last executing test programs: 6.650615694s ago: executing program 0 (id=1342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x700, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x9, 0xab, 0xffff0001}]}}}}}}}}, 0x0) 6.650101727s ago: executing program 0 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 3.739473353s ago: executing program 0 (id=1357): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$bind(&(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000280), 0x20008, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r3 = syz_open_dev$video4linux(&(0x7f0000000480), 0x0, 0x40000) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x190) 3.609670493s ago: executing program 0 (id=1364): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7006"], 0x8) 1.610398352s ago: executing program 3 (id=1383): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@lba=0xffffffff, 0x1, 0x0, 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x82) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2b00ed, &(0x7f0000000200)={[{@noswap}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@lba=0xffffffff, 0x1, 0x0, 0x0}) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x82) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2b00ed, &(0x7f0000000200)={[{@noswap}]}) (async) 1.610195288s ago: executing program 3 (id=1384): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @time={0xfc, 0x9}, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @tick=0x52c04fc2, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) 1.520629037s ago: executing program 3 (id=1385): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107526, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) (fail_nth: 8) 1.520514358s ago: executing program 3 (id=1386): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x41) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 1.439889514s ago: executing program 3 (id=1387): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a01000019"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 558.608539ms ago: executing program 0 (id=1388): syz_open_dev$sndmidi(0x0, 0x7fffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x50, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfbf}}, 0x600, 0x8b1, {}, @val={0x1, 0x1, [{0x30, 0x1}]}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 551.765902ms ago: executing program 0 (id=1391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000040), &(0x7f0000002100)=""/4096}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000100), 0x0}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f00000003c0)) 490.373256ms ago: executing program 1 (id=1392): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x4000, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x28) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x4002f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x5, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) 490.188006ms ago: executing program 1 (id=1393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) 428.960948ms ago: executing program 2 (id=1395): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 407.752599ms ago: executing program 2 (id=1396): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x1000000, 0x14}, 0x2400c046) 401.203947ms ago: executing program 1 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 340.420899ms ago: executing program 2 (id=1398): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x20, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2ec, 0x13, 0x300, 0x70bd2c, 0x25dfdbff, {0x28, 0x81, 0x1, 0xb0, {0x4e24, 0x4e21, [0x70e, 0x5d7fa053, 0x33d1, 0x35], [0x9, 0xd, 0xd], r6, [0x5, 0xfffff800]}, 0x9000, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0x77, 0x1, "33f989085faffa232908d8598d4f6ec548f114ec59696afb86cc202fd9653b277974cf71daa20580b12460bfc10b9e659d82fe98cc65fdb536d756056777dd308f6ee8be90b58b09b2c5ba4e17450f881f60e34ca5a74956380f5ec612991150eb4e19f913afc4783db1a9e8511249db618832"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "56bfd09b8cc1413b77e14adac0105a94b1b7fb01b9440cbba425d047d47589b0964339478600e98ce56b0520dbe7decb288fd131165b16e91d9658fce79f14c2852a955e315a0906635b821fa4a5461a0bf32742fd9536112a8c3f14a4b9c13a20b91969fc51466816539fa47dc97fd352e74e9a43ceb63cfb50fb339d396fcaa6b02c9b2c7444ff9155a8b043c72767de314a44c22857afc31cb589cf8e4d5d07c781eca585f6f5b336796137c7fd271c9cf1012c9e73ca99a5d5e8969b93c996446316f6db9d2dfa659d07e1524f3dabee8d8458eb34aab5352bb6808b8fc0730c329b1f1a"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "4f5854dbb5624a729eedad774f5a6ef1c99ff21b332e08718f2f047c521ae5e5be19695e8b0c7aca7f99a857e438eac092f6bd8cbfb02f26ba66007eb7b20a36e5c228206681f80e8df261df6e078dff7ce2ece427d58b11cd37df30ac25f47358403d5576f9a7db82ee4766dd31a5336c7ad122a859342c468a92a0c3a686b2dcf9b404943908b44b60c241ce36d4e69693a851edb35c9b8752c4e0d6afe8df9906136b793cce04578c9c23"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "67a1231cb8541ba1d8a797a16645d84676f2ff07d6148ac7c3d28049f4784992c6841902cac38ce10ad679898d1d26a66308a49bc9e310625becb9efa962b6f96ac371a57895e408e557d3bd0e8543cff9540964201ef48885f8da61592085b4947c552a31bb4c40f22e2873ba2eb3d43e57b9b62ca03ef52cbab32a70ea4c36f799"}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000044}, 0x10) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000002c0)={0x200000, 0x1000}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) syslog(0xa, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async, rerun: 64) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x12, 0x80, 0x6, 0x2}, 0x10}}, 0x800) (async, rerun: 64) getsockname$tipc(r11, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10) (rerun: 64) 339.881837ms ago: executing program 1 (id=1399): syz_emit_ethernet(0xbb5, &(0x7f0000002140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2580a6", 0xb7f, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "a800b043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823", 0xcf}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 158.776209ms ago: executing program 1 (id=1400): syz_open_dev$sndmidi(0x0, 0x7fffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x50, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfbf}}, 0x600, 0x8b1, {}, @val={0x1, 0x1, [{0x30, 0x1}]}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 158.167349ms ago: executing program 1 (id=1401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xbb) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x1, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0xffffffffffffff88, &(0x7f0000000580)={0xd5, 0x8000084bb, 0x9}}) (fail_nth: 8) 158.009055ms ago: executing program 2 (id=1402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 100.197061ms ago: executing program 3 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffd, 0x10000, 0x5}}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xa7e}]}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)={r10, r10, 0x53, 0x6, &(0x7f0000000040)="81832dfda474", 0x9, 0x7, 0x15c2, 0x440, 0xc336, 0x3, 0x8, 'syz0\x00'}) 230.184µs ago: executing program 2 (id=1404): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 0s ago: executing program 2 (id=1405): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) close_range(r1, r0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x16) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): wframe+0x77/0x7f [ 160.704406][ T8956] RIP: 0033:0x7ff77159ce59 [ 160.704414][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.704424][ T8956] RSP: 002b:00007ff77237d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.704435][ T8956] RAX: ffffffffffffffda RBX: 00007ff771815fa0 RCX: 00007ff77159ce59 [ 160.704441][ T8956] RDX: 0000000000000038 RSI: 00002000000005c0 RDI: 0000000000000004 [ 160.704447][ T8956] RBP: 00007ff77237d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.704453][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.704458][ T8956] R13: 00007ff771816038 R14: 00007ff771815fa0 R15: 00007ffecc7c9a98 [ 160.704468][ T8956] [ 160.726509][ T29] usb usb5-port1: attempt power cycle [ 160.792299][ T8963] netlink: 'syz.3.1052': attribute type 4 has an invalid length. [ 160.794771][ T8963] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1052'. [ 160.798401][ T8963] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1052'. [ 160.817875][ T8965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1053'. [ 160.822601][ T8965] syzkaller1: entered promiscuous mode [ 160.824378][ T8965] syzkaller1: entered allmulticast mode [ 160.948619][ T8970] FAULT_INJECTION: forcing a failure. [ 160.948619][ T8970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.952438][ T8970] CPU: 2 UID: 0 PID: 8970 Comm: syz.3.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.952454][ T8970] Tainted: [L]=SOFTLOCKUP [ 160.952457][ T8970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.952464][ T8970] Call Trace: [ 160.952467][ T8970] [ 160.952471][ T8970] dump_stack_lvl+0x100/0x190 [ 160.952485][ T8970] should_fail_ex.cold+0x5/0xa [ 160.952499][ T8970] _copy_from_iter+0x1f4/0x1690 [ 160.952514][ T8970] ? __asan_memset+0x23/0x50 [ 160.952529][ T8970] ? __pfx__copy_from_iter+0x10/0x10 [ 160.952542][ T8970] ? __pfx___alloc_skb+0x10/0x10 [ 160.952554][ T8970] ? netlink_autobind.isra.0+0x160/0x370 [ 160.952572][ T8970] netlink_sendmsg+0x808/0xda0 [ 160.952582][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.952594][ T8970] ____sys_sendmsg+0xa4d/0xbe0 [ 160.952609][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.952618][ T8970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.952634][ T8970] ? kstrtouint_from_user+0x13c/0x1d0 [ 160.952645][ T8970] ___sys_sendmsg+0x190/0x1e0 [ 160.952654][ T8970] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.952663][ T8970] ? get_pid_task+0x106/0x250 [ 160.952679][ T8970] ? rcu_is_watching+0x12/0xc0 [ 160.952697][ T8970] __sys_sendmsg+0x160/0x210 [ 160.952709][ T8970] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.952723][ T8970] ? rcu_is_watching+0x12/0xc0 [ 160.952736][ T8970] do_syscall_64+0x115/0x870 [ 160.952746][ T8970] ? clear_bhb_loop+0x40/0x90 [ 160.952757][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.952767][ T8970] RIP: 0033:0x7ff77159ce59 [ 160.952775][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.952785][ T8970] RSP: 002b:00007ff77237d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.952795][ T8970] RAX: ffffffffffffffda RBX: 00007ff771815fa0 RCX: 00007ff77159ce59 [ 160.952801][ T8970] RDX: 000000002400c046 RSI: 0000200000000040 RDI: 0000000000000005 [ 160.952807][ T8970] RBP: 00007ff77237d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.952813][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.952819][ T8970] R13: 00007ff771816038 R14: 00007ff771815fa0 R15: 00007ffecc7c9a98 [ 160.952828][ T8970] [ 161.121807][ T8981] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 161.125970][ T42] audit: type=1400 audit(1781951253.332:526): avc: denied { ioctl } for pid=8980 comm="syz.2.1059" path="socket:[30453]" dev="sockfs" ino=30453 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.126370][ T29] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 161.164303][ T8983] lo speed is unknown, defaulting to 1000 [ 161.166932][ T29] usb 5-1: device descriptor read/8, error -71 [ 161.167043][ T8983] lo speed is unknown, defaulting to 1000 [ 161.406302][ T29] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 161.426675][ T29] usb 5-1: device descriptor read/8, error -71 [ 161.466285][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 161.469161][ T40] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 161.546442][ T29] usb usb5-port1: unable to enumerate USB device [ 161.617554][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.620606][ T40] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 161.624047][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.627077][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.629082][ T40] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 161.632028][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.636059][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.641050][ T40] usb 8-1: config 0 descriptor?? [ 161.642848][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 161.645770][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 161.648504][ T8984] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.650942][ T34] usb 7-1: Product: syz [ 161.653308][ T34] usb 7-1: Manufacturer: syz [ 161.654810][ T34] usb 7-1: SerialNumber: syz [ 161.862047][ T34] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.031703][ T8989] FAULT_INJECTION: forcing a failure. [ 162.031703][ T8989] name failslab, interval 1, probability 0, space 0, times 0 [ 162.035627][ T8989] CPU: 3 UID: 0 PID: 8989 Comm: syz.1.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.035644][ T8989] Tainted: [L]=SOFTLOCKUP [ 162.035647][ T8989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.035653][ T8989] Call Trace: [ 162.035657][ T8989] [ 162.035661][ T8989] dump_stack_lvl+0x100/0x190 [ 162.035675][ T8989] should_fail_ex.cold+0x5/0xa [ 162.035687][ T8989] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 162.035704][ T8989] should_failslab+0xc2/0x120 [ 162.035729][ T8989] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 162.035746][ T8989] ? copy_process+0x69a/0x7ff0 [ 162.035757][ T8989] ? rcu_is_watching+0x12/0xc0 [ 162.035772][ T8989] copy_process+0x69a/0x7ff0 [ 162.035786][ T8989] ? __pfx_copy_process+0x10/0x10 [ 162.035799][ T8989] ? lockdep_init_map_type+0x5c/0x250 [ 162.035811][ T8989] ? lockdep_init_map_type+0x5c/0x250 [ 162.035822][ T8989] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 162.035834][ T8989] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 162.035851][ T8989] vhost_task_create+0x1db/0x370 [ 162.035861][ T8989] ? __pfx_vhost_task_create+0x10/0x10 [ 162.035870][ T8989] ? rcu_is_watching+0x12/0xc0 [ 162.035884][ T8989] ? __pfx_vhost_task_fn+0x10/0x10 [ 162.035894][ T8989] ? __pfx___mutex_lock+0x10/0x10 [ 162.035904][ T8989] ? trace_irq_enable.constprop.0+0x122/0x160 [ 162.035918][ T8989] kvm_mmu_post_init_vm+0x1b3/0x360 [ 162.035932][ T8989] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 162.035951][ T8989] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 162.035961][ T8989] ? lock_release+0x24d/0x310 [ 162.035973][ T8989] kvm_vcpu_ioctl+0x730/0x1700 [ 162.035983][ T8989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.035993][ T8989] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.036004][ T8989] ? do_vfs_ioctl+0x226/0x13e0 [ 162.036016][ T8989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.036027][ T8989] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 162.036052][ T8989] ? rcu_is_watching+0x12/0xc0 [ 162.036071][ T8989] ? hook_file_ioctl_common+0x140/0x440 [ 162.036092][ T8989] ? selinux_file_ioctl+0x13b/0x290 [ 162.036114][ T8989] ? selinux_file_ioctl+0xb6/0x290 [ 162.036138][ T8989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.036155][ T8989] __x64_sys_ioctl+0x18e/0x210 [ 162.036174][ T8989] do_syscall_64+0x115/0x870 [ 162.036191][ T8989] ? clear_bhb_loop+0x40/0x90 [ 162.036208][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.036226][ T8989] RIP: 0033:0x7fe55df9ce59 [ 162.036239][ T8989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.036250][ T8989] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.036261][ T8989] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 162.036267][ T8989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 162.036273][ T8989] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.036279][ T8989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.036284][ T8989] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 162.036293][ T8989] [ 162.135971][ T29] usb 7-1: USB disconnect, device number 10 [ 162.136161][ T42] audit: type=1400 audit(1781951254.342:527): avc: denied { ioctl } for pid=8985 comm="syz.2.1061" path="/dev/usb/lp0" dev="devtmpfs" ino=3223 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.138559][ T29] usblp0: removed [ 162.148746][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x3 [ 162.151131][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.153409][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.155842][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.159357][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.161661][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.164006][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.166400][ T40] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 162.169015][ T40] hid-steam 0003:28DE:1205.0005: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 162.226324][ T40] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' connected [ 162.229720][ T40] input: Steam Deck as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1205.0005/input/input12 [ 162.236573][ T40] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1205.0005/input/input13 [ 162.248581][ T40] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x3 [ 162.252801][ T40] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 162.258477][ T40] hid-steam 0003:28DE:1205.0006: hidraw1: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 162.339114][ T8996] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 162.347886][ T40] usb 8-1: USB disconnect, device number 16 [ 162.350601][ T8983] sg_write: data in/out 808464396/14 bytes for SCSI command 0x9-- guessing data in; [ 162.350601][ T8983] program syz.3.1060 not setting count and/or reply_len properly [ 162.365401][ T40] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 162.911155][ T9017] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.926294][ T9017] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.008189][ T9017] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.011538][ T9017] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.076003][ T9017] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.086314][ T9017] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.138097][ T9017] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.141286][ T9017] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.244329][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.247831][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.253526][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.256074][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.261616][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.264183][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.270722][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.273282][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.315213][ T42] audit: type=1400 audit(1781951255.522:528): avc: denied { append } for pid=9032 comm="syz.2.1074" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.376398][ T9036] __nla_validate_parse: 5 callbacks suppressed [ 163.376409][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 163.387249][ T9033] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 163.400001][ T9033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.405016][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 163.620060][ T5143] pmem0: AHDI p1 [ 165.866628][ T9019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.906925][ T9057] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 165.914825][ T9057] 8021q: adding VLAN 0 to HW filter on device bond9 [ 165.918270][ T9057] FAULT_INJECTION: forcing a failure. [ 165.918270][ T9057] name failslab, interval 1, probability 0, space 0, times 0 [ 165.922141][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.1.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.922158][ T9057] Tainted: [L]=SOFTLOCKUP [ 165.922161][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.922167][ T9057] Call Trace: [ 165.922171][ T9057] [ 165.922175][ T9057] dump_stack_lvl+0x100/0x190 [ 165.922189][ T9057] should_fail_ex.cold+0x5/0xa [ 165.922202][ T9057] should_failslab+0xc2/0x120 [ 165.922213][ T9057] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 165.922229][ T9057] ? dst_alloc+0x99/0x1a0 [ 165.922241][ T9057] dst_alloc+0x99/0x1a0 [ 165.922252][ T9057] rt_dst_alloc+0x35/0x3a0 [ 165.922263][ T9057] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 165.922278][ T9057] ip_route_output_key_hash+0x118/0x2b0 [ 165.922292][ T9057] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 165.922307][ T9057] ? rcu_is_watching+0x12/0xc0 [ 165.922321][ T9057] ? raw_sendmsg+0x76d/0x3590 [ 165.922334][ T9057] ip_route_output_flow+0x27/0x150 [ 165.922348][ T9057] raw_sendmsg+0xb1c/0x3590 [ 165.922361][ T9057] ? __pfx_raw_sendmsg+0x10/0x10 [ 165.922375][ T9057] ? avc_has_perm+0x135/0x1e0 [ 165.922389][ T9057] ? sock_has_perm+0x25a/0x2f0 [ 165.922405][ T9057] ? lock_release+0x24d/0x310 [ 165.922416][ T9057] ? __pfx_raw_sendmsg+0x10/0x10 [ 165.922428][ T9057] inet_sendmsg+0x11c/0x140 [ 165.922441][ T9057] ____sys_sendmsg+0x9c9/0xbe0 [ 165.922460][ T9057] ? __pfx_inet_sendmsg+0x10/0x10 [ 165.922505][ T9057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.922523][ T9057] ? kstrtouint_from_user+0x13c/0x1d0 [ 165.922534][ T9057] ___sys_sendmsg+0x190/0x1e0 [ 165.922544][ T9057] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.922553][ T9057] ? get_pid_task+0x106/0x250 [ 165.922568][ T9057] ? rcu_is_watching+0x12/0xc0 [ 165.922585][ T9057] __sys_sendmsg+0x160/0x210 [ 165.922598][ T9057] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.922611][ T9057] ? rcu_is_watching+0x12/0xc0 [ 165.922625][ T9057] do_syscall_64+0x115/0x870 [ 165.922635][ T9057] ? clear_bhb_loop+0x40/0x90 [ 165.922647][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.922657][ T9057] RIP: 0033:0x7fe55df9ce59 [ 165.922665][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.922675][ T9057] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.922685][ T9057] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 165.922692][ T9057] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 165.922698][ T9057] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.922704][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.922709][ T9057] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 165.922718][ T9057] [ 166.044058][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.046584][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.079355][ T9062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.083355][ T9062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.102295][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.105689][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.110608][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.113636][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.156347][ T34] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 166.277854][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 166.286425][ T34] usb 5-1: device descriptor read/64, error -71 [ 166.354884][ T9070] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1085'. [ 166.536316][ T34] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 166.666298][ T34] usb 5-1: device descriptor read/64, error -71 [ 166.786630][ T34] usb usb5-port1: attempt power cycle [ 167.136620][ T34] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 167.151480][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e5a400: rx timeout, send abort [ 167.156745][ T34] usb 5-1: device descriptor read/8, error -71 [ 167.406369][ T34] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 167.427091][ T34] usb 5-1: device descriptor read/8, error -71 [ 167.536684][ T34] usb usb5-port1: unable to enumerate USB device [ 167.654363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e5a400: abort rx timeout. Force session deactivation [ 168.046231][ T9072] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 168.065255][ T9084] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 168.149107][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 168.336303][ T8346] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 168.380934][ T9099] FAULT_INJECTION: forcing a failure. [ 168.380934][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 168.384946][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.384968][ T9099] Tainted: [L]=SOFTLOCKUP [ 168.384972][ T9099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.384978][ T9099] Call Trace: [ 168.384983][ T9099] [ 168.384987][ T9099] dump_stack_lvl+0x100/0x190 [ 168.385002][ T9099] should_fail_ex.cold+0x5/0xa [ 168.385015][ T9099] ? __kmalloc_noprof+0xba/0x840 [ 168.385030][ T9099] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 168.385043][ T9099] should_failslab+0xc2/0x120 [ 168.385054][ T9099] __kmalloc_noprof+0xe0/0x840 [ 168.385069][ T9099] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 168.385083][ T9099] genl_start+0x18f/0x970 [ 168.385096][ T9099] __netlink_dump_start+0x60e/0x990 [ 168.385113][ T9099] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 168.385125][ T9099] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 168.385139][ T9099] ? __pfx_genl_get_cmd+0x10/0x10 [ 168.385148][ T9099] ? __pfx_genl_start+0x10/0x10 [ 168.385158][ T9099] ? __pfx_genl_dumpit+0x10/0x10 [ 168.385168][ T9099] ? __pfx_genl_done+0x10/0x10 [ 168.385179][ T9099] ? __alloc_skb+0x185/0x710 [ 168.385191][ T9099] ? netlink_alloc_large_skb+0x69/0x150 [ 168.385200][ T9099] ? __radix_tree_lookup+0x217/0x2b0 [ 168.385217][ T9099] genl_rcv_msg+0x471/0x800 [ 168.385228][ T9099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.385239][ T9099] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 168.385255][ T9099] netlink_rcv_skb+0x159/0x420 [ 168.385264][ T9099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.385275][ T9099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.385287][ T9099] ? netlink_deliver_tap+0x1ae/0xcc0 [ 168.385303][ T9099] genl_rcv+0x28/0x40 [ 168.385313][ T9099] netlink_unicast+0x585/0x850 [ 168.385322][ T9099] ? __pfx_netlink_unicast+0x10/0x10 [ 168.385333][ T9099] netlink_sendmsg+0x8b0/0xda0 [ 168.385343][ T9099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.385355][ T9099] ____sys_sendmsg+0xa4d/0xbe0 [ 168.385369][ T9099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.385379][ T9099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.385395][ T9099] ? kstrtouint_from_user+0x13c/0x1d0 [ 168.385407][ T9099] ___sys_sendmsg+0x190/0x1e0 [ 168.385416][ T9099] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.385425][ T9099] ? get_pid_task+0x106/0x250 [ 168.385442][ T9099] ? rcu_is_watching+0x12/0xc0 [ 168.385460][ T9099] __sys_sendmsg+0x160/0x210 [ 168.385472][ T9099] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.385487][ T9099] ? rcu_is_watching+0x12/0xc0 [ 168.385500][ T9099] do_syscall_64+0x115/0x870 [ 168.385510][ T9099] ? clear_bhb_loop+0x40/0x90 [ 168.385521][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.385531][ T9099] RIP: 0033:0x7fe55df9ce59 [ 168.385540][ T9099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.385550][ T9099] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.385560][ T9099] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 168.385567][ T9099] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 168.385573][ T9099] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.385579][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.385585][ T9099] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 168.385599][ T9099] [ 168.566379][ T8346] usb 8-1: Using ep0 maxpacket: 8 [ 168.569974][ T8346] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.574531][ T8346] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.578815][ T8346] usb 8-1: config 0 interface 0 has no altsetting 0 [ 168.581573][ T8346] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.584955][ T8346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.589156][ T8346] usb 8-1: config 0 descriptor?? [ 168.642608][ T9103] FAULT_INJECTION: forcing a failure. [ 168.642608][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 168.646629][ T9103] CPU: 2 UID: 0 PID: 9103 Comm: syz.1.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.646656][ T9103] Tainted: [L]=SOFTLOCKUP [ 168.646664][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.646673][ T9103] Call Trace: [ 168.646680][ T9103] [ 168.646688][ T9103] dump_stack_lvl+0x100/0x190 [ 168.646712][ T9103] should_fail_ex.cold+0x5/0xa [ 168.646733][ T9103] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 168.646761][ T9103] should_failslab+0xc2/0x120 [ 168.646781][ T9103] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 168.646806][ T9103] ? fuse_request_alloc+0x22/0x200 [ 168.646822][ T9103] ? trace_contention_end+0x126/0x160 [ 168.646843][ T9103] fuse_request_alloc+0x22/0x200 [ 168.646860][ T9103] fuse_get_req+0x20a/0x400 [ 168.646877][ T9103] ? __pfx_fuse_get_req+0x10/0x10 [ 168.646894][ T9103] ? from_kgid+0x8f/0xd0 [ 168.646911][ T9103] ? __pfx_from_kgid+0x10/0x10 [ 168.646931][ T9103] fuse_chan_send+0x257/0x9a0 [ 168.646953][ T9103] __fuse_simple_request+0x18e/0x1e0 [ 168.646973][ T9103] fuse_readdir_uncached+0x5d6/0x1c30 [ 168.646992][ T9103] ? putname+0xb1/0x110 [ 168.647006][ T9103] ? _parse_integer_limit+0x17f/0x1d0 [ 168.647024][ T9103] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 168.647042][ T9103] ? _kstrtoull+0x13c/0x1f0 [ 168.647057][ T9103] ? __pfx__kstrtoull+0x10/0x10 [ 168.647075][ T9103] ? putname+0xb1/0x110 [ 168.647089][ T9103] ? rcu_is_watching+0x12/0xc0 [ 168.647114][ T9103] ? kstrtouint+0xdf/0x130 [ 168.647128][ T9103] ? __pfx_kstrtouint+0x10/0x10 [ 168.647151][ T9103] ? fuse_readdir+0x9a7/0x1f20 [ 168.647169][ T9103] ? rcu_is_watching+0x12/0xc0 [ 168.647191][ T9103] ? fuse_readdir+0x9a7/0x1f20 [ 168.647208][ T9103] ? lock_release+0x24d/0x310 [ 168.647226][ T9103] fuse_readdir+0x9bb/0x1f20 [ 168.647244][ T9103] ? avc_policy_seqno+0x9/0x20 [ 168.647263][ T9103] iterate_dir+0x296/0xae0 [ 168.647285][ T9103] __x64_sys_getdents64+0x13b/0x2c0 [ 168.647304][ T9103] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 168.647323][ T9103] ? fput+0x79/0x100 [ 168.647336][ T9103] ? __pfx_filldir64+0x10/0x10 [ 168.647358][ T9103] ? rcu_is_watching+0x12/0xc0 [ 168.647378][ T9103] do_syscall_64+0x115/0x870 [ 168.647398][ T9103] ? clear_bhb_loop+0x40/0x90 [ 168.647418][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.647437][ T9103] RIP: 0033:0x7fe55df9ce59 [ 168.647450][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.647467][ T9103] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 168.647485][ T9103] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 168.647496][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 168.647504][ T9103] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.647513][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.647522][ T9103] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 168.647539][ T9103] [ 168.996278][ T8346] hid_parser_main: 6 callbacks suppressed [ 168.996292][ T8346] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 169.001259][ T8346] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 169.003524][ T8346] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 169.011408][ T8346] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 169.013707][ T8346] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 169.019650][ T8346] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 169.072328][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 169.190068][ T42] audit: type=1400 audit(1781951261.402:529): avc: denied { create } for pid=9122 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 169.196082][ T42] audit: type=1400 audit(1781951261.402:530): avc: denied { read } for pid=9122 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 169.202624][ T42] audit: type=1400 audit(1781951261.412:531): avc: denied { read } for pid=9086 comm="syz.3.1092" path="socket:[33058]" dev="sockfs" ino=33058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.255109][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.258809][ T5094] Bluetooth: hci0: command 0x0c20 tx timeout [ 169.265138][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.269989][ T42] audit: type=1400 audit(1781951261.482:532): avc: denied { bind } for pid=9086 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.276955][ T42] audit: type=1400 audit(1781951261.482:533): avc: denied { setopt } for pid=9086 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.450818][ T9128] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 169.896333][ T8346] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 170.036345][ T8346] usb 6-1: device descriptor read/64, error -71 [ 170.208114][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 170.248393][ T10] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 170.286492][ T8346] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 170.357757][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056f4d400: rx timeout, send abort [ 170.426263][ T8346] usb 6-1: device descriptor read/64, error -71 [ 170.456357][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 170.456378][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 170.536531][ T8346] usb usb6-port1: attempt power cycle [ 170.860848][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056f4d400: abort rx timeout. Force session deactivation [ 170.896646][ T8346] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 170.918219][ T8346] usb 6-1: device descriptor read/8, error -71 [ 171.166270][ T8346] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 171.196742][ T8346] usb 6-1: device descriptor read/8, error -71 [ 171.307921][ T8346] usb usb6-port1: unable to enumerate USB device [ 171.336292][ T5747] Bluetooth: hci0: command 0x0c20 tx timeout [ 171.456013][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 171.518457][ T42] audit: type=1400 audit(1781951263.732:534): avc: denied { ioctl } for pid=9154 comm="syz.3.1119" path="socket:[33236]" dev="sockfs" ino=33236 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.648301][ T9155] i2c i2c-2: unsupported multi-msg i2c transaction [ 171.696337][ T9162] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.699599][ T9162] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.739421][ T9162] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.743456][ T9162] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.798542][ T9162] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.801629][ T9162] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.862307][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 171.878980][ T8344] usb 8-1: USB disconnect, device number 17 [ 171.927736][ T9162] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.941074][ T9162] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.059085][ T5811] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.062561][ T5811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.070469][ T5811] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.073943][ T5811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.083219][ T5811] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.086939][ T5811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.094198][ T5811] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.098157][ T5811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.131535][ T9183] FAULT_INJECTION: forcing a failure. [ 172.131535][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 172.135696][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.3.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.135712][ T9183] Tainted: [L]=SOFTLOCKUP [ 172.135716][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.135722][ T9183] Call Trace: [ 172.135732][ T9183] [ 172.135737][ T9183] dump_stack_lvl+0x100/0x190 [ 172.135762][ T9183] should_fail_ex.cold+0x5/0xa [ 172.135774][ T9183] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 172.135789][ T9183] should_failslab+0xc2/0x120 [ 172.135801][ T9183] __kmalloc_cache_noprof+0x7a/0x6e0 [ 172.135814][ T9183] ? percpu_ref_init+0xec/0x3f0 [ 172.135843][ T9183] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 172.135859][ T9183] percpu_ref_init+0xec/0x3f0 [ 172.135870][ T9183] io_uring_setup.cold+0x2be/0x1cae [ 172.135880][ T9183] ? __pfx_io_uring_setup+0x10/0x10 [ 172.135896][ T9183] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 172.135908][ T9183] ? rcu_is_watching+0x12/0xc0 [ 172.135926][ T9183] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 172.135937][ T9183] ? lock_release+0x24d/0x310 [ 172.135951][ T9183] ? ksys_write+0x1ac/0x250 [ 172.135963][ T9183] ? __pfx_ksys_write+0x10/0x10 [ 172.135977][ T9183] __x64_sys_io_uring_setup+0xc2/0x170 [ 172.135993][ T9183] do_syscall_64+0x115/0x870 [ 172.136008][ T9183] ? clear_bhb_loop+0x40/0x90 [ 172.136021][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.136031][ T9183] RIP: 0033:0x7ff77159ce59 [ 172.136039][ T9183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.136050][ T9183] RSP: 002b:00007ff77237cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 172.136060][ T9183] RAX: ffffffffffffffda RBX: 0000200000000b48 RCX: 00007ff77159ce59 [ 172.136067][ T9183] RDX: 0000200000000bc8 RSI: 0000200000000b48 RDI: 0000000000000104 [ 172.136073][ T9183] RBP: 0000200000000b40 R08: 0000200000001f40 R09: 0000000000000000 [ 172.136079][ T9183] R10: 0000200000000bd0 R11: 0000000000000206 R12: 0000200000000bc8 [ 172.136085][ T9183] R13: 0000200000000bd0 R14: 00007ff77237cfd8 R15: 0000000000000000 [ 172.136095][ T9183] [ 172.231072][ T42] audit: type=1400 audit(1781951264.442:535): avc: denied { getopt } for pid=9188 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.238853][ T42] audit: type=1400 audit(1781951264.452:536): avc: denied { ioctl } for pid=9188 comm="syz.3.1130" path="socket:[35103]" dev="sockfs" ino=35103 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.271435][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 172.662159][ T42] audit: type=1400 audit(1781951264.872:537): avc: denied { bind } for pid=9193 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.671053][ T9194] netlink: 'syz.1.1132': attribute type 10 has an invalid length. [ 172.671067][ T42] audit: type=1400 audit(1781951264.882:538): avc: denied { setopt } for pid=9193 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.674772][ T9194] team0: Port device dummy0 added [ 173.536481][ T8344] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 173.686394][ T8344] usb 8-1: Using ep0 maxpacket: 32 [ 173.689184][ T8344] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 173.691771][ T8344] usb 8-1: config 0 has no interface number 0 [ 173.693625][ T8344] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.697118][ T8344] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 173.700829][ T8344] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 173.703928][ T8344] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.709563][ T8344] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 173.712511][ T8344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.715036][ T8344] usb 8-1: Product: syz [ 173.717322][ T8344] usb 8-1: Manufacturer: syz [ 173.719200][ T8344] usb 8-1: SerialNumber: syz [ 173.721989][ T8344] usb 8-1: config 0 descriptor?? [ 173.724209][ T9208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.729627][ T8344] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input14 [ 173.930162][ T8344] usb 8-1: USB disconnect, device number 18 [ 173.932960][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 173.936698][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 173.948242][ T9208] fuse: Bad value for 'fd' [ 174.882567][ T9170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.961794][ T9224] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.964327][ T9224] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 174.967355][ T9224] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.969888][ T9224] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 175.139549][ T9238] netlink: 'syz.0.1147': attribute type 4 has an invalid length. [ 175.146309][ T8347] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 175.172319][ T9238] netlink: 'syz.0.1147': attribute type 4 has an invalid length. [ 175.176123][ T8349] lo speed is unknown, defaulting to 1000 [ 175.177945][ T8349] syz2: Port: 1 Link ACTIVE [ 175.181635][ T8349] lo speed is unknown, defaulting to 1000 [ 175.183557][ T9238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=9238 comm=syz.0.1147 [ 175.276253][ T8347] usb 6-1: device descriptor read/64, error -71 [ 175.347944][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 175.516267][ T8347] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 175.646260][ T8347] usb 6-1: device descriptor read/64, error -71 [ 175.756513][ T8347] usb usb6-port1: attempt power cycle [ 176.096265][ T8347] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 176.116924][ T8347] usb 6-1: device descriptor read/8, error -71 [ 176.366279][ T8347] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 176.386785][ T8347] usb 6-1: device descriptor read/8, error -71 [ 176.506422][ T8347] usb usb6-port1: unable to enumerate USB device [ 178.380093][ T9249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.404194][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 178.427809][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 178.566407][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 178.604449][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 178.672391][ T9311] FAULT_INJECTION: forcing a failure. [ 178.672391][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 178.676551][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.1.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.676576][ T9311] Tainted: [L]=SOFTLOCKUP [ 178.676581][ T9311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.676590][ T9311] Call Trace: [ 178.676605][ T9311] [ 178.676611][ T9311] dump_stack_lvl+0x100/0x190 [ 178.676643][ T9311] should_fail_ex.cold+0x5/0xa [ 178.676662][ T9311] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 178.676684][ T9311] should_failslab+0xc2/0x120 [ 178.676701][ T9311] __kmalloc_cache_noprof+0x7a/0x6e0 [ 178.676722][ T9311] ? fuse_dentry_revalidate+0x34e/0xbf0 [ 178.676754][ T9311] fuse_dentry_revalidate+0x34e/0xbf0 [ 178.676779][ T9311] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 178.676808][ T9311] ? do_raw_spin_lock+0x128/0x260 [ 178.676841][ T9311] ? __d_lookup+0x266/0x4a0 [ 178.676868][ T9311] path_openat+0x26c4/0x4280 [ 178.676895][ T9311] ? __pfx_path_openat+0x10/0x10 [ 178.676921][ T9311] do_file_open+0x20e/0x430 [ 178.676944][ T9311] ? __pfx_do_file_open+0x10/0x10 [ 178.676975][ T9311] ? alloc_fd+0x471/0x7a0 [ 178.676999][ T9311] ? do_getname+0x191/0x390 [ 178.677018][ T9311] do_sys_openat2+0x10f/0x1e0 [ 178.677034][ T9311] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.677051][ T9311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.677076][ T9311] ? __fget_files+0x21f/0x3d0 [ 178.677101][ T9311] __x64_sys_openat+0x12d/0x210 [ 178.677117][ T9311] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.677134][ T9311] ? ksys_write+0x1ac/0x250 [ 178.677157][ T9311] ? rcu_is_watching+0x12/0xc0 [ 178.677180][ T9311] do_syscall_64+0x115/0x870 [ 178.677195][ T9311] ? clear_bhb_loop+0x40/0x90 [ 178.677213][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.677230][ T9311] RIP: 0033:0x7fe55df9ce59 [ 178.677243][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.677258][ T9311] RSP: 002b:00007fe55c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.677274][ T9311] RAX: ffffffffffffffda RBX: 00007fe55e216090 RCX: 00007fe55df9ce59 [ 178.677285][ T9311] RDX: 0000000000880cc2 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 178.677296][ T9311] RBP: 00007fe55c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.677305][ T9311] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 178.677315][ T9311] R13: 00007fe55e216128 R14: 00007fe55e216090 R15: 00007ffe8da730f8 [ 178.677331][ T9311] [ 178.736301][ T8348] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 178.906354][ T8348] usb 7-1: device descriptor read/64, error -71 [ 179.156341][ T8348] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 179.286345][ T8348] usb 7-1: device descriptor read/64, error -71 [ 179.396413][ T8348] usb usb7-port1: attempt power cycle [ 179.671815][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 179.671830][ T42] audit: type=1400 audit(1781951271.882:541): avc: denied { read } for pid=9323 comm="syz.3.1178" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.683295][ T42] audit: type=1400 audit(1781951271.892:542): avc: denied { open } for pid=9323 comm="syz.3.1178" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.746291][ T8348] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 179.776840][ T8348] usb 7-1: device descriptor read/8, error -71 [ 180.026420][ T8348] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 180.047148][ T8348] usb 7-1: device descriptor read/8, error -71 [ 180.049769][ T9327] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 180.058630][ T9327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.166755][ T8348] usb usb7-port1: unable to enumerate USB device [ 181.622007][ T9307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.672938][ T42] audit: type=1400 audit(1781951273.882:543): avc: denied { mount } for pid=9344 comm="syz.1.1186" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.674610][ T9350] fuse: Bad value for 'group_id' [ 181.687327][ T9350] fuse: Bad value for 'group_id' [ 181.719908][ T9351] FAULT_INJECTION: forcing a failure. [ 181.719908][ T9351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.737881][ T9351] CPU: 2 UID: 0 PID: 9351 Comm: syz.3.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.737911][ T9351] Tainted: [L]=SOFTLOCKUP [ 181.737917][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.737928][ T9351] Call Trace: [ 181.737934][ T9351] [ 181.737940][ T9351] dump_stack_lvl+0x100/0x190 [ 181.737965][ T9351] should_fail_ex.cold+0x5/0xa [ 181.737988][ T9351] _copy_to_user+0x32/0xd0 [ 181.738012][ T9351] copy_siginfo_to_user+0x27/0xc0 [ 181.738035][ T9351] x64_setup_rt_frame+0xa03/0xce0 [ 181.738055][ T9351] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 181.738074][ T9351] ? clockevents_program_event+0x1ef/0x820 [ 181.738100][ T9351] arch_do_signal_or_restart+0x5ee/0x7e0 [ 181.738128][ T9351] ? sched_clock+0x38/0x60 [ 181.738149][ T9351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.738178][ T9351] ? do_raw_spin_unlock+0x145/0x1e0 [ 181.738202][ T9351] ? rcu_is_watching+0x12/0xc0 [ 181.738225][ T9351] irqentry_exit+0x402/0xa00 [ 181.738266][ T9351] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.738288][ T9351] RIP: 0033:0x7ff771463131 [ 181.738302][ T9351] Code: 48 8d 3d 5a ef 1c 00 31 c0 e8 ab e3 fe ff 48 83 c4 78 5b 5d 41 5c 41 5e c3 48 8b 44 24 20 48 8b 5c 24 08 48 8b b0 88 00 00 00 <8b> 78 08 48 8d 53 30 e8 93 39 ff ff 48 89 83 88 00 00 00 e9 35 fe [ 181.738318][ T9351] RSP: 002b:00007ff77237d050 EFLAGS: 00000246 [ 181.738332][ T9351] RAX: 00007ff771715880 RBX: 00007ff771815fa0 RCX: 00007ff77163d13b [ 181.738344][ T9351] RDX: ac80ec7663d3b469 RSI: 0000000000000000 RDI: 00007ff77237d598 [ 181.738355][ T9351] RBP: 00007ff77237d090 R08: 0000000000000000 R09: 0000000000000000 [ 181.738364][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.738374][ T9351] R13: 00007ff771816038 R14: 00007ff771815fa0 R15: 00007ffecc7c9a98 [ 181.738392][ T9351] [ 181.980452][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 182.077395][ T8348] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 182.188533][ T42] audit: type=1400 audit(1781951274.402:544): avc: denied { getopt } for pid=9378 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.189059][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 182.206351][ T8348] usb 8-1: device descriptor read/64, error -71 [ 182.446355][ T8348] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 182.586320][ T8348] usb 8-1: device descriptor read/64, error -71 [ 182.696633][ T8348] usb usb8-port1: attempt power cycle [ 183.046358][ T8348] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 183.066955][ T8348] usb 8-1: device descriptor read/8, error -71 [ 183.306272][ T8348] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 183.326760][ T8348] usb 8-1: device descriptor read/8, error -71 [ 183.436446][ T8348] usb usb8-port1: unable to enumerate USB device [ 184.877241][ T9407] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 184.890427][ T9407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.895603][ T9407] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 185.008713][ T9372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.097775][ T9427] FAULT_INJECTION: forcing a failure. [ 185.097775][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 185.101778][ T9427] CPU: 2 UID: 0 PID: 9427 Comm: syz.2.