4088.717766][T14890] FAULT_INJECTION: forcing a failure. [ 4088.717766][T14890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4088.718440][T14890] CPU: 0 UID: 0 PID: 14890 Comm: syz.0.3268 Tainted: G W L syzkaller #0 PREEMPT [ 4088.718567][T14890] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4088.718606][T14890] Hardware name: linux,dummy-virt (DT) [ 4088.718647][T14890] Call trace: [ 4088.718681][T14890] show_stack+0x18/0x24 (C) [ 4088.718793][T14890] dump_stack_lvl+0x60/0x80 [ 4088.718923][T14890] dump_stack+0x18/0x24 [ 4088.719062][T14890] should_fail_ex+0x1e0/0x238 [ 4088.719166][T14890] should_fail_alloc_page+0x60/0x80 [ 4088.719245][T14890] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 4088.719328][T14890] alloc_pages_mpol+0x74/0x1b8 [ 4088.719446][T14890] folio_alloc_mpol_noprof+0x14/0x68 [ 4088.719525][T14890] vma_alloc_folio_noprof+0x80/0xcc [ 4088.719592][T14890] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 4088.719675][T14890] do_anonymous_page+0x2b0/0x9b8 [ 4088.719758][T14890] __handle_mm_fault+0xa5c/0xec0 [ 4088.719845][T14890] handle_mm_fault+0x98/0x338 [ 4088.719919][T14890] do_page_fault+0x378/0x77c [ 4088.720014][T14890] do_translation_fault+0x5c/0x6c [ 4088.720083][T14890] do_mem_abort+0x40/0x90 [ 4088.720215][T14890] el0_da+0x38/0xf0 [ 4088.720325][T14890] el0t_64_sync_handler+0xd0/0xe4 [ 4088.720407][T14890] el0t_64_sync+0x1a4/0x1a8 [ 4088.735179][T14890] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 4088.976307][T13595] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 4089.188847][T13595] usb 1-1: unable to get BOS descriptor or descriptor too short [ 4089.209705][T13595] usb 1-1: not running at top speed; connect to a high speed hub [ 4089.210154][T13595] usb 1-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 4089.225504][T13595] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 4089.259831][T13595] usb 1-1: string descriptor 0 read error: -22 [ 4089.260678][T13595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4089.331646][T13595] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 4089.487732][T13595] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 4089.575835][T13595] usb 1-1: USB disconnect, device number 61 [ 4089.759778][T14882] udevd[14882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 4089.863269][T14895] input: syz0 as /devices/virtual/input/input791 [ 4093.129093][T14906] input: syz0 as /devices/virtual/input/input792 [ 4096.746045][T14907] FAULT_INJECTION: forcing a failure. [ 4096.746045][T14907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4096.746557][T14907] CPU: 0 UID: 0 PID: 14907 Comm: syz.2.3272 Tainted: G W L syzkaller #0 PREEMPT [ 4096.746705][T14907] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4096.746746][T14907] Hardware name: linux,dummy-virt (DT) [ 4096.746789][T14907] Call trace: [ 4096.746857][T14907] show_stack+0x18/0x24 (C) [ 4096.746987][T14907] dump_stack_lvl+0x60/0x80 [ 4096.747068][T14907] dump_stack+0x18/0x24 [ 4096.747153][T14907] should_fail_ex+0x1e0/0x238 [ 4096.747236][T14907] should_fail+0x14/0x40 [ 4096.747307][T14907] should_fail_usercopy+0x1c/0x40 [ 4096.747378][T14907] setup_rt_frame+0x6f4/0x1120 [ 4096.747445][T14907] arch_do_signal_or_restart+0x220/0x3dc [ 4096.747512][T14907] exit_to_user_mode_loop+0x114/0x19c [ 4096.747578][T14907] el0_svc+0x1f0/0x1fc [ 4096.747659][T14907] el0t_64_sync_handler+0xa0/0xe4 [ 4096.747747][T14907] el0t_64_sync+0x1a4/0x1a8 [ 4103.786740][T14917] kernel profiling enabled (shift: 5) [ 4103.911752][T14919] input: syz0 as /devices/virtual/input/input794 [ 4104.542493][T14922] input: syz0 as /devices/virtual/input/input795 [ 4116.476261][T14933] input: syz0 as /devices/virtual/input/input797 [ 4123.865997][T14954] input: syz0 as /devices/virtual/input/input799 [ 4124.481478][T14957] FAULT_INJECTION: forcing a failure. [ 4124.481478][T14957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4124.481894][T14957] CPU: 0 UID: 0 PID: 14957 Comm: syz.0.3283 Tainted: G W L syzkaller #0 PREEMPT [ 4124.482015][T14957] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4124.482096][T14957] Hardware name: linux,dummy-virt (DT) [ 4124.482158][T14957] Call trace: [ 4124.482196][T14957] show_stack+0x18/0x24 (C) [ 4124.482303][T14957] dump_stack_lvl+0x60/0x80 [ 4124.482379][T14957] dump_stack+0x18/0x24 [ 4124.482466][T14957] should_fail_ex+0x1e0/0x238 [ 4124.482550][T14957] should_fail+0x14/0x40 [ 4124.482621][T14957] should_fail_usercopy+0x1c/0x40 [ 4124.482708][T14957] _inline_copy_from_user+0x24/0xa8 [ 4124.482831][T14957] copy_msghdr_from_user+0x58/0x160 [ 4124.482946][T14957] ___sys_sendmsg+0x90/0x108 [ 4124.483049][T14957] __sys_sendmsg+0x9c/0x100 [ 4124.483126][T14957] __arm64_sys_sendmsg+0x20/0x38 [ 4124.483199][T14957] invoke_syscall+0x54/0x10c [ 4124.483276][T14957] el0_svc_common.constprop.0+0x40/0xe0 [ 4124.483349][T14957] do_el0_svc+0x1c/0x34 [ 4124.483418][T14957] el0_svc+0x38/0x1fc [ 4124.483499][T14957] el0t_64_sync_handler+0xa0/0xe4 [ 4124.483589][T14957] el0t_64_sync+0x1a4/0x1a8 [ 4130.912337][T14978] FAULT_INJECTION: forcing a failure. [ 4130.912337][T14978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4130.922955][T14978] CPU: 1 UID: 0 PID: 14978 Comm: syz.0.3291 Tainted: G W L syzkaller #0 PREEMPT [ 4130.923150][T14978] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4130.923193][T14978] Hardware name: linux,dummy-virt (DT) [ 4130.923244][T14978] Call trace: [ 4130.923282][T14978] show_stack+0x18/0x24 (C) [ 4130.923395][T14978] dump_stack_lvl+0x60/0x80 [ 4130.923472][T14978] dump_stack+0x18/0x24 [ 4130.923544][T14978] should_fail_ex+0x1e0/0x238 [ 4130.923621][T14978] should_fail+0x14/0x40 [ 4130.923693][T14978] should_fail_usercopy+0x1c/0x40 [ 4130.923770][T14978] _inline_copy_from_user+0x24/0xa8 [ 4130.923848][T14978] copy_msghdr_from_user+0x58/0x160 [ 4130.923920][T14978] ___sys_sendmsg+0x90/0x108 [ 4130.923990][T14978] __sys_sendmsg+0x9c/0x100 [ 4130.924062][T14978] __arm64_sys_sendmsg+0x20/0x38 [ 4130.924136][T14978] invoke_syscall+0x54/0x10c [ 4130.924221][T14978] el0_svc_common.constprop.0+0x40/0xe0 [ 4130.924297][T14978] do_el0_svc+0x1c/0x34 [ 4130.924368][T14978] el0_svc+0x38/0x1fc [ 4130.924449][T14978] el0t_64_sync_handler+0xa0/0xe4 [ 4130.924596][T14978] el0t_64_sync+0x1a4/0x1a8 [ 4133.020528][T14985] input: syz0 as /devices/virtual/input/input801 [ 4134.066633][T13595] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 4134.271568][T13595] usb 1-1: not running at top speed; connect to a high speed hub [ 4134.271878][T13595] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 4134.286472][T13595] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 4134.286729][T13595] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4134.286990][T13595] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4134.330004][T13595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4134.331585][T13595] usb 1-1: Product: syz [ 4134.331690][T13595] usb 1-1: Manufacturer: 㫷༊Ҕ㟤戻쓿齼暝᚜ユ匯߬ᳲ왓瘙遲Ꮉꗀ땫얒⏋攅룸➠䴗鎙쨸鎃겶羀穣剽⺒惫ᘯ㌠釼 [ 4134.331787][T13595] usb 1-1: SerialNumber: syz [ 4134.362783][T14988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4134.635796][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4134.643185][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4134.680859][T13595] usbhid 1-1:1.0: can't add hid device: -71 [ 4134.681442][T13595] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4134.702713][T13595] usb 1-1: USB disconnect, device number 62 [ 4135.165627][T14997] input: syz1 as /devices/virtual/input/input802 [ 4135.766103][T14998] FAULT_INJECTION: forcing a failure. [ 4135.766103][T14998] name failslab, interval 1, probability 0, space 0, times 0 [ 4135.766633][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.0.3296 Tainted: G W L syzkaller #0 PREEMPT [ 4135.766802][T14998] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4135.766871][T14998] Hardware name: linux,dummy-virt (DT) [ 4135.766911][T14998] Call trace: [ 4135.766944][T14998] show_stack+0x18/0x24 (C) [ 4135.767051][T14998] dump_stack_lvl+0x60/0x80 [ 4135.767130][T14998] dump_stack+0x18/0x24 [ 4135.767205][T14998] should_fail_ex+0x1e0/0x238 [ 4135.767285][T14998] should_failslab+0x54/0x80 [ 4135.767368][T14998] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4135.767453][T14998] __d_alloc+0x3c/0x280 [ 4135.767538][T14998] d_alloc_pseudo+0x10/0x50 [ 4135.767608][T14998] alloc_file_pseudo+0x7c/0x160 [ 4135.767678][T14998] sock_alloc_file+0x40/0xd8 [ 4135.767758][T14998] __sys_socket+0xe0/0x140 [ 4135.767828][T14998] __arm64_sys_socket+0x1c/0x38 [ 4135.767897][T14998] invoke_syscall+0x54/0x10c [ 4135.767968][T14998] el0_svc_common.constprop.0+0x40/0xe0 [ 4135.768038][T14998] do_el0_svc+0x1c/0x34 [ 4135.768107][T14998] el0_svc+0x38/0x1fc [ 4135.768186][T14998] el0t_64_sync_handler+0xa0/0xe4 [ 4135.768265][T14998] el0t_64_sync+0x1a4/0x1a8 [ 4142.729397][T15019] input: syz0 as /devices/virtual/input/input804 [ 4147.963390][T15033] input: syz1 as /devices/virtual/input/input805 [ 4153.895478][ T6403] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 4154.045203][ T6403] usb 1-1: Using ep0 maxpacket: 32 [ 4154.060277][ T6403] usb 1-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.40 [ 4154.067895][ T6403] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 4154.068117][ T6403] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4154.089918][ T6403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4154.090900][ T6403] usb 1-1: Product: ࠐ [ 4154.091610][ T6403] usb 1-1: Manufacturer: Ї [ 4154.092463][ T6403] usb 1-1: SerialNumber: syz [ 4154.355819][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4154.356892][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4154.837100][T15037] FAULT_INJECTION: forcing a failure. [ 4154.837100][T15037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4154.845446][T15037] CPU: 1 UID: 0 PID: 15037 Comm: syz.2.3304 Tainted: G W L syzkaller #0 PREEMPT [ 4154.845644][T15037] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4154.845686][T15037] Hardware name: linux,dummy-virt (DT) [ 4154.845729][T15037] Call trace: [ 4154.845762][T15037] show_stack+0x18/0x24 (C) [ 4154.845874][T15037] dump_stack_lvl+0x60/0x80 [ 4154.845953][T15037] dump_stack+0x18/0x24 [ 4154.846028][T15037] should_fail_ex+0x1e0/0x238 [ 4154.846109][T15037] should_fail+0x14/0x40 [ 4154.846182][T15037] should_fail_usercopy+0x1c/0x40 [ 4154.846259][T15037] setup_rt_frame+0x350/0x1120 [ 4154.846345][T15037] arch_do_signal_or_restart+0x220/0x3dc [ 4154.846423][T15037] exit_to_user_mode_loop+0x114/0x19c [ 4154.846504][T15037] el0_svc+0x1f0/0x1fc [ 4154.846590][T15037] el0t_64_sync_handler+0xa0/0xe4 [ 4154.846670][T15037] el0t_64_sync+0x1a4/0x1a8 [ 4154.896270][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4154.897895][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4156.491078][ T6403] usbhid 1-1:1.0: can't add hid device: -71 [ 4156.491899][ T6403] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4156.525577][ T6403] usb 1-1: USB disconnect, device number 63 [ 4157.512121][T15059] input: syz0 