last executing test programs: 20.66893764s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000005c0)={0x88, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000000)) 17.593937038s ago: executing program 1 (id=29): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 17.593396486s ago: executing program 0 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x586}]}) 17.521105775s ago: executing program 1 (id=31): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x2, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000000001000006020202020202010130030106"], 0x5a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 17.452546371s ago: executing program 0 (id=32): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 17.116877973s ago: executing program 0 (id=39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 17.064224931s ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) 17.060435098s ago: executing program 0 (id=43): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d58}}, 0x44) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 16.991144855s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='p:my_probe .', 0xc) 16.98270943s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 13.661017583s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) close(r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4) userfaultfd(0x1) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13.630798239s ago: executing program 32 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) close(r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4) userfaultfd(0x1) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13.570868202s ago: executing program 33 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='p:my_probe .', 0xc) 2.370933739s ago: executing program 4 (id=265): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r0) write(0xffffffffffffffff, &(0x7f0000000c00)='1', 0x1) close(0xffffffffffffffff) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/alua/tg_pt_gps/default_tg_pt_gp/members\x00', 0x0, 0x0) 2.369692374s ago: executing program 4 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.271025856s ago: executing program 4 (id=271): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 2.270485616s ago: executing program 4 (id=275): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x801, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x280, 0x280, 0x0, 0x1, 0x0, 0x1, 0x3f}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000e000a000100030108004000400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8000e00080001000502040040000000"], 0x11) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8000e00080001000403040040000000"], 0x11) write(r0, &(0x7f0000000300)="00112233445566778899", 0xa) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000d00"], 0xb) 2.18765059s ago: executing program 4 (id=278): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) 2.18689475s ago: executing program 4 (id=281): syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8) close(r1) 1.351005958s ago: executing program 5 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000500)='base=0x400000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000600)='base=0x500000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000700)='base=0x600000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000800)='base=0x700000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000900)='base=0x800000 size=0x100000 type=write-combining\n\x00', 0x31) 1.350517233s ago: executing program 5 (id=327): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x8}, 0x10) 1.290434167s ago: executing program 5 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 1.289368216s ago: executing program 5 (id=331): openat$ptmx(0xffffffffffffff9c, 0x0, 0x42081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.230480406s ago: executing program 5 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x100000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000300)='base=0x200000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000400)='base=0x300000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000500)='base=0x400000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000600)='base=0x500000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000a00)='base=0x0 size=0x200000 type=write-combining\n\x00', 0x2c) 1.160200446s ago: executing program 5 (id=335): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0) 1.080024373s ago: executing program 2 (id=340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 1.02067662s ago: executing program 2 (id=342): openat$ptmx(0xffffffffffffff9c, 0x0, 0x42081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 968.808672ms ago: executing program 2 (id=345): chdir(&(0x7f0000000000)='./file0/file0\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10000000") 968.175832ms ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 310.32124ms ago: executing program 2 (id=360): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 309.454035ms ago: executing program 2 (id=361): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000540)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xc) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 198.90559ms ago: executing program 3 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) 198.655274ms ago: executing program 3 (id=364): openat$ptmx(0xffffffffffffff9c, 0x0, 0x42081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 78.191987ms ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000800)='base=0x700000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000900)='base=0x800000 size=0x100000 type=write-combining\n\x00', 0x31) 77.72377ms ago: executing program 3 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='active', 0x6) 190.224µs ago: executing program 3 (id=367): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='addr\x00', &(0x7f0000000140)='1270.0.1\x00', 0x0) 0s ago: executing program 3 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 53.765052][ C2] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.765068][ C2] console_unlock+0x103/0x260 [ 53.765081][ C2] ? __pfx_console_unlock+0x10/0x10 [ 53.765093][ C2] ? lock_acquire+0x141/0x370 [ 53.765111][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.765125][ C2] vprintk_emit+0x407/0x6b0 [ 53.765139][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.765151][ C2] ? est_reload_work_handler+0x1a1/0x6c0 [ 53.765163][ C2] ? find_held_lock+0x2b/0x80 [ 53.765178][ C2] _printk+0xcf/0x110 [ 53.765188][ C2] ? __pfx__printk+0x10/0x10 [ 53.765199][ C2] ? lockdep_unlock+0x5a/0xc0 [ 53.765214][ C2] ? ip_vs_est_kthread_start+0x263/0x390 [ 53.765228][ C2] ip_vs_est_kthread_start.cold+0x3c/0x72 [ 53.765241][ C2] est_reload_work_handler+0x3a4/0x6c0 [ 53.765256][ C2] process_one_work+0xa23/0x1940 [ 53.765277][ C2] ? __pfx_process_one_work+0x10/0x10 [ 53.765296][ C2] ? __pfx_est_reload_work_handler+0x10/0x10 [ 53.765309][ C2] worker_thread+0x5ef/0xe50 [ 53.765327][ C2] ? __pfx_worker_thread+0x10/0x10 [ 53.765342][ C2] ? kthread+0x13a/0x450 [ 53.765356][ C2] ? __pfx_worker_thread+0x10/0x10 [ 53.765370][ C2] kthread+0x370/0x450 [ 53.765383][ C2] ? __pfx_kthread+0x10/0x10 [ 53.765398][ C2] ret_from_fork+0x72b/0xd50 [ 53.765412][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 53.765425][ C2] ? __switch_to+0x800/0x10f0 [ 53.765442][ C2] ? __pfx_kthread+0x10/0x10 [ 53.765456][ C2] ret_from_fork_asm+0x1a/0x30 [ 53.765477][ C2] [ 53.766619][ T5141] FAULT_INJECTION: forcing a failure. [ 53.766619][ T5141] name failslab, interval 1, probability 10, space 0, times 97 [ 53.767520][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.767536][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.767542][ T6010] Call Trace: [ 53.767547][ T6010] [ 53.767552][ T6010] dump_stack_lvl+0x100/0x190 [ 53.767570][ T6010] should_fail_ex.cold+0x5/0xa [ 53.767583][ T6010] should_failslab+0xc2/0x120 [ 53.767601][ T6010] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.767618][ T6010] ? alloc_inode+0x183/0x250 [ 53.767638][ T6010] alloc_inode+0x183/0x250 [ 53.767653][ T6010] alloc_anon_inode+0x2a/0x3e0 [ 53.767669][ T6010] anon_inode_make_secure_inode+0x2f/0x140 [ 53.767688][ T6010] __anon_inode_getfile+0x1cf/0x280 [ 53.767704][ T6010] new_userfaultfd+0x255/0x400 [ 53.767721][ T6010] __ia32_sys_userfaultfd+0x4b/0xb0 [ 53.767732][ T6010] __do_fast_syscall_32+0xe7/0x970 [ 53.767748][ T6010] do_fast_syscall_32+0x32/0x70 [ 53.767763][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.767777][ T6010] RIP: 0023:0xf7f48fec [ 53.767791][ T6010] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 53.767797][ T6010] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 53.767808][ T6010] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 53.767814][ T6010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.767820][ T6010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.767826][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.767832][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.767845][ T6010] [ 53.768680][ T6010] FAULT_INJECTION: forcing a failure. [ 53.768680][ T6010] name failslab, interval 1, probability 10, space 0, times 90 [ 53.769287][ T5751] FAULT_INJECTION: forcing a failure. [ 53.769287][ T5751] name failslab, interval 1, probability 10, space 0, times 89 [ 53.769517][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.769531][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.769536][ T5141] Call Trace: [ 53.769540][ T5141] [ 53.769543][ T5141] dump_stack_lvl+0x100/0x190 [ 53.769558][ T5141] should_fail_ex.cold+0x5/0xa [ 53.769569][ T5141] should_failslab+0xc2/0x120 [ 53.769584][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.769596][ T5141] ? __pfx_map_id_range_down+0x10/0x10 [ 53.769611][ T5141] ? security_inode_alloc+0x3b/0x2c0 [ 53.769626][ T5141] security_inode_alloc+0x3b/0x2c0 [ 53.769639][ T5141] inode_init_always_gfp+0xc77/0xfb0 [ 53.769651][ T5141] alloc_inode+0x8e/0x250 [ 53.769664][ T5141] sock_alloc+0x44/0x280 [ 53.769679][ T5141] ? security_socket_create+0x7f/0x250 [ 53.769692][ T5141] __sock_create+0xc2/0x860 [ 53.769705][ T5141] __sys_socket+0x14d/0x260 [ 53.769716][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.769731][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.769742][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.769755][ T5141] do_syscall_64+0x115/0x840 [ 53.769767][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.769780][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.769790][ T5141] RIP: 0033:0x7f916541c707 [ 53.769799][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.769809][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.769819][ T5141] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f916541c707 [ 53.769825][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.769831][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.769837][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.769843][ T5141] R13: 00007fff310c3290 R14: 000000000000001d R15: 00007fff310c3290 [ 53.769855][ T5141] [ 53.769940][ T5141] socket: no more sockets [ 53.770032][ T5141] FAULT_INJECTION: forcing a failure. [ 53.770032][ T5141] name failslab, interval 1, probability 10, space 0, times 88 [ 53.770045][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.770056][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.770061][ T5141] Call Trace: [ 53.770064][ T5141] [ 53.770068][ T5141] dump_stack_lvl+0x100/0x190 [ 53.770080][ T5141] should_fail_ex.cold+0x5/0xa [ 53.770091][ T5141] should_failslab+0xc2/0x120 [ 53.770105][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.770119][ T5141] ? do_getname_kernel+0x5d/0x250 [ 53.770133][ T5141] do_getname_kernel+0x5d/0x250 [ 53.770146][ T5141] kern_path+0x1f/0x50 [ 53.770162][ T5141] unix_find_other+0x120/0xb10 [ 53.770177][ T5141] ? __pfx_unix_find_other+0x10/0x10 [ 53.770191][ T5141] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 53.770211][ T5141] unix_dgram_connect+0x1ea/0xbf0 [ 53.770228][ T5141] ? __pfx_unix_dgram_connect+0x10/0x10 [ 53.770241][ T5141] __sys_connect_file+0x141/0x1a0 [ 53.770254][ T5141] __sys_connect+0x141/0x170 [ 53.770266][ T5141] ? __pfx___sys_connect+0x10/0x10 [ 53.770286][ T5141] __x64_sys_connect+0x72/0xb0 [ 53.770298][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.770310][ T5141] do_syscall_64+0x115/0x840 [ 53.770322][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.770334][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.770344][ T5141] RIP: 0033:0x7f91653a1407 [ 53.770352][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.770368][ T5141] RSP: 002b:00007fff310c3120 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 53.770378][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.770384][ T5141] RDX: 000000000000006e RSI: 00007f91654a8560 RDI: 