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.101795][ T9427] Tainted: [L]=SOFTLOCKUP [ 185.101798][ T9427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.101804][ T9427] Call Trace: [ 185.101808][ T9427] [ 185.101812][ T9427] dump_stack_lvl+0x100/0x190 [ 185.101827][ T9427] should_fail_ex.cold+0x5/0xa [ 185.101840][ T9427] ? __kmalloc_noprof+0xba/0x840 [ 185.101854][ T9427] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 185.101868][ T9427] should_failslab+0xc2/0x120 [ 185.101879][ T9427] __kmalloc_noprof+0xe0/0x840 [ 185.101893][ T9427] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 185.101920][ T9427] genl_start+0x18f/0x970 [ 185.101931][ T9427] __netlink_dump_start+0x60e/0x990 [ 185.101947][ T9427] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 185.101959][ T9427] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 185.101973][ T9427] ? __pfx_genl_get_cmd+0x10/0x10 [ 185.101982][ T9427] ? __pfx_genl_start+0x10/0x10 [ 185.101992][ T9427] ? __pfx_genl_dumpit+0x10/0x10 [ 185.102002][ T9427] ? __pfx_genl_done+0x10/0x10 [ 185.102013][ T9427] ? __dev_queue_xmit+0xa11/0x4940 [ 185.102023][ T9427] ? __radix_tree_lookup+0x217/0x2b0 [ 185.102040][ T9427] genl_rcv_msg+0x471/0x800 [ 185.102052][ T9427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.102063][ T9427] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 185.102079][ T9427] netlink_rcv_skb+0x159/0x420 [ 185.102088][ T9427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.102099][ T9427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.102111][ T9427] ? netlink_deliver_tap+0x1ae/0xcc0 [ 185.102129][ T9427] genl_rcv+0x28/0x40 [ 185.102139][ T9427] netlink_unicast+0x585/0x850 [ 185.102149][ T9427] ? __pfx_netlink_unicast+0x10/0x10 [ 185.102160][ T9427] netlink_sendmsg+0x8b0/0xda0 [ 185.102171][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.102182][ T9427] ____sys_sendmsg+0xa4d/0xbe0 [ 185.102217][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.102231][ T9427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.102247][ T9427] ? kstrtouint_from_user+0x13c/0x1d0 [ 185.102259][ T9427] ___sys_sendmsg+0x190/0x1e0 [ 185.102268][ T9427] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.102277][ T9427] ? get_pid_task+0x106/0x250 [ 185.102294][ T9427] ? rcu_is_watching+0x12/0xc0 [ 185.102312][ T9427] __sys_sendmsg+0x160/0x210 [ 185.102324][ T9427] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.102339][ T9427] ? rcu_is_watching+0x12/0xc0 [ 185.102353][ T9427] do_syscall_64+0x115/0x870 [ 185.102362][ T9427] ? clear_bhb_loop+0x40/0x90 [ 185.102374][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.102384][ T9427] RIP: 0033:0x7fa76679ce59 [ 185.102392][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.102402][ T9427] RSP: 002b:00007fa767665028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.102414][ T9427] RAX: ffffffffffffffda RBX: 00007fa766a15fa0 RCX: 00007fa76679ce59 [ 185.102420][ T9427] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 185.102426][ T9427] RBP: 00007fa767665090 R08: 0000000000000000 R09: 0000000000000000 [ 185.102432][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.102438][ T9427] R13: 00007fa766a16038 R14: 00007fa766a15fa0 R15: 00007ffd868898f8 [ 185.102448][ T9427] [ 185.333857][ T9430] FAULT_INJECTION: forcing a failure. [ 185.333857][ T9430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.339253][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.2.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.339278][ T9430] Tainted: [L]=SOFTLOCKUP [ 185.339283][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.339292][ T9430] Call Trace: [ 185.339297][ T9430] [ 185.339302][ T9430] dump_stack_lvl+0x100/0x190 [ 185.339323][ T9430] should_fail_ex.cold+0x5/0xa [ 185.339343][ T9430] should_fail_alloc_page+0xeb/0x140 [ 185.339360][ T9430] prepare_alloc_pages+0x1f0/0x5f0 [ 185.339379][ T9430] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 185.339402][ T9430] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 185.339425][ T9430] ? is_bpf_text_address+0x8a/0x1a0 [ 185.339442][ T9430] ? lock_release+0x24d/0x310 [ 185.339457][ T9430] ? bpf_ksym_find+0x128/0x1c0 [ 185.339475][ T9430] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 185.339498][ T9430] ? is_bpf_text_address+0x94/0x1a0 [ 185.339515][ T9430] ? kernel_text_address+0x8d/0x100 [ 185.339529][ T9430] ? __kernel_text_address+0xd/0x30 [ 185.339543][ T9430] ? unwind_get_return_address+0x59/0xa0 [ 185.339564][ T9430] ? arch_stack_walk+0xa6/0xf0 [ 185.339585][ T9430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.339608][ T9430] ? fuse_put_request+0x1ff/0x340 [ 185.339623][ T9430] ? stack_trace_save+0x8e/0xc0 [ 185.339644][ T9430] ? __pfx_stack_trace_save+0x10/0x10 [ 185.339664][ T9430] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 185.339685][ T9430] ? fuse_put_request+0x1ff/0x340 [ 185.339698][ T9430] ? kasan_save_stack+0x3f/0x50 [ 185.339712][ T9430] ? kasan_save_stack+0x30/0x50 [ 185.339725][ T9430] ? kasan_save_track+0x14/0x30 [ 185.339738][ T9430] ? kasan_save_free_info+0x3b/0x70 [ 185.339756][ T9430] ? __kasan_slab_free+0x5f/0x80 [ 185.339770][ T9430] ? kmem_cache_free+0x127/0x6b0 [ 185.339790][ T9430] ? fuse_put_request+0x1ff/0x340 [ 185.339802][ T9430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.339818][ T9430] ? policy_nodemask+0xed/0x4f0 [ 185.339835][ T9430] alloc_pages_mpol+0x1fb/0x540 [ 185.339859][ T9430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.339875][ T9430] ? filemap_get_entry+0x22d/0x450 [ 185.339896][ T9430] ? rcu_is_watching+0x12/0xc0 [ 185.339915][ T9430] ? filemap_get_entry+0x22d/0x450 [ 185.339934][ T9430] ? lock_release+0x24d/0x310 [ 185.339950][ T9430] folio_alloc_noprof+0x22/0x250 [ 185.339970][ T9430] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 185.339987][ T9430] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 185.340006][ T9430] __filemap_get_folio_mpol+0x653/0x1320 [ 185.340028][ T9430] pagecache_get_page+0x2d/0x170 [ 185.340044][ T9430] fuse_emit+0x843/0xc30 [ 185.340063][ T9430] fuse_readdir_uncached+0x11cd/0x1c30 [ 185.340081][ T9430] ? rcu_is_watching+0x12/0xc0 [ 185.340101][ T9430] ? unwind_next_frame+0x3be/0x2090 [ 185.340122][ T9430] ? _parse_integer_limit+0x17f/0x1d0 [ 185.340137][ T9430] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 185.340154][ T9430] ? _kstrtoull+0x13c/0x1f0 [ 185.340167][ T9430] ? __pfx__kstrtoull+0x10/0x10 [ 185.340180][ T9430] ? is_bpf_text_address+0x8a/0x1a0 [ 185.340196][ T9430] ? lock_release+0x24d/0x310 [ 185.340212][ T9430] ? rcu_is_watching+0x12/0xc0 [ 185.340232][ T9430] ? kstrtouint+0xdf/0x130 [ 185.340245][ T9430] ? __pfx_kstrtouint+0x10/0x10 [ 185.340267][ T9430] ? fuse_readdir+0x9a7/0x1f20 [ 185.340282][ T9430] ? rcu_is_watching+0x12/0xc0 [ 185.340301][ T9430] ? fuse_readdir+0x9a7/0x1f20 [ 185.340315][ T9430] ? lock_release+0x24d/0x310 [ 185.340332][ T9430] fuse_readdir+0x9bb/0x1f20 [ 185.340350][ T9430] ? avc_policy_seqno+0x9/0x20 [ 185.340369][ T9430] iterate_dir+0x296/0xae0 [ 185.340390][ T9430] __x64_sys_getdents64+0x13b/0x2c0 [ 185.340408][ T9430] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 185.340426][ T9430] ? fput+0x79/0x100 [ 185.340439][ T9430] ? __pfx_filldir64+0x10/0x10 [ 185.340458][ T9430] ? rcu_is_watching+0x12/0xc0 [ 185.340478][ T9430] do_syscall_64+0x115/0x870 [ 185.340493][ T9430] ? clear_bhb_loop+0x40/0x90 [ 185.340510][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.340526][ T9430] RIP: 0033:0x7fa76679ce59 [ 185.340539][ T9430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.340553][ T9430] RSP: 002b:00007fa767644028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 185.340569][ T9430] RAX: ffffffffffffffda RBX: 00007fa766a16090 RCX: 00007fa76679ce59 [ 185.340579][ T9430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 185.340588][ T9430] RBP: 00007fa767644090 R08: 0000000000000000 R09: 0000000000000000 [ 185.340596][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.340605][ T9430] R13: 00007fa766a16128 R14: 00007fa766a16090 R15: 00007ffd868898f8 [ 185.340620][ T9430] [ 185.346365][ T8344] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 185.552876][ T9440] overlayfs: failed to resolve './file0': -2 [ 185.615290][ T9442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 185.647396][ T8344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.650604][ T8344] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.653317][ T8344] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.657217][ T8344] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 185.659942][ T8344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.664476][ T8344] hub 6-1:1.0: bad descriptor, ignoring hub [ 185.666505][ T8344] hub 6-1:1.0: probe with driver hub failed with error -5 [ 185.668781][ T8344] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 185.710291][ T9448] FAULT_INJECTION: forcing a failure. [ 185.710291][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 185.714268][ T9448] CPU: 2 UID: 0 PID: 9448 Comm: syz.0.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.714285][ T9448] Tainted: [L]=SOFTLOCKUP [ 185.714289][ T9448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.714296][ T9448] Call Trace: [ 185.714301][ T9448] [ 185.714305][ T9448] dump_stack_lvl+0x100/0x190 [ 185.714320][ T9448] should_fail_ex.cold+0x5/0xa [ 185.714333][ T9448] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 185.714350][ T9448] should_failslab+0xc2/0x120 [ 185.714361][ T9448] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 185.714377][ T9448] ? ovl_alloc_inode+0x25/0x190 [ 185.714388][ T9448] ? rcu_is_watching+0x12/0xc0 [ 185.714402][ T9448] ? mnt_get_write_access+0x52/0x2f0 [ 185.714414][ T9448] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 185.714425][ T9448] ovl_alloc_inode+0x25/0x190 [ 185.714436][ T9448] alloc_inode+0x68/0x250 [ 185.714448][ T9448] new_inode+0x22/0x1c0 [ 185.714459][ T9448] ovl_new_inode+0x1d/0x50 [ 185.714472][ T9448] ovl_create_object+0x17a/0x3b0 [ 185.714487][ T9448] ? __pfx_ovl_create_object+0x10/0x10 [ 185.714503][ T9448] ? inode_permission+0x374/0x620 [ 185.714515][ T9448] ovl_mkdir+0x2a/0x40 [ 185.714530][ T9448] vfs_mkdir+0x361/0x850 [ 185.714541][ T9448] filename_mkdirat+0x48b/0x5e0 [ 185.714557][ T9448] ? __pfx_filename_mkdirat+0x10/0x10 [ 185.714577][ T9448] ? strncpy_from_user+0x19d/0x2d0 [ 185.714590][ T9448] ? do_getname+0x191/0x390 [ 185.714600][ T9448] __x64_sys_mkdir+0x6b/0x90 [ 185.714616][ T9448] do_syscall_64+0x115/0x870 [ 185.714625][ T9448] ? clear_bhb_loop+0x40/0x90 [ 185.714636][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.714646][ T9448] RIP: 0033:0x7f4ed619ce59 [ 185.714657][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.714671][ T9448] RSP: 002b:00007f4ed6fd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 185.714686][ T9448] RAX: ffffffffffffffda RBX: 00007f4ed6415fa0 RCX: 00007f4ed619ce59 [ 185.714697][ T9448] RDX: 0000000000000000 RSI: 0000000000000190 RDI: 0000200000000080 [ 185.714708][ T9448] RBP: 00007f4ed6fd0090 R08: 0000000000000000 R09: 0000000000000000 [ 185.714718][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.714727][ T9448] R13: 00007f4ed6416038 R14: 00007f4ed6415fa0 R15: 00007ffe0b0a0278 [ 185.714743][ T9448] [ 185.908372][ T42] audit: type=1400 audit(1781951278.122:545): avc: denied { getopt } for pid=9461 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.166381][ T8344] usb 6-1: USB disconnect, device number 28 [ 187.495013][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 187.537020][ T9475] use of bytesused == 0 is deprecated and will be removed in the future, [ 187.539685][ T9475] use the actual size instead. [ 188.553302][ T9435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.691695][ T5747] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 188.912219][ T9512] fuse: Bad value for 'fd' [ 188.947084][ T9515] warning: `syz.1.1243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.726269][ T8344] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 189.897481][ T8344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.900396][ T8344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.903027][ T8344] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.907059][ T8344] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.909854][ T8344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.915259][ T8344] hub 5-1:1.0: bad descriptor, ignoring hub [ 189.917758][ T8344] hub 5-1:1.0: probe with driver hub failed with error -5 [ 189.920773][ T8344] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 190.416483][ T8344] usb 5-1: USB disconnect, device number 29 [ 191.745696][ T9507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.775305][ T9533] forcing mempool usage for bio_alloc_bioset+0x8e7/0x1070 [ 191.797013][ T42] audit: type=1400 audit(1781951284.002:546): avc: denied { create } for pid=9534 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 191.801106][ T5747] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 191.807903][ T9535] 9pnet_virtio: no channels available for device ./file0 [ 191.811604][ T42] audit: type=1400 audit(1781951284.022:547): avc: denied { mounton } for pid=9534 comm="syz.0.1251" path="/315/file0" dev="tmpfs" ino=1724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 191.852323][ T9545] FAULT_INJECTION: forcing a failure. [ 191.852323][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 191.857596][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.3.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.857616][ T9545] Tainted: [L]=SOFTLOCKUP [ 191.857620][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.857626][ T9545] Call Trace: [ 191.857637][ T9545] [ 191.857641][ T9545] dump_stack_lvl+0x100/0x190 [ 191.857656][ T9545] should_fail_ex.cold+0x5/0xa [ 191.857669][ T9545] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 191.857686][ T9545] should_failslab+0xc2/0x120 [ 191.857697][ T9545] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 191.857712][ T9545] ? alloc_empty_file+0x5b/0x1c0 [ 191.857722][ T9545] ? lock_release+0x24d/0x310 [ 191.857733][ T9545] alloc_empty_file+0x5b/0x1c0 [ 191.857743][ T9545] alloc_file_pseudo+0x183/0x290 [ 191.857753][ T9545] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 191.857763][ T9545] ? hugetlbfs_get_inode+0x3f5/0x700 [ 191.857775][ T9545] ? __mutex_unlock_slowpath+0x35d/0x930 [ 191.857792][ T9545] hugetlb_file_setup+0x2a8/0x5b0 [ 191.857804][ T9545] ksys_mmap_pgoff+0x242/0x610 [ 191.857815][ T9545] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 191.857826][ T9545] ? fput+0x79/0x100 [ 191.857834][ T9545] ? ksys_write+0x1ac/0x250 [ 191.857847][ T9545] ? __pfx_ksys_write+0x10/0x10 [ 191.857860][ T9545] __x64_sys_mmap+0x125/0x190 [ 191.857874][ T9545] do_syscall_64+0x115/0x870 [ 191.857884][ T9545] ? clear_bhb_loop+0x40/0x90 [ 191.857895][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.857905][ T9545] RIP: 0033:0x7ff77159ce59 [ 191.857913][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.857923][ T9545] RSP: 002b:00007ff76f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 191.857934][ T9545] RAX: ffffffffffffffda RBX: 00007ff771816090 RCX: 00007ff77159ce59 [ 191.857940][ T9545] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 191.857946][ T9545] RBP: 00007ff76f7f6090 R08: ffffffffffffffff R09: 0000000000000000 [ 191.857953][ T9545] R10: 00020000000ec072 R11: 0000000000000246 R12: 0000000000000001 [ 191.857958][ T9545] R13: 00007ff771816128 R14: 00007ff771816090 R15: 00007ffecc7c9a98 [ 191.857968][ T9545] [ 192.186332][ T40] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 192.337429][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.340655][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.343417][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.347869][ T40] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 192.350766][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.357091][ T40] hub 5-1:1.0: bad descriptor, ignoring hub [ 192.361685][ T40] hub 5-1:1.0: probe with driver hub failed with error -5 [ 192.365541][ T40] cdc_wdm 5-1:1.0: skipping garbage [ 192.368456][ T40] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 192.696265][ T5747] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 192.698822][ T5747] Bluetooth: hci2: Injecting HCI hardware error event [ 192.700953][ T5747] Bluetooth: hci2: hardware error 0x00 [ 192.866407][ T40] usb 5-1: USB disconnect, device number 30 [ 193.573901][ T9582] FAULT_INJECTION: forcing a failure. [ 193.573901][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 193.578354][ T9582] CPU: 3 UID: 0 PID: 9582 Comm: syz.0.