as /devices/virtual/input/input806 [ 4159.198315][T15063] FAULT_INJECTION: forcing a failure. [ 4159.198315][T15063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4159.198578][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.0.3310 Tainted: G W L syzkaller #0 PREEMPT [ 4159.198650][T15063] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4159.198670][T15063] Hardware name: linux,dummy-virt (DT) [ 4159.198691][T15063] Call trace: [ 4159.198707][T15063] show_stack+0x18/0x24 (C) [ 4159.198792][T15063] dump_stack_lvl+0x60/0x80 [ 4159.198880][T15063] dump_stack+0x18/0x24 [ 4159.198930][T15063] should_fail_ex+0x1e0/0x238 [ 4159.198994][T15063] should_fail+0x14/0x40 [ 4159.199051][T15063] should_fail_usercopy+0x1c/0x40 [ 4159.199086][T15063] _copy_from_iter+0x60/0x6a0 [ 4159.199125][T15063] netlink_sendmsg+0x15c/0x410 [ 4159.199167][T15063] __sock_sendmsg+0x54/0x60 [ 4159.199225][T15063] ____sys_sendmsg+0x250/0x2a8 [ 4159.199283][T15063] ___sys_sendmsg+0xb0/0x108 [ 4159.199320][T15063] __sys_sendmsg+0x9c/0x100 [ 4159.199382][T15063] __arm64_sys_sendmsg+0x20/0x38 [ 4159.199422][T15063] invoke_syscall+0x54/0x10c [ 4159.199485][T15063] el0_svc_common.constprop.0+0x40/0xe0 [ 4159.199532][T15063] do_el0_svc+0x1c/0x34 [ 4159.199570][T15063] el0_svc+0x38/0x1fc [ 4159.199636][T15063] el0t_64_sync_handler+0xa0/0xe4 [ 4159.199709][T15063] el0t_64_sync+0x1a4/0x1a8 [ 4161.942157][T15079] input: syz0 as /devices/virtual/input/input807 [ 4162.066361][T15083] input: syz0 as /devices/virtual/input/input808 [ 4168.565627][T15104] input: syz0 as /devices/virtual/input/input809 [ 4168.660666][ T2670] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.662314][ T2670] Buffer I/O error on dev nbd0, logical block 0, async page read [ 4168.665640][ T2670] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.667217][ T2670] Buffer I/O error on dev nbd0, logical block 1, async page read [ 4168.669993][ T2670] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.671478][ T2670] Buffer I/O error on dev nbd0, logical block 2, async page read [ 4168.673390][ T2670] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.675870][ T2670] Buffer I/O error on dev nbd0, logical block 3, async page read [ 4168.678020][ T2670] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.678386][ T2670] Buffer I/O error on dev nbd0, logical block 0, async page read [ 4168.682415][ T2670] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.684032][ T2670] Buffer I/O error on dev nbd0, logical block 1, async page read [ 4168.686608][ T2670] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.688226][ T2670] Buffer I/O error on dev nbd0, logical block 2, async page read [ 4168.690307][ T2670] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.691471][ T2670] Buffer I/O error on dev nbd0, logical block 3, async page read [ 4168.694137][T15106] nbd0: unable to read partition table [ 4168.781225][ T3192] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 4168.781649][ T3192] Buffer I/O error on dev nbd0, logical block 0, async page read [ 4168.792173][ T3192] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 4168.792691][ T3192] Buffer I/O error on dev nbd0, logical block 1, async page read [ 4168.809858][ T3193] nbd0: unable to read partition table [ 4168.855498][ T3193] nbd0: unable to read partition table [ 4169.038218][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3325'. [ 4169.062593][T15098] nbd0: unable to read partition table [ 4169.148762][T15098] nbd0: unable to read partition table [ 4171.235969][T15115] input: syz0 as /devices/virtual/input/input810 [ 4189.925886][T15135] input: syz0 as /devices/virtual/input/input811 [ 4190.629057][T15144] VFS: file-max limit 0 reached [ 4196.056002][T15171] input: syz0 as /devices/virtual/input/input813 [ 4197.960726][T15164] input: syz0 as /devices/virtual/input/input814 [ 4199.952916][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4199.971651][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4200.025876][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4200.027494][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4200.043491][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4200.058486][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4200.093675][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4200.107633][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4204.602072][T15183] input: syz0 as /devices/virtual/input/input815 [ 4205.119776][T15185] FAULT_INJECTION: forcing a failure. [ 4205.119776][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 4205.121474][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.2.3344 Tainted: G W L syzkaller #0 PREEMPT [ 4205.121569][T15185] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4205.121591][T15185] Hardware name: linux,dummy-virt (DT) [ 4205.121613][T15185] Call trace: [ 4205.121630][T15185] show_stack+0x18/0x24 (C) [ 4205.121691][T15185] dump_stack_lvl+0x60/0x80 [ 4205.121740][T15185] dump_stack+0x18/0x24 [ 4205.121776][T15185] should_fail_ex+0x1e0/0x238 [ 4205.121816][T15185] should_failslab+0x54/0x80 [ 4205.121853][T15185] __kmalloc_noprof+0xac/0x520 [ 4205.121890][T15185] tomoyo_encode2+0x7c/0x13c [ 4205.121929][T15185] tomoyo_encode+0x28/0x40 [ 4205.121964][T15185] tomoyo_realpath_from_path+0x100/0x1d4 [ 4205.122037][T15185] tomoyo_path_number_perm+0xe0/0x21c [ 4205.122088][T15185] tomoyo_file_ioctl+0x1c/0x30 [ 4205.122155][T15185] security_file_ioctl+0x8c/0x19c [ 4205.122221][T15185] __arm64_sys_ioctl+0x44/0x100 [ 4205.122305][T15185] invoke_syscall+0x54/0x10c [ 4205.122342][T15185] el0_svc_common.constprop.0+0x40/0xe0 [ 4205.122376][T15185] do_el0_svc+0x1c/0x34 [ 4205.122409][T15185] el0_svc+0x38/0x1fc [ 4205.122448][T15185] el0t_64_sync_handler+0xa0/0xe4 [ 4205.122484][T15185] el0t_64_sync+0x1a4/0x1a8 [ 4205.135017][T15185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4207.468066][ T3480] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 4207.615528][ T3480] usb 1-1: device descriptor read/64, error -71 [ 4207.871154][ T3480] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 4208.015448][ T3480] usb 1-1: device descriptor read/64, error -71 [ 4208.136528][ T3480] usb usb1-port1: attempt power cycle [ 4208.495617][ T3480] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 4208.545632][ T3480] usb 1-1: device descriptor read/8, error -71 [ 4208.795327][ T3480] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 4208.819239][ T3480] usb 1-1: device descriptor read/8, error -71 [ 4208.945992][ T3480] usb usb1-port1: unable to enumerate USB device [ 4212.862668][T15192] input: syz0 as /devices/virtual/input/input816 [ 4217.523161][T15208] input: syz0 as /devices/virtual/input/input817 [ 4218.476584][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4218.478523][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4225.600036][T15218] input: syz0 as /devices/virtual/input/input818 [ 4228.206315][T15230] input: syz0 as /devices/virtual/input/input819 [ 4233.516425][T15234] input: syz0 as /devices/virtual/input/input820 [ 4243.467345][T15250] input: syz0 as /devices/virtual/input/input821 [ 4246.652137][T15258] input: syz1 as /devices/virtual/input/input823 [ 4251.945412][T14416] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 4252.107362][T14416] usb 1-1: not running at top speed; connect to a high speed hub [ 4252.108347][T14416] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 4252.121853][T14416] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 4252.123494][T14416] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4252.166784][T14416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4252.168295][T14416] usb 1-1: Product: 㱏૥쉸ᷰಕ㽦Ⴔ䆢畤悷才㮹놽㗝惹댋恳№磺㛮礦袺脵₋跩⹂燍ﹻ䢎鞍䐂ᖋ↠쨩夀왠缾ᤰꩼ좒浘뙴ꝧퟓ批앗槶㡡配⭠抱꫼꣎ㅮ티諻䆘ԫኄ⼫◥겥퍏є嘧⠬ם泉₉ⵢ蔔䎮囆ԇተ짤혐圊慹ᤌ塳⓫Ṛźࢆࣇ먶ⴭל韘뎹敂箑۷Ĵ㏎㻃ₔ֜뚸壙龷ͳ [ 4252.173950][T14416] usb 1-1: Manufacturer: 퓤裁񠺇囫娿减崯鮰뵯ᄚ‶쑈ృ갪杏쁚꾙∇曶♞튧鈆娣으쀨ѿ䴺蟁⢜踽╱湳瓺⴩笪铰蓔兰뤉㍢嬨Ὡ뼯칊⧭ [ 4252.179467][T14416] usb 1-1: SerialNumber: 澮䝼瞩峢ꜯ誠ⵣ⍠朴䦉휜Ḕඊ䘍單ﮅ믮漲철昡嶝㺡泉뜈嫺월틲⑊᪜䂽ૃ户斷сꩄࢌ俜⭿ⴼ힦児㭗 [ 4252.213388][T15263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4252.499296][T14416] usbhid 1-1:1.0: can't add hid device: -71 [ 4252.500754][T14416] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4252.529460][T14416] usb 1-1: USB disconnect, device number 68 [ 4256.166693][T15271] input: syz0 as /devices/virtual/input/input824 [ 4256.990704][T15284] input: syz0 as /devices/virtual/input/input825 [ 4258.429666][T15288] fuse: Bad value for 'fd' [ 4262.066443][T15290] input: syz0 as /devices/virtual/input/input826 [ 4267.966023][T15297] input: syz0 as /devices/virtual/input/input827 [ 4268.455335][T15292] FAULT_INJECTION: forcing a failure. [ 4268.455335][T15292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4268.455750][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.0.3370 Tainted: G W L syzkaller #0 PREEMPT [ 4268.455917][T15292] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4268.455964][T15292] Hardware name: linux,dummy-virt (DT) [ 4268.456004][T15292] Call trace: [ 4268.456035][T15292] show_stack+0x18/0x24 (C) [ 4268.456134][T15292] dump_stack_lvl+0x60/0x80 [ 4268.456201][T15292] dump_stack+0x18/0x24 [ 4268.456273][T15292] should_fail_ex+0x1e0/0x238 [ 4268.456344][T15292] should_fail+0x14/0x40 [ 4268.456408][T15292] should_fail_usercopy+0x1c/0x40 [ 4268.456476][T15292] restore_sigframe+0x50/0xc20 [ 4268.456582][T15292] __arm64_sys_rt_sigreturn+0xb8/0x224 [ 4268.456670][T15292] invoke_syscall+0x54/0x10c [ 4268.456770][T15292] el0_svc_common.constprop.0+0x40/0xe0 [ 4268.456846][T15292] do_el0_svc+0x1c/0x34 [ 4268.456920][T15292] el0_svc+0x38/0x1fc [ 4268.457028][T15292] el0t_64_sync_handler+0xa0/0xe4 [ 4268.457116][T15292] el0t_64_sync+0x1a4/0x1a8 [ 4276.331943][T15302] input: syz0 as /devices/virtual/input/input828 [ 4278.838717][T15307] input: syz0 as /devices/virtual/input/input829 [ 4280.102407][T15308] FAULT_INJECTION: forcing a failure. [ 4280.102407][T15308] name failslab, interval 1, probability 0, space 0, times 0 [ 4280.105263][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.2.3374 Tainted: G W L syzkaller #0 PREEMPT [ 4280.105431][T15308] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4280.105472][T15308] Hardware name: linux,dummy-virt (DT) [ 4280.105513][T15308] Call trace: [ 4280.105550][T15308] show_stack+0x18/0x24 (C) [ 4280.105670][T15308] dump_stack_lvl+0x60/0x80 [ 4280.105746][T15308] dump_stack+0x18/0x24 [ 4280.105831][T15308] should_fail_ex+0x1e0/0x238 [ 4280.105908][T15308] should_failslab+0x54/0x80 [ 4280.105987][T15308] __kmalloc_noprof+0xac/0x520 [ 4280.106065][T15308] tomoyo_encode2+0x7c/0x13c [ 4280.106147][T15308] tomoyo_encode+0x28/0x40 [ 4280.106229][T15308] tomoyo_realpath_from_path+0x100/0x1d4 [ 4280.106313][T15308] tomoyo_path_number_perm+0xe0/0x21c [ 4280.106397][T15308] tomoyo_file_ioctl+0x1c/0x30 [ 4280.106481][T15308] security_file_ioctl+0x8c/0x19c [ 4280.106556][T15308] __arm64_sys_ioctl+0x44/0x100 [ 4280.106640][T15308] invoke_syscall+0x54/0x10c [ 4280.106712][T15308] el0_svc_common.constprop.0+0x40/0xe0 [ 4280.106795][T15308] do_el0_svc+0x1c/0x34 [ 