0000000000000003 [ 53.770390][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.770396][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.770401][ T5141] R13: 0000000000000017 R14: 0000000000000032 R15: 00007fff310c3290 [ 53.770414][ T5141] [ 53.770533][ T5141] FAULT_INJECTION: forcing a failure. [ 53.770533][ T5141] name failslab, interval 1, probability 10, space 0, times 87 [ 53.770545][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.770556][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.770562][ T5141] Call Trace: [ 53.770565][ T5141] [ 53.770568][ T5141] dump_stack_lvl+0x100/0x190 [ 53.770580][ T5141] should_fail_ex.cold+0x5/0xa [ 53.770591][ T5141] should_failslab+0xc2/0x120 [ 53.770605][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.770617][ T5141] ? trace_kmem_cache_alloc+0xdd/0x100 [ 53.770632][ T5141] ? security_file_alloc+0x34/0x2c0 [ 53.770649][ T5141] security_file_alloc+0x34/0x2c0 [ 53.770663][ T5141] init_file+0x95/0x480 [ 53.770675][ T5141] alloc_empty_file+0x79/0x1c0 [ 53.770688][ T5141] alloc_file_pseudo+0x183/0x290 [ 53.770702][ T5141] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 53.770716][ T5141] ? alloc_fd+0x471/0x7a0 [ 53.770728][ T5141] sock_alloc_file+0x50/0x210 [ 53.770743][ T5141] __sys_socket+0x1c0/0x260 [ 53.770754][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.770768][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.770779][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.770791][ T5141] do_syscall_64+0x115/0x840 [ 53.770802][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.770815][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.770825][ T5141] RIP: 0033:0x7f916541c707 [ 53.770833][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.770842][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.770851][ T5141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f916541c707 [ 53.770857][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.770863][ T5141] RBP: 00007f91654a8560 R08: 0000000000000073 R09: 0000000000000001 [ 53.770869][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.770875][ T5141] R13: 00007fff310c3290 R14: 0000000000000033 R15: 00007fff310c3290 [ 53.770887][ T5141] [ 53.771340][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.771355][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.771362][ T6010] Call Trace: [ 53.771366][ T6010] [ 53.771371][ T6010] dump_stack_lvl+0x100/0x190 [ 53.771384][ T6010] should_fail_ex.cold+0x5/0xa [ 53.771397][ T6010] should_failslab+0xc2/0x120 [ 53.771402][ T5141] FAULT_INJECTION: forcing a failure. [ 53.771402][ T5141] name failslab, interval 1, probability 10, space 0, times 85 [ 53.771413][ T6010] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.771427][ T6010] ? __pfx_map_id_range_down+0x10/0x10 [ 53.771443][ T6010] ? security_inode_alloc+0x3b/0x2c0 [ 53.771459][ T6010] security_inode_alloc+0x3b/0x2c0 [ 53.771472][ T6010] inode_init_always_gfp+0xc77/0xfb0 [ 53.771484][ T6010] alloc_inode+0x8e/0x250 [ 53.771503][ T6010] path_from_stashed+0x25b/0x750 [ 53.771519][ T6010] pidfs_alloc_file+0xf8/0x290 [ 53.771531][ T6010] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 53.771545][ T6010] pidfd_prepare+0x107/0x1b0 [ 53.771560][ T6010] __ia32_sys_pidfd_open+0x105/0x1a0 [ 53.771576][ T6010] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 53.771595][ T6010] __do_fast_syscall_32+0xe7/0x970 [ 53.771610][ T6010] do_fast_syscall_32+0x32/0x70 [ 53.771624][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.771637][ T6010] RIP: 0023:0xf7f48fec [ 53.771648][ T6010] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 53.771653][ T6010] RSP: 002b:00000000f54064dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 53.771663][ T6010] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 0000000000000000 [ 53.771670][ T6010] RDX: 000000005d025a00 RSI: 00000000f54065b0 RDI: 00000000f7031736 [ 53.771677][ T6010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.771684][ T6010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.771690][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.771703][ T6010] [ 53.772471][ T6010] FAULT_INJECTION: forcing a failure. [ 53.772471][ T6010] name failslab, interval 1, probability 10, space 0, times 83 [ 53.772486][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.772505][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.772511][ T6010] Call Trace: [ 53.772514][ T6010] [ 53.772517][ T6010] dump_stack_lvl+0x100/0x190 [ 53.772530][ T6010] should_fail_ex.cold+0x5/0xa [ 53.772542][ T6010] should_failslab+0xc2/0x120 [ 53.772556][ T6010] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.772568][ T6010] ? d_instantiate+0x8a/0xb0 [ 53.772590][ T6010] ? d_instantiate+0x8a/0xb0 [ 53.772602][ T6010] ? alloc_empty_file+0x5b/0x1c0 [ 53.772617][ T6010] alloc_empty_file+0x5b/0x1c0 [ 53.772630][ T6010] alloc_file_pseudo+0x183/0x290 [ 53.772644][ T6010] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 53.772658][ T6010] ? alloc_fd+0x471/0x7a0 [ 53.772670][ T6010] sock_alloc_file+0x50/0x210 [ 53.772686][ T6010] __sys_socket+0x1c0/0x260 [ 53.772696][ T6010] ? xfd_validate_state+0x129/0x190 [ 53.772709][ T6010] ? __pfx___sys_socket+0x10/0x10 [ 53.772724][ T6010] __ia32_sys_socket+0x72/0xb0 [ 53.772735][ T6010] ? lockdep_hardirqs_on+0x78/0x100 [ 53.772763][ T6010] __do_fast_syscall_32+0xe7/0x970 [ 53.772780][ T6010] do_fast_syscall_32+0x32/0x70 [ 53.772794][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.772807][ T6010] RIP: 0023:0xf7f48fec [ 53.772818][ T6010] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 53.772823][ T6010] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 53.772833][ T6010] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 53.772839][ T6010] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 53.772845][ T6010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.772851][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.772857][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.772869][ T6010] [ 53.773054][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 53.773068][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.773074][ T5751] Call Trace: [ 53.773077][ T5751] [ 53.773081][ T5751] dump_stack_lvl+0x100/0x190 [ 53.773094][ T5751] should_fail_ex.cold+0x5/0xa [ 53.773106][ T5751] should_failslab+0xc2/0x120 [ 53.773120][ T5751] __kmalloc_noprof+0xfc/0x820 [ 53.773133][ T5751] ? tomoyo_encode2+0xfb/0x3c0 [ 53.773151][ T5751] tomoyo_encode2+0xfb/0x3c0 [ 53.773167][ T5751] tomoyo_encode+0x29/0x50 [ 53.773182][ T5751] tomoyo_realpath_from_path+0x18c/0x690 [ 53.773200][ T5751] tomoyo_path_perm+0x276/0x460 [ 53.773212][ T5751] ? tomoyo_path_perm+0x262/0x460 [ 53.773226][ T5751] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 53.773257][ T5751] security_inode_getattr+0x116/0x280 [ 53.773270][ T5751] vfs_statx+0x11f/0x3f0 [ 53.773283][ T5751] ? __pfx_vfs_statx+0x10/0x10 [ 53.773298][ T5751] do_statx+0xf1/0x170 [ 53.773312][ T5751] ? __pfx_do_statx+0x10/0x10 [ 53.773332][ T5751] ? strncpy_from_user+0x19d/0x2d0 [ 53.773349][ T5751] ? do_getname+0x191/0x390 [ 53.773363][ T5751] __ia32_sys_statx+0x140/0x1f0 [ 53.773378][ T5751] __do_fast_syscall_32+0xe7/0x970 [ 53.773394][ T5751] do_fast_syscall_32+0x32/0x70 [ 53.773407][ T5751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.773424][ T5751] RIP: 0023:0xf705efec [ 53.773433][ T5751] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.773443][ T5751] RSP: 002b:00000000ffb89d20 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 53.773453][ T5751] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffb8a050 [ 53.773459][ T5751] RDX: 0000000000000900 RSI: 00000000000007ff RDI: 00000000ffb89dbc [ 53.773465][ T5751] RBP: 00000000ffb89f10 R08: 0000000000000000 R09: 0000000000000000 [ 53.773471][ T5751] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.773477][ T5751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.773489][ T5751] [ 53.773499][ T5751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.773819][ T6010] FAULT_INJECTION: forcing a failure. [ 53.773819][ T6010] name failslab, interval 1, probability 10, space 0, times 81 [ 53.773834][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 53.773845][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.773851][ T6010] Call Trace: [ 53.773854][ T6010] [ 53.773858][ T6010] dump_stack_lvl+0x100/0x190 [ 53.773870][ T6010] should_fail_ex.cold+0x5/0xa [ 53.773882][ T6010] should_failslab+0xc2/0x120 [ 53.773896][ T6010] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.773910][ T6010] ? __alloc_skb+0x5b7/0x710 [ 53.773923][ T6010] ? __alloc_skb+0x140/0x710 [ 53.773938][ T6010] __alloc_skb+0x140/0x710 [ 53.773950][ T6010] ? __alloc_skb+0x5b7/0x710 [ 53.773963][ T6010] ? __pfx___alloc_skb+0x10/0x10 [ 53.773976][ T6010] ? lockdep_init_map_type+0x5c/0x250 [ 53.773989][ T6010] audit_log_start+0x350/0x930 [ 53.774002][ T6010] ? __pfx_audit_log_start+0x10/0x10 [ 53.774016][ T6010] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 53.774035][ T6010] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.774054][ T6010] audit_seccomp+0x60/0x190 [ 53.774066][ T6010] __secure_computing+0x26d/0x2c0 [ 53.774080][ T6010] __do_fast_syscall_32+0x460/0x970 [ 53.774095][ T6010] do_fast_syscall_32+0x32/0x70 [ 53.774108][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.774121][ T6010] RIP: 0023:0xf7f48fec [ 53.774131][ T6010] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 53.774136][ T6010] RSP: 002b:00000000f54057fc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 53.774145][ T6010] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 53.774151][ T6010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.774157][ T6010] RBP: 00000000f7031079 R08: 0000000000000000 R09: 0000000000000000 [ 53.774163][ T6010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.774169][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.774181][ T6010] [ 53.774530][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.774543][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.774549][ T5141] Call Trace: [ 53.774552][ T5141] [ 53.774556][ T5141] dump_stack_lvl+0x100/0x190 [ 53.774569][ T5141] should_fail_ex.cold+0x5/0xa [ 53.774581][ T5141] should_failslab+0xc2/0x120 [ 53.774595][ T5141] __kmalloc_noprof+0xfc/0x820 [ 53.774608][ T5141] ? tomoyo_encode2+0xfb/0x3c0 [ 53.774625][ T5141] tomoyo_encode2+0xfb/0x3c0 [ 53.774642][ T5141] tomoyo_unix_entry+0x343/0x640 [ 53.774658][ T5141] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 53.774681][ T5141] tomoyo_socket_connect_permission+0x31a/0x360 [ 53.774698][ T5141] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 53.774716][ T5141] ? __might_fault+0xc5/0x140 [ 53.774731][ T5141] security_socket_connect+0xd3/0x230 [ 53.774744][ T5141] __sys_connect_file+0x8f/0x1a0 [ 53.774757][ T5141] __sys_connect+0x141/0x170 [ 53.774770][ T5141] ? __pfx___sys_connect+0x10/0x10 [ 53.774790][ T5141] __x64_sys_connect+0x72/0xb0 [ 53.774802][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.774814][ T5141] do_syscall_64+0x115/0x840 [ 53.774826][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.774838][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.774849][ T5141] RIP: 0033:0x7f91653a1407 [ 53.774857][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.774867][ T5141] RSP: 002b:00007fff310c3120 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 53.774877][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.774883][ T5141] RDX: 000000000000006e RSI: 00007f91654a8560 RDI: 0000000000000003 [ 53.774889][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.774895][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.774900][ T5141] R13: 0000000000000069 R14: 000000000000002f R15: 00007fff310c3290 [ 53.774913][ T5141] [ 53.775774][ T5141] FAULT_INJECTION: forcing a failure. [ 53.775774][ T5141] name failslab, interval 1, probability 10, space 0, times 77 [ 53.777334][ T5751] FAULT_INJECTION: forcing a failure. [ 53.777334][ T5751] name failslab, interval 1, probability 10, space 0, times 71 [ 53.778087][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.778100][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.778106][ T5141] Call Trace: [ 53.778109][ T5141] [ 53.778113][ T5141] dump_stack_lvl+0x100/0x190 [ 53.778126][ T5141] should_fail_ex.cold+0x5/0xa [ 53.778137][ T5141] should_failslab+0xc2/0x120 [ 53.778151][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.778164][ T5141] ? __pfx_map_id_range_down+0x10/0x10 [ 53.778178][ T5141] ? security_inode_alloc+0x3b/0x2c0 [ 53.778193][ T5141] security_inode_alloc+0x3b/0x2c0 [ 53.778205][ T5141] inode_init_always_gfp+0xc77/0xfb0 [ 53.778217][ T5141] alloc_inode+0x8e/0x250 [ 53.778230][ T5141] sock_alloc+0x44/0x280 [ 53.778244][ T5141] ? security_socket_create+0x7f/0x250 [ 53.778256][ T5141] __sock_create+0xc2/0x860 [ 53.778269][ T5141] __sys_socket+0x14d/0x260 [ 53.778280][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.778295][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.778305][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.778317][ T5141] do_syscall_64+0x115/0x840 [ 53.778329][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.778342][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.778352][ T5141] RIP: 0033:0x7f916541c707 [ 53.778364][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.778374][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.778383][ T5141] RAX: ffffffffffffffda RBX: 0000000000000068 RCX: 00007f916541c707 [ 53.778390][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.778396][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.778401][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.778407][ T5141] R13: 00007fff310c3290 R14: 000000000000004d R15: 00007fff310c3290 [ 53.778420][ T5141] [ 53.778432][ T5141] socket: no more sockets [ 53.779962][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 53.779975][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.779981][ T5751] Call Trace: [ 53.779985][ T5751] [ 53.779989][ T5751] dump_stack_lvl+0x100/0x190 [ 53.780001][ T5751] should_fail_ex.cold+0x5/0xa [ 53.780013][ T5751] should_failslab+0xc2/0x120 [ 53.780027][ T5751] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.780040][ T5751] ? do_getname+0x35/0x390 [ 53.780055][ T5751] do_getname+0x35/0x390 [ 53.780069][ T5751] __ia32_sys_statx+0x1ad/0x1f0 [ 53.780084][ T5751] __do_fast_syscall_32+0xe7/0x970 [ 53.780099][ T5751] do_fast_syscall_32+0x32/0x70 [ 53.780113][ T5751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.780126][ T5751] RIP: 0023:0xf705efec [ 53.780134][ T5751] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.780144][ T5751] RSP: 002b:00000000ffb89d20 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 53.780153][ T5751] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffb8a050 [ 53.780160][ T5751] RDX: 0000000000000900 RSI: 00000000000007ff RDI: 00000000ffb89dbc [ 53.780166][ T5751] RBP: 00000000ffb89f10 R08: 0000000000000000 R09: 0000000000000000 [ 53.780171][ T5751] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.780177][ T5751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.780189][ T5751] [ 53.783376][ T5748] FAULT_INJECTION: forcing a failure. [ 53.783376][ T5748] name failslab, interval 1, probability 10, space 0, times 62 [ 53.785980][ C1] FAULT_INJECTION: forcing a failure. [ 53.785980][ C1] name failslab, interval 1, probability 10, space 0, times 62 [ 53.786258][ C3] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 53.786866][ T5141] FAULT_INJECTION: forcing a failure. [ 53.786866][ T5141] name failslab, interval 1, probability 10, space 0, times 59 [ 53.787985][ C1] CPU: 1 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 53.787999][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.788005][ C1] Call Trace: [ 53.788009][ C1] [ 53.788013][ C1] dump_stack_lvl+0x100/0x190 [ 53.788028][ C1] should_fail_ex.cold+0x5/0xa [ 53.788040][ C1] should_failslab+0xc2/0x120 [ 53.788055][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.788069][ C1] ? __alloc_skb+0x140/0x710 [ 53.788073][ T219] FAULT_INJECTION: forcing a failure. [ 53.788073][ T219] name failslab, interval 1, probability 10, space 0, times 59 [ 53.788086][ C1] __alloc_skb+0x140/0x710 [ 53.788099][ C1] ? __alloc_skb+0x5b7/0x710 [ 53.788112][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 53.788126][ C1] ? find_held_lock+0x2b/0x80 [ 53.788139][ C1] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 53.788154][ C1] ndisc_alloc_skb+0xd8/0x530 [ 53.788170][ C1] ndisc_send_rs+0x73/0x680 [ 53.788186][ C1] addrconf_rs_timer+0x424/0x880 [ 53.788220][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.788238][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.788251][ C1] call_timer_fn+0x19a/0x610 [ 53.788267][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 53.788284][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.788297][ C1] ? mark_held_locks+0x40/0x70 [ 53.788315][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.788327][ C1] __run_timers+0x757/0xb00 [ 53.788345][ C1] ? __pfx___run_timers+0x10/0x10 [ 53.788365][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 53.788380][ C1] run_timer_base+0x114/0x190 [ 53.788395][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 53.788413][ C1] run_timer_softirq+0x1a/0x50 [ 53.788428][ C1] handle_softirqs+0x1ea/0x9b0 [ 53.788442][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 53.788454][ C1] ? _raw_spin_unlock+0x28/0x50 [ 53.788464][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.788479][ C1] __irq_exit_rcu+0x162/0x210 [ 53.788494][ C1] irq_exit_rcu+0x9/0x30 [ 53.788505][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.788518][ C1] [ 53.788521][ C1] [ 53.788525][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.788537][ C1] RIP: 0010:__zap_vma_range+0xffa/0x4a30 [ 53.788552][ C1] Code: 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 74 06 0f 8e f9 34 00 00 4c 8b 64 24 38 31 ff 41 0f b6 5c 24 08 <89> de e8 9f 86 ac ff 84 db 0f 84 8e 00 00 00 e8 82 8c ac ff 49 8d [ 53.788562][ C1] RSP: 0000:ffffc900044f77a0 EFLAGS: 00000246 [ 53.788571][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffea0001826a00 [ 53.788578][ C1] RDX: dffffc0000000000 RSI: ffffffff825d1f9a RDI: 0000000000000000 [ 53.788584][ C1] RBP: 0000000000000004 R08: 0000000000000006 R09: ffffffffffffffff [ 53.788590][ C1] R10: 0000000000060800 R11: 0000000000000000 R12: ffffc900044f7a78 [ 53.788597][ C1] R13: ffffea0001826a00 R14: ffff88806653dfe0 R15: 80000000609a8007 [ 53.788607][ C1] ? __zap_vma_range+0xfca/0x4a30 [ 53.788633][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 53.788650][ C1] ? find_held_lock+0x2b/0x80 [ 53.788666][ C1] unmap_vmas+0x299/0x5f0 [ 53.788682][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 53.788697][ C1] ? mas_next_slot+0x10a3/0x1960 [ 53.788718][ C1] exit_mmap+0x1ef/0xa00 [ 53.788735][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 53.788750][ C1] ? rcu_is_watching+0x12/0xc0 [ 53.788765][ C1] ? uprobe_clear_state+0x49/0x260 [ 53.788775][ C1] ? find_held_lock+0x2b/0x80 [ 53.788788][ C1] ? uprobe_clear_state+0x5f/0x260 [ 53.788800][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 53.788819][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 53.788836][ C1] __mmput+0x12a/0x410 [ 53.788848][ C1] mmput+0x67/0x80 [ 53.788859][ C1] do_exit+0x8b1/0x2ae0 [ 53.788875][ C1] ? do_raw_spin_lock+0x128/0x260 [ 53.788886][ C1] ? __pfx_do_exit+0x10/0x10 [ 53.788899][ C1] ? do_group_exit+0x1bd/0x2a0 [ 53.788914][ C1] ? rcu_is_watching+0x12/0xc0 [ 53.788928][ C1] do_group_exit+0xd5/0x2a0 [ 53.788944][ C1] __ia32_sys_exit_group+0x3e/0x50 [ 53.788959][ C1] ia32_sys_call+0x19ea/0x19f0 [ 53.788974][ C1] __do_fast_syscall_32+0xe7/0x970 [ 53.788988][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 53.789001][ C1] do_fast_syscall_32+0x32/0x70 [ 53.789015][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.789028][ C1] RIP: 0023:0xf705efec [ 53.789037][ C1] Code: Unable to access opcode bytes at 0xf705efc2. [ 53.789041][ C1] RSP: 002b:00000000ffb89f4c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 53.789051][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffb8a050 [ 53.789057][ C1] RDX: 00000000f7185037 RSI: 00000000f742d300 RDI: 00000000f72614d9 [ 53.789063][ C1] RBP: 00000000ffb89fa8 R08: 0000000000000000 R09: 0000000000000000 [ 53.789069][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.789075][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.789087][ C1] [ 53.789123][ C1] FAULT_INJECTION: forcing a failure. [ 53.789123][ C1] name failslab, interval 1, probability 10, space 0, times 58 [ 53.789136][ C1] CPU: 1 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 53.789148][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.789154][ C1] Call Trace: [ 53.789157][ C1] [ 53.789160][ C1] dump_stack_lvl+0x100/0x190 [ 53.789172][ C1] should_fail_ex.cold+0x5/0xa [ 53.789184][ C1] should_failslab+0xc2/0x120 [ 53.789199][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.789212][ C1] ? dst_alloc+0x99/0x1a0 [ 53.789227][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 53.789234][ C3] FAULT_INJECTION: forcing a failure. [ 53.789234][ C3] name failslab, interval 1, probability 10, space 0, times 58 [ 53.789244][ C1] dst_alloc+0x99/0x1a0 [ 53.789258][ C1] icmp6_dst_alloc+0x79/0x4f0 [ 53.789274][ C1] ndisc_send_skb+0x133f/0x1bf0 [ 53.789290][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 53.789306][ C1] ? kmalloc_reserve+0xf9/0x350 [ 53.789320][ C1] ? ndisc_alloc_skb+0x319/0x530 [ 53.789338][ C1] ndisc_send_rs+0x129/0x680 [ 53.789354][ C1] addrconf_rs_timer+0x424/0x880 [ 53.789369][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.789385][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.789398][ C1] call_timer_fn+0x19a/0x610 [ 53.789413][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 53.789430][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.789443][ C1] ? mark_held_locks+0x40/0x70 [ 53.789461][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 53.789473][ C1] __run_timers+0x757/0xb00 [ 53.789495][ C1] ? __pfx___run_timers+0x10/0x10 [ 53.789515][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 53.789528][ C1] run_timer_base+0x114/0x190 [ 53.789544][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 53.789561][ C1] run_timer_softirq+0x1a/0x50 [ 53.789576][ C1] handle_softirqs+0x1ea/0x9b0 [ 53.789590][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 53.789602][ C1] ? _raw_spin_unlock+0x28/0x50 [ 53.789612][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.789627][ C1] __irq_exit_rcu+0x162/0x210 [ 53.789638][ C1] irq_exit_rcu+0x9/0x30 [ 53.789649][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.789662][ C1] [ 53.789665][ C1] [ 53.789669][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.789680][ C1] RIP: 0010:__zap_vma_range+0xffa/0x4a30 [ 53.789695][ C1] Code: 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 74 06 0f 8e f9 34 00 00 4c 8b 64 24 38 31 ff 41 0f b6 5c 24 08 <89> de e8 9f 86 ac ff 84 db 0f 84 8e 00 00 00 e8 82 8c ac ff 49 8d [ 53.789704][ C1] RSP: 0000:ffffc900044f77a0 EFLAGS: 00000246 [ 53.789712][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffea0001826a00 [ 53.789718][ C1] RDX: dffffc0000000000 RSI: ffffffff825d1f9a RDI: 0000000000000000 [ 53.789725][ C1] RBP: 0000000000000004 R08: 0000000000000006 R09: ffffffffffffffff [ 53.789731][ C1] R10: 0000000000060800 R11: 0000000000000000 R12: ffffc900044f7a78 [ 53.789737][ C1] R13: ffffea0001826a00 R14: ffff88806653dfe0 R15: 80000000609a8007 [ 53.789747][ C1] ? __zap_vma_range+0xfca/0x4a30 [ 53.789774][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 53.789791][ C1] ? find_held_lock+0x2b/0x80 [ 53.789807][ C1] unmap_vmas+0x299/0x5f0 [ 53.789823][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 53.789838][ C1] ? mas_next_slot+0x10a3/0x1960 [ 53.789859][ C1] exit_mmap+0x1ef/0xa00 [ 53.789875][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 53.789890][ C1] ? rcu_is_watching+0x12/0xc0 [ 53.789905][ C1] ? uprobe_clear_state+0x49/0x260 [ 53.789914][ C1] ? find_held_lock+0x2b/0x80 [ 53.789927][ C1] ? uprobe_clear_state+0x5f/0x260 [ 53.789939][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 53.789958][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 53.789974][ C1] __mmput+0x12a/0x410 [ 53.789986][ C1] mmput+0x67/0x80 [ 53.789997][ C1] do_exit+0x8b1/0x2ae0 [ 53.790012][ C1] ? do_raw_spin_lock+0x128/0x260 [ 53.790023][ C1] ? __pfx_do_exit+0x10/0x10 [ 53.790037][ C1] ? do_group_exit+0x1bd/0x2a0 [ 53.790052][ C1] ? rcu_is_watching+0x12/0xc0 [ 53.790066][ C1] do_group_exit+0xd5/0x2a0 [ 53.790082][ C1] __ia32_sys_exit_group+0x3e/0x50 [ 53.790097][ C1] ia32_sys_call+0x19ea/0x19f0 [ 53.790112][ C1] __do_fast_syscall_32+0xe7/0x970 [ 53.790125][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 53.790139][ C1] do_fast_syscall_32+0x32/0x70 [ 53.790153][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.790166][ C1] RIP: 0023:0xf705efec [ 53.790174][ C1] Code: Unable to access opcode bytes at 0xf705efc2. [ 53.790178][ C1] RSP: 002b:00000000ffb89f4c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 53.790187][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffb8a050 [ 53.790194][ C1] RDX: 00000000f7185037 RSI: 00000000f742d300 RDI: 00000000f72614d9 [ 53.790200][ C1] RBP: 00000000ffb89fa8 R08: 0000000000000000 R09: 0000000000000000 [ 53.790206][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.790212][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.790224][ C1] [ 53.790231][ T5141] CPU: 2 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.790244][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.790250][ T5141] Call Trace: [ 53.790253][ T5141] [ 53.790257][ T5141] dump_stack_lvl+0x100/0x190 [ 53.790271][ T5141] should_fail_ex.cold+0x5/0xa [ 53.790282][ T5141] should_failslab+0xc2/0x120 [ 53.790297][ T5141] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.790310][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.790323][ T5141] ? __alloc_skb+0x140/0x710 [ 53.790338][ T5141] __alloc_skb+0x140/0x710 [ 53.790350][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.790363][ T5141] ? __pfx___alloc_skb+0x10/0x10 [ 53.790375][ T5141] ? trace_sched_exit_tp+0x120/0x160 [ 53.790392][ T5141] alloc_skb_with_frags+0xdd/0x760 [ 53.790411][ T5141] sock_alloc_send_pskb+0x801/0x980 [ 53.790428][ T5141] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.790441][ T5141] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 53.790458][ T5141] ? __rcu_read_unlock+0x26a/0x5e0 [ 53.790468][ T5141] ? rcu_is_watching+0x12/0xc0 [ 53.790483][ T5141] unix_dgram_sendmsg+0x3c7/0x1810 [ 53.790498][ T5141] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 53.790520][ T5141] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 53.790536][ T5141] ? __pfx_syslog_print+0x10/0x10 [ 53.790552][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.790568][ T5141] ? apparmor_socket_sendmsg+0x15b/0x270 [ 53.790582][ T5141] __sys_sendto+0x48b/0x4e0 [ 53.790594][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.790608][ T5141] ? __pfx___sys_sendto+0x10/0x10 [ 53.790624][ T5141] ? do_syslog+0x18c/0x6d0 [ 53.790639][ T5141] ? xfd_validate_state+0x129/0x190 [ 53.790654][ T5141] __x64_sys_sendto+0xe0/0x1c0 [ 53.790667][ T5141] ? do_syscall_64+0x90/0x840 [ 53.790679][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.790691][ T5141] do_syscall_64+0x115/0x840 [ 53.790703][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.790715][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.790725][ T5141] RIP: 0033:0x7f91653a1407 [ 53.790734][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.790744][ T5141] RSP: 002b:00007fff310c3150 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 53.790754][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.790760][ T5141] RDX: 000000000000004e RSI: 00007fff310c3290 RDI: 0000000000000003 [ 53.790766][ T5141] RBP: 00007fff310c36c0 R08: 0000000000000000 R09: 0000000000000000 [ 53.790772][ T5141] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff310c36d8 [ 53.790778][ T5141] R13: 00007fff310c3290 R14: 0000000000000033 R15: 00007fff310c3290 [ 53.790790][ T5141] [ 53.790797][ C3] CPU: 3 UID: 0 PID: 1487 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 53.790811][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.790819][ C3] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 53.790838][ C3] Call Trace: [ 53.790842][ C3] [ 53.790846][ C3] dump_stack_lvl+0x100/0x190 [ 53.790859][ C3] should_fail_ex.cold+0x5/0xa [ 53.790869][ C3] ? __lock_acquire+0x49f/0x1a40 [ 53.790886][ C3] should_failslab+0xc2/0x120 [ 53.790901][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.790914][ C3] ? __skb_ext_alloc+0x1a/0x80 [ 53.790928][ C3] __skb_ext_alloc+0x1a/0x80 [ 53.790938][ C3] skb_ext_add+0x40b/0x810 [ 53.790949][ C3] ? __local_bh_enable_ip+0x9e/0x120 [ 53.790962][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 53.790976][ C3] br_nf_pre_routing_ipv6+0xc7/0x8b0 [ 53.790995][ C3] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 53.791012][ C3] ? lock_acquire+0x1b9/0x370 [ 53.791028][ C3] ? find_held_lock+0x2b/0x80 [ 53.791032][ T5141] FAULT_INJECTION: forcing a failure. [ 53.791032][ T5141] name failslab, interval 1, probability 10, space 0, times 56 [ 53.791040][ C3] ? net_generic+0xea/0x2a0 [ 53.791055][ C3] ? net_generic+0xea/0x2a0 [ 53.791073][ C3] br_nf_pre_routing+0x90f/0x1560 [ 53.791092][ C3] br_handle_frame+0xce9/0x1540 [ 53.791111][ C3] ? __pfx_br_handle_frame+0x10/0x10 [ 53.791126][ C3] ? kfree_skbmem+0x19a/0x210 [ 53.791135][ C3] ? kmem_cache_free+0x127/0x6b0 [ 53.791147][ C3] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 53.791166][ C3] ? __pfx_br_handle_frame+0x10/0x10 [ 53.791182][ C3] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 53.791200][ C3] ? kasan_save_stack+0x3f/0x50 [ 53.791213][ C3] ? kasan_save_stack+0x30/0x50 [ 53.791225][ C3] ? kasan_save_track+0x14/0x30 [ 53.791237][ C3] ? kasan_save_free_info+0x3b/0x70 [ 53.791248][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.791261][ C3] ? napi_consume_skb+0x2cd/0x320 [ 53.791271][ C3] ? skb_defer_free_flush+0x1f1/0x290 [ 53.791287][ C3] ? net_rx_action+0x3ca/0xf20 [ 53.791298][ C3] ? handle_softirqs+0x1ea/0x9b0 [ 53.791309][ C3] ? __irq_exit_rcu+0x162/0x210 [ 53.791320][ C3] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.791331][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.791343][ C3] ? lock_is_held_type+0xf5/0x140 [ 53.791354][ C3] ? __might_resched+0x248/0x330 [ 53.791375][ C3] ? wg_ratelimiter_gc_entries+0x43e/0x510 [ 53.791389][ C3] ? process_one_work+0xa23/0x1940 [ 53.791403][ C3] ? worker_thread+0x5ef/0xe50 [ 53.791417][ C3] ? kthread+0x370/0x450 [ 53.791430][ C3] ? ret_from_fork+0x72b/0xd50 [ 53.791442][ C3] ? ret_from_fork_asm+0x1a/0x30 [ 53.791461][ C3] ? __lock_acquire+0x49f/0x1a40 [ 53.791479][ C3] ? process_backlog+0x32a/0x1580 [ 53.791490][ C3] __netif_receive_skb_one_core+0xb0/0x1e0 [ 53.791503][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 53.791517][ C3] ? lock_acquire+0x1b9/0x370 [ 53.791534][ C3] ? process_backlog+0x32a/0x1580 [ 53.791547][ C3] ? process_backlog+0x32a/0x1580 [ 53.791558][ C3] __netif_receive_skb+0x1f/0x120 [ 53.791571][ C3] process_backlog+0x37a/0x1580 [ 53.791586][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 53.791600][ C3] net_rx_action+0xa40/0xf20 [ 53.791616][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 53.791628][ C3] ? clockevents_program_event+0x1bf/0x820 [ 53.791643][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 53.791654][ C3] ? sched_clock+0x38/0x60 [ 53.791664][ C3] ? sched_clock_cpu+0x6c/0x570 [ 53.791684][ C3] ? mark_held_locks+0x40/0x70 [ 53.791702][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.791715][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.791727][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.791737][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.791752][ C3] __irq_exit_rcu+0x162/0x210 [ 53.791764][ C3] irq_exit_rcu+0x9/0x30 [ 53.791775][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.791787][ C3] [ 53.791791][ C3] [ 53.791794][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.791806][ C3] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 53.791819][ C3] Code: ff ff ff ff 65 0f c1 15 19 b5 ab 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 fc 40 03 00 c3 cc cc cc cc 31 c0 [ 53.791829][ C3] RSP: 0000:ffffc9000766fb50 EFLAGS: 00000296 [ 53.791837][ C3] RAX: 0000000000000000 RBX: ffffffff8ebe7f20 RCX: 0000000000000001 [ 53.791844][ C3] RDX: 0000000000000046 RSI: ffffffff8e182941 RDI: ffffffff8c400a80 [ 53.791850][ C3] RBP: ffff8880218cca80 R08: 0000000000000000 R09: fffffbfff1fbf1e4 [ 53.791856][ C3] R10: ffffffff8fdf8f23 R11: 0000000000000000 R12: 00000000ffffffff [ 53.791863][ C3] R13: 0000000000000246 R14: ffff8880218cd670 R15: 0000000000000002 [ 53.791876][ C3] __might_resched+0x248/0x330 [ 53.791893][ C3] ? __pfx___might_resched+0x10/0x10 [ 53.791911][ C3] wg_ratelimiter_gc_entries+0x43e/0x510 [ 53.791927][ C3] process_one_work+0xa23/0x1940 [ 53.791947][ C3] ? __pfx_process_one_work+0x10/0x10 [ 53.791966][ C3] ? __pfx_wg_ratelimiter_gc_entries+0x10/0x10 [ 53.791981][ C3] worker_thread+0x5ef/0xe50 [ 53.791999][ C3] ? __pfx_worker_thread+0x10/0x10 [ 53.792015][ C3] ? kthread+0x13a/0x450 [ 53.792028][ C3] ? __pfx_worker_thread+0x10/0x10 [ 53.792042][ C3] kthread+0x370/0x450 [ 53.792056][ C3] ? __pfx_kthread+0x10/0x10 [ 53.792070][ C3] ret_from_fork+0x72b/0xd50 [ 53.792083][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 53.792097][ C3] ? __switch_to+0x800/0x10f0 [ 53.792114][ C3] ? __pfx_kthread+0x10/0x10 [ 53.792129][ C3] ret_from_fork_asm+0x1a/0x30 [ 53.792148][ C3] [ 53.792154][ T5141] CPU: 2 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.792167][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.792173][ T5141] Call Trace: [ 53.792176][ T5141] [ 53.792180][ T5141] dump_stack_lvl+0x100/0x190 [ 53.792192][ T5141] should_fail_ex.cold+0x5/0xa [ 53.792221][ T5141] should_failslab+0xc2/0x120 [ 53.792237][ T5141] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.792251][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.792263][ T5141] ? __alloc_skb+0x140/0x710 [ 53.792278][ T5141] __alloc_skb+0x140/0x710 [ 53.792290][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.792302][ T5141] ? __pfx___alloc_skb+0x10/0x10 [ 53.792315][ T5141] ? trace_sched_exit_tp+0x120/0x160 [ 53.792331][ T5141] alloc_skb_with_frags+0xdd/0x760 [ 53.792350][ T5141] sock_alloc_send_pskb+0x801/0x980 [ 53.792366][ T5141] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.792379][ T5141] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 53.792396][ T5141] ? __rcu_read_unlock+0x26a/0x5e0 [ 53.792405][ T5141] ? rcu_is_watching+0x12/0xc0 [ 53.792420][ T5141] unix_dgram_sendmsg+0x3c7/0x1810 [ 53.792435][ T5141] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 53.792452][ T5141] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 53.792469][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.792485][ T5141] ? apparmor_socket_sendmsg+0x15b/0x270 [ 53.792498][ T5141] __sys_sendto+0x48b/0x4e0 [ 53.792513][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.792527][ T5141] ? __pfx___sys_sendto+0x10/0x10 [ 53.792544][ T5141] ? __sys_connect+0xe4/0x170 [ 53.792560][ T5141] ? xfd_validate_state+0x129/0x190 [ 53.792575][ T5141] __x64_sys_sendto+0xe0/0x1c0 [ 53.792587][ T5141] ? do_syscall_64+0x90/0x840 [ 53.792599][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.792611][ T5141] do_syscall_64+0x115/0x840 [ 53.792622][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.792635][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.792645][ T5141] RIP: 0033:0x7f91653a1407 [ 53.792653][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.792663][ T5141] RSP: 002b:00007fff310c3150 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 53.792672][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.792678][ T5141] RDX: 0000000000000054 RSI: 00007fff310c3290 RDI: 0000000000000003 [ 53.792684][ T5141] RBP: 00007fff310c36c0 R08: 0000000000000000 R09: 0000000000000000 [ 53.792690][ T5141] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff310c36d8 [ 53.792696][ T5141] R13: 00007fff310c3290 R14: 0000000000000039 R15: 00007fff310c3290 [ 53.792708][ T5141] [ 53.792832][ T5748] CPU: 3 UID: 0 PID: 5748 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 53.792846][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.792852][ T5748] Call Trace: [ 53.792855][ T5748] [ 53.792859][ T5748] dump_stack_lvl+0x100/0x190 [ 53.792873][ T5748] should_fail_ex.cold+0x5/0xa [ 53.792884][ T5748] should_failslab+0xc2/0x120 [ 53.792913][ T5748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.792926][ T5748] ? trace_kmem_cache_alloc+0xdd/0x100 [ 53.792941][ T5748] ? security_file_alloc+0x34/0x2c0 [ 53.792958][ T5748] security_file_alloc+0x34/0x2c0 [ 53.792972][ T5748] init_file+0x95/0x480 [ 53.792985][ T5748] alloc_empty_file+0x79/0x1c0 [ 53.792998][ T5748] path_openat+0xe7/0x4280 [ 53.793008][ T5748] ? kasan_save_track+0x14/0x30 [ 53.793021][ T5748] ? __kasan_slab_alloc+0x89/0x90 [ 53.793034][ T5748] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 53.793046][ T5748] ? do_getname+0x35/0x390 [ 53.793057][ T5748] ? do_sys_openat2+0xc7/0x1e0 [ 53.793070][ T5748] ? __ia32_compat_sys_openat+0x12d/0x210 [ 53.793084][ T5748] ? __do_fast_syscall_32+0xe7/0x970 [ 53.793101][ T5748] ? __pfx_path_openat+0x10/0x10 [ 53.793115][ T5748] do_file_open+0x20e/0x430 [ 53.793124][ T5748] ? __lock_acquire+0x49f/0x1a40 [ 53.793141][ T5748] ? __pfx_do_file_open+0x10/0x10 [ 53.793160][ T5748] ? _raw_spin_unlock+0x28/0x50 [ 53.793170][ T5748] ? alloc_fd+0x471/0x7a0 [ 53.793184][ T5748] do_sys_openat2+0x10f/0x1e0 [ 53.793197][ T5748] ? __pfx_do_sys_openat2+0x10/0x10 [ 53.793211][ T5748] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 53.793225][ T5748] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 53.793242][ T5748] __ia32_compat_sys_openat+0x12d/0x210 [ 53.793258][ T5748] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 53.793277][ T5748] __do_fast_syscall_32+0xe7/0x970 [ 53.793292][ T5748] do_fast_syscall_32+0x32/0x70 [ 53.793306][ T5748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.793319][ T5748] RIP: 0023:0xf7fe3fec [ 53.793328][ T5748] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.793338][ T5748] RSP: 002b:00000000ffc84220 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 53.793348][ T5748] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffc85384 [ 53.793355][ T5748] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7476ff4 [ 53.793366][ T5748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.793372][ T5748] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.793378][ T5748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.793391][ T5748] [ 53.793433][ T5141] FAULT_INJECTION: forcing a failure. [ 53.793433][ T5141] name failslab, interval 1, probability 10, space 0, times 53 [ 53.794123][ T219] CPU: 0 UID: 0 PID: 219 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 53.794137][ T219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.794144][ T219] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.794162][ T219] Call Trace: [ 53.794166][ T219] [ 53.794170][ T219] dump_stack_lvl+0x100/0x190 [ 53.794182][ T219] should_fail_ex.cold+0x5/0xa [ 53.794194][ T219] should_failslab+0xc2/0x120 [ 53.794209][ T219] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.794223][ T219] ? __alloc_skb+0x140/0x710 [ 53.794238][ T219] __alloc_skb+0x140/0x710 [ 53.794251][ T219] ? __alloc_skb+0x5b7/0x710 [ 53.794277][ T219] ? __pfx___alloc_skb+0x10/0x10 [ 53.794292][ T219] ? kfree_skbmem+0x19f/0x210 [ 53.794304][ T219] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.794325][ T219] process_one_work+0xa23/0x1940 [ 53.794345][ T219] ? __pfx_process_one_work+0x10/0x10 [ 53.794364][ T219] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.794383][ T219] worker_thread+0x5ef/0xe50 [ 53.794402][ T219] ? kthread+0x13a/0x450 [ 53.794415][ T219] ? __pfx_worker_thread+0x10/0x10 [ 53.794433][ T219] kthread+0x370/0x450 [ 53.794446][ T219] ? __pfx_kthread+0x10/0x10 [ 53.794461][ T219] ret_from_fork+0x72b/0xd50 [ 53.794474][ T219] ? __pfx_ret_from_fork+0x10/0x10 [ 53.794487][ T219] ? __switch_to+0x800/0x10f0 [ 53.794503][ T219] ? __pfx_kthread+0x10/0x10 [ 53.794518][ T219] ret_from_fork_asm+0x1a/0x30 [ 53.794538][ T219] [ 53.794940][ T38] FAULT_INJECTION: forcing a failure. [ 53.794940][ T38] name failslab, interval 1, probability 10, space 0, times 47 [ 53.797000][ T219] FAULT_INJECTION: forcing a failure. [ 53.797000][ T219] name failslab, interval 1, probability 10, space 0, times 44 [ 53.798226][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.798241][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.798248][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.798264][ T38] Call Trace: [ 53.798267][ T38] [ 53.798271][ T38] dump_stack_lvl+0x100/0x190 [ 53.798284][ T38] should_fail_ex.cold+0x5/0xa [ 53.798296][ T38] should_failslab+0xc2/0x120 [ 53.798310][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.798324][ T38] ? __alloc_skb+0x140/0x710 [ 53.798340][ T38] __alloc_skb+0x140/0x710 [ 53.798352][ T38] ? __alloc_skb+0x5b7/0x710 [ 53.798365][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 53.798379][ T38] ? kfree_skbmem+0x19f/0x210 [ 53.798391][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.798411][ T38] process_one_work+0xa23/0x1940 [ 53.798438][ T38] ? __pfx_process_one_work+0x10/0x10 [ 53.798457][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.798473][ T38] worker_thread+0x5ef/0xe50 [ 53.798492][ T38] ? kthread+0x13a/0x450 [ 53.798505][ T38] ? __pfx_worker_thread+0x10/0x10 [ 53.798519][ T38] kthread+0x370/0x450 [ 53.798532][ T38] ? __pfx_kthread+0x10/0x10 [ 53.798547][ T38] ret_from_fork+0x72b/0xd50 [ 53.798560][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 53.798573][ T38] ? __switch_to+0x800/0x10f0 [ 53.798589][ T38] ? __pfx_kthread+0x10/0x10 [ 53.798604][ T38] ret_from_fork_asm+0x1a/0x30 [ 53.798624][ T38] [ 53.798871][ T38] FAULT_INJECTION: forcing a failure. [ 53.798871][ T38] name failslab, interval 1, probability 10, space 0, times 35 [ 53.799299][ T219] CPU: 1 UID: 0 PID: 219 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 53.799314][ T219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.799322][ T219] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.799339][ T219] Call Trace: [ 53.799343][ T219] [ 53.799348][ T219] dump_stack_lvl+0x100/0x190 [ 53.799361][ T219] should_fail_ex.cold+0x5/0xa [ 53.799373][ T219] should_failslab+0xc2/0x120 [ 53.799389][ T219] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.799404][ T219] ? __alloc_skb+0x140/0x710 [ 53.799420][ T219] __alloc_skb+0x140/0x710 [ 53.799433][ T219] ? __alloc_skb+0x5b7/0x710 [ 53.799447][ T219] ? __pfx___alloc_skb+0x10/0x10 [ 53.799462][ T219] ? kfree_skbmem+0x19f/0x210 [ 53.799475][ T219] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.799500][ T219] process_one_work+0xa23/0x1940 [ 53.799522][ T219] ? __pfx_process_one_work+0x10/0x10 [ 53.799542][ T219] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.799559][ T219] worker_thread+0x5ef/0xe50 [ 53.799579][ T219] ? kthread+0x13a/0x450 [ 53.799593][ T219] ? __pfx_worker_thread+0x10/0x10 [ 53.799608][ T219] kthread+0x370/0x450 [ 53.799622][ T219] ? __pfx_kthread+0x10/0x10 [ 53.799637][ T219] ret_from_fork+0x72b/0xd50 [ 53.799651][ T219] ? __pfx_ret_from_fork+0x10/0x10 [ 53.799666][ T219] ? __switch_to+0x800/0x10f0 [ 53.799683][ T219] ? __pfx_kthread+0x10/0x10 [ 53.799698][ T219] ret_from_fork_asm+0x1a/0x30 [ 53.799719][ T219] [ 53.799726][ T5141] CPU: 2 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.799740][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.799747][ T5141] Call Trace: [ 53.799750][ T5141] [ 53.799754][ T5141] dump_stack_lvl+0x100/0x190 [ 53.799767][ T5141] should_fail_ex.cold+0x5/0xa [ 53.799778][ T5141] should_failslab+0xc2/0x120 [ 53.799793][ T5141] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.799806][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.799819][ T5141] ? __alloc_skb+0x140/0x710 [ 53.799834][ T5141] __alloc_skb+0x140/0x710 [ 53.799846][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.799859][ T5141] ? __pfx___alloc_skb+0x10/0x10 [ 53.799871][ T5141] ? __x64_sys_syslog+0x74/0xb0 [ 53.799883][ T5141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.799896][ T5141] alloc_skb_with_frags+0xdd/0x760 [ 53.799915][ T5141] sock_alloc_send_pskb+0x801/0x980 [ 53.799932][ T5141] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.799947][ T5141] ? kasan_quarantine_put+0x104/0x240 [ 53.799959][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.799973][ T5141] ? syslog_print+0x480/0x620 [ 53.799990][ T5141] unix_dgram_sendmsg+0x3c7/0x1810 [ 53.800005][ T5141] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 53.800023][ T5141] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 53.800039][ T5141] ? __pfx_syslog_print+0x10/0x10 [ 53.800055][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.800072][ T5141] ? apparmor_socket_sendmsg+0x15b/0x270 [ 53.800085][ T5141] __sys_sendto+0x48b/0x4e0 [ 53.800098][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.800112][ T5141] ? __pfx___sys_sendto+0x10/0x10 [ 53.800128][ T5141] ? do_syslog+0x18c/0x6d0 [ 53.800147][ T5141] __x64_sys_sendto+0xe0/0x1c0 [ 53.800160][ T5141] ? do_syscall_64+0x90/0x840 [ 53.800172][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.800184][ T5141] do_syscall_64+0x115/0x840 [ 53.800196][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.800232][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.800243][ T5141] RIP: 0033:0x7f91653a1407 [ 53.800252][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.800263][ T5141] RSP: 002b:00007fff310c3150 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 53.800273][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.800280][ T5141] RDX: 0000000000000073 RSI: 00007fff310c3290 RDI: 0000000000000003 [ 53.800287][ T5141] RBP: 00007fff310c36c0 R08: 0000000000000000 R09: 0000000000000000 [ 53.800292][ T5141] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff310c36d8 [ 53.800299][ T5141] R13: 00007fff310c3290 R14: 0000000000000058 R15: 00007fff310c3290 [ 53.800311][ T5141] [ 53.800397][ T5141] FAULT_INJECTION: forcing a failure. [ 53.800397][ T5141] name failslab, interval 1, probability 10, space 0, times 33 [ 53.800796][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.800809][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.800815][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.800831][ T38] Call Trace: [ 53.800834][ T38] [ 53.800838][ T38] dump_stack_lvl+0x100/0x190 [ 53.800850][ T38] should_fail_ex.cold+0x5/0xa [ 53.800862][ T38] should_failslab+0xc2/0x120 [ 53.800876][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.800891][ T38] ? __alloc_skb+0x140/0x710 [ 53.800906][ T38] __alloc_skb+0x140/0x710 [ 53.800931][ T38] ? __alloc_skb+0x5b7/0x710 [ 53.800944][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 53.800956][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 53.800968][ T38] ? __pfx___might_resched+0x10/0x10 [ 53.800987][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.801008][ T38] process_one_work+0xa23/0x1940 [ 53.801028][ T38] ? __pfx_process_one_work+0x10/0x10 [ 53.801046][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.801062][ T38] worker_thread+0x5ef/0xe50 [ 53.801082][ T38] ? kthread+0x13a/0x450 [ 53.801095][ T38] ? __pfx_worker_thread+0x10/0x10 [ 53.801109][ T38] kthread+0x370/0x450 [ 53.801122][ T38] ? __pfx_kthread+0x10/0x10 [ 53.801136][ T38] ret_from_fork+0x72b/0xd50 [ 53.801149][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 53.801162][ T38] ? __switch_to+0x800/0x10f0 [ 53.801177][ T38] ? __pfx_kthread+0x10/0x10 [ 53.801192][ T38] ret_from_fork_asm+0x1a/0x30 [ 53.801212][ T38] [ 53.856084][ T6013] IPVS: using max 44 ests per chain, 105600 per kthread [ 53.858382][ T5141] CPU: 2 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.858397][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.858404][ T5141] Call Trace: [ 53.858408][ T5141] [ 53.858412][ T5141] dump_stack_lvl+0x100/0x190 [ 53.858428][ T5141] should_fail_ex.cold+0x5/0xa [ 53.858440][ T5141] should_failslab+0xc2/0x120 [ 53.858455][ T5141] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.858469][ T5141] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 53.858480][ T5141] ? sock_alloc_inode+0x26/0x2c0 [ 53.858497][ T5141] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.858519][ T5141] sock_alloc_inode+0x26/0x2c0 [ 53.858535][ T5141] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.858551][ T5141] alloc_inode+0x68/0x250 [ 53.858565][ T5141] sock_alloc+0x44/0x280 [ 53.858579][ T5141] ? security_socket_create+0x7f/0x250 [ 53.858593][ T5141] __sock_create+0xc2/0x860 [ 53.858606][ T5141] __sys_socket+0x14d/0x260 [ 53.858617][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.858632][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.858643][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.858657][ T5141] do_syscall_64+0x115/0x840 [ 53.858670][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.858683][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.858695][ T5141] RIP: 0033:0x7f916541c707 [ 53.858705][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.858716][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.858726][ T5141] RAX: ffffffffffffffda RBX: 0000000000000073 RCX: 00007f916541c707 [ 53.858733][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.858739][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.858745][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.858751][ T5141] R13: 00007fff310c3290 R14: 0000000000000058 R15: 00007fff310c3290 [ 53.858764][ T5141] [ 53.858771][ T5141] socket: no more sockets [ 53.887206][ T219] FAULT_INJECTION: forcing a failure. [ 53.887206][ T219] name failslab, interval 1, probability 10, space 0, times 23 [ 53.888013][ T38] FAULT_INJECTION: forcing a failure. [ 53.888013][ T38] name failslab, interval 1, probability 10, space 0, times 21 [ 53.888045][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.888063][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.888073][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.888099][ T38] Call Trace: [ 53.888104][ T38] [ 53.888110][ T38] dump_stack_lvl+0x100/0x190 [ 53.888129][ T38] should_fail_ex.cold+0x5/0xa [ 53.888145][ T38] should_failslab+0xc2/0x120 [ 53.888164][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.888183][ T38] ? __alloc_skb+0x140/0x710 [ 53.888228][ T38] __alloc_skb+0x140/0x710 [ 53.888245][ T38] ? __alloc_skb+0x5b7/0x710 [ 53.888263][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 53.888281][ T38] ? kfree_skbmem+0x19f/0x210 [ 53.888297][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.888325][ T38] process_one_work+0xa23/0x1940 [ 53.888353][ T38] ? __pfx_process_one_work+0x10/0x10 [ 53.888378][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.888399][ T38] worker_thread+0x5ef/0xe50 [ 53.888425][ T38] ? kthread+0x13a/0x450 [ 53.888442][ T38] ? __pfx_worker_thread+0x10/0x10 [ 53.888460][ T38] kthread+0x370/0x450 [ 53.888477][ T38] ? __pfx_kthread+0x10/0x10 [ 53.888496][ T38] ret_from_fork+0x72b/0xd50 [ 