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.578370][ T9582] Tainted: [L]=SOFTLOCKUP [ 193.578374][ T9582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.578381][ T9582] Call Trace: [ 193.578392][ T9582] [ 193.578396][ T9582] dump_stack_lvl+0x100/0x190 [ 193.578419][ T9582] should_fail_ex.cold+0x5/0xa [ 193.578431][ T9582] ? fs_reclaim_acquire+0x70/0x100 [ 193.578443][ T9582] ? tomoyo_encode2+0xfb/0x3c0 [ 193.578457][ T9582] should_failslab+0xc2/0x120 [ 193.578468][ T9582] __kmalloc_noprof+0xe0/0x840 [ 193.578482][ T9582] ? d_absolute_path+0x136/0x1b0 [ 193.578496][ T9582] tomoyo_encode2+0xfb/0x3c0 [ 193.578511][ T9582] tomoyo_encode+0x29/0x50 [ 193.578519][ T9582] tomoyo_realpath_from_path+0x18c/0x690 [ 193.578531][ T9582] tomoyo_path_number_perm+0x23c/0x580 [ 193.578546][ T9582] ? tomoyo_path_number_perm+0x22e/0x580 [ 193.578560][ T9582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.578577][ T9582] ? preempt_count_add+0x76/0x150 [ 193.578590][ T9582] ? rcu_is_watching+0x12/0xc0 [ 193.578604][ T9582] ? __fget_files+0x215/0x3d0 [ 193.578618][ T9582] ? hook_file_ioctl_common+0x140/0x440 [ 193.578630][ T9582] ? lock_release+0x24d/0x310 [ 193.578641][ T9582] ? __fget_files+0x21f/0x3d0 [ 193.578656][ T9582] security_file_ioctl+0xd3/0x230 [ 193.578671][ T9582] __x64_sys_ioctl+0xb7/0x210 [ 193.578684][ T9582] do_syscall_64+0x115/0x870 [ 193.578699][ T9582] ? clear_bhb_loop+0x40/0x90 [ 193.578711][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.578721][ T9582] RIP: 0033:0x7f4ed619ce59 [ 193.578729][ T9582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.578739][ T9582] RSP: 002b:00007f4ed6fd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.578749][ T9582] RAX: ffffffffffffffda RBX: 00007f4ed6415fa0 RCX: 00007f4ed619ce59 [ 193.578756][ T9582] RDX: 0000200000000005 RSI: 0000000040480923 RDI: 0000000000000004 [ 193.578762][ T9582] RBP: 00007f4ed6fd0090 R08: 0000000000000000 R09: 0000000000000000 [ 193.578768][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.578774][ T9582] R13: 00007f4ed6416038 R14: 00007f4ed6415fa0 R15: 00007ffe0b0a0278 [ 193.578783][ T9582] [ 193.578791][ T9582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.776319][ T5747] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 195.334149][ T9555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.374530][ T9589] fuse: Unknown parameter 'f?0x0000000000000003' [ 195.647507][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056845800: rx timeout, send abort [ 195.776383][ T1356] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 195.937512][ T1356] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.941333][ T1356] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.946285][ T1356] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.952443][ T1356] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 195.956109][ T1356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.961941][ T1356] hub 8-1:1.0: bad descriptor, ignoring hub [ 195.963895][ T1356] hub 8-1:1.0: probe with driver hub failed with error -5 [ 195.966522][ T1356] cdc_wdm 8-1:1.0: skipping garbage [ 195.968210][ T1356] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 196.150255][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056845800: abort rx timeout. Force session deactivation [ 196.413925][ T9627] FAULT_INJECTION: forcing a failure. [ 196.413925][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 196.419214][ T9627] CPU: 3 UID: 0 PID: 9627 Comm: syz.2.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.419242][ T9627] Tainted: [L]=SOFTLOCKUP [ 196.419247][ T9627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.419257][ T9627] Call Trace: [ 196.419262][ T9627] [ 196.419268][ T9627] dump_stack_lvl+0x100/0x190 [ 196.419293][ T9627] should_fail_ex.cold+0x5/0xa [ 196.419313][ T9627] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 196.419340][ T9627] should_failslab+0xc2/0x120 [ 196.419360][ T9627] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 196.419385][ T9627] ? alloc_vmap_area+0x640/0x2bb0 [ 196.419403][ T9627] alloc_vmap_area+0x640/0x2bb0 [ 196.419425][ T9627] ? __pfx_alloc_vmap_area+0x10/0x10 [ 196.419446][ T9627] vm_map_ram+0x745/0xf80 [ 196.419468][ T9627] fuse_readdir_uncached+0x859/0x1c30 [ 196.419491][ T9627] ? rcu_is_watching+0x12/0xc0 [ 196.419515][ T9627] ? unwind_next_frame+0x3be/0x2090 [ 196.419540][ T9627] ? _parse_integer_limit+0x17f/0x1d0 [ 196.419555][ T9627] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 196.419575][ T9627] ? _kstrtoull+0x13c/0x1f0 [ 196.419592][ T9627] ? __pfx__kstrtoull+0x10/0x10 [ 196.419608][ T9627] ? is_bpf_text_address+0x8a/0x1a0 [ 196.419625][ T9627] ? lock_release+0x24d/0x310 [ 196.419648][ T9627] ? rcu_is_watching+0x12/0xc0 [ 196.419671][ T9627] ? kstrtouint+0xdf/0x130 [ 196.419684][ T9627] ? __pfx_kstrtouint+0x10/0x10 [ 196.419710][ T9627] ? fuse_readdir+0x9a7/0x1f20 [ 196.419728][ T9627] ? rcu_is_watching+0x12/0xc0 [ 196.419751][ T9627] ? fuse_readdir+0x9a7/0x1f20 [ 196.419765][ T9627] ? lock_release+0x24d/0x310 [ 196.419782][ T9627] fuse_readdir+0x9bb/0x1f20 [ 196.419803][ T9627] ? avc_policy_seqno+0x9/0x20 [ 196.419826][ T9627] iterate_dir+0x296/0xae0 [ 196.419850][ T9627] __x64_sys_getdents64+0x13b/0x2c0 [ 196.419871][ T9627] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 196.419894][ T9627] ? fput+0x79/0x100 [ 196.419907][ T9627] ? __pfx_filldir64+0x10/0x10 [ 196.419928][ T9627] ? rcu_is_watching+0x12/0xc0 [ 196.419951][ T9627] do_syscall_64+0x115/0x870 [ 196.419970][ T9627] ? clear_bhb_loop+0x40/0x90 [ 196.419989][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.420005][ T9627] RIP: 0033:0x7fa76679ce59 [ 196.420020][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.420038][ T9627] RSP: 002b:00007fa767644028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 196.420056][ T9627] RAX: ffffffffffffffda RBX: 00007fa766a16090 RCX: 00007fa76679ce59 [ 196.420067][ T9627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 196.420078][ T9627] RBP: 00007fa767644090 R08: 0000000000000000 R09: 0000000000000000 [ 196.420087][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.420096][ T9627] R13: 00007fa766a16128 R14: 00007fa766a16090 R15: 00007ffd868898f8 [ 196.420114][ T9627] [ 196.466377][ T1356] usb 8-1: USB disconnect, device number 23 [ 197.126379][ T8349] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 197.277998][ T8349] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 197.282322][ T8349] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.286110][ T8349] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.291486][ T8349] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.295222][ T8349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.301681][ T8349] hub 7-1:1.0: bad descriptor, ignoring hub [ 197.304601][ T8349] hub 7-1:1.0: probe with driver hub failed with error -5 [ 197.307776][ T8349] cdc_wdm 7-1:1.0: skipping garbage [ 197.309966][ T8349] cdc_wdm 7-1:1.0: skipping garbage [ 197.312130][ T8349] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 197.816366][ T34] usb 7-1: USB disconnect, device number 15 [ 198.824603][ T9618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.890247][ T9652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 199.097607][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.100283][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.206324][ T8349] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 199.387363][ T8349] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 199.390582][ T8349] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.393315][ T8349] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.397545][ T8349] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 199.400395][ T8349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.405524][ T8349] hub 8-1:1.0: bad descriptor, ignoring hub [ 199.407681][ T8349] hub 8-1:1.0: probe with driver hub failed with error -5 [ 199.410044][ T8349] cdc_wdm 8-1:1.0: skipping garbage [ 199.411646][ T8349] cdc_wdm 8-1:1.0: skipping garbage [ 199.413236][ T8349] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 199.559514][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804aebdc00: rx timeout, send abort [ 199.870523][ T9677] FAULT_INJECTION: forcing a failure. [ 199.870523][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.874492][ T9677] CPU: 2 UID: 0 PID: 9677 Comm: syz.0.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.874509][ T9677] Tainted: [L]=SOFTLOCKUP [ 199.874512][ T9677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.874519][ T9677] Call Trace: [ 199.874529][ T9677] [ 199.874533][ T9677] dump_stack_lvl+0x100/0x190 [ 199.874556][ T9677] should_fail_ex.cold+0x5/0xa [ 199.874570][ T9677] _copy_from_user+0x2e/0xd0 [ 199.874589][ T9677] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 199.874608][ T9677] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 199.874621][ T9677] ? sockopt_lock_sock+0x59/0x70 [ 199.874631][ T9677] ? trace_irq_enable.constprop.0+0x122/0x160 [ 199.874649][ T9677] ? sockopt_lock_sock+0x59/0x70 [ 199.874665][ T9677] do_ip_setsockopt+0x1fee/0x3310 [ 199.874684][ T9677] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 199.874700][ T9677] ? sock_has_perm+0x25a/0x2f0 [ 199.874723][ T9677] ? __pfx_sock_has_perm+0x10/0x10 [ 199.874745][ T9677] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 199.874770][ T9677] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 199.874796][ T9677] ip_setsockopt+0x5a/0xf0 [ 199.874817][ T9677] udp_setsockopt+0x64/0xb0 [ 199.874835][ T9677] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 199.874857][ T9677] do_sock_setsockopt+0xf3/0x1d0 [ 199.874878][ T9677] __sys_setsockopt+0x195/0x220 [ 199.874898][ T9677] __x64_sys_setsockopt+0xbd/0x160 [ 199.874916][ T9677] ? trace_irq_enable.constprop.0+0x122/0x160 [ 199.874936][ T9677] do_syscall_64+0x115/0x870 [ 199.874951][ T9677] ? clear_bhb_loop+0x40/0x90 [ 199.874971][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.874990][ T9677] RIP: 0033:0x7f4ed619ce59 [ 199.875004][ T9677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.875019][ T9677] RSP: 002b:00007f4ed6fd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.875037][ T9677] RAX: ffffffffffffffda RBX: 00007f4ed6415fa0 RCX: 00007f4ed619ce59 [ 199.875048][ T9677] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 199.875058][ T9677] RBP: 00007f4ed6fd0090 R08: 000000000000000c R09: 0000000000000000 [ 199.875068][ T9677] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 199.875078][ T9677] R13: 00007f4ed6416038 R14: 00007f4ed6415fa0 R15: 00007ffe0b0a0278 [ 199.875094][ T9677] [ 199.926425][ T1356] usb 8-1: USB disconnect, device number 24 [ 200.062204][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804aebdc00: abort rx timeout. Force session deactivation [ 200.128948][ T42] audit: type=1400 audit(1781951292.342:548): avc: denied { mount } for pid=9694 comm="syz.0.1304" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 200.138736][ T42] audit: type=1400 audit(1781951292.352:549): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 200.192684][ T9700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.261543][ T9702] lo speed is unknown, defaulting to 1000 [ 200.263700][ T9702] lo speed is unknown, defaulting to 1000 [ 200.299294][ T9708] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 200.304358][ T9708] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 200.307442][ T9708] ALSA: mixer_oss: invalid index 1374389 [ 200.310419][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1307'. [ 200.544580][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 200.549107][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 200.554541][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 200.557419][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 201.173833][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 201.386241][ T9715] comedi comedi0: reset error (fatal) [ 203.017938][ T9681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.221112][ T9737] 0x0000000000d5-0x000800008590 : "" [ 203.223058][ T9737] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff2b [ 203.234479][ T9737] FAULT_INJECTION: forcing a failure. [ 203.234479][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 203.239204][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.2.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.239220][ T9737] Tainted: [L]=SOFTLOCKUP [ 203.239223][ T9737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.239230][ T9737] Call Trace: [ 203.239241][ T9737] [ 203.239245][ T9737] dump_stack_lvl+0x100/0x190 [ 203.239269][ T9737] should_fail_ex.cold+0x5/0xa [ 203.239281][ T9737] ? __kmalloc_node_track_caller_noprof+0xbe/0x890 [ 203.239299][ T9737] should_failslab+0xc2/0x120 [ 203.239311][ T9737] __kmalloc_node_track_caller_noprof+0xe4/0x890 [ 203.239327][ T9737] ? kvasprintf_const+0x66/0x1a0 [ 203.239347][ T9737] kvasprintf+0xbc/0x150 [ 203.239360][ T9737] ? __pfx_kvasprintf+0x10/0x10 [ 203.239375][ T9737] ? idr_alloc_u32+0x22b/0x320 [ 203.239390][ T9737] kvasprintf_const+0x66/0x1a0 [ 203.239404][ T9737] kobject_set_name_vargs+0x5a/0x140 [ 203.239418][ T9737] dev_set_name+0xc7/0x100 [ 203.239434][ T9737] ? __pfx_dev_set_name+0x10/0x10 [ 203.239449][ T9737] ? idr_alloc+0xdd/0x130 [ 203.239459][ T9737] ? __pfx_idr_alloc+0x10/0x10 [ 203.239469][ T9737] ? mtd_add_partition+0x302/0x660 [ 203.239488][ T9737] ? add_mtd_device+0x7c7/0x17a0 [ 203.239498][ T9737] add_mtd_device+0x88c/0x17a0 [ 203.239510][ T9737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.239521][ T9737] ? __pfx_add_mtd_device+0x10/0x10 [ 203.239533][ T9737] mtd_add_partition+0x30a/0x660 [ 203.239546][ T9737] ? __pfx_mtd_add_partition+0x10/0x10 [ 203.239558][ T9737] ? rcu_is_watching+0x12/0xc0 [ 203.239575][ T9737] mtdchar_blkpg_ioctl+0x207/0x250 [ 203.239588][ T9737] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 203.239604][ T9737] ? lock_release+0x24d/0x310 [ 203.239617][ T9737] mtdchar_ioctl+0x1670/0x1fd0 [ 203.239631][ T9737] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 203.239645][ T9737] ? rcu_is_watching+0x12/0xc0 [ 203.239658][ T9737] ? lock_acquire+0x301/0x370 [ 203.239669][ T9737] ? trace_contention_end+0x126/0x160 [ 203.239681][ T9737] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 203.239695][ T9737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.239708][ T9737] ? __pfx___mutex_lock+0x10/0x10 [ 203.239718][ T9737] ? rcu_is_watching+0x12/0xc0 [ 203.239734][ T9737] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 203.239747][ T9737] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 203.239762][ T9737] __x64_sys_ioctl+0x18e/0x210 [ 203.239774][ T9737] do_syscall_64+0x115/0x870 [ 203.239783][ T9737] ? clear_bhb_loop+0x40/0x90 [ 203.239795][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.239805][ T9737] RIP: 0033:0x7fa76679ce59 [ 203.239813][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.239824][ T9737] RSP: 002b:00007fa767665028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.239834][ T9737] RAX: ffffffffffffffda RBX: 00007fa766a15fa0 RCX: 00007fa76679ce59 [ 203.239841][ T9737] RDX: 0000200000000140 RSI: 0000000000001269 RDI: 0000000000000004 [ 203.239847][ T9737] RBP: 00007fa767665090 R08: 0000000000000000 R09: 0000000000000000 [ 203.239853][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.239858][ T9737] R13: 00007fa766a16038 R14: 00007fa766a15fa0 R15: 00007ffd868898f8 [ 203.239868][ T9737] [ 203.311528][ T42] audit: type=1400 audit(1781951295.522:550): avc: denied { getopt } for pid=9744 comm="syz.0.