4280.106894][T15308] el0_svc+0x38/0x1fc [ 4280.106974][T15308] el0t_64_sync_handler+0xa0/0xe4 [ 4280.107094][T15308] el0t_64_sync+0x1a4/0x1a8 [ 4280.136388][T15308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4283.282783][T15312] input: syz0 as /devices/virtual/input/input830 [ 4285.475351][T15316] input: syz0 as /devices/virtual/input/input831 [ 4286.109690][T15317] FAULT_INJECTION: forcing a failure. [ 4286.109690][T15317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4286.110948][T15317] CPU: 1 UID: 0 PID: 15317 Comm: syz.2.3377 Tainted: G W L syzkaller #0 PREEMPT [ 4286.111031][T15317] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4286.111051][T15317] Hardware name: linux,dummy-virt (DT) [ 4286.111076][T15317] Call trace: [ 4286.111095][T15317] show_stack+0x18/0x24 (C) [ 4286.111157][T15317] dump_stack_lvl+0x60/0x80 [ 4286.111195][T15317] dump_stack+0x18/0x24 [ 4286.111229][T15317] should_fail_ex+0x1e0/0x238 [ 4286.111267][T15317] should_fail+0x14/0x40 [ 4286.111301][T15317] should_fail_usercopy+0x1c/0x40 [ 4286.111336][T15317] read_fpsimd_context+0x30/0x140 [ 4286.111369][T15317] restore_fpsimd_context+0x44/0xd0 [ 4286.111403][T15317] restore_sve_fpsimd_context+0x310/0x380 [ 4286.111437][T15317] restore_sigframe+0x548/0xc20 [ 4286.111471][T15317] __arm64_sys_rt_sigreturn+0xb8/0x224 [ 4286.111506][T15317] invoke_syscall+0x54/0x10c [ 4286.111540][T15317] el0_svc_common.constprop.0+0x40/0xe0 [ 4286.111575][T15317] do_el0_svc+0x1c/0x34 [ 4286.111608][T15317] el0_svc+0x38/0x1fc [ 4286.111655][T15317] el0t_64_sync_handler+0xa0/0xe4 [ 4286.111730][T15317] el0t_64_sync+0x1a4/0x1a8 [ 4294.703865][T15325] input: syz0 as /devices/virtual/input/input832 [ 4295.363855][T15352] input: syz0 as /devices/virtual/input/input833 [ 4296.037471][T15353] input: syz0 as /devices/virtual/input/input834 [ 4302.869049][T15356] input: syz0 as /devices/virtual/input/input835 [ 4303.388523][T15358] FAULT_INJECTION: forcing a failure. [ 4303.388523][T15358] name failslab, interval 1, probability 0, space 0, times 0 [ 4303.388923][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.0.3387 Tainted: G W L syzkaller #0 PREEMPT [ 4303.389048][T15358] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4303.389086][T15358] Hardware name: linux,dummy-virt (DT) [ 4303.389129][T15358] Call trace: [ 4303.389171][T15358] show_stack+0x18/0x24 (C) [ 4303.389426][T15358] dump_stack_lvl+0x60/0x80 [ 4303.389552][T15358] dump_stack+0x18/0x24 [ 4303.389627][T15358] should_fail_ex+0x1e0/0x238 [ 4303.389704][T15358] should_failslab+0x54/0x80 [ 4303.389794][T15358] __kmalloc_noprof+0xac/0x520 [ 4303.389876][T15358] tomoyo_encode2+0x7c/0x13c [ 4303.389995][T15358] tomoyo_encode+0x28/0x40 [ 4303.390100][T15358] tomoyo_realpath_from_path+0x100/0x1d4 [ 4303.390178][T15358] tomoyo_path_number_perm+0xe0/0x21c [ 4303.390290][T15358] tomoyo_file_ioctl+0x1c/0x30 [ 4303.390397][T15358] security_file_ioctl+0x8c/0x19c [ 4303.390489][T15358] __arm64_sys_ioctl+0x44/0x100 [ 4303.390586][T15358] invoke_syscall+0x54/0x10c [ 4303.390698][T15358] el0_svc_common.constprop.0+0x40/0xe0 [ 4303.390924][T15358] do_el0_svc+0x1c/0x34 [ 4303.391035][T15358] el0_svc+0x38/0x1fc [ 4303.391137][T15358] el0t_64_sync_handler+0xa0/0xe4 [ 4303.391238][T15358] el0t_64_sync+0x1a4/0x1a8 [ 4303.437135][T15358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4307.336611][T15363] input: syz0 as /devices/virtual/input/input836 [ 4310.356030][T15366] input: syz0 as /devices/virtual/input/input837 [ 4317.232478][T15370] input: syz0 as /devices/virtual/input/input838 [ 4317.738714][T15378] input: syz0 as /devices/virtual/input/input839 [ 4318.869586][T15379] FAULT_INJECTION: forcing a failure. [ 4318.869586][T15379] name failslab, interval 1, probability 0, space 0, times 0 [ 4318.881399][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.0.3393 Tainted: G W L syzkaller #0 PREEMPT [ 4318.881594][T15379] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4318.881632][T15379] Hardware name: linux,dummy-virt (DT) [ 4318.881675][T15379] Call trace: [ 4318.881709][T15379] show_stack+0x18/0x24 (C) [ 4318.881835][T15379] dump_stack_lvl+0x60/0x80 [ 4318.881915][T15379] dump_stack+0x18/0x24 [ 4318.881984][T15379] should_fail_ex+0x1e0/0x238 [ 4318.882064][T15379] should_failslab+0x54/0x80 [ 4318.882139][T15379] __kmalloc_noprof+0xac/0x520 [ 4318.882215][T15379] tomoyo_encode2+0x7c/0x13c [ 4318.882291][T15379] tomoyo_encode+0x28/0x40 [ 4318.882363][T15379] tomoyo_realpath_from_path+0x100/0x1d4 [ 4318.882438][T15379] tomoyo_path_number_perm+0xe0/0x21c [ 4318.882511][T15379] tomoyo_file_ioctl+0x1c/0x30 [ 4318.882581][T15379] security_file_ioctl+0x8c/0x19c [ 4318.882648][T15379] __arm64_sys_ioctl+0x44/0x100 [ 4318.882721][T15379] invoke_syscall+0x54/0x10c [ 4318.882798][T15379] el0_svc_common.constprop.0+0x40/0xe0 [ 4318.882932][T15379] do_el0_svc+0x1c/0x34 [ 4318.883000][T15379] el0_svc+0x38/0x1fc [ 4318.883077][T15379] el0t_64_sync_handler+0xa0/0xe4 [ 4318.883149][T15379] el0t_64_sync+0x1a4/0x1a8 [ 4318.928719][T15379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4322.336413][T15381] input: syz0 as /devices/virtual/input/input840 [ 4333.495387][T15401] input: syz0 as /devices/virtual/input/input843 [ 4335.138711][T15404] input: syz0 as /devices/virtual/input/input844 [ 4343.862211][T15428] input: syz0 as /devices/virtual/input/input845 [ 4347.533515][T15429] input: syz0 as /devices/virtual/input/input846 [ 4356.587513][T15440] FAULT_INJECTION: forcing a failure. [ 4356.587513][T15440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4356.589934][T15440] CPU: 1 UID: 0 PID: 15440 Comm: syz.0.3411 Tainted: G W L syzkaller #0 PREEMPT [ 4356.590094][T15440] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4356.590131][T15440] Hardware name: linux,dummy-virt (DT) [ 4356.590170][T15440] Call trace: [ 4356.590203][T15440] show_stack+0x18/0x24 (C) [ 4356.590320][T15440] dump_stack_lvl+0x60/0x80 [ 4356.590391][T15440] dump_stack+0x18/0x24 [ 4356.590458][T15440] should_fail_ex+0x1e0/0x238 [ 4356.590578][T15440] should_fail+0x14/0x40 [ 4356.590649][T15440] should_fail_usercopy+0x1c/0x40 [ 4356.590730][T15440] simple_read_from_buffer+0x5c/0x12c [ 4356.590840][T15440] proc_fail_nth_read+0xb4/0x140 [ 4356.590923][T15440] vfs_read+0xc4/0x31c [ 4356.591074][T15440] ksys_read+0x70/0x110 [ 4356.591157][T15440] __arm64_sys_read+0x18/0x24 [ 4356.591232][T15440] invoke_syscall+0x54/0x10c [ 4356.591314][T15440] el0_svc_common.constprop.0+0x40/0xe0 [ 4356.591384][T15440] do_el0_svc+0x1c/0x34 [ 4356.591453][T15440] el0_svc+0x38/0x1fc [ 4356.591528][T15440] el0t_64_sync_handler+0xa0/0xe4 [ 4356.591602][T15440] el0t_64_sync+0x1a4/0x1a8 [ 4357.730768][T15456] input: syz0 as /devices/virtual/input/input847 [ 4358.993123][T15460] input: syz0 as /devices/virtual/input/input848 [ 4371.785448][T14416] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 4371.965460][T14416] usb 1-1: Using ep0 maxpacket: 16 [ 4371.973355][T14416] usb 1-1: New USB device found, idVendor=1199, idProduct=9051, bcdDevice=98.31 [ 4371.991478][T14416] usb 1-1: config 8 has an invalid interface number: 206 but max is 1 [ 4371.994410][T14416] usb 1-1: config 8 has an invalid interface number: 113 but max is 1 [ 4371.999606][T14416] usb 1-1: config 8 has no interface number 0 [ 4372.003225][T14416] usb 1-1: config 8 has no interface number 1 [ 4372.009037][T14416] usb 1-1: config 8 interface 206 altsetting 10 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 4372.013930][T14416] usb 1-1: config 8 interface 206 altsetting 10 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 4372.017548][T14416] usb 1-1: config 8 interface 113 altsetting 142 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 4372.022097][T14416] usb 1-1: config 8 interface 113 altsetting 142 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 4372.026283][T14416] usb 1-1: config 8 interface 113 altsetting 142 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 4372.029460][T14416] usb 1-1: config 8 interface 113 altsetting 142 bulk endpoint 0x2 has invalid maxpacket 8 [ 4372.032814][T14416] usb 1-1: config 8 interface 113 altsetting 142 has a duplicate endpoint with address 0x8, skipping [ 4372.036513][T14416] usb 1-1: config 8 interface 113 altsetting 142 bulk endpoint 0x1 has invalid maxpacket 8 [ 4372.039497][T14416] usb 1-1: config 8 interface 113 altsetting 142 has a duplicate endpoint with address 0x5, skipping [ 4372.042462][T14416] usb 1-1: config 8 interface 113 altsetting 142 has a duplicate endpoint with address 0x5, skipping [ 4372.044918][T14416] usb 1-1: config 8 interface 113 altsetting 142 has a duplicate endpoint with address 0x1, skipping [ 4372.048474][T14416] usb 1-1: config 8 interface 113 altsetting 142 has a duplicate endpoint with address 0xF, skipping [ 4372.051681][T14416] usb 1-1: config 8 interface 206 has no altsetting 0 [ 4372.053431][T14416] usb 1-1: config 8 interface 113 has no altsetting 0 [ 4372.095784][T14416] usb 1-1: Dual-Role OTG device on HNP port [ 4372.101612][T14416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4372.104333][T14416] usb 1-1: Product: ж [ 4372.106657][T14416] usb 1-1: Manufacturer: ࠔ [ 4372.108519][T14416] usb 1-1: SerialNumber: 㠊 [ 4372.388157][T15517] input: syz0 as /devices/virtual/input/input849 [ 4379.036710][T15530] FAULT_INJECTION: forcing a failure. [ 4379.036710][T15530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4379.038721][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.2.3425 Tainted: G W L syzkaller #0 PREEMPT [ 4379.038921][T15530] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4379.038961][T15530] Hardware name: linux,dummy-virt (DT) [ 4379.039000][T15530] Call trace: [ 4379.039035][T15530] show_stack+0x18/0x24 (C) [ 4379.039143][T15530] dump_stack_lvl+0x60/0x80 [ 4379.039218][T15530] dump_stack+0x18/0x24 [ 4379.039303][T15530] should_fail_ex+0x1e0/0x238 [ 4379.039381][T15530] should_fail+0x14/0x40 [ 4379.039445][T15530] should_fail_usercopy+0x1c/0x40 [ 4379.039525][T15530] _inline_copy_from_user+0x24/0xa8 [ 4379.039601][T15530] copy_msghdr_from_user+0x58/0x160 [ 4379.039675][T15530] ___sys_sendmsg+0x90/0x108 [ 4379.039745][T15530] __sys_sendmsg+0x9c/0x100 [ 4379.039816][T15530] __arm64_sys_sendmsg+0x20/0x38 [ 4379.039894][T15530] invoke_syscall+0x54/0x10c [ 4379.039966][T15530] el0_svc_common.constprop.0+0x40/0xe0 [ 4379.040037][T15530] do_el0_svc+0x1c/0x34 [ 4379.040100][T15530] el0_svc+0x38/0x1fc [ 4379.040172][T15530] el0t_64_sync_handler+0xa0/0xe4 [ 4379.040253][T15530] el0t_64_sync+0x1a4/0x1a8 [ 4380.205602][T14292] usb 1-1: USB disconnect, device number 69 [ 4382.089655][T15570] input: syz1 as /devices/virtual/input/input850 [ 4401.486414][T15611] input: syz0 as /devices/virtual/input/input852 [ 4408.986267][T15616] FAULT_INJECTION: forcing a failure. [ 4408.986267][T15616] name failslab, interval 1, probability 0, space 0, times 0 [ 4408.988755][T15616] CPU: 1 UID: 0 PID: 15616 Comm: syz.2.3443 Tainted: G W L syzkaller #0 PREEMPT [ 4408.988918][T15616] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4408.988954][T15616] Hardware