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.315782][ T9745] lo speed is unknown, defaulting to 1000 [ 203.321001][ T9748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 203.325842][ T9745] lo speed is unknown, defaulting to 1000 [ 203.336314][ T9748] FAULT_INJECTION: forcing a failure. [ 203.336314][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 203.386922][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.3.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.386955][ T9748] Tainted: [L]=SOFTLOCKUP [ 203.386960][ T9748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.386969][ T9748] Call Trace: [ 203.386976][ T9748] [ 203.386981][ T9748] dump_stack_lvl+0x100/0x190 [ 203.387001][ T9748] should_fail_ex.cold+0x5/0xa [ 203.387022][ T9748] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 203.387046][ T9748] should_failslab+0xc2/0x120 [ 203.387064][ T9748] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 203.387086][ T9748] ? fib_trie_unmerge+0x220/0xbd0 [ 203.387109][ T9748] ? leaf_walk_rcu+0x725/0x850 [ 203.387132][ T9748] fib_trie_unmerge+0x220/0xbd0 [ 203.387156][ T9748] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 203.387178][ T9748] ? __pfx___mutex_lock+0x10/0x10 [ 203.387197][ T9748] fib_unmerge+0xee/0x510 [ 203.387210][ T9748] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 203.387234][ T9748] fib4_rule_configure+0x383/0x10c0 [ 203.387252][ T9748] fib_newrule+0x356/0x1ed0 [ 203.387277][ T9748] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 203.387293][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387316][ T9748] ? lock_release+0x24d/0x310 [ 203.387330][ T9748] ? __pfx_fib_newrule+0x10/0x10 [ 203.387354][ T9748] ? avc_has_perm_noaudit+0x80/0x3b0 [ 203.387376][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387397][ T9748] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 203.387418][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387440][ T9748] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 203.387459][ T9748] ? lock_release+0x24d/0x310 [ 203.387475][ T9748] ? __pfx_fib_nl_newrule+0x10/0x10 [ 203.387498][ T9748] rtnetlink_rcv_msg+0x95e/0xe90 [ 203.387518][ T9748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.387542][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387562][ T9748] netlink_rcv_skb+0x159/0x420 [ 203.387579][ T9748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.387598][ T9748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.387614][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387635][ T9748] ? netlink_deliver_tap+0x1ae/0xcc0 [ 203.387662][ T9748] netlink_unicast+0x585/0x850 [ 203.387676][ T9748] ? __pfx_netlink_unicast+0x10/0x10 [ 203.387695][ T9748] netlink_sendmsg+0x8b0/0xda0 [ 203.387709][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.387729][ T9748] ____sys_sendmsg+0xa4d/0xbe0 [ 203.387750][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.387768][ T9748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.387792][ T9748] ? kstrtouint_from_user+0x13c/0x1d0 [ 203.387810][ T9748] ___sys_sendmsg+0x190/0x1e0 [ 203.387823][ T9748] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.387840][ T9748] ? get_pid_task+0x106/0x250 [ 203.387864][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387890][ T9748] __sys_sendmsg+0x160/0x210 [ 203.387910][ T9748] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.387930][ T9748] ? rcu_is_watching+0x12/0xc0 [ 203.387958][ T9748] do_syscall_64+0x115/0x870 [ 203.387971][ T9748] ? clear_bhb_loop+0x40/0x90 [ 203.387990][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.388004][ T9748] RIP: 0033:0x7ff77159ce59 [ 203.388019][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.388034][ T9748] RSP: 002b:00007ff76f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.388047][ T9748] RAX: ffffffffffffffda RBX: 00007ff771816090 RCX: 00007ff77159ce59 [ 203.388060][ T9748] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 203.388069][ T9748] RBP: 00007ff76f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.388077][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.388086][ T9748] R13: 00007ff771816128 R14: 00007ff771816090 R15: 00007ffecc7c9a98 [ 203.388102][ T9748] [ 203.559939][ T9764] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 203.563464][ T9764] Cannot find add_set index 1 as target [ 203.565525][ T9764] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1326'. [ 203.584443][ T9765] FAULT_INJECTION: forcing a failure. [ 203.584443][ T9765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.591023][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.3.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.591042][ T9765] Tainted: [L]=SOFTLOCKUP [ 203.591046][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.591052][ T9765] Call Trace: [ 203.591055][ T9765] [ 203.591059][ T9765] dump_stack_lvl+0x100/0x190 [ 203.591073][ T9765] should_fail_ex.cold+0x5/0xa [ 203.591087][ T9765] should_fail_alloc_page+0xeb/0x140 [ 203.591099][ T9765] prepare_alloc_pages+0x1f0/0x5f0 [ 203.591112][ T9765] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 203.591129][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591143][ T9765] ? trace_mm_page_alloc+0x164/0x1c0 [ 203.591154][ T9765] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 203.591170][ T9765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.591186][ T9765] ? unwind_next_frame+0x3be/0x2090 [ 203.591201][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591215][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591229][ T9765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.591244][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591256][ T9765] ? is_bpf_text_address+0x8a/0x1a0 [ 203.591269][ T9765] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.591286][ T9765] ? is_bpf_text_address+0x94/0x1a0 [ 203.591297][ T9765] ? kernel_text_address+0x8d/0x100 [ 203.591306][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591319][ T9765] ? __kernel_text_address+0xd/0x30 [ 203.591328][ T9765] ? unwind_get_return_address+0x59/0xa0 [ 203.591345][ T9765] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 203.591362][ T9765] ? policy_nodemask+0xed/0x4f0 [ 203.591374][ T9765] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 203.591389][ T9765] ? kasan_save_stack+0x30/0x50 [ 203.591399][ T9765] ? copy_process+0x7fb/0x7ff0 [ 203.591411][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.591422][ T9765] __kasan_populate_vmalloc+0xf0/0x210 [ 203.591441][ T9765] alloc_vmap_area+0x95d/0x2bb0 [ 203.591453][ T9765] ? __pfx_alloc_vmap_area+0x10/0x10 [ 203.591465][ T9765] __get_vm_area_node+0x1ca/0x330 [ 203.591477][ T9765] __vmalloc_node_range_noprof+0x228/0x1630 [ 203.591490][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.591499][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591512][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.591524][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.591535][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591548][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.591561][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.591571][ T9765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.591584][ T9765] ? __memcg_slab_post_alloc_hook+0x752/0x1170 [ 203.591598][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591611][ T9765] ? trace_kmem_cache_alloc+0xdd/0x100 [ 203.591623][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.591632][ T9765] __vmalloc_node_noprof+0xad/0xf0 [ 203.591644][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.591654][ T9765] copy_process+0x7fb/0x7ff0 [ 203.591670][ T9765] ? __pfx_copy_process+0x10/0x10 [ 203.591682][ T9765] ? lockdep_init_map_type+0x5c/0x250 [ 203.591694][ T9765] ? lockdep_init_map_type+0x5c/0x250 [ 203.591705][ T9765] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 203.591717][ T9765] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 203.591735][ T9765] vhost_task_create+0x1db/0x370 [ 203.591745][ T9765] ? __pfx_vhost_task_create+0x10/0x10 [ 203.591754][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591769][ T9765] ? __pfx_vhost_task_fn+0x10/0x10 [ 203.591778][ T9765] ? __pfx___mutex_lock+0x10/0x10 [ 203.591789][ T9765] ? trace_irq_enable.constprop.0+0x122/0x160 [ 203.591803][ T9765] kvm_mmu_post_init_vm+0x1b3/0x360 [ 203.591818][ T9765] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 203.591834][ T9765] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 203.591844][ T9765] ? lock_release+0x24d/0x310 [ 203.591855][ T9765] kvm_vcpu_ioctl+0x730/0x1700 [ 203.591866][ T9765] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.591876][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.591887][ T9765] ? do_vfs_ioctl+0x226/0x13e0 [ 203.591899][ T9765] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.591911][ T9765] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.591933][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.591947][ T9765] ? hook_file_ioctl_common+0x140/0x440 [ 203.591961][ T9765] ? selinux_file_ioctl+0x13b/0x290 [ 203.591976][ T9765] ? selinux_file_ioctl+0xb6/0x290 [ 203.591992][ T9765] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.592002][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 203.592014][ T9765] do_syscall_64+0x115/0x870 [ 203.592024][ T9765] ? clear_bhb_loop+0x40/0x90 [ 203.592035][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.592049][ T9765] RIP: 0033:0x7ff77159ce59 [ 203.592058][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.592068][ T9765] RSP: 002b:00007ff77237d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.592078][ T9765] RAX: ffffffffffffffda RBX: 00007ff771815fa0 RCX: 00007ff77159ce59 [ 203.592088][ T9765] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 203.592094][ T9765] RBP: 00007ff77237d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.592100][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.592105][ T9765] R13: 00007ff771816038 R14: 00007ff771815fa0 R15: 00007ffecc7c9a98 [ 203.592115][ T9765] [ 203.592146][ T9765] syz.3.1327: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.761196][ T9765] CPU: 2 UID: 0 PID: 9765 Comm: syz.3.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.761219][ T9765] Tainted: [L]=SOFTLOCKUP [ 203.761224][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.761232][ T9765] Call Trace: [ 203.761237][ T9765] [ 203.761243][ T9765] dump_stack_lvl+0x100/0x190 [ 203.761262][ T9765] warn_alloc.cold+0x94/0xa8 [ 203.761275][ T9765] ? __pfx_warn_alloc+0x10/0x10 [ 203.761296][ T9765] ? __get_vm_area_node+0x2cd/0x330 [ 203.761312][ T9765] ? __get_vm_area_node+0x208/0x330 [ 203.761328][ T9765] __vmalloc_node_range_noprof+0xccd/0x1630 [ 203.761344][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.761361][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.761376][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.761391][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.761407][ T9765] ? rcu_read_unlock+0x17/0x60 [ 203.761422][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.761437][ T9765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.761467][ T9765] ? __memcg_slab_post_alloc_hook+0x752/0x1170 [ 203.761486][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.761503][ T9765] ? trace_kmem_cache_alloc+0xdd/0x100 [ 203.761519][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.761531][ T9765] __vmalloc_node_noprof+0xad/0xf0 [ 203.761546][ T9765] ? vhost_task_create+0x1db/0x370 [ 203.761559][ T9765] copy_process+0x7fb/0x7ff0 [ 203.761579][ T9765] ? __pfx_copy_process+0x10/0x10 [ 203.761602][ T9765] ? lockdep_init_map_type+0x5c/0x250 [ 203.761620][ T9765] ? lockdep_init_map_type+0x5c/0x250 [ 203.761638][ T9765] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 203.761654][ T9765] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 203.761676][ T9765] vhost_task_create+0x1db/0x370 [ 203.761689][ T9765] ? __pfx_vhost_task_create+0x10/0x10 [ 203.761701][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.761719][ T9765] ? __pfx_vhost_task_fn+0x10/0x10 [ 203.761732][ T9765] ? __pfx___mutex_lock+0x10/0x10 [ 203.761746][ T9765] ? trace_irq_enable.constprop.0+0x122/0x160 [ 203.761764][ T9765] kvm_mmu_post_init_vm+0x1b3/0x360 [ 203.761783][ T9765] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 203.761803][ T9765] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 203.761816][ T9765] ? lock_release+0x24d/0x310 [ 203.761830][ T9765] kvm_vcpu_ioctl+0x730/0x1700 [ 203.761844][ T9765] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.761857][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.761872][ T9765] ? do_vfs_ioctl+0x226/0x13e0 [ 203.761887][ T9765] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.761902][ T9765] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.761926][ T9765] ? rcu_is_watching+0x12/0xc0 [ 203.761966][ T9765] ? hook_file_ioctl_common+0x140/0x440 [ 203.761984][ T9765] ? selinux_file_ioctl+0x13b/0x290 [ 203.762003][ T9765] ? selinux_file_ioctl+0xb6/0x290 [ 203.762023][ T9765] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.762036][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 203.762052][ T9765] do_syscall_64+0x115/0x870 [ 203.762065][ T9765] ? clear_bhb_loop+0x40/0x90 [ 203.762080][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.762094][ T9765] RIP: 0033:0x7ff77159ce59 [ 203.762104][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.762118][ T9765] RSP: 002b:00007ff77237d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.762132][ T9765] RAX: ffffffffffffffda RBX: 00007ff771815fa0 RCX: 00007ff77159ce59 [ 203.762140][ T9765] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 203.762148][ T9765] RBP: 00007ff77237d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.762156][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.762164][ T9765] R13: 00007ff771816038 R14: 00007ff771815fa0 R15: 00007ffecc7c9a98 [ 203.762177][ T9765] [ 203.762312][ T9765] Mem-Info: [ 203.776307][ T1356] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 203.776947][ T9765] active_anon:19549 inactive_anon:29779 isolated_anon:0 [ 203.776947][ T9765] active_file:67 inactive_file:62746 isolated_file:0 [ 203.776947][ T9765] unevictable:1768 dirty:134 writeback:0 [ 203.776947][ T9765] slab_reclaimable:12636 slab_unreclaimable:71583 [ 203.776947][ T9765] mapped:28738 shmem:40027 pagetables:1323 [ 203.776947][ T9765] sec_pagetables:296 bounce:0 [ 203.776947][ T9765] kernel_misc_reclaimable:0 [ 203.776947][ T9765] free:407029 free_pcp:11023 free_cma:0 [ 203.895398][ T9765] Node 0 active_anon:50708kB inactive_anon:119116kB active_file:268kB inactive_file:248276kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105792kB dirty:536kB writeback:0kB shmem:131916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15104kB pagetables:4608kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.905898][ T9765] Node 1 active_anon:27488kB inactive_anon:0kB active_file:0kB inactive_file:2708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9160kB dirty:0kB writeback:0kB shmem:28192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:544kB pagetables:684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.916442][ T9765] Node 0 DMA free:5268kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4292kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:536kB local_pcp:156kB free_cma:0kB [ 203.925527][ T9765] lowmem_reserve[]: 0 1230 1230 1230 1230 [ 203.927449][ T9765] Node 0 DMA32 free:33036kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46416kB inactive_anon:119116kB active_file:268kB inactive_file:248272kB unevictable:3536kB writepending:536kB zspages:0kB present:2080628kB managed:1259692kB mlocked:0kB bounce:0kB free_pcp:31032kB local_pcp:7952kB free_cma:0kB [ 203.937333][ T9765] lowmem_reserve[]: 0 0 0 0 0 [ 203.937570][ T1356] usb 5-1: No LPM exit latency info found, disabling LPM. [ 203.938831][ T9765] Node 1 Normal free:1590196kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27488kB inactive_anon:0kB active_file:0kB inactive_file:2708kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:13036kB local_pcp:3936kB free_cma:0kB [ 203.942170][ T1356] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 203.950872][ T9765] lowmem_reserve[]: 0 0 0 0 0 [ 203.950894][ T9765] Node 0 DMA: 4*4kB (UE) 3*8kB (UE) 1*16kB (U) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 3*256kB (U) 3*512kB (UME) [ 203.954249][ T1356] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 203.955675][ T9765] 2*1024kB (ME) 0*2048kB 0*4096kB = 5272kB [ 203.964254][ T9765] Node 0 DMA32: 148*4kB (UME) 242*8kB (UME) 173*16kB (UM) 133*32kB (UE) 20*64kB (UM) 15*128kB (UME) 3*256kB (UE) 6*512kB (UME) 8*1024kB (UM) 4*2048kB (UM) 0*4096kB = 32976kB [ 203.969587][ T9765] Node 1 Normal: 61*4kB (M) 46*8kB (UME) 31*16kB (UM) 30*32kB (ME) 21*64kB (UM) 24*128kB (UME) 40*256kB (UME) 33*512kB (UME) 30*1024kB (UME) 17*2048kB (UM) 364*4096kB (UM) = 1590100kB [ 203.975045][ T9765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.978037][ T9765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.980863][ T9765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.983767][ T9765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.986624][ T9765] 102819 total pagecache pages [ 203.988160][ T9765] 0 pages in swap cache [ 203.989434][ T9765] Free swap = 124996kB [ 203.990759][ T9765] Total swap = 124996kB [ 203.992036][ T9765] 1048443 pages RAM [ 203.993241][ T9765] 0 pages HighMem/MovableOnly [ 203.994696][ T9765] 284209 pages reserved [ 203.995975][ T9765] 0 pages cma reserved [ 206.255207][ T9749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.382535][ T65] block nbd0: Receive control failed (result -32) [ 206.417205][ T42] audit: type=1400 audit(1781951298.632:551): avc: denied { connect } for pid=9785 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.429283][ T9787] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.433425][ T42] audit: type=1400 audit(1781951298.632:552): avc: denied { write } for pid=9785 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.482224][ T1356] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 206.498707][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.503181][ T1356] usb 5-1: Product: 싲죭畵㶇쁜㟴㭣፶ⱟ萜埰⿺遞ӆ庿褐ꬻ㝖撻㵟ꄓ랷ꢎ镂쎤䉀燵훛嗦䇍䟝ኇ牔䊦弈냕⣳ꪝ⡝ﳒ誫錋蔷䎏욢 [ 206.508457][ T1356] usb 5-1: Manufacturer: ␊ [ 206.511079][ T1356] usb 5-1: can't set config #1, error -71 [ 206.513233][ T1356] usb 5-1: USB disconnect, device number 31 [ 206.756280][ T8349] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 206.907485][ T8349] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 206.911558][ T8349] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.914666][ T8349] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.919365][ T8349] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 206.922199][ T8349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.927038][ T8349] hub 8-1:1.0: bad descriptor, ignoring hub [ 206.928927][ T8349] hub 8-1:1.0: probe with driver hub failed with error -5 [ 206.931393][ T8349] cdc_wdm 8-1:1.0: skipping garbage [ 206.933034][ T8349] cdc_wdm 8-1:1.0: skipping garbage [ 206.934710][ T8349] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 207.436764][ T8347] usb 8-1: USB disconnect, device number 25 [ 207.886289][ T9825] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 207.895028][ T9825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.922775][ T42] audit: type=1400 audit(1781951300.132:553): avc: denied { bind } for pid=9827 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.945868][ T9833] fuse: Bad value for 'group_id' [ 207.948432][ T9833] fuse: Bad value for 'group_id' [ 208.997013][ T9841] FAULT_INJECTION: forcing a failure. [ 208.997013][ T9841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.002443][ T9841] CPU: 3 UID: 0 PID: 9841 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.002470][ T9841] Tainted: [L]=SOFTLOCKUP [ 209.002476][ T9841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.002486][ T9841] Call Trace: [ 209.002505][ T9841] [ 209.002512][ T9841] dump_stack_lvl+0x100/0x190 [ 209.002545][ T9841] should_fail_ex.cold+0x5/0xa [ 209.002568][ T9841] should_fail_alloc_page+0xeb/0x140 [ 209.002589][ T9841] prepare_alloc_pages+0x1f0/0x5f0 [ 209.002609][ T9841] ? kernel_text_address+0x8d/0x100 [ 209.002626][ T9841] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 209.002655][ T9841] ? stack_trace_save+0x8e/0xc0 [ 209.002680][ T9841] ? __pfx_stack_trace_save+0x10/0x10 [ 209.002705][ T9841] ? rcu_is_watching+0x12/0xc0 [ 209.002727][ T9841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.002751][ T9841] ? rcu_is_watching+0x12/0xc0 [ 209.002774][ T9841] ? kasan_save_stack+0x3f/0x50 [ 209.002789][ T9841] ? kasan_save_stack+0x30/0x50 [ 209.002803][ T9841] ? kasan_save_track+0x14/0x30 [ 209.002818][ T9841] ? __kasan_slab_alloc+0x89/0x90 [ 209.002834][ T9841] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 209.002865][ T9841] ? alloc_vmap_area+0x640/0x2bb0 [ 209.002882][ T9841] ? vm_map_ram+0x745/0xf80 [ 209.002897][ T9841] ? fuse_readdir_uncached+0x859/0x1c30 [ 209.002921][ T9841] ? fuse_readdir+0x9bb/0x1f20 [ 209.002938][ T9841] ? iterate_dir+0x296/0xae0 [ 209.002956][ T9841] ? __x64_sys_getdents64+0x13b/0x2c0 [ 209.002977][ T9841] ? do_syscall_64+0x115/0x870 [ 209.002999][ T9841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.003030][ T9841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.003048][ T9841] ? policy_nodemask+0xed/0x4f0 [ 209.003068][ T9841] alloc_pages_mpol+0x1fb/0x540 [ 209.003087][ T9841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.003108][ T9841] alloc_pages_noprof+0x1a/0x160 [ 209.003130][ T9841] get_free_pages_noprof+0x10/0xb0 [ 209.003146][ T9841] __kasan_populate_vmalloc+0xa0/0x210 [ 209.003170][ T9841] ? lock_release+0x24d/0x310 [ 209.003189][ T9841] alloc_vmap_area+0x95d/0x2bb0 [ 209.003211][ T9841] ? __pfx_alloc_vmap_area+0x10/0x10 [ 209.003231][ T9841] vm_map_ram+0x745/0xf80 [ 209.003250][ T9841] fuse_readdir_uncached+0x859/0x1c30 [ 209.003272][ T9841] ? putname+0xb1/0x110 [ 209.003285][ T9841] ? _parse_integer_limit+0x17f/0x1d0 [ 209.003302][ T9841] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 209.003321][ T9841] ? _kstrtoull+0x13c/0x1f0 [ 209.003335][ T9841] ? __pfx__kstrtoull+0x10/0x10 [ 209.003349][ T9841] ? putname+0xb1/0x110 [ 209.003363][ T9841] ? rcu_is_watching+0x12/0xc0 [ 209.003386][ T9841] ? kstrtouint+0xdf/0x130 [ 209.003400][ T9841] ? __pfx_kstrtouint+0x10/0x10 [ 209.003423][ T9841] ? fuse_readdir+0x9a7/0x1f20 [ 209.003440][ T9841] ? rcu_is_watching+0x12/0xc0 [ 209.003462][ T9841] ? fuse_readdir+0x9a7/0x1f20 [ 209.003478][ T9841] ? lock_release+0x24d/0x310 [ 209.003497][ T9841] fuse_readdir+0x9bb/0x1f20 [ 209.003517][ T9841] ? avc_policy_seqno+0x9/0x20 [ 209.003539][ T9841] iterate_dir+0x296/0xae0 [ 209.003559][ T9841] __x64_sys_getdents64+0x13b/0x2c0 [ 209.003580][ T9841] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 209.003601][ T9841] ? fput+0x79/0x100 [ 209.003615][ T9841] ? __pfx_filldir64+0x10/0x10 [ 209.003636][ T9841] ? rcu_is_watching+0x12/0xc0 [ 209.003659][ T9841] do_syscall_64+0x115/0x870 [ 209.003674][ T9841] ? clear_bhb_loop+0x40/0x90 [ 209.003692][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.003709][ T9841] RIP: 0033:0x7ff77159ce59 [ 209.003723][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.003739][ T9841] RSP: 002b:00007ff76f7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 209.003756][ T9841] RAX: ffffffffffffffda RBX: 00007ff771816090 RCX: 00007ff77159ce59 [ 209.003767][ T9841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 209.003777][ T9841] RBP: 00007ff76f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.003787][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.003797][ T9841] R13: 00007ff771816128 R14: 00007ff771816090 R15: 00007ffecc7c9a98 [ 209.003813][ T9841] [ 209.426295][ T1356] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 209.491502][ T9796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.513390][ T9845] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 209.542471][ T9848] Sensor A: ================= START STATUS ================= [ 209.544436][ T9851] binder: 9850:9851 ioctl c0306201 200000000080 returned -14 [ 209.544881][ T9848] Sensor A: Test Pattern: 75% Colorbar [ 209.549907][ T9848] Sensor A: Show Information: All [ 209.551639][ T9848] Sensor A: Vertical Flip: false [ 209.553180][ T9848] Sensor A: Horizontal Flip: false [ 209.554758][ T9848] Sensor A: Brightness: 128 [ 209.556157][ T9848] Sensor A: Contrast: 128 [ 209.559129][ T9851] loop5: detected capacity change from 0 to 7 [ 209.561400][ T9848] Sensor A: Hue: 0 [ 209.562460][ T9851] Dev loop5: unable to read RDB block 7 [ 209.562968][ T9848] Sensor A: Saturation: [ 209.565063][ T9851] loop5: AHDI p2 [ 209.565259][ T9848] 128 [ 209.568205][ T9851] loop5: partition table partially beyond EOD, [ 209.568878][ T9848] [ 209.569928][ T9851] truncated [ 209.573139][ T9848] Sensor A: Pixel Rate: 160000000 [ 209.589358][ T9848] Sensor A: Horizontal Blanking: 800 [ 209.595272][ T1356] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 209.601235][ T9848] Sensor A: Vertical Blanking: 3223 [ 209.603327][ T1356] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.613272][ T9848] Sensor A: ================== END STATUS ================== [ 209.615963][ T1356] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.628116][ T1356] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.631748][ T1356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.636893][ T1356] hub 8-1:1.0: bad descriptor, ignoring hub [ 209.638764][ T1356] hub 8-1:1.0: probe with driver hub failed with error -5 [ 209.639445][ T9862] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 209.640944][ T1356] cdc_wdm 8-1:1.0: skipping garbage [ 209.645428][ T1356] cdc_wdm 8-1:1.0: skipping garbage [ 209.646659][ T9862] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 209.647751][ T1356] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 209.653116][ T9861] tipc: Enabling of bearer rejected, already enabled [ 209.737545][ T9877] macvlan0: entered promiscuous mode [ 209.742082][ T9877] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 209.746727][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.749334][ T9877] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 209.751746][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.756317][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.758843][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.775829][ T9880] FAULT_INJECTION: forcing a failure. [ 209.775829][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 209.779849][ T9880] CPU: 3 UID: 0 PID: 9880 Comm: syz.1.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.779866][ T9880] Tainted: [L]=SOFTLOCKUP [ 209.779870][ T9880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.779881][ T9880] Call Trace: [ 209.779884][ T9880] [ 209.779888][ T9880] dump_stack_lvl+0x100/0x190 [ 209.779904][ T9880] should_fail_ex.cold+0x5/0xa [ 209.779917][ T9880] ? __kmalloc_noprof+0xba/0x840 [ 209.779931][ T9880] ? sock_kmalloc+0x111/0x170 [ 209.779945][ T9880] should_failslab+0xc2/0x120 [ 209.779956][ T9880] __kmalloc_noprof+0xe0/0x840 [ 209.779971][ T9880] sock_kmalloc+0x111/0x170 [ 209.779985][ T9880] __ip_mc_join_group+0x34b/0x5e0 [ 209.780002][ T9880] do_ip_setsockopt+0x2e40/0x3310 [ 209.780015][ T9880] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 209.780027][ T9880] ? sock_has_perm+0x25a/0x2f0 [ 209.780042][ T9880] ? __pfx_sock_has_perm+0x10/0x10 [ 209.780055][ T9880] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 209.780072][ T9880] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 209.780090][ T9880] ip_setsockopt+0x5a/0xf0 [ 209.780102][ T9880] udp_setsockopt+0x64/0xb0 [ 209.780112][ T9880] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 209.780127][ T9880] do_sock_setsockopt+0xf3/0x1d0 [ 209.780142][ T9880] __sys_setsockopt+0x195/0x220 [ 209.780155][ T9880] __x64_sys_setsockopt+0xbd/0x160 [ 209.780166][ T9880] ? trace_irq_enable.constprop.0+0x122/0x160 [ 209.780179][ T9880] do_syscall_64+0x115/0x870 [ 209.780190][ T9880] ? clear_bhb_loop+0x40/0x90 [ 209.780201][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.780211][ T9880] RIP: 0033:0x7fe55df9ce59 [ 209.780219][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.780229][ T9880] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.780239][ T9880] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 209.780246][ T9880] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 209.780251][ T9880] RBP: 00007fe55ed6e090 R08: 000000000000000c R09: 0000000000000000 [ 209.780257][ T9880] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 209.780263][ T9880] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 209.780273][ T9880] [ 209.966513][ T42] audit: type=1400 audit(1781951302.182:554): avc: denied { append } for pid=9889 comm="syz.1.1372" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 210.176386][ T5828] usb 8-1: USB disconnect, device number 26 [ 210.689088][ T9914] FAULT_INJECTION: forcing a failure. [ 210.689088][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 210.693182][ T9914] CPU: 0 UID: 0 PID: 9914 Comm: syz.3.1381 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.693210][ T9914] Tainted: [L]=SOFTLOCKUP [ 210.693214][ T9914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.693220][ T9914] Call Trace: [ 210.693224][ T9914] [ 210.693228][ T9914] dump_stack_lvl+0x100/0x190 [ 210.693244][ T9914] should_fail_ex.cold+0x5/0xa [ 210.693256][ T9914] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 210.693273][ T9914] should_failslab+0xc2/0x120 [ 210.693284][ T9914] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 210.693300][ T9914] ? vm_area_alloc+0x1f/0x160 [ 210.693314][ T9914] vm_area_alloc+0x1f/0x160 [ 210.693327][ T9914] __mmap_region+0x1033/0x2db0 [ 210.693342][ T9914] ? __pfx_pick_task_fair+0x10/0x10 [ 210.693356][ T9914] ? __pfx___mmap_region+0x10/0x10 [ 210.693370][ T9914] ? rcu_is_watching+0x12/0xc0 [ 210.693387][ T9914] ? update_curr_dl_se+0x4aa/0xca0 [ 210.693397][ T9914] ? rcu_is_watching+0x12/0xc0 [ 210.693411][ T9914] ? update_curr+0x3f2/0x540 [ 210.693427][ T9914] ? rcu_is_watching+0x12/0xc0 [ 210.693441][ T9914] ? trace_sched_exit_tp+0x120/0x160 [ 210.693465][ T9914] ? cred_has_capability.isra.0+0x186/0x300 [ 210.693483][ T9914] mmap_region+0x35d/0x620 [ 210.693498][ T9914] ? __pfx_mmap_region+0x10/0x10 [ 210.693513][ T9914] ? cap_capable+0x107/0x430 [ 210.693525][ T9914] ? bpf_lsm_capable+0x9/0x10 [ 210.693540][ T9914] ? security_capable+0x80/0x260 [ 210.693553][ T9914] do_mmap+0xc63/0x12f0 [ 210.693566][ T9914] ? __pfx_do_mmap+0x10/0x10 [ 210.693576][ T9914] ? __pfx_down_write_killable+0x10/0x10 [ 210.693589][ T9914] do_shmat+0x111f/0x14a0 [ 210.693601][ T9914] ? __pfx_do_shmat+0x10/0x10 [ 210.693612][ T9914] __x64_sys_shmat+0xd7/0x170 [ 210.693621][ T9914] ? __pfx_ksys_write+0x10/0x10 [ 210.693634][ T9914] ? __pfx___x64_sys_shmat+0x10/0x10 [ 210.693645][ T9914] ? rcu_is_watching+0x12/0xc0 [ 210.693658][ T9914] ? trace_irq_enable.constprop.0+0x122/0x160 [ 210.693671][ T9914] do_syscall_64+0x115/0x870 [ 210.693681][ T9914] ? clear_bhb_loop+0x40/0x90 [ 210.693692][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.693702][ T9914] RIP: 0033:0x7ff77159ce59 [ 210.693711][ T9914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.693721][ T9914] RSP: 002b:00007ff76f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 210.693731][ T9914] RAX: ffffffffffffffda RBX: 00007ff771816090 RCX: 00007ff77159ce59 [ 210.693738][ T9914] RDX: 0000000000007000 RSI: 0000200000ffd000 RDI: 0000000000000008 [ 210.693746][ T9914] RBP: 00007ff76f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.693755][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.693765][ T9914] R13: 00007ff771816128 R14: 00007ff771816090 R15: 00007ffecc7c9a98 [ 210.693782][ T9914] [ 211.667305][ T9920] tmpfs: Unknown parameter '/dev/cdrom' [ 211.688918][ T9924] sg_write: data in/out 216/14 bytes for SCSI command 0x0-- guessing data in; [ 211.688918][ T9924] program syz.3.1384 not setting count and/or reply_len properly [ 211.714947][ T9926] FAULT_INJECTION: forcing a failure. [ 211.714947][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 211.718780][ T9926] CPU: 3 UID: 0 PID: 9926 Comm: syz.3.