name: linux,dummy-virt (DT) [ 4408.988991][T15616] Call trace: [ 4408.989021][T15616] show_stack+0x18/0x24 (C) [ 4408.989121][T15616] dump_stack_lvl+0x60/0x80 [ 4408.989187][T15616] dump_stack+0x18/0x24 [ 4408.989249][T15616] should_fail_ex+0x1e0/0x238 [ 4408.989316][T15616] should_failslab+0x54/0x80 [ 4408.989379][T15616] __kmalloc_noprof+0xac/0x520 [ 4408.989446][T15616] tomoyo_encode2+0x7c/0x13c [ 4408.989514][T15616] tomoyo_encode+0x28/0x40 [ 4408.989578][T15616] tomoyo_realpath_from_path+0x80/0x1d4 [ 4408.989644][T15616] tomoyo_path_number_perm+0xe0/0x21c [ 4408.989716][T15616] tomoyo_file_ioctl+0x1c/0x30 [ 4408.989782][T15616] security_file_ioctl+0x8c/0x19c [ 4408.989843][T15616] __arm64_sys_ioctl+0x44/0x100 [ 4408.989911][T15616] invoke_syscall+0x54/0x10c [ 4408.989973][T15616] el0_svc_common.constprop.0+0x40/0xe0 [ 4408.990035][T15616] do_el0_svc+0x1c/0x34 [ 4408.990095][T15616] el0_svc+0x38/0x1fc [ 4408.990165][T15616] el0t_64_sync_handler+0xa0/0xe4 [ 4408.990231][T15616] el0t_64_sync+0x1a4/0x1a8 [ 4409.002592][T15616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4411.665487][T15629] input: syz0 as /devices/virtual/input/input853 [ 4412.832644][T15630] FAULT_INJECTION: forcing a failure. [ 4412.832644][T15630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4412.845178][T15630] CPU: 1 UID: 0 PID: 15630 Comm: syz.2.3446 Tainted: G W L syzkaller #0 PREEMPT [ 4412.845367][T15630] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4412.845409][T15630] Hardware name: linux,dummy-virt (DT) [ 4412.845449][T15630] Call trace: [ 4412.845482][T15630] show_stack+0x18/0x24 (C) [ 4412.845591][T15630] dump_stack_lvl+0x60/0x80 [ 4412.845667][T15630] dump_stack+0x18/0x24 [ 4412.845736][T15630] should_fail_ex+0x1e0/0x238 [ 4412.845810][T15630] should_fail+0x14/0x40 [ 4412.845874][T15630] should_fail_usercopy+0x1c/0x40 [ 4412.845942][T15630] preserve_fpsimd_context+0x24/0x1bc [ 4412.846011][T15630] setup_rt_frame+0x384/0x1120 [ 4412.846079][T15630] arch_do_signal_or_restart+0x220/0x3dc [ 4412.846152][T15630] exit_to_user_mode_loop+0x114/0x19c [ 4412.846239][T15630] el0_svc+0x1f0/0x1fc [ 4412.846320][T15630] el0t_64_sync_handler+0xa0/0xe4 [ 4412.846392][T15630] el0t_64_sync+0x1a4/0x1a8 [ 4422.313612][T15642] input: syz0 as /devices/virtual/input/input855 [ 4422.341124][T15642] input: syz0 as /devices/virtual/input/input856 [ 4438.503605][T15652] syz.0.3451 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 4438.504031][T15652] CPU: 0 UID: 0 PID: 15652 Comm: syz.0.3451 Tainted: G W L syzkaller #0 PREEMPT [ 4438.504158][T15652] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4438.504197][T15652] Hardware name: linux,dummy-virt (DT) [ 4438.504236][T15652] Call trace: [ 4438.504269][T15652] show_stack+0x18/0x24 (C) [ 4438.504397][T15652] dump_stack_lvl+0x60/0x80 [ 4438.504539][T15652] dump_stack+0x18/0x24 [ 4438.504619][T15652] dump_header+0x40/0x170 [ 4438.504700][T15652] oom_kill_process+0x220/0x2a0 [ 4438.504827][T15652] out_of_memory+0xec/0x58c [ 4438.504911][T15652] mem_cgroup_out_of_memory+0x108/0x118 [ 4438.505044][T15652] try_charge_memcg+0x3b4/0x590 [ 4438.505182][T15652] charge_memcg+0xe0/0x23c [ 4438.505372][T15652] __mem_cgroup_charge+0x38/0x128 [ 4438.505463][T15652] shmem_alloc_and_add_folio+0x140/0x628 [ 4438.505551][T15652] shmem_get_folio_gfp+0x114/0x758 [ 4438.505656][T15652] shmem_write_begin+0x6c/0x158 [ 4438.505742][T15652] generic_perform_write+0xb4/0x24c [ 4438.505822][T15652] shmem_file_write_iter+0xa0/0xa8 [ 4438.505975][T15652] __kernel_write_iter+0xfc/0x27c [ 4438.506066][T15652] dump_user_range+0xe4/0x304 [ 4438.506145][T15652] elf_core_dump+0xc68/0xf44 [ 4438.506229][T15652] vfs_coredump+0xf04/0x1de0 [ 4438.506315][T15652] get_signal+0x604/0x860 [ 4438.506403][T15652] arch_do_signal_or_restart+0x11c/0x3dc [ 4438.506502][T15652] exit_to_user_mode_loop+0x114/0x19c [ 4438.506618][T15652] el0_da+0xe8/0xf0 [ 4438.506708][T15652] el0t_64_sync_handler+0xd0/0xe4 [ 4438.506822][T15652] el0t_64_sync+0x1a4/0x1a8 [ 4438.507783][T15652] memory: usage 307200kB, limit 307200kB, failcnt 166664 [ 4438.507856][T15652] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 4438.507907][T15652] kmem: usage 1776kB, limit 9007199254740988kB, failcnt 0 [ 4438.507963][T15652] Memory cgroup stats for /syz0: [ 4438.508408][T15652] cache 195555328 [ 4438.508473][T15652] rss 117051392 [ 4438.508506][T15652] rss_huge 0 [ 4438.508534][T15652] shmem 195555328 [ 4438.508561][T15652] mapped_file 0 [ 4438.508606][T15652] dirty 0 [ 4438.508653][T15652] writeback 0 [ 4438.508690][T15652] workingset_refault_anon 11249 [ 4438.508720][T15652] workingset_refault_file 8504 [ 4438.508748][T15652] swap 127983616 [ 4438.508781][T15652] swapcached 744263680 [ 4438.508811][T15652] pgpgin 4813542 [ 4438.508838][T15652] pgpgout 4737220 [ 4438.508883][T15652] pgfault 3773616 [ 4438.508912][T15652] pgmajfault 5875 [ 4438.508939][T15652] inactive_anon 199356416 [ 4438.508967][T15652] active_anon 147456 [ 4438.508995][T15652] inactive_file 0 [ 4438.509023][T15652] active_file 0 [ 4438.509050][T15652] unevictable 113106944 [ 4438.509077][T15652] hierarchical_memory_limit 314572800 [ 4438.509126][T15652] hierarchical_memsw_limit 9223372036854771712 [ 4438.509159][T15652] total_cache 195555328 [ 4438.509189][T15652] total_rss 117051392 [ 4438.509235][T15652] total_rss_huge 0 [ 4438.509266][T15652] total_shmem 195555328 [ 4438.509296][T15652] total_mapped_file 0 [ 4438.509353][T15652] total_dirty 0 [ 4438.509383][T15652] total_writeback 0 [ 4438.509429][T15652] total_workingset_refault_anon 11249 [ 4438.509479][T15652] total_workingset_refault_file 8504 [ 4438.509512][T15652] total_swap 127983616 [ 4438.509541][T15652] total_swapcached 744263680 [ 4438.509590][T15652] total_pgpgin 4813566 [ 4438.509625][T15652] total_pgpgout 4737244 [ 4438.509656][T15652] total_pgfault 3773639 [ 4438.509685][T15652] total_pgmajfault 5875 [ 4438.509714][T15652] total_inactive_anon 199356416 [ 4438.509762][T15652] total_active_anon 147456 [ 4438.509798][T15652] total_inactive_file 0 [ 4438.509854][T15652] total_active_file 0 [ 4438.509893][T15652] total_unevictable 113106944 [ 4438.509930][T15652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3451,pid=15648,uid=0 [ 4438.510600][T15652] Memory cgroup out of memory: Killed process 15648 (syz.0.3451) total-vm:122936kB, anon-rss:111656kB, file-rss:10844kB, shmem-rss:0kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 4440.061689][T15659] FAULT_INJECTION: forcing a failure. [ 4440.061689][T15659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4440.064421][T15659] CPU: 1 UID: 0 PID: 15659 Comm: syz.2.3453 Tainted: G W L syzkaller #0 PREEMPT [ 4440.064664][T15659] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4440.064711][T15659] Hardware name: linux,dummy-virt (DT) [ 4440.064753][T15659] Call trace: [ 4440.064787][T15659] show_stack+0x18/0x24 (C) [ 4440.064891][T15659] dump_stack_lvl+0x60/0x80 [ 4440.064963][T15659] dump_stack+0x18/0x24 [ 4440.065029][T15659] should_fail_ex+0x1e0/0x238 [ 4440.065101][T15659] should_fail+0x14/0x40 [ 4440.065169][T15659] should_fail_usercopy+0x1c/0x40 [ 4440.065249][T15659] simple_read_from_buffer+0x5c/0x12c [ 4440.065329][T15659] proc_fail_nth_read+0xb4/0x140 [ 4440.065400][T15659] vfs_read+0xc4/0x31c [ 4440.065477][T15659] ksys_read+0x70/0x110 [ 4440.065552][T15659] __arm64_sys_read+0x18/0x24 [ 4440.065623][T15659] invoke_syscall+0x54/0x10c [ 4440.065694][T15659] el0_svc_common.constprop.0+0x40/0xe0 [ 4440.065767][T15659] do_el0_svc+0x1c/0x34 [ 4440.065838][T15659] el0_svc+0x38/0x1fc [ 4440.065914][T15659] el0t_64_sync_handler+0xa0/0xe4 [ 4440.065986][T15659] el0t_64_sync+0x1a4/0x1a8 [ 4440.233633][T15661] input: syz0 as /devices/virtual/input/input858 [ 4441.756265][T15669] input: syz0 as /devices/virtual/input/input859 [ 4457.025321][T15522] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 4457.178648][T15522] usb 1-1: Using ep0 maxpacket: 32 [ 4457.198880][T15522] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 4457.209746][T15522] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 4457.210057][T15522] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 4457.210238][T15522] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4457.251222][T15522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4457.251468][T15522] usb 1-1: Product: syz [ 4457.253053][T15522] usb 1-1: Manufacturer: syz [ 4457.253518][T15522] usb 1-1: SerialNumber: syz [ 4457.276371][T15683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4457.278522][T15683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4458.043366][T15683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4458.044593][T15683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4458.145665][T15522] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 4458.179676][T15522] usb 1-1: USB disconnect, device number 70 [ 4458.761457][T15694] input: syz0 as /devices/virtual/input/input861 [ 4462.195704][T15461] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 4462.355602][T15461] usb 1-1: Using ep0 maxpacket: 8 [ 4462.362695][T15461] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 4462.377182][T15461] usb 1-1: config 1 interface 0 altsetting 236 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 4462.379138][T15461] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4462.401748][T15461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4462.403452][T15461] usb 1-1: Product: syz [ 4462.406084][T15461] usb 1-1: Manufacturer: syz [ 4462.408554][T15461] usb 1-1: SerialNumber: syz [ 4462.719612][T15461] usbhid 1-1:1.0: can't add hid device: -71 [ 4462.721200][T15461] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4462.753726][T15461] usb 1-1: USB disconnect, device number 71 [ 4464.981714][T15709] input: syz1 as /devices/virtual/input/input862 [ 4466.035906][T15710] FAULT_INJECTION: forcing a failure. [ 4466.035906][T15710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4466.036347][T15710] CPU: 1 UID: 0 PID: 15710 Comm: syz.2.3466 Tainted: G W L syzkaller #0 PREEMPT [ 4466.036485][T15710] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4466.036527][T15710] Hardware name: linux,dummy-virt (DT) [ 4466.036570][T15710] Call trace: [ 4466.036606][T15710] show_stack+0x18/0x24 (C) [ 4466.036724][T15710] dump_stack_lvl+0x60/0x80 [ 4466.036804][T15710] dump_stack+0x18/0x24 [ 4466.036880][T15710] should_fail_ex+0x1e0/0x238 [ 4466.036959][T15710] should_fail+0x14/0x40 [ 4466.037033][T15710] should_fail_usercopy+0x1c/0x40 [ 4466.037108][T15710] restore_altstack+0x34/0x128 [ 4466.037196][T15710] __arm64_sys_rt_sigreturn+0xd4/0x224 [ 4466.037274][T15710] invoke_syscall+0x54/0x10c [ 4466.037350][T15710] el0_svc_common.constprop.0+0x40/0xe0 [ 4466.037425][T15710] do_el0_svc+0x1c/0x34 [ 4466.037498][T15710] el0_svc+0x38/0x1fc [ 4466.037582][T15710] el0t_64_sync_handler+0xa0/0xe4 [ 4466.037659][T15710] el0t_64_sync+0x1a4/0x1a8 [ 4466.601606][T15712] input: syz0 as /devices/virtual/input/input863 [ 4473.324166][T15716] FAULT_INJECTION: forcing a failure. [ 4473.324166][T15716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4473.327160][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.0.3467 Tainted: G W L syzkaller #0 PREEMPT [ 4473.327351][T15716] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4473.327391][T15716] Hardware name: linux,dummy-virt (DT) [ 4473.327432][T15716] Call trace: [ 4473.327465][T15716] show_stack+0x18/0x24 (C) [ 4473.327574][T15716] dump_stack_lvl+0x60/0x80 [ 4473.327646][T15716] dump_stack+0x18/0x24 [ 4473.327713][T15716] should_fail_ex+0x1e0/0x238 [ 4473.327866][T15716] should_fail+0x14/0x40 [ 4473.327971][T15716] should_fail_usercopy+0x1c/0x40 [ 4473.328097][T15716] simple_read_from_buffer+0x5c/0x12c [ 4473.328185][T15716] proc_fail_nth_read+0xb4/0x140 [ 4473.328253][T15716] vfs_read+0xc4/0x31c [ 4473.328339][T15716] ksys_read+0x70/0x110 [ 4473.328415][T15716] __arm64_sys_read+0x18/0x24 [ 4473.328487][T15716] invoke_syscall+0x54/0x10c [ 4473.328555][T15716] el0_svc_common.constprop.0+0x40/0xe0 [ 4473.328621][T15716] do_el0_svc+0x1c/0x34 [ 4473.328682][T15716] el0_svc+0x38/0x1fc [ 4473.328751][T15716] el0t_64_sync_handler+0xa0/0xe4 [ 4473.328823][T15716] el0t_64_sync+0x1a4/0x1a8 [ 4473.627667][T15722] input: syz0 as /devices/virtual/input/input864 [ 4479.436014][T15725] input: syz0 as /devices/virtual/input/input865 [ 4480.821768][T15733] input: syz0 as /devices/virtual/input/input866 [ 4481.916471][T15734] FAULT_INJECTION: forcing a failure. [ 4481.916471][T15734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4481.916869][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.2.3472 Tainted: G W L syzkaller #0 PREEMPT [ 4481.916996][T15734] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4481.917036][T15734] Hardware name: linux,dummy-virt (DT) [ 4481.917075][T15734] Call trace: [ 4481.917109][T15734] show_stack+0x18/0x24 (C) [ 4481.917219][T15734] dump_stack_lvl+0x60/0x80 [ 4481.917301][T15734] dump_stack+0x18/0x24 [ 4481.917374][T15734] should_fail_ex+0x1e0/0x238 [ 4481.917451][T15734] should_fail+0x14/0x40 [ 4481.917516][T15734] should_fail_usercopy+0x1c/0x40 [ 4481.917584][T15734] restore_altstack+0x34/0x128 [ 4481.917656][T15734] __arm64_sys_rt_sigreturn+0xd4/0x224 [ 4481.917724][T15734] invoke_syscall+0x54/0x10c [ 4481.917806][T15734] el0_svc_common.constprop.0+0x40/0xe0 [ 4481.917876][T15734] do_el0_svc+0x1c/0x34 [ 4481.917942][T15734] el0_svc+0x38/0x1fc [ 4481.918024][T15734] el0t_64_sync_handler+0xa0/0xe4 [ 4481.918102][T15734] el0t_64_sync+0x1a4/0x1a8 [ 4491.188092][T15749] input: syz0 as /devices/virtual/input/input867 [ 4496.047112][T15773] input: syz0 as /devices/virtual/input/input868 [ 4497.855884][T15777] input: syz0 as /devices/virtual/input/input869 [ 4504.825906][T15787] input: syz0 as /devices/virtual/input/input870 [ 4505.698519][T15790] input: syz0 as /devices/virtual/input/input871 [ 4512.697824][T15802] FAULT_INJECTION: forcing a failure. [ 4512.697824][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4512.698105][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.2.3488 Tainted: G W L syzkaller #0 PREEMPT [ 4512.698175][T15802] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4512.698197][T15802] Hardware name: linux,dummy-virt (DT) [ 4512.698219][T15802] Call trace: [ 4512.698236][T15802] show_stack+0x18/0x24 (C) [ 4512.698300][T15802] dump_stack_lvl+0x60/0x80 [ 4512.698340][T15802] dump_stack+0x18/0x24 [ 4512.698377][T15802] should_fail_ex+0x1e0/0x238 [ 4512.698419][T15802] should_fail+0x14/0x40 [ 4512.698455][T15802] should_fail_usercopy+0x1c/0x40 [ 4512.698492][T15802] simple_read_from_buffer+0x5c/0x12c [ 4512.698769][T15802] proc_fail_nth_read+0xb4/0x140 [ 4512.698897][T15802] vfs_read+0xc4/0x31c [ 4512.699088][T15802] ksys_read+0x70/0x110 [ 4512.699153][T15802] __arm64_sys_read+0x18/0x24 [ 4512.699271][T15802] invoke_syscall+0x54/0x10c [ 4512.699366][T15802] el0_svc_common.constprop.0+0x40/0xe0 [ 4512.699456][T15802] do_el0_svc+0x1c/0x34 [ 4512.699562][T15802] el0_svc+0x38/0x1fc [ 4512.699659][T15802] el0t_64_sync_handler+0xa0/0xe4 [ 4512.699723][T15802] el0t_64_sync+0x1a4/0x1a8 [ 4513.746879][T15826] input: syz0 as /devices/virtual/input/input873 [ 4514.214547][T15810] input: syz0 as /devices/virtual/input/input872 [ 4514.741772][T15827] FAULT_INJECTION: forcing a failure. [ 4514.741772][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 4514.742479][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.2.3494 Tainted: G W L syzkaller #0 PREEMPT [ 4514.742607][T15827] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4514.742664][T15827] Hardware name: linux,dummy-virt (DT) [ 4514.742715][T15827] Call trace: [ 4514.742750][T15827] show_stack+0x18/0x24 (C) [ 4514.742943][T15827] dump_stack_lvl+0x60/0x80 [ 4514.743017][T15827] dump_stack+0x18/0x24 [ 4514.743103][T15827] should_fail_ex+0x1e0/0x238 [ 4514.743193][T15827] should_failslab+0x54/0x80 [ 4514.743270][T15827] __kmalloc_noprof+0xac/0x520 [ 4514.743348][T15827] tomoyo_encode2+0x7c/0x13c [ 4514.743428][T15827] tomoyo_encode+0x28/0x40 [ 4514.743498][T15827] tomoyo_realpath_from_path+0x100/0x1d4 [ 4514.743582][T15827] tomoyo_path_number_perm+0xe0/0x21c [ 4514.743656][T15827] tomoyo_file_ioctl+0x1c/0x30 [ 4514.743731][T15827] security_file_ioctl+0x8c/0x19c [ 4514.743807][T15827] __arm64_sys_ioctl+0x44/0x100 [ 4514.743904][T15827] invoke_syscall+0x54/0x10c [ 4514.743986][T15827] el0_svc_common.constprop.0+0x40/0xe0 [ 4514.744079][T15827] do_el0_svc+0x1c/0x34 [ 4514.744170][T15827] el0_svc+0x38/0x1fc [ 4514.744269][T15827] el0t_64_sync_handler+0xa0/0xe4 [ 4514.744403][T15827] el0t_64_sync+0x1a4/0x1a8 [ 4514.771493][T15827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4524.160918][T15838] netlink: 'syz.2.3496': attribute type 11 has an invalid length. [ 4524.194004][T15838] input: syz0 as /devices/virtual/input/input874 [ 4524.917677][T15841] input: syz0 as /devices/virtual/input/input875 [ 4532.448620][T14292] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 4532.575678][T15855] ======================================================= [ 4532.575678][T15855] WARNING: The mand mount option has been deprecated and [ 4532.575678][T15855] and is ignored by this kernel. Remove the mand [ 4532.575678][T15855] option from the mount to silence this warning. [ 4532.575678][T15855] ======================================================= [ 4532.656961][T14292] usb 1-1: not running at top speed; connect to a high speed hub [ 4532.657364][T14292] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 4532.672467][T14292] usb 1-1: config 1 interface 0 altsetting 88 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 4532.672842][T14292] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4532.687386][T14292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4532.687671][T14292] usb 1-1: Product: syz [ 4532.687862][T14292] usb 1-1: Manufacturer: syz [ 4532.687917][T14292] usb 1-1: SerialNumber: syz [ 4532.713111][T15849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4534.805895][T15876] input: syz0 as /devices/virtual/input/input876 [ 4535.027294][T14292] usbhid 1-1:1.0: can't add hid device: -71 [ 4535.028033][T14292] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 4535.050478][T14292] usb 1-1: USB disconnect, device number 72 [ 4535.979798][T15850] udevd[15850]: setting mode of /dev/bus/usb/001/072 to 020664 failed: No such file or directory [ 4535.980743][T15850] udevd[15850]: setting owner of /dev/bus/usb/001/072 to uid=0, gid=0 failed: No such file or directory [ 4536.579860][T15886] FAULT_INJECTION: forcing a failure. [ 4536.579860][T15886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4536.580173][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.0.3507 Tainted: G W L syzkaller #0 PREEMPT [ 4536.580292][T15886] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4536.580327][T15886] Hardware name: linux,dummy-virt (DT) [ 4536.580366][T15886] Call trace: [ 4536.580396][T15886] show_stack+0x18/0x24 (C) [ 4536.580494][T15886] dump_stack_lvl+0x60/0x80 [ 4536.580653][T15886] dump_stack+0x18/0x24 [ 4536.580746][T15886] should_fail_ex+0x1e0/0x238 [ 4536.580828][T15886] should_fail+0x14/0x40 [ 4536.580917][T15886] get_futex_key+0xdc/0x620 [ 4536.580991][T15886] futex_wait_setup+0x54/0x240 [ 4536.581062][T15886] __futex_wait+0xd4/0x180 [ 4536.581142][T15886] futex_wait+0x88/0x110 [ 4536.581258][T15886] do_futex+0x1a0/0x210 [ 4536.581374][T15886] __arm64_sys_futex+0x100/0x1a0 [ 4536.581453][T15886] invoke_syscall+0x54/0x10c [ 4536.581542][T15886] el0_svc_common.constprop.0+0x40/0xe0 [ 4536.581662][T15886] do_el0_svc+0x1c/0x34 [ 4536.581737][T15886] el0_svc+0x38/0x1fc [ 4536.581828][T15886] el0t_64_sync_handler+0xa0/0xe4 [ 4536.581909][T15886] el0t_64_sync+0x1a4/0x1a8 [ 4539.417640][T15894] input: syz0 as /devices/virtual/input/input877 [ 4545.454196][T15899] input: syz0 as /devices/virtual/input/input878 [ 4547.743266][T15911] input: syz0 as /devices/virtual/input/input879 [ 4548.808200][T15912] FAULT_INJECTION: forcing a failure. [ 4548.808200][T15912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4548.815251][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.0.3512 Tainted: G W L syzkaller #0 PREEMPT [ 4548.815429][T15912] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4548.815467][T15912] Hardware name: linux,dummy-virt (DT) [ 4548.815504][T15912] Call trace: [ 4548.815536][T15912] show_stack+0x18/0x24 (C) [ 4548.815640][T15912] dump_stack_lvl+0x60/0x80 [ 4548.815711][T15912] dump_stack+0x18/0x24 [ 4548.815779][T15912] should_fail_ex+0x1e0/0x238 [ 4548.815865][T15912] should_fail+0x14/0x40 [ 4548.815931][T15912] should_fail_usercopy+0x1c/0x40 [ 4548.815998][T15912] setup_rt_frame+0x6f4/0x1120 [ 4548.816071][T15912] arch_do_signal_or_restart+0x220/0x3dc [ 4548.816140][T15912] exit_to_user_mode_loop+0x114/0x19c [ 4548.816213][T15912] el0_svc+0x1f0/0x1fc [ 4548.816313][T15912] el0t_64_sync_handler+0xa0/0xe4 [ 4548.816389][T15912] el0t_64_sync+0x1a4/0x1a8 [ 4552.515574][T15916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4552.526038][T15916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4552.696552][T15919] FAULT_INJECTION: forcing a failure. [ 4552.696552][T15919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4552.698540][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.2.3514 Tainted: G W L syzkaller #0 PREEMPT [ 4552.698697][T15919] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4552.698737][T15919] Hardware name: linux,dummy-virt (DT) [ 4552.698783][T15919] Call trace: [ 4552.698834][T15919] show_stack+0x18/0x24 (C) [ 4552.698928][T15919] dump_stack_lvl+0x60/0x80 [ 4552.698966][T15919] dump_stack+0x18/0x24 [ 4552.699033][T15919] should_fail_ex+0x1e0/0x238 [ 4552.699109][T15919] should_fail_alloc_page+0x60/0x80 [ 4552.699154][T15919] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 4552.699192][T15919] alloc_pages_mpol+0x74/0x1b8 [ 4552.699249][T15919] folio_alloc_mpol_noprof+0x14/0x68 [ 4552.699310][T15919] vma_alloc_folio_noprof+0x80/0xcc [ 4552.699353][T15919] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 4552.699427][T15919] do_anonymous_page+0x2b0/0x9b8 [ 4552.699474][T15919] __handle_mm_fault+0xa5c/0xec0 [ 4552.699531][T15919] handle_mm_fault+0x98/0x338 [ 4552.699597][T15919] do_page_fault+0x23c/0x77c [ 4552.699662][T15919] do_translation_fault+0x5c/0x6c [ 4552.699712][T15919] do_mem_abort+0x40/0x90 [ 4552.699744][T15919] el1_abort+0x44/0x64 [ 4552.699790][T15919] el1h_64_sync_handler+0x50/0xac [ 4552.699829][T15919] el1h_64_sync+0x6c/0x70 [ 4552.699863][T15919] __arch_clear_user+0x10/0xd0 (P) [ 4552.699899][T15919] __arm64_sys_ioctl+0xa8/0x100 [ 4552.699937][T15919] invoke_syscall+0x54/0x10c [ 4552.699971][T15919] el0_svc_common.constprop.0+0x40/0xe0 [ 4552.700008][T15919] do_el0_svc+0x1c/0x34 [ 4552.700041][T15919] el0_svc+0x38/0x1fc [ 4552.700076][T15919] el0t_64_sync_handler+0xa0/0xe4 [ 4552.700113][T15919] el0t_64_sync+0x1a4/0x1a8 [ 4552.787438][T15921] input: syz0 as /devices/virtual/input/input880 [ 4553.857764][T15922] FAULT_INJECTION: forcing a failure. [ 4553.857764][T15922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4553.858121][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.2.3515 Tainted: G W L syzkaller #0 PREEMPT [ 4553.858287][T15922] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4553.858336][T15922] Hardware name: linux,dummy-virt (DT) [ 4553.858377][T15922] Call trace: [ 4553.858448][T15922] show_stack+0x18/0x24 (C) [ 4553.858598][T15922] dump_stack_lvl+0x60/0x80 [ 4553.858689][T15922] dump_stack+0x18/0x24 [ 4553.858762][T15922] should_fail_ex+0x1e0/0x238 [ 4553.858870][T15922] should_fail+0x14/0x40 [ 4553.858961][T15922] should_fail_usercopy+0x1c/0x40 [ 4553.859048][T15922] copy_siginfo_to_user+0x24/0xe0 [ 4553.859163][T15922] setup_rt_frame+0xc54/0x1120 [ 4553.859237][T15922] arch_do_signal_or_restart+0x220/0x3dc [ 4553.859324][T15922] exit_to_user_mode_loop+0x114/0x19c [ 4553.859452][T15922] el0_svc+0x1f0/0x1fc [ 4553.859537][T15922] el0t_64_sync_handler+0xa0/0xe4 [ 4553.859620][T15922] el0t_64_sync+0x1a4/0x1a8 [ 4558.521175][T15933] input: syz0 as /devices/virtual/input/input881 [ 4562.086344][T15949] input: syz0 as /devices/virtual/input/input882 [ 4562.618719][T15951] FAULT_INJECTION: forcing a failure. [ 4562.618719][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 4562.626208][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.0.3524 Tainted: G W L syzkaller #0 PREEMPT [ 4562.626392][T15951] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4562.626434][T15951] Hardware name: linux,dummy-virt (DT) [ 4562.626474][T15951] Call trace: [ 4562.626508][T15951] show_stack+0x18/0x24 (C) [ 4562.626618][T15951] dump_stack_lvl+0x60/0x80 [ 4562.626692][T15951] dump_stack+0x18/0x24 [ 4562.626779][T15951] should_fail_ex+0x1e0/0x238 [ 4562.626905][T15951] should_failslab+0x54/0x80 [ 4562.626975][T15951] __kmalloc_noprof+0xac/0x520 [ 4562.627046][T15951] tomoyo_encode2+0x7c/0x13c [ 4562.627119][T15951] tomoyo_encode+0x28/0x40 [ 4562.627189][T15951] tomoyo_realpath_from_path+0x100/0x1d4 [ 4562.627264][T15951] tomoyo_path_number_perm+0xe0/0x21c [ 4562.627332][T15951] tomoyo_file_ioctl+0x1c/0x30 [ 4562.627406][T15951] security_file_ioctl+0x8c/0x19c [ 4562.627477][T15951] __arm64_sys_ioctl+0x44/0x100 [ 4562.627552][T15951] invoke_syscall+0x54/0x10c [ 4562.627623][T15951] el0_svc_common.constprop.0+0x40/0xe0 [ 4562.627694][T15951] do_el0_svc+0x1c/0x34 [ 4562.627769][T15951] el0_svc+0x38/0x1fc [ 4562.627849][T15951] el0t_64_sync_handler+0xa0/0xe4 [ 4562.627924][T15951] el0t_64_sync+0x1a4/0x1a8 [ 4562.645390][T15951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4563.798254][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4563.809138][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4564.188258][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4564.190312][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4565.285986][T15975] input: syz0 as /devices/virtual/input/input883 [ 4568.775271][T13595] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 4568.945290][T13595] usb 1-1: Using ep0 maxpacket: 16 [ 4568.969348][T13595] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 4568.977154][T13595] usb 1-1: config 1 interface 0 has no altsetting 0 [ 4568.991985][T13595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4568.992245][T13595] usb 1-1: Product: ᐈ [ 4568.992459][T13595] usb 1-1: Manufacturer: ఊ [ 4568.992519][T13595] usb 1-1: SerialNumber: ъ [ 4569.276542][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4569.286642][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4569.831570][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4569.853595][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4571.105835][T15985] input: syz0 as /devices/virtual/input/input884 [ 4574.151825][T13595] usblp0: Disabling reads from problematic bidirectional printer [ 4574.163735][T13595] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 127 proto 1 vid 0x03F0 pid 0x0004 [ 4578.315553][T15991] input: syz0 as /devices/virtual/input/input885 [ 4580.135559][ T5098] usb 1-1: USB disconnect, device number 73 [ 4580.177642][ T5098] usblp0: removed [ 4580.356654][T15995] input: syz0 as /devices/virtual/input/input886 [ 4586.279047][T16006] input: syz0 as /devices/virtual/input/input887 [ 4588.645348][ T5098] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 4588.818560][ T5098] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 4588.829572][ T5098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4588.831707][ T5098] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 4588.832035][ T5098] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 4588.832262][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4592.038050][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4592.039485][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4592.407433][T16035] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 4595.427644][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4595.432840][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4596.382040][T16094] netlink: 'syz.2.3569': attribute type 1 has an invalid length. [ 4596.459696][T16094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4597.106988][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 4597.107525][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 4597.261382][T16114] cgroup: Invalid name [ 4597.977730][T16130] ubi0: attaching mtd0 [ 4598.003224][T16130] ubi0: scanning is finished [ 4598.006621][T16130] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 4598.026443][T16130] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 4599.260850][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3590'. [ 4599.274147][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3590'. [ 4599.364004][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4599.368340][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4602.922207][ T6403] usb 1-1: USB disconnect, device number 74 [ 4606.368787][T16182] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4608.717878][T16228] FAULT_INJECTION: forcing a failure. [ 4608.717878][T16228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4608.720189][T16228] CPU: 1 UID: 0 PID: 16228 Comm: syz.0.3619 Tainted: G W L syzkaller #0 PREEMPT [ 4608.720354][T16228] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4608.720398][T16228] Hardware name: linux,dummy-virt (DT) [ 4608.720441][T16228] Call trace: [ 4608.720473][T16228] show_stack+0x18/0x24 (C) [ 4608.720573][T16228] dump_stack_lvl+0x60/0x80 [ 4608.720645][T16228] dump_stack+0x18/0x24 [ 4608.720716][T16228] should_fail_ex+0x1e0/0x238 [ 4608.720791][T16228] should_fail+0x14/0x40 [ 4608.720867][T16228] should_fail_usercopy+0x1c/0x40 [ 4608.720947][T16228] dma_heap_ioctl+0x1a4/0x390 [ 4608.721032][T16228] __arm64_sys_ioctl+0xa8/0x100 [ 4608.721113][T16228] invoke_syscall+0x54/0x10c [ 4608.721195][T16228] el0_svc_common.constprop.0+0xc0/0xe0 [ 4608.721265][T16228] do_el0_svc+0x1c/0x34 [ 4608.721330][T16228] el0_svc+0x38/0x1fc [ 4608.721406][T16228] el0t_64_sync_handler+0xa0/0xe4 [ 4608.721476][T16228] el0t_64_sync+0x1a4/0x1a8 [ 4609.361266][T16241] FAULT_INJECTION: forcing a failure. [ 4609.361266][T16241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4609.364026][T16241] CPU: 1 UID: 0 PID: 16241 Comm: syz.2.3624 Tainted: G W L syzkaller #0 PREEMPT [ 4609.364186][T16241] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4609.364228][T16241] Hardware name: linux,dummy-virt (DT) [ 4609.364269][T16241] Call trace: [ 4609.364305][T16241] show_stack+0x18/0x24 (C) [ 4609.364414][T16241] dump_stack_lvl+0x60/0x80 [ 4609.364516][T16241] dump_stack+0x18/0x24 [ 4609.364592][T16241] should_fail_ex+0x1e0/0x238 [ 4609.364671][T16241] should_fail_alloc_page+0x60/0x80 [ 4609.364754][T16241] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 4609.364837][T16241] alloc_pages_mpol+0x74/0x1b8 [ 4609.364906][T16241] alloc_frozen_pages_noprof+0x4c/0xd4 [ 4609.364974][T16241] folio_alloc_noprof+0x14/0x68 [ 4609.365039][T16241] filemap_alloc_folio_noprof.part.0+0x138/0x148 [ 4609.365110][T16241] __filemap_get_folio_mpol+0x2ac/0x578 [ 4609.365184][T16241] ioctx_alloc+0x2c0/0x6c0 [ 4609.365264][T16241] __arm64_sys_io_setup+0x5c/0x104 [ 4609.365342][T16241] invoke_syscall+0x54/0x10c [ 4609.365415][T16241] el0_svc_common.constprop.0+0x40/0xe0 [ 4609.365490][T16241] do_el0_svc+0x1c/0x34 [ 4609.365563][T16241] el0_svc+0x38/0x1fc [ 4609.365645][T16241] el0t_64_sync_handler+0xa0/0xe4 [ 4609.365737][T16241] el0t_64_sync+0x1a4/0x1a8 [ 4609.542276][T16245] binder: BC_ACQUIRE_RESULT not supported [ 4609.542490][T16245] binder: 16244:16245 ioctl c0306201 20000300 returned -22 [ 4609.759820][T16251] aoe: unknown AoE command type 0x0a [ 4610.003113][T16256] input: syz0 as /devices/virtual/input/input889 [ 4610.130072][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4610.133508][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4610.639728][T16267] FAULT_INJECTION: forcing a failure. [ 4610.639728][T16267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4610.641843][T16267] CPU: 1 UID: 0 PID: 16267 Comm: syz.2.3635 Tainted: G W L syzkaller #0 PREEMPT [ 4610.642000][T16267] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4610.642040][T16267] Hardware name: linux,dummy-virt (DT) [ 4610.642080][T16267] Call trace: [ 4610.642113][T16267] show_stack+0x18/0x24 (C) [ 4610.642257][T16267] dump_stack_lvl+0x60/0x80 [ 4610.642391][T16267] dump_stack+0x18/0x24 [ 4610.642463][T16267] should_fail_ex+0x1e0/0x238 [ 4610.642550][T16267] should_fail+0x14/0x40 [ 4610.642625][T16267] get_futex_key+0xdc/0x620 [ 4610.642711][T16267] futex_wake+0x68/0x240 [ 4610.642789][T16267] do_futex+0x178/0x210 [ 4610.642921][T16267] __arm64_sys_futex+0x100/0x1a0 [ 4610.642998][T16267] invoke_syscall+0x54/0x10c [ 4610.643076][T16267] el0_svc_common.constprop.0+0x40/0xe0 [ 4610.643155][T16267] do_el0_svc+0x1c/0x34 [ 4610.643230][T16267] el0_svc+0x38/0x1fc [ 4610.643315][T16267] el0t_64_sync_handler+0xa0/0xe4 [ 4610.643398][T16267] el0t_64_sync+0x1a4/0x1a8 [ 4611.186954][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4611.193094][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4611.467089][T16289] syz_tun: entered allmulticast mode [ 4611.498392][T16289] syz_tun: left allmulticast mode [ 4611.754169][T16301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3650'. [ 4612.512939][T16311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 4614.846798][T14416] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 4614.999055][T16348] FAULT_INJECTION: forcing a failure. [ 4614.999055][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 4615.000720][T16348] CPU: 1 UID: 0 PID: 16348 Comm: syz.2.3672 Tainted: G W L syzkaller #0 PREEMPT [ 4615.000814][T16348] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4615.000835][T16348] Hardware name: linux,dummy-virt (DT) [ 4615.000856][T16348] Call trace: [ 4615.000875][T16348] show_stack+0x18/0x24 (C) [ 4615.000935][T16348] dump_stack_lvl+0x60/0x80 [ 4615.000973][T16348] dump_stack+0x18/0x24 [ 4615.001007][T16348] should_fail_ex+0x1e0/0x238 [ 4615.001045][T16348] should_failslab+0x54/0x80 [ 4615.001080][T16348] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4615.001119][T16348] __d_alloc+0x3c/0x280 [ 4615.001158][T16348] d_make_root+0x24/0x68 [ 4615.001190][T16348] mqueue_fill_super+0x6c/0x90 [ 4615.001238][T16348] get_tree_nodev+0x70/0xb8 [ 4615.001277][T16348] mqueue_get_tree+0x44/0x50 [ 4615.001314][T16348] vfs_get_tree+0x28/0x100 [ 4615.001346][T16348] fc_mount_longterm+0x18/0xa0 [ 4615.001384][T16348] mq_init_ns+0xb8/0x210 [ 4615.001416][T16348] copy_ipcs+0x170/0x300 [ 4615.001448][T16348] create_new_namespaces+0xa8/0x370 [ 4615.001488][T16348] unshare_nsproxy_namespaces+0x70/0xbc [ 4615.001526][T16348] ksys_unshare+0x1cc/0x3b8 [ 4615.001562][T16348] __arm64_sys_unshare+0x14/0x24 [ 4615.001597][T16348] invoke_syscall+0x54/0x10c [ 4615.001631][T16348] el0_svc_common.constprop.0+0x40/0xe0 [ 4615.001666][T16348] do_el0_svc+0x1c/0x34 [ 4615.001699][T16348] el0_svc+0x38/0x1fc [ 4615.001742][T16348] el0t_64_sync_handler+0xa0/0xe4 [ 4615.001779][T16348] el0t_64_sync+0x1a4/0x1a8 [ 4615.029612][T14416] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 4615.038683][T14416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4615.051412][T14416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4615.051666][T14416] usb 1-1: Product: syz [ 4615.051766][T14416] usb 1-1: Manufacturer: syz [ 4615.051824][T14416] usb 1-1: SerialNumber: syz [ 4615.091520][T14416] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 4615.092834][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 87 [ 4615.093114][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 4615.112649][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 4615.113212][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 4615.113426][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 4615.113671][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 4615.113887][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 85 [ 4615.114079][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 4615.129000][T14416] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 4615.132530][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 4615.138404][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 4615.138767][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 4615.138961][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 4615.139049][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 86 [ 4615.139165][T14416] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 4615.148427][T14416] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 4615.311412][T14416] usb 1-1: USB disconnect, device number 75 [ 4615.349259][T14416] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 4615.377521][T14416] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 4615.379157][T14416] keyspan 1-1:1.0: device disconnected [ 4616.085830][T16367] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 4620.115620][T16420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4620.117499][T16420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4621.750039][T16444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4621.751010][T16444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4625.192036][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4625.197699][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4625.483017][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'. [ 4625.483467][T16486] netlink: 'syz.2.3715': attribute type 7 has an invalid length. [ 4625.487686][T16486] netlink: 'syz.2.3715': attribute type 8 has an invalid length. [ 4625.487975][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'. [ 4625.509901][T16486] syz_tun: entered promiscuous mode [ 4625.528417][T16486] syz_tun: left promiscuous mode [ 4625.735174][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 4626.316425][T14416] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 4626.466117][T14416] usb 1-1: Using ep0 maxpacket: 32 [ 4626.472606][T14416] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 4626.484361][T14416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4626.494408][T14416] usb 1-1: config 0 descriptor?? [ 4626.786995][T14416] usb 1-1: USB disconnect, device number 76 [ 4626.971303][T16524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3730'. [ 4626.971816][T16524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3730'. [ 4627.699042][T16547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3741'. [ 4627.793465][T16551] nbd: must specify a size in bytes for the device [ 4628.146039][ T3448] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 4628.313026][ T3448] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.03 [ 4628.341308][ T3448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 4628.341692][ T3448] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 4628.437544][ T3448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4628.437911][ T3448] usb 1-1: Product: syz [ 4628.438114][ T3448] usb 1-1: Manufacturer: syz [ 4628.438215][ T3448] usb 1-1: SerialNumber: syz [ 4628.758374][ T3448] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 4628.991308][T14416] usb 1-1: USB disconnect, device number 77 [ 4629.012359][T14416] usblp0: removed [ 4629.314244][T16561] FAULT_INJECTION: forcing a failure. [ 4629.314244][T16561] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4629.320768][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.0.3747 Tainted: G W L syzkaller #0 PREEMPT [ 4629.320922][T16561] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4629.320964][T16561] Hardware name: linux,dummy-virt (DT) [ 4629.321004][T16561] Call trace: [ 4629.321039][T16561] show_stack+0x18/0x24 (C) [ 4629.321156][T16561] dump_stack_lvl+0x60/0x80 [ 4629.321258][T16561] dump_stack+0x18/0x24 [ 4629.321340][T16561] should_fail_ex+0x1e0/0x238 [ 4629.321412][T16561] should_fail+0x14/0x40 [ 4629.321480][T16561] get_futex_key+0xdc/0x620 [ 4629.321550][T16561] futex_wake+0x68/0x240 [ 4629.321622][T16561] do_futex+0x178/0x210 [ 4629.321690][T16561] __arm64_sys_futex+0x100/0x1a0 [ 4629.321773][T16561] invoke_syscall+0x54/0x10c [ 4629.321852][T16561] el0_svc_common.constprop.0+0x40/0xe0 [ 4629.321927][T16561] do_el0_svc+0x1c/0x34 [ 4629.321994][T16561] el0_svc+0x38/0x1fc [ 4629.322075][T16561] el0t_64_sync_handler+0xa0/0xe4 [ 4629.322154][T16561] el0t_64_sync+0x1a4/0x1a8 [ 4631.845667][T16581] FAULT_INJECTION: forcing a failure. [ 4631.845667][T16581] name failslab, interval 1, probability 0, space 0, times 0 [ 4631.845887][T16581] CPU: 1 UID: 0 PID: 16581 Comm: syz.2.3756 Tainted: G W L syzkaller #0 PREEMPT [ 4631.845958][T16581] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4631.845980][T16581] Hardware name: linux,dummy-virt (DT) [ 4631.846008][T16581] Call trace: [ 4631.846025][T16581] show_stack+0x18/0x24 (C) [ 4631.846085][T16581] dump_stack_lvl+0x60/0x80 [ 4631.846123][T16581] dump_stack+0x18/0x24 [ 4631.846206][T16581] should_fail_ex+0x1e0/0x238 [ 4631.846308][T16581] should_failslab+0x54/0x80 [ 4631.846383][T16581] __kvmalloc_node_noprof+0xc8/0x65c [ 4631.846481][T16581] bpf_compute_scc+0x8c/0x340 [ 4631.846580][T16581] bpf_check+0x20f4/0x2a60 [ 4631.846681][T16581] bpf_prog_load+0x778/0xbec [ 4631.846739][T16581] __sys_bpf+0x8e4/0x1d1c [ 4631.846856][T16581] __arm64_sys_bpf+0x2c/0x40 [ 4631.846920][T16581] invoke_syscall+0x54/0x10c [ 4631.846986][T16581] el0_svc_common.constprop.0+0x40/0xe0 [ 4631.847037][T16581] do_el0_svc+0x1c/0x34 [ 4631.847093][T16581] el0_svc+0x38/0x1fc [ 4631.847188][T16581] el0t_64_sync_handler+0xa0/0xe4 [ 4631.847263][T16581] el0t_64_sync+0x1a4/0x1a8 [ 4634.566745][T16601] binder: 16600:16601 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4634.570546][T16601] binder: 16601 RLIMIT_NICE not set [ 4634.571602][T16601] binder: 16600:16601 ioctl c0306201 20000040 returned -14 [ 4634.581456][T16601] binder: 16600:16601 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch 0000000000000000 != 000000000000756d [ 4634.583563][T16601] binder: 16600:16601 ioctl c0306201 20000640 returned -22 [ 4639.416121][ T6403] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 4639.571982][ T6403] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 4639.582020][ T6403] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 4639.582375][ T6403] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 4639.582723][ T6403] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 4639.582947][ T6403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 4639.583061][ T6403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 4639.603138][ T6403] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 4639.603396][ T6403] usb 1-1: Product: syz [ 4639.603631][ T6403] usb 1-1: Manufacturer: syz [ 4639.637632][ T6403] cdc_wdm 1-1:1.0: skipping garbage [ 4639.638001][ T6403] cdc_wdm 1-1:1.0: skipping garbage [ 4639.656209][ T6403] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 4639.861089][ T6403] usb 1-1: USB disconnect, device number 78 [ 4640.075943][T16654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4640.077614][T16654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4640.376587][ T6403] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 4640.525711][ T6403] usb 1-1: Using ep0 maxpacket: 16 [ 4640.531789][ T6403] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 4640.533785][ T6403] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 4640.541882][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.551097][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.561536][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.572298][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.581678][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.590305][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.597084][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.609329][ T6403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4640.619132][ T6403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 4640.619492][ T6403] usb 1-1: SerialNumber: syz [ 4640.630229][ T6403] usb 1-1: config 0 