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.718796][ T9926] Tainted: [L]=SOFTLOCKUP [ 211.718800][ T9926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.718806][ T9926] Call Trace: [ 211.718810][ T9926] [ 211.718813][ T9926] dump_stack_lvl+0x100/0x190 [ 211.718828][ T9926] should_fail_ex.cold+0x5/0xa [ 211.718841][ T9926] ? __kvmalloc_node_noprof+0xd4/0xa60 [ 211.718858][ T9926] should_failslab+0xc2/0x120 [ 211.718869][ T9926] __kvmalloc_node_noprof+0xfa/0xa60 [ 211.718884][ T9926] ? io_alloc_cache_init+0x38/0x170 [ 211.718896][ T9926] ? lockdep_init_map_type+0x50/0x250 [ 211.718909][ T9926] io_alloc_cache_init+0x38/0x170 [ 211.718919][ T9926] io_uring_setup.cold+0x48c/0x1cae [ 211.718931][ T9926] ? __pfx_io_uring_setup+0x10/0x10 [ 211.718946][ T9926] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 211.718958][ T9926] ? rcu_is_watching+0x12/0xc0 [ 211.718971][ T9926] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 211.718982][ T9926] ? lock_release+0x24d/0x310 [ 211.718996][ T9926] ? ksys_write+0x1ac/0x250 [ 211.719008][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 211.719022][ T9926] __x64_sys_io_uring_setup+0xc2/0x170 [ 211.719038][ T9926] do_syscall_64+0x115/0x870 [ 211.719048][ T9926] ? clear_bhb_loop+0x40/0x90 [ 211.719059][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.719069][ T9926] RIP: 0033:0x7ff77159ce59 [ 211.719077][ T9926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.719087][ T9926] RSP: 002b:00007ff77237cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 211.719097][ T9926] RAX: ffffffffffffffda RBX: 0000200000000b48 RCX: 00007ff77159ce59 [ 211.719104][ T9926] RDX: 0000200000000bc8 RSI: 0000200000000b48 RDI: 0000000000000104 [ 211.719110][ T9926] RBP: 0000200000000b40 R08: 0000200000001f40 R09: 0000000000000000 [ 211.719116][ T9926] R10: 0000200000000bd0 R11: 0000000000000206 R12: 0000200000000bc8 [ 211.719122][ T9926] R13: 0000200000000bd0 R14: 00007ff77237cfd8 R15: 0000000000000000 [ 211.719131][ T9926] [ 212.056314][ T5828] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 212.207458][ T5828] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.211076][ T5828] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.213915][ T5828] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.218009][ T5828] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 212.220832][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.225537][ T5828] hub 8-1:1.0: bad descriptor, ignoring hub [ 212.227618][ T5828] hub 8-1:1.0: probe with driver hub failed with error -5 [ 212.229985][ T5828] cdc_wdm 8-1:1.0: skipping garbage [ 212.231583][ T5828] cdc_wdm 8-1:1.0: skipping garbage [ 212.233224][ T5828] cdc_wdm 8-1:1.0: skipping garbage [ 212.234927][ T5828] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 212.677373][ T9868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.726111][ T42] audit: type=1400 audit(1781951304.932:555): avc: denied { transfer } for pid=9936 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 212.728841][ T9937] syzkaller1: entered promiscuous mode [ 212.736295][ T9937] syzkaller1: entered allmulticast mode [ 212.736396][ T8348] usb 8-1: USB disconnect, device number 27 [ 213.208236][ T9970] 0x0000000000d5-0x000800008590 : "" [ 213.210103][ T9970] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff2b [ 213.213734][ T9970] FAULT_INJECTION: forcing a failure. [ 213.213734][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 213.218649][ T9970] CPU: 2 UID: 0 PID: 9970 Comm: syz.1.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.218665][ T9970] Tainted: [L]=SOFTLOCKUP [ 213.218669][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.218675][ T9970] Call Trace: [ 213.218678][ T9970] [ 213.218682][ T9970] dump_stack_lvl+0x100/0x190 [ 213.218697][ T9970] should_fail_ex.cold+0x5/0xa [ 213.218709][ T9970] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 213.218726][ T9970] should_failslab+0xc2/0x120 [ 213.218741][ T9970] __kmalloc_cache_noprof+0x7a/0x6e0 [ 213.218760][ T9970] ? device_add+0xd3f/0x1970 [ 213.218782][ T9970] ? __pfx___debug_object_init+0x10/0x10 [ 213.218801][ T9970] device_add+0xd3f/0x1970 [ 213.218820][ T9970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.218837][ T9970] ? lockdep_init_map_type+0x5c/0x250 [ 213.218853][ T9970] ? __pfx_device_add+0x10/0x10 [ 213.218871][ T9970] ? lockdep_init_map_type+0x5c/0x250 [ 213.218888][ T9970] ? __init_waitqueue_head+0xca/0x150 [ 213.218913][ T9970] add_mtd_device+0x928/0x17a0 [ 213.218931][ T9970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.218948][ T9970] ? __pfx_add_mtd_device+0x10/0x10 [ 213.218966][ T9970] mtd_add_partition+0x30a/0x660 [ 213.218982][ T9970] ? __pfx_mtd_add_partition+0x10/0x10 [ 213.218997][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.219021][ T9970] mtdchar_blkpg_ioctl+0x207/0x250 [ 213.219044][ T9970] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 213.219071][ T9970] ? lock_release+0x24d/0x310 [ 213.219092][ T9970] mtdchar_ioctl+0x1670/0x1fd0 [ 213.219117][ T9970] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 213.219137][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.219157][ T9970] ? lock_acquire+0x301/0x370 [ 213.219174][ T9970] ? trace_contention_end+0x126/0x160 [ 213.219192][ T9970] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 213.219206][ T9970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.219218][ T9970] ? __pfx___mutex_lock+0x10/0x10 [ 213.219228][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.219245][ T9970] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 213.219258][ T9970] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 213.219273][ T9970] __x64_sys_ioctl+0x18e/0x210 [ 213.219285][ T9970] do_syscall_64+0x115/0x870 [ 213.219294][ T9970] ? clear_bhb_loop+0x40/0x90 [ 213.219306][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.219316][ T9970] RIP: 0033:0x7fe55df9ce59 [ 213.219325][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.219340][ T9970] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.219350][ T9970] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 213.219356][ T9970] RDX: 0000200000000140 RSI: 0000000000001269 RDI: 0000000000000004 [ 213.219363][ T9970] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.219369][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.219375][ T9970] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 213.219385][ T9970] [ 213.219669][ T9970] ------------[ cut here ]------------ [ 213.334772][ T9970] !list_empty(&mtd->part.node) [ 213.334779][ T9970] WARNING: drivers/mtd/mtdpart.c:38 at release_mtd_partition+0x71/0x90, CPU#2: syz.1.1401/9970 [ 213.339436][ T9970] Modules linked in: [ 213.340707][ T9970] CPU: 2 UID: 0 PID: 9970 Comm: syz.1.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.343950][ T9970] Tainted: [L]=SOFTLOCKUP [ 213.345257][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.348317][ T9970] RIP: 0010:release_mtd_partition+0x71/0x90 [ 213.350133][ T9970] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 cf 65 cf fb 48 89 df 5b 5d e9 c5 65 cf fb e8 30 f0 6a fb 90 <0f> 0b 90 eb c2 e8 e5 60 db fb eb db 48 89 ef e8 db 60 db fb eb a5 [ 213.355875][ T9970] RSP: 0018:ffffc9002297f818 EFLAGS: 00010293 [ 213.357818][ T9970] RAX: 0000000000000000 RBX: ffff88803ea6c000 RCX: ffffffff8b91b147 [ 213.360240][ T9970] RDX: ffff88802ef44a80 RSI: ffffffff869e7ef0 RDI: ffff88803ea6c000 [ 213.362624][ T9970] RBP: ffff88803ea6c6a8 R08: 0000000000000001 R09: 0000000000000001 [ 213.365104][ T9970] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 213.367585][ T9970] R13: dffffc0000000000 R14: ffff888037048fa0 R15: 0000000000000000 [ 213.369970][ T9970] FS: 00007fe55ed6e6c0(0000) GS:ffff8880d651a000(0000) knlGS:0000000000000000 [ 213.372671][ T9970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.374683][ T9970] CR2: 0000200000001000 CR3: 0000000030387000 CR4: 0000000000352ef0 [ 213.377132][ T9970] Call Trace: [ 213.378195][ T9970] [ 213.379114][ T9970] mtd_release+0xa0/0xd0 [ 213.380415][ T9970] ? __pfx_mtd_release+0x10/0x10 [ 213.381925][ T9970] device_release+0xd2/0x270 [ 213.383417][ T9970] kobject_put+0x1f7/0x640 [ 213.384799][ T9970] put_device+0x1f/0x30 [ 213.386084][ T9970] add_mtd_device+0xbd7/0x17a0 [ 213.387649][ T9970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.389457][ T9970] ? __pfx_add_mtd_device+0x10/0x10 [ 213.391030][ T9970] mtd_add_partition+0x30a/0x660 [ 213.392528][ T9970] ? __pfx_mtd_add_partition+0x10/0x10 [ 213.394249][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.395714][ T9970] mtdchar_blkpg_ioctl+0x207/0x250 [ 213.397392][ T9970] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 213.399112][ T9970] ? lock_release+0x24d/0x310 [ 213.400544][ T9970] mtdchar_ioctl+0x1670/0x1fd0 [ 213.401975][ T9970] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 213.403560][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.405022][ T9970] ? lock_acquire+0x301/0x370 [ 213.406533][ T9970] ? trace_contention_end+0x126/0x160 [ 213.408174][ T9970] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 213.409808][ T9970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.411331][ T9970] ? __pfx___mutex_lock+0x10/0x10 [ 213.412853][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.414364][ T9970] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 213.415938][ T9970] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 213.417787][ T9970] __x64_sys_ioctl+0x18e/0x210 [ 213.419270][ T9970] do_syscall_64+0x115/0x870 [ 213.420674][ T9970] ? clear_bhb_loop+0x40/0x90 [ 213.422110][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.423935][ T9970] RIP: 0033:0x7fe55df9ce59 [ 213.425298][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.431135][ T9970] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.433681][ T9970] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 213.436061][ T9970] RDX: 0000200000000140 RSI: 0000000000001269 RDI: 0000000000000004 [ 213.438537][ T9970] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.440934][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.443317][ T9970] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 213.445810][ T9970] [ 213.446835][ T9970] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.449048][ T9970] CPU: 2 UID: 0 PID: 9970 Comm: syz.1.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.452272][ T9970] Tainted: [L]=SOFTLOCKUP [ 213.453640][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.456821][ T9970] Call Trace: [ 213.457901][ T9970] [ 213.458899][ T9970] dump_stack_lvl+0x100/0x190 [ 213.460343][ T9970] vpanic+0x552/0x970 [ 213.461562][ T9970] ? __pfx_vpanic+0x10/0x10 [ 213.462971][ T9970] ? lock_release+0x24d/0x310 [ 213.464430][ T9970] panic+0xd1/0xe0 [ 213.465583][ T9970] ? __pfx_panic+0x10/0x10 [ 213.466962][ T9970] ? check_panic_on_warn+0x1f/0x90 [ 213.468560][ T9970] check_panic_on_warn.cold+0x19/0x34 [ 213.470191][ T9970] ? release_mtd_partition+0x71/0x90 [ 213.471801][ T9970] __warn.cold+0x191/0x318 [ 213.473185][ T9970] __report_bug+0x30f/0x440 [ 213.474608][ T9970] ? release_mtd_partition+0x71/0x90 [ 213.476217][ T9970] ? __pfx___report_bug+0x10/0x10 [ 213.477756][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.479257][ T9970] ? delete_node+0x20a/0x8f0 [ 213.480682][ T9970] ? release_mtd_partition+0x71/0x90 [ 213.482299][ T9970] report_bug+0xb2/0x220 [ 213.483634][ T9970] ? release_mtd_partition+0x71/0x90 [ 213.485243][ T9970] handle_bug+0x16a/0x2a0 [ 213.486577][ T9970] exc_invalid_op+0x17/0x50 [ 213.487967][ T9970] asm_exc_invalid_op+0x1a/0x20 [ 213.489475][ T9970] RIP: 0010:release_mtd_partition+0x71/0x90 [ 213.491277][ T9970] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 cf 65 cf fb 48 89 df 5b 5d e9 c5 65 cf fb e8 30 f0 6a fb 90 <0f> 0b 90 eb c2 e8 e5 60 db fb eb db 48 89 ef e8 db 60 db fb eb a5 [ 213.497073][ T9970] RSP: 0018:ffffc9002297f818 EFLAGS: 00010293 [ 213.498938][ T9970] RAX: 0000000000000000 RBX: ffff88803ea6c000 RCX: ffffffff8b91b147 [ 213.501328][ T9970] RDX: ffff88802ef44a80 RSI: ffffffff869e7ef0 RDI: ffff88803ea6c000 [ 213.503726][ T9970] RBP: ffff88803ea6c6a8 R08: 0000000000000001 R09: 0000000000000001 [ 213.506129][ T9970] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 213.508543][ T9970] R13: dffffc0000000000 R14: ffff888037048fa0 R15: 0000000000000000 [ 213.510907][ T9970] ? delete_node+0x417/0x8f0 [ 213.512327][ T9970] ? release_mtd_partition+0x70/0x90 [ 213.513939][ T9970] ? release_mtd_partition+0x70/0x90 [ 213.515543][ T9970] mtd_release+0xa0/0xd0 [ 213.516845][ T9970] ? __pfx_mtd_release+0x10/0x10 [ 213.518380][ T9970] device_release+0xd2/0x270 [ 213.519797][ T9970] kobject_put+0x1f7/0x640 [ 213.521163][ T9970] put_device+0x1f/0x30 [ 213.522446][ T9970] add_mtd_device+0xbd7/0x17a0 [ 213.523914][ T9970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.525724][ T9970] ? __pfx_add_mtd_device+0x10/0x10 [ 213.527307][ T9970] mtd_add_partition+0x30a/0x660 [ 213.528817][ T9970] ? __pfx_mtd_add_partition+0x10/0x10 [ 213.530477][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.531942][ T9970] mtdchar_blkpg_ioctl+0x207/0x250 [ 213.533504][ T9970] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 213.535627][ T9970] ? lock_release+0x24d/0x310 [ 213.537525][ T9970] mtdchar_ioctl+0x1670/0x1fd0 [ 213.539091][ T9970] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 213.540695][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.542171][ T9970] ? lock_acquire+0x301/0x370 [ 213.543641][ T9970] ? trace_contention_end+0x126/0x160 [ 213.545269][ T9970] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 213.546907][ T9970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.548461][ T9970] ? __pfx___mutex_lock+0x10/0x10 [ 213.549997][ T9970] ? rcu_is_watching+0x12/0xc0 [ 213.551484][ T9970] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 213.553062][ T9970] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 213.554978][ T9970] __x64_sys_ioctl+0x18e/0x210 [ 213.556519][ T9970] do_syscall_64+0x115/0x870 [ 213.557943][ T9970] ? clear_bhb_loop+0x40/0x90 [ 213.559392][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.561177][ T9970] RIP: 0033:0x7fe55df9ce59 [ 213.562555][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.568347][ T9970] RSP: 002b:00007fe55ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.570851][ T9970] RAX: ffffffffffffffda RBX: 00007fe55e215fa0 RCX: 00007fe55df9ce59 [ 213.573224][ T9970] RDX: 0000200000000140 RSI: 0000000000001269 RDI: 0000000000000004 [ 213.575616][ T9970] RBP: 00007fe55ed6e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.578039][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.580442][ T9970] R13: 00007fe55e216038 R14: 00007fe55e215fa0 R15: 00007ffe8da730f8 [ 213.582839][ T9970] [ 213.584608][ T9970] Kernel Offset: disabled [ 213.585941][ T9970] Rebooting in 86400 seconds..