descriptor?? [ 4640.660566][ T6403] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 4640.873352][T16655] input: syz0 as /devices/virtual/input/input891 [ 4640.965741][ T6403] usb 1-1: USB disconnect, device number 79 [ 4642.428670][T16664] zram0: detected capacity change from 0 to 65536 [ 4642.674030][T16664] ftl_cs: FTL header not found. [ 4642.747666][T16664] block2mtd: mtd2: [/dev/zram0] erase_size = 64KiB [65536] [ 4646.245423][ T6403] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 4646.397854][ T6403] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 4646.410072][ T6403] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 4646.410351][ T6403] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4646.410554][ T6403] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 4646.410781][ T6403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4646.432609][ T6403] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 4646.432912][ T6403] usb 1-1: Product: syz [ 4646.433137][ T6403] usb 1-1: Manufacturer: syz [ 4646.472003][ T6403] cdc_wdm 1-1:1.0: skipping garbage [ 4646.472324][ T6403] cdc_wdm 1-1:1.0: skipping garbage [ 4646.485933][ T6403] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 4648.200152][ T5098] usb 1-1: USB disconnect, device number 80 [ 4649.125491][T14416] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 4649.275645][T14416] usb 1-1: Using ep0 maxpacket: 8 [ 4649.278875][T14416] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 4649.287337][T14416] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 4649.287770][T14416] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 4649.287978][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 4649.288074][T14416] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4649.288157][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 4649.288238][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 4649.288322][T14416] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 4649.288407][T14416] usb 1-1: config 168 interface 0 has no altsetting 0 [ 4649.313937][T14416] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 4649.314306][T14416] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 4649.315293][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 4649.315384][T14416] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4649.315463][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 4649.315562][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 4649.315722][T14416] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 4649.315817][T14416] usb 1-1: config 168 interface 0 has no altsetting 0 [ 4649.341774][T14416] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 4649.342158][T14416] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 4649.342445][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 4649.342536][T14416] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4649.342613][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 4649.342692][T14416] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 4649.342782][T14416] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 4649.342927][T14416] usb 1-1: config 168 interface 0 has no altsetting 0 [ 4649.379555][T14416] usb 1-1: string descriptor 0 read error: -22 [ 4649.380225][T14416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4649.420045][T14416] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 4649.615770][ T6403] usb 1-1: USB disconnect, device number 81 [ 4650.539814][T16468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4650.654357][T16468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4650.772608][T16468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4650.884255][T16468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4651.669013][T16468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4651.687796][T16468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4651.719569][T16468] bond0 (unregistering): Released all slaves [ 4651.728242][T16468] bond1 (unregistering): Released all slaves [ 4651.892535][T16468] hsr_slave_0: left promiscuous mode [ 4651.897525][T16468] hsr_slave_1: left promiscuous mode [ 4651.910013][T16468] veth1_macvtap: left promiscuous mode [ 4651.910415][T16468] veth0_macvtap: left promiscuous mode [ 4651.910837][T16468] veth1_vlan: left promiscuous mode [ 4651.911098][T16468] veth0_vlan: left promiscuous mode [ 4653.939556][T16706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4653.950878][T16706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4654.818469][T16706] hsr_slave_0: entered promiscuous mode [ 4654.820885][T16706] hsr_slave_1: entered promiscuous mode [ 4654.823530][T16706] debugfs: 'hsr0' already exists in 'hsr' [ 4654.823847][T16706] Cannot create hsr debugfs directory [ 4655.005762][T16697] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4655.964038][T16706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4656.030895][T16706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4656.039352][T16706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4656.080245][T16706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4656.106917][T16706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4656.127198][T16706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4656.134311][T16706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4656.162035][T16706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4656.463587][T16768] input: syz0 as /devices/virtual/input/input892 [ 4657.548076][T16706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4661.290510][T16706] veth0_vlan: entered promiscuous mode [ 4661.312149][T16706] veth1_vlan: entered promiscuous mode [ 4661.393989][T16706] veth0_macvtap: entered promiscuous mode [ 4661.408769][T16706] veth1_macvtap: entered promiscuous mode [ 4661.647251][T16468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4661.649102][T16468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4661.653614][T16468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4661.654077][T16468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4661.985531][T16810] ------------[ cut here ]------------ [ 4661.989167][T16810] WARNING: ./include/linux/skbuff.h:3243 at tcf_skbmod_act+0x4b0/0x4e0, CPU#1: syz.2.3812/16810 [ 4661.993769][T16810] Modules linked in: [ 4661.995749][T16810] CPU: 1 UID: 0 PID: 16810 Comm: syz.2.3812 Tainted: G W L syzkaller #0 PREEMPT [ 4661.996505][T16810] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 4661.996706][T16810] Hardware name: linux,dummy-virt (DT) [ 4661.997138][T16810] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 4661.997480][T16810] pc : tcf_skbmod_act+0x4b0/0x4e0 [ 4661.997708][T16810] lr : tcf_action_exec+0xb0/0x1d4 [ 4661.997956][T16810] sp : ffff8000849ab850 [ 4661.998155][T16810] x29: ffff8000849ab850 x28: f3f0000030636c08 x27: f3f0000030636c00 [ 4661.998674][T16810] x26: 0000000000000001 x25: 0000000020000000 x24: 0000000010000000 [ 4661.999130][T16810] x23: 0000000000000000 x22: 0000000000000010 x21: fbf0000006c92f00 [ 4661.999679][T16810] x20: fcf0000030636400 x19: fcf00000526eb700 x18: 0000000000000000 [ 4662.000129][T16810] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000304 [ 4662.000568][T16810] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 4662.000900][T16810] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 4662.001265][T16810] x8 : ffff8000849abac8 x7 : 0000000000000000 x6 : fff07ffffcd20000 [ 4662.001593][T16810] x5 : 0000000000000000 x4 : 0000000000000001 x3 : f2f000005a2cd540 [ 4662.001919][T16810] x2 : ffffc1ffbf7c5710 x1 : 000000000000ffff x0 : 000000000000ffff [ 4662.002375][T16810] Call trace: [ 4662.002751][T16810] tcf_skbmod_act+0x4b0/0x4e0 (P) [ 4662.003257][T16810] tcf_action_exec+0xb0/0x1d4 [ 4662.003481][T16810] basic_classify+0x80/0xc4 [ 4662.003668][T16810] tcf_classify+0x1dc/0x410 [ 4662.003873][T16810] tc_run+0x108/0x1e0 [ 4662.004077][T16810] __netif_receive_skb_core.constprop.0+0x4d8/0xc40 [ 4662.004377][T16810] __netif_receive_skb_one_core+0x40/0x8c [ 4662.004779][T16810] __netif_receive_skb+0x18/0x60 [ 4662.005016][T16810] netif_receive_skb+0x3c/0xd8 [ 4662.005384][T16810] tun_get_user+0xbbc/0xf70 [ 4662.005617][T16810] tun_chr_write_iter+0x5c/0xf0 [ 4662.005837][T16810] vfs_write+0x244/0x36c [ 4662.006102][T16810] ksys_write+0x70/0x108 [ 4662.006344][T16810] __arm64_sys_write+0x18/0x24 [ 4662.006584][T16810] invoke_syscall+0x54/0x10c [ 4662.006794][T16810] el0_svc_common.constprop.0+0x40/0xe0 [ 4662.007083][T16810] do_el0_svc+0x1c/0x34 [ 4662.007357][T16810] el0_svc+0x38/0x1fc [ 4662.007581][T16810] el0t_64_sync_handler+0xa0/0xe4 [ 4662.007791][T16810] el0t_64_sync+0x1a4/0x1a8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4662.008386][T16810] ---[ end trace 0000000000000000 ]--- [ 4662.466254][T11359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4662.612903][T11359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4662.766689][T11359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4662.852409][T11359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4663.716497][T11359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4663.756419][T11359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4663.790486][T11359] bond0 (unregistering): Released all slaves [ 4663.928963][T11359] hsr_slave_0: left promiscuous mode [ 4663.932411][T11359] hsr_slave_1: left promiscuous mode [ 4663.971189][T11359] veth1_macvtap: left promiscuous mode [ 4663.971525][T11359] veth0_macvtap: left promiscuous mode [ 4663.971958][T11359] veth1_vlan: left promiscuous mode [ 4663.972238][T11359] veth0_vlan: left promiscuous mode [ 4665.355137][T11359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4665.467234][T11359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4665.585812][T11359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4665.609154][ T3223] 8021q: adding VLAN 0 to HW filter on device eth1 [ 4665.707903][T11359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4666.317608][T11359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4666.340771][T11359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4666.380138][T11359] bond0 (unregistering): Released all slaves [ 4666.603658][T11359] hsr_slave_0: left promiscuous mode [ 4666.611099][T11359] hsr_slave_1: left promiscuous mode [ 4666.630951][T11359] veth1_macvtap: left promiscuous mode [ 4666.631355][T11359] veth0_macvtap: left promiscuous mode [ 4666.631894][T11359] veth1_vlan: left promiscuous mode [ 4666.632163][T11359] veth0_vlan: left promiscuous mode [ 4667.378871][ T3223] 8021q: adding VLAN 0 to HW filter on device eth2 [ 4668.106273][ T3223] 8021q: adding VLAN 0 to HW filter on device eth4 [ 4668.808154][ T3223] 8021q: adding VLAN 0 to HW filter on device eth3 [ 4669.575980][ T3223] 8021q: adding VLAN 0 to HW filter on device eth5 [ 4670.304367][ T3223] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4671.077798][ T3223] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4671.752609][ T3223] 8021q: adding VLAN 0 to HW filter on device eth8