53.888513][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 53.888531][ T38] ? __switch_to+0x800/0x10f0 [ 53.888555][ T38] ? __pfx_kthread+0x10/0x10 [ 53.888595][ T38] ret_from_fork_asm+0x1a/0x30 [ 53.888627][ T38] [ 53.888785][ T38] FAULT_INJECTION: forcing a failure. [ 53.888785][ T38] name failslab, interval 1, probability 10, space 0, times 20 [ 53.889200][ T5141] FAULT_INJECTION: forcing a failure. [ 53.889200][ T5141] name failslab, interval 1, probability 10, space 0, times 20 [ 53.889220][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.889233][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.889239][ T5141] Call Trace: [ 53.889242][ T5141] [ 53.889246][ T5141] dump_stack_lvl+0x100/0x190 [ 53.889261][ T5141] should_fail_ex.cold+0x5/0xa [ 53.889273][ T5141] should_failslab+0xc2/0x120 [ 53.889287][ T5141] __kmalloc_noprof+0xfc/0x820 [ 53.889300][ T5141] ? tomoyo_encode2+0xfb/0x3c0 [ 53.889319][ T5141] tomoyo_encode2+0xfb/0x3c0 [ 53.889337][ T5141] tomoyo_unix_entry+0x343/0x640 [ 53.889353][ T5141] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 53.889376][ T5141] tomoyo_socket_connect_permission+0x31a/0x360 [ 53.889393][ T5141] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 53.889412][ T5141] ? __might_fault+0xc5/0x140 [ 53.889426][ T5141] security_socket_connect+0xd3/0x230 [ 53.889440][ T5141] __sys_connect_file+0x8f/0x1a0 [ 53.889455][ T5141] __sys_connect+0x141/0x170 [ 53.889467][ T5141] ? __pfx___sys_connect+0x10/0x10 [ 53.889488][ T5141] __x64_sys_connect+0x72/0xb0 [ 53.889500][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.889514][ T5141] do_syscall_64+0x115/0x840 [ 53.889527][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.889539][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.889550][ T5141] RIP: 0033:0x7f91653a1407 [ 53.889560][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.889571][ T5141] RSP: 002b:00007fff310c3120 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 53.889582][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.889589][ T5141] RDX: 000000000000006e RSI: 00007f91654a8560 RDI: 0000000000000003 [ 53.889595][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.889601][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.889607][ T5141] R13: 0000000000000017 R14: 0000000000000058 R15: 00007fff310c3290 [ 53.889620][ T5141] [ 53.889733][ T5141] FAULT_INJECTION: forcing a failure. [ 53.889733][ T5141] name failslab, interval 1, probability 10, space 0, times 19 [ 53.889747][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.889758][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.889764][ T5141] Call Trace: [ 53.889767][ T5141] [ 53.889770][ T5141] dump_stack_lvl+0x100/0x190 [ 53.889783][ T5141] should_fail_ex.cold+0x5/0xa [ 53.889794][ T5141] should_failslab+0xc2/0x120 [ 53.889808][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.889821][ T5141] ? __lock_acquire+0x49f/0x1a40 [ 53.889837][ T5141] ? sk_prot_alloc+0x60/0x2a0 [ 53.889849][ T5141] sk_prot_alloc+0x60/0x2a0 [ 53.889859][ T5141] sk_alloc+0x36/0xe80 [ 53.889874][ T5141] unix_create1+0xa6/0x700 [ 53.889888][ T5141] unix_create+0x11e/0x240 [ 53.889900][ T5141] __sock_create+0x339/0x860 [ 53.889913][ T5141] __sys_socket+0x14d/0x260 [ 53.889924][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.889939][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.889950][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.889962][ T5141] do_syscall_64+0x115/0x840 [ 53.889975][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.889987][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.889997][ T5141] RIP: 0033:0x7f916541c707 [ 53.890006][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.890017][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.890026][ T5141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f916541c707 [ 53.890032][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.890038][ T5141] RBP: 00007f91654a8560 R08: 0000000000000073 R09: 0000000000000001 [ 53.890044][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.890050][ T5141] R13: 00007fff310c3290 R14: 0000000000000058 R15: 00007fff310c3290 [ 53.890068][ T5141] [ 53.890158][ T5141] FAULT_INJECTION: forcing a failure. [ 53.890158][ T5141] name failslab, interval 1, probability 10, space 0, times 18 [ 53.890170][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.890181][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.890187][ T5141] Call Trace: [ 53.890190][ T5141] [ 53.890194][ T5141] dump_stack_lvl+0x100/0x190 [ 53.890206][ T5141] should_fail_ex.cold+0x5/0xa [ 53.890217][ T5141] should_failslab+0xc2/0x120 [ 53.890231][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.890245][ T5141] ? do_getname_kernel+0x5d/0x250 [ 53.890260][ T5141] do_getname_kernel+0x5d/0x250 [ 53.890273][ T5141] kern_path+0x1f/0x50 [ 53.890289][ T5141] unix_find_other+0x120/0xb10 [ 53.890304][ T5141] ? __pfx_unix_find_other+0x10/0x10 [ 53.890318][ T5141] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 53.890338][ T5141] unix_dgram_connect+0x1ea/0xbf0 [ 53.890355][ T5141] ? __pfx_unix_dgram_connect+0x10/0x10 [ 53.890368][ T5141] __sys_connect_file+0x141/0x1a0 [ 53.890382][ T5141] __sys_connect+0x141/0x170 [ 53.890394][ T5141] ? __pfx___sys_connect+0x10/0x10 [ 53.890414][ T5141] __x64_sys_connect+0x72/0xb0 [ 53.890426][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.890439][ T5141] do_syscall_64+0x115/0x840 [ 53.890450][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.890463][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.890473][ T5141] RIP: 0033:0x7f91653a1407 [ 53.890481][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.890491][ T5141] RSP: 002b:00007fff310c3120 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 53.890500][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.890507][ T5141] RDX: 000000000000006e RSI: 00007f91654a8560 RDI: 0000000000000003 [ 53.890513][ T5141] RBP: 00007f91654a8560 R08: 0000000000000000 R09: 0000000000000000 [ 53.890519][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.890524][ T5141] R13: 000000000000000c R14: 0000000000000058 R15: 00007fff310c3290 [ 53.890537][ T5141] [ 53.890609][ T5141] FAULT_INJECTION: forcing a failure. [ 53.890609][ T5141] name failslab, interval 1, probability 10, space 0, times 17 [ 53.890622][ T5141] CPU: 3 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.890633][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.890639][ T5141] Call Trace: [ 53.890642][ T5141] [ 53.890645][ T5141] dump_stack_lvl+0x100/0x190 [ 53.890657][ T5141] should_fail_ex.cold+0x5/0xa [ 53.890668][ T5141] should_failslab+0xc2/0x120 [ 53.890682][ T5141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.890695][ T5141] ? __pfx_map_id_range_down+0x10/0x10 [ 53.890710][ T5141] ? security_inode_alloc+0x3b/0x2c0 [ 53.890725][ T5141] security_inode_alloc+0x3b/0x2c0 [ 53.890737][ T5141] inode_init_always_gfp+0xc77/0xfb0 [ 53.890750][ T5141] alloc_inode+0x8e/0x250 [ 53.890763][ T5141] sock_alloc+0x44/0x280 [ 53.890778][ T5141] ? security_socket_create+0x7f/0x250 [ 53.890790][ T5141] __sock_create+0xc2/0x860 [ 53.890803][ T5141] __sys_socket+0x14d/0x260 [ 53.890814][ T5141] ? __pfx___sys_socket+0x10/0x10 [ 53.890829][ T5141] __x64_sys_socket+0x72/0xb0 [ 53.890840][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.890852][ T5141] do_syscall_64+0x115/0x840 [ 53.890864][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.890877][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.890887][ T5141] RIP: 0033:0x7f916541c707 [ 53.890895][ T5141] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.890905][ T5141] RSP: 002b:00007fff310c3168 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.890914][ T5141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f916541c707 [ 53.890921][ T5141] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.890927][ T5141] RBP: 00007f91654a8560 R08: 0000000000000073 R09: 0000000000000001 [ 53.890933][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.890939][ T5141] R13: 00007fff310c3290 R14: 0000000000000058 R15: 00007fff310c3290 [ 53.890952][ T5141] [ 53.890962][ T5141] socket: no more sockets [ 53.890960][ T219] CPU: 0 UID: 0 PID: 219 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 53.890979][ T219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.890991][ T219] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.891016][ T219] Call Trace: [ 53.891021][ T219] [ 53.891027][ T219] dump_stack_lvl+0x100/0x190 [ 53.891047][ T219] should_fail_ex.cold+0x5/0xa [ 53.891066][ T219] should_failslab+0xc2/0x120 [ 53.891089][ T219] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.891112][ T219] ? __alloc_skb+0x140/0x710 [ 53.891137][ T219] __alloc_skb+0x140/0x710 [ 53.891156][ T219] ? __alloc_skb+0x5b7/0x710 [ 53.891177][ T219] ? __pfx___alloc_skb+0x10/0x10 [ 53.891200][ T219] ? kfree_skbmem+0x19f/0x210 [ 53.891219][ T219] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.891253][ T219] process_one_work+0xa23/0x1940 [ 53.891288][ T219] ? __pfx_process_one_work+0x10/0x10 [ 53.891320][ T219] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.891346][ T219] worker_thread+0x5ef/0xe50 [ 53.891379][ T219] ? kthread+0x13a/0x450 [ 53.891398][ T219] ? __pfx_worker_thread+0x10/0x10 [ 53.891421][ T219] kthread+0x370/0x450 [ 53.891442][ T219] ? __pfx_kthread+0x10/0x10 [ 53.891464][ T219] ret_from_fork+0x72b/0xd50 [ 53.891491][ T219] ? __pfx_ret_from_fork+0x10/0x10 [ 53.891514][ T219] ? __switch_to+0x800/0x10f0 [ 53.891540][ T219] ? __pfx_kthread+0x10/0x10 [ 53.891564][ T219] ret_from_fork_asm+0x1a/0x30 [ 53.891597][ T219] [ 53.892864][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.892885][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.892895][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.892921][ T38] Call Trace: [ 53.892926][ T38] [ 53.892932][ T38] dump_stack_lvl+0x100/0x190 [ 53.892953][ T38] should_fail_ex.cold+0x5/0xa [ 53.892973][ T38] should_failslab+0xc2/0x120 [ 53.893002][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.893021][ T38] ? __alloc_skb+0x140/0x710 [ 53.893037][ T38] __alloc_skb+0x140/0x710 [ 53.893049][ T38] ? __alloc_skb+0x5b7/0x710 [ 53.893062][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 53.893077][ T38] ? kfree_skbmem+0x19f/0x210 [ 53.893089][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.893109][ T38] process_one_work+0xa23/0x1940 [ 53.893129][ T38] ? __pfx_process_one_work+0x10/0x10 [ 53.893148][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.893164][ T38] worker_thread+0x5ef/0xe50 [ 53.893184][ T38] ? kthread+0x13a/0x450 [ 53.893197][ T38] ? __pfx_worker_thread+0x10/0x10 [ 53.893211][ T38] kthread+0x370/0x450 [ 53.893224][ T38] ? __pfx_kthread+0x10/0x10 [ 53.893239][ T38] ret_from_fork+0x72b/0xd50 [ 53.893252][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 53.893265][ T38] ? __switch_to+0x800/0x10f0 [ 53.893281][ T38] ? __pfx_kthread+0x10/0x10 [ 53.893296][ T38] ret_from_fork_asm+0x1a/0x30 [ 53.893316][ T38] [ 53.916448][ T219] FAULT_INJECTION: forcing a failure. [ 53.916448][ T219] name failslab, interval 1, probability 10, space 0, times 13 [ 53.917998][ T5141] FAULT_INJECTION: forcing a failure. [ 53.917998][ T5141] name failslab, interval 1, probability 10, space 0, times 11 [ 53.919535][ T219] CPU: 0 UID: 0 PID: 219 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 53.919555][ T219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.919565][ T219] Workqueue: events_unbound nsim_dev_trap_report_work [ 53.919592][ T219] Call Trace: [ 53.919598][ T219] [ 53.919604][ T219] dump_stack_lvl+0x100/0x190 [ 53.919624][ T219] should_fail_ex.cold+0x5/0xa [ 53.919641][ T219] should_failslab+0xc2/0x120 [ 53.919662][ T219] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.919682][ T219] ? __alloc_skb+0x140/0x710 [ 53.919705][ T219] __alloc_skb+0x140/0x710 [ 53.919725][ T219] ? __alloc_skb+0x5b7/0x710 [ 53.919745][ T219] ? __pfx___alloc_skb+0x10/0x10 [ 53.919785][ T219] ? kfree_skbmem+0x19f/0x210 [ 53.919803][ T219] nsim_dev_trap_report_work+0x2af/0xd20 [ 53.919833][ T219] process_one_work+0xa23/0x1940 [ 53.919864][ T219] ? __pfx_process_one_work+0x10/0x10 [ 53.919891][ T219] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 53.919913][ T219] worker_thread+0x5ef/0xe50 [ 53.919944][ T219] ? kthread+0x13a/0x450 [ 53.919964][ T219] ? __pfx_worker_thread+0x10/0x10 [ 53.919985][ T219] kthread+0x370/0x450 [ 53.920003][ T219] ? __pfx_kthread+0x10/0x10 [ 53.920023][ T219] ret_from_fork+0x72b/0xd50 [ 53.920042][ T219] ? __pfx_ret_from_fork+0x10/0x10 [ 53.920061][ T219] ? __switch_to+0x800/0x10f0 [ 53.920082][ T219] ? __pfx_kthread+0x10/0x10 [ 53.920103][ T219] ret_from_fork_asm+0x1a/0x30 [ 53.920137][ T219] [ 53.993277][ T5991] FAULT_INJECTION: forcing a failure. [ 53.993277][ T5991] name failslab, interval 1, probability 10, space 0, times 2 [ 53.998034][ T5141] CPU: 2 UID: 0 PID: 5141 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.998050][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.998058][ T5141] Call Trace: [ 53.998061][ T5141] [ 53.998066][ T5141] dump_stack_lvl+0x100/0x190 [ 53.998082][ T5141] should_fail_ex.cold+0x5/0xa [ 53.998094][ T5141] should_failslab+0xc2/0x120 [ 53.998109][ T5141] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.998123][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.998138][ T5141] ? __alloc_skb+0x140/0x710 [ 53.998153][ T5141] __alloc_skb+0x140/0x710 [ 53.998168][ T5141] ? __alloc_skb+0x5b7/0x710 [ 53.998186][ T5141] ? __pfx___alloc_skb+0x10/0x10 [ 53.998205][ T5141] ? trace_sched_exit_tp+0x120/0x160 [ 53.998231][ T5141] alloc_skb_with_frags+0xdd/0x760 [ 53.998262][ T5141] sock_alloc_send_pskb+0x801/0x980 [ 53.998289][ T5141] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.998308][ T5141] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 53.998336][ T5141] ? __rcu_read_unlock+0x26a/0x5e0 [ 53.998350][ T5141] ? rcu_is_watching+0x12/0xc0 [ 53.998373][ T5141] unix_dgram_sendmsg+0x3c7/0x1810 [ 53.998397][ T5141] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 53.998423][ T5141] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 53.998448][ T5141] ? unix_dgram_connect+0x24d/0xbf0 [ 53.998466][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.998492][ T5141] ? apparmor_socket_sendmsg+0x15b/0x270 [ 53.998519][ T5141] __sys_sendto+0x48b/0x4e0 [ 53.998538][ T5141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 53.998559][ T5141] ? __pfx___sys_sendto+0x10/0x10 [ 53.998585][ T5141] ? __sys_connect+0xe4/0x170 [ 53.998611][ T5141] ? xfd_validate_state+0x129/0x190 [ 53.998635][ T5141] __x64_sys_sendto+0xe0/0x1c0 [ 53.998654][ T5141] ? do_syscall_64+0x90/0x840 [ 53.998674][ T5141] ? lockdep_hardirqs_on+0x78/0x100 [ 53.998692][ T5141] do_syscall_64+0x115/0x840 [ 53.998711][ T5141] ? clear_bhb_loop+0x40/0x90 [ 53.998731][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.998747][ T5141] RIP: 0033:0x7f91653a1407 [ 53.998761][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.998777][ T5141] RSP: 002b:00007fff310c3150 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 53.998794][ T5141] RAX: ffffffffffffffda RBX: 00007f9165251c80 RCX: 00007f91653a1407 [ 53.998804][ T5141] RDX: 0000000000000059 RSI: 00007fff310c3290 RDI: 0000000000000003 [ 53.998814][ T5141] RBP: 00007fff310c36c0 R08: 0000000000000000 R09: 0000000000000000 [ 53.998823][ T5141] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff310c36d8 [ 53.998833][ T5141] R13: 00007fff310c3290 R14: 000000000000003e R15: 00007fff310c3290 [ 53.998855][ T5141] [ 56.700307][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 56.700323][ T5991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.700331][ T5991] Call Trace: [ 56.700338][ T5991] [ 56.700343][ T5991] dump_stack_lvl+0x100/0x190 [ 56.700362][ T5991] should_fail_ex.cold+0x5/0xa [ 56.700378][ T5991] should_failslab+0xc2/0x120 [ 56.700393][ T5991] kmem_cache_alloc_noprof+0x91/0x6a0 [ 56.700408][ T5991] ? __send_signal_locked+0x155/0x12d0 [ 56.700428][ T5991] __send_signal_locked+0x155/0x12d0 [ 56.700447][ T5991] do_notify_parent+0xf05/0x10b0 [ 56.700465][ T5991] ? __pfx_do_notify_parent+0x10/0x10 [ 56.700482][ T5991] ? do_raw_spin_lock+0x128/0x260 [ 56.700494][ T5991] ? __wake_up+0x3f/0x60 [ 56.700510][ T5991] ? release_task+0xc29/0x1ab0 [ 56.700527][ T5991] release_task+0x1560/0x1ab0 [ 56.700545][ T5991] ? __pfx_release_task+0x10/0x10 [ 56.700559][ T5991] ? do_raw_spin_lock+0x128/0x260 [ 56.700571][ T5991] ? find_held_lock+0x2b/0x80 [ 56.700583][ T5991] ? __wake_up+0x3f/0x60 [ 56.700596][ T5991] ? __wake_up+0x3f/0x60 [ 56.700611][ T5991] ? rcu_is_watching+0x12/0xc0 [ 56.700626][ T5991] do_exit+0x13ba/0x2ae0 [ 56.700642][ T5991] ? __pfx_do_exit+0x10/0x10 [ 56.700656][ T5991] ? do_raw_spin_lock+0x128/0x260 [ 56.700667][ T5991] ? find_held_lock+0x2b/0x80 [ 56.700679][ T5991] ? get_signal+0x7e0/0x21e0 [ 56.700692][ T5991] do_group_exit+0xd5/0x2a0 [ 56.700708][ T5991] get_signal+0x1ec7/0x21e0 [ 56.700722][ T5991] ? find_held_lock+0x2b/0x80 [ 56.700736][ T5991] ? __pfx_get_signal+0x10/0x10 [ 56.700748][ T5991] ? do_futex+0x190/0x440 [ 56.700761][ T5991] arch_do_signal_or_restart+0x91/0x7a0 [ 56.700779][ T5991] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 56.700800][ T5991] ? xfd_validate_state+0x129/0x190 [ 56.700815][ T5991] exit_to_user_mode_loop+0x139/0x6f0 [ 56.700826][ T5991] ? rcu_is_watching+0x12/0xc0 [ 56.700840][ T5991] __do_fast_syscall_32+0x701/0x970 [ 56.700855][ T5991] ? lockdep_hardirqs_on+0x78/0x100 [ 56.700869][ T5991] do_fast_syscall_32+0x32/0x70 [ 56.700882][ T5991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.700897][ T5991] RIP: 0023:0xf7ff8fec [ 56.700906][ T5991] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 56.700910][ T5991] RSP: 002b:00000000f54b65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 56.700922][ T5991] RAX: fffffffffffffe00 RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 56.700928][ T5991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 56.700934][ T5991] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 56.700940][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.700946][ T5991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.700959][ T5991] [ 56.755296][ T6016] se_dev->se_dev_ptr already set for storage object [ 56.763498][ T5102] Bluetooth: hci1: command tx timeout [ 56.766270][ T5757] Bluetooth: hci0: command tx timeout [ 56.781366][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 56.781378][ T42] audit: type=1800 audit(1785416095.402:17): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="members" dev="configfs" ino=11436 res=0 errno=0 [ 56.866744][ T42] audit: type=1800 audit(1785416095.502:18): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="cdrom" dev="configfs" ino=8102 res=0 errno=0 [ 56.874605][ T42] audit: type=1800 audit(1785416095.502:19): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="file" dev="configfs" ino=8103 res=0 errno=0 [ 56.880760][ T42] audit: type=1800 audit(1785416095.502:20): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="UDC" dev="configfs" ino=8104 res=0 errno=0 [ 56.935519][ T6036] e1000e 0000:00:02.0 eth1: removed PHC [ 56.977142][ T6038] sctp: [Deprecated]: syz.3.54 (pid 6038) Use of int in max_burst socket option deprecated. [ 56.977142][ T6038] Use struct sctp_assoc_value instead [ 57.079477][ T6036] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 57.122834][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.142463][ T5822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.182309][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.216840][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.223202][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.225337][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.230782][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.235219][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.237652][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.238263][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.240852][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.243050][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.253120][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.279179][ T6042] memory length for this resource is wrong [ 57.283019][ T5822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.310668][ T6042] isp1760 0000:00:02.0: probe with driver isp1760 failed with error -12 [ 57.385091][ T5822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.473090][ T5822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.489005][ T6089] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.528147][ T42] audit: type=1800 audit(1785416096.162:21): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name="cdrom" dev="configfs" ino=11477 res=0 errno=0 [ 57.539067][ T42] audit: type=1800 audit(1785416096.162:22): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name="file" dev="configfs" ino=11478 res=0 errno=0 [ 57.553032][ T42] audit: type=1800 audit(1785416096.162:23): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name="UDC" dev="configfs" ino=11479 res=0 errno=0 [ 57.741578][ T6108] usb251xb serial8250: supply vdd not found, using dummy regulator [ 57.761388][ T6108] usb251xb serial8250: hub is put in default configuration. [ 57.764402][ T6108] usb251xb serial8250: Hub probed successfully [ 57.784638][ T5822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.866461][ T42] audit: type=1800 audit(1785416096.492:24): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="cdrom" dev="configfs" ino=9821 res=0 errno=0 [ 57.883984][ T42] audit: type=1800 audit(1785416096.492:25): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="file" dev="configfs" ino=9822 res=0 errno=0 [ 57.894795][ T42] audit: type=1800 audit(1785416096.502:26): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="UDC" dev="configfs" ino=9823 res=0 errno=0 [ 57.935569][ T5822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.986720][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.043923][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.051013][ T5822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.061390][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.076593][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.078812][ T6055] bridge_slave_0: entered allmulticast mode [ 58.081383][ T6055] bridge_slave_0: entered promiscuous mode [ 58.085892][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.097483][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.099994][ T6055] bridge_slave_1: entered allmulticast mode [ 58.102614][ T6055] bridge_slave_1: entered promiscuous mode [ 58.134699][ T5822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.161597][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.164405][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.167492][ T6056] bridge_slave_0: entered allmulticast mode [ 58.170189][ T6056] bridge_slave_0: entered promiscuous mode [ 58.174090][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.178955][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.181798][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.184026][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.187012][ T6056] bridge_slave_1: entered allmulticast mode [ 58.190869][ T6056] bridge_slave_1: entered promiscuous mode [ 58.237927][ T6056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.242067][ T6055] team0: Port device team_slave_0 added [ 58.245128][ T6055] team0: Port device team_slave_1 added [ 58.249826][ T6056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.265783][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.268498][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.277196][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.313769][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.315875][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.323814][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.332646][ T6056] team0: Port device team_slave_0 added [ 58.335877][ T6056] team0: Port device team_slave_1 added [ 58.364713][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.366885][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.374350][ T6056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.378642][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.380881][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.388776][ T6056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.412475][ T6055] hsr_slave_0: entered promiscuous mode [ 58.414715][ T6055] hsr_slave_1: entered promiscuous mode [ 58.417525][ T6055] debugfs: 'hsr0' already exists in 'hsr' [ 58.419262][ T6055] Cannot create hsr debugfs directory [ 58.435516][ T5822] bridge_slave_1: left allmulticast mode [ 58.437848][ T5822] bridge_slave_1: left promiscuous mode [ 58.440576][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.448430][ T5822] bridge_slave_0: left allmulticast mode [ 58.450136][ T5822] bridge_slave_0: left promiscuous mode [ 58.451896][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.468090][ T5822] bridge_slave_1: left allmulticast mode [ 58.469803][ T5822] bridge_slave_1: left promiscuous mode [ 58.471569][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.476643][ T5822] bridge_slave_0: left allmulticast mode [ 58.478416][ T5822] bridge_slave_0: left promiscuous mode [ 58.480156][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.588676][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.593543][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.599914][ T5822] bond0 (unregistering): Released all slaves [ 58.670971][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.675150][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.680763][ T5822] bond0 (unregistering): Released all slaves [ 58.696634][ T6056] hsr_slave_0: entered promiscuous mode [ 58.699155][ T6056] hsr_slave_1: entered promiscuous mode [ 58.701374][ T6056] debugfs: 'hsr0' already exists in 'hsr' [ 58.703212][ T6056] Cannot create hsr debugfs directory [ 58.960801][ T6055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.974620][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.978249][ T6055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.993639][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.010658][ T6167] CacheFiles: Failed to register: -2 [ 59.015151][ T6055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.019707][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.023279][ T6055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.032759][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.045077][ T5454] 8021q: adding VLAN 0 to HW filter on device eth1 [ 59.103312][ T6177] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.131105][ T6056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.141572][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.144397][ T6056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.148805][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.151735][ T6056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.158829][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.165683][ T6056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.174833][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.255082][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.283823][ T5822] hsr_slave_0: left promiscuous mode [ 59.288781][ T5822] hsr_slave_1: left promiscuous mode [ 59.290982][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.293369][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.299545][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.301957][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.306315][ T5757] Bluetooth: hci2: command tx timeout [ 59.307474][ T5745] Bluetooth: hci3: command tx timeout [ 59.311123][ T5822] hsr_slave_0: left promiscuous mode [ 59.314149][ T5822] hsr_slave_1: left promiscuous mode [ 59.316915][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.319320][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.322143][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.324522][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.340409][ T5822] veth1_macvtap: left promiscuous mode [ 59.342654][ T5822] veth0_macvtap: left promiscuous mode [ 59.344545][ T5822] veth1_vlan: left promiscuous mode [ 59.349918][ T5822] veth0_vlan: left promiscuous mode [ 59.397903][ T5822] veth1_macvtap: left promiscuous mode [ 59.399775][ T5822] veth0_macvtap: left promiscuous mode [ 59.401607][ T5822] veth1_vlan: left promiscuous mode [ 59.403742][ T5822] veth0_vlan: left promiscuous mode [ 59.651911][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 59.663034][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.667098][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 59.718657][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.849036][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 59.860980][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 59.944698][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 59.972757][ T6056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.998033][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.003340][ T6056] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.008861][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.011974][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.013551][ T6210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.023290][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.026341][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.043183][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.045481][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.051247][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.054076][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.278846][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.389879][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.394705][ T6056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.427401][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.527669][ T6056] veth0_vlan: entered promiscuous mode [ 60.535435][ T6056] veth1_vlan: entered promiscuous mode [ 60.574677][ T6056] veth0_macvtap: entered promiscuous mode [ 60.579365][ T5843] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 60.590553][ T6274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.593308][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.596599][ T5822] IPVS: stop unused estimator thread 0... [ 60.597496][ T6056] veth1_macvtap: entered promiscuous mode [ 60.629309][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.643630][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.654049][ T6055] veth0_vlan: entered promiscuous mode [ 60.663223][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.665857][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.674910][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.678863][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.686925][ T6055] veth1_vlan: entered promiscuous mode [ 60.746892][ T6055] veth0_macvtap: entered promiscuous mode [ 60.752066][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.754000][ T6055] veth1_macvtap: entered promiscuous mode [ 60.755176][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.782943][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.792315][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 60.796762][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.799397][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.802597][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.808606][ T5843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.811907][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.814817][ T5843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 60.820295][ T5822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.820721][ T5843] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 60.828700][ T5822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831616][ T5822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.834408][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.844809][ T6241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.847554][ T5822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.848605][ T5843] hub 7-1:1.0: bad descriptor, ignoring hub [ 60.855639][ T5843] hub 7-1:1.0: probe with driver hub failed with error -5 [ 60.861161][ T5843] cdc_wdm 7-1:1.0: skipping garbage [ 60.865116][ T5843] cdc_wdm 7-1:1.0: skipping garbage [ 60.883232][ T5843] cdc_wdm 7-1:1.0: skipping garbage [ 60.889296][ T5843] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 60.891911][ T5843] cdc_wdm 7-1:1.0: Unknown control protocol [ 60.942088][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.944741][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.997096][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.002490][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.004466][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 61.088205][ T6302] se_dev->se_dev_ptr already set for storage object [ 61.092980][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.152343][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.176886][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 61.283940][ T6320] NFSD: Failed to start, no listeners configured. [ 61.289422][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.386349][ T5745] Bluetooth: hci2: command tx timeout [ 61.387085][ T5757] Bluetooth: hci3: command tx timeout [ 61.832090][ T6343] se_dev->se_dev_ptr already set for storage object [ 61.835479][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 61.835493][ T42] audit: type=1800 audit(1785416100.462:46): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.112" name="members" dev="configfs" ino=11095 res=0 errno=0 [ 61.856419][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.919127][ T42] audit: type=1800 audit(1785416100.552:47): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.115" name="use" dev="configfs" ino=12858 res=0 errno=0 [ 61.919187][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.114'. [ 61.984677][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.016144][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 62.020480][ T50] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 62.023137][ T50] usb 8-1: config 0 has no interface number 0 [ 62.025110][ T50] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 62.028464][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.034659][ T50] usb 8-1: config 0 descriptor?? [ 62.042073][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.054739][ T42] audit: type=1800 audit(1785416100.682:48): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.119" name="cdrom" dev="configfs" ino=13721 res=0 errno=0 [ 62.062082][ T42] audit: type=1800 audit(1785416100.682:49): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.119" name="file" dev="configfs" ino=12177 res=0 errno=0 [ 62.068677][ T42] audit: type=1800 audit(1785416100.682:50): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.119" name="UDC" dev="configfs" ino=12178 res=0 errno=0 [ 62.147262][ T50] viperboard 8-1:0.143: version 0.00 found at bus 008 address 002 [ 62.162485][ T50] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 62.163050][ T6365] se_dev->se_dev_ptr already set for storage object [ 62.165572][ T50] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 62.173691][ T42] audit: type=1800 audit(1785416100.802:51): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.122" name="members" dev="configfs" ino=12902 res=0 errno=0 [ 62.229441][ T42] audit: type=1800 audit(1785416100.862:52): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.124" name="use" dev="configfs" ino=11120 res=0 errno=0 [ 62.242673][ T50] usb 8-1: USB disconnect, device number 2 [ 62.441125][ T42] audit: type=1800 audit(1785416101.072:53): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.128" name="cdrom" dev="configfs" ino=12919 res=0 errno=0 [ 62.447829][ T42] audit: type=1800 audit(1785416101.072:54): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.128" name="file" dev="configfs" ino=12920 res=0 errno=0 [ 62.454200][ T42] audit: type=1800 audit(1785416101.072:55): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.128" name="UDC" dev="configfs" ino=12921 res=0 errno=0 [ 62.548444][ T6386] se_dev->se_dev_ptr already set for storage object [ 62.766712][ T6408] se_dev->se_dev_ptr already set for storage object [ 62.819397][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.825161][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.830160][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.151265][ T6430] syzkaller0: entered promiscuous mode [ 63.153676][ T6430] syzkaller0: entered allmulticast mode [ 63.286091][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.371176][ T6435] se_dev->se_dev_ptr already set for storage object [ 63.449347][ T34] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 63.452514][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 63.455594][ T34] usb 8-1: Product: syz [ 63.457345][ T34] usb 8-1: Manufacturer: syz [ 63.468462][ T34] opticon 8-1:1.0: opticon converter detected [ 63.474962][ T34] usb 8-1: opticon converter now attached to ttyUSB0 [ 63.476086][ T5757] Bluetooth: hci2: command tx timeout [ 63.476548][ T5745] Bluetooth: hci3: command tx timeout [ 63.516034][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 63.666047][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 63.672372][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 63.675093][ T10] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 63.678760][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.681955][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 63.686051][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.688887][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.695224][ T10] usbtmc 10-1:16.0: bulk endpoints not found [ 63.880629][ T34] usb 8-1: USB disconnect, device number 3 [ 63.888455][ T34] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 63.891560][ T34] opticon 8-1:1.0: device disconnected [ 63.899228][ T847] usb 10-1: USB disconnect, device number 2 [ 64.329891][ T6241] cdc_wdm 7-1:1.0: Error autopm - -16 [ 64.330177][ T24] usb 7-1: USB disconnect, device number 3 [ 64.454324][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.459145][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.463150][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.464710][ T6455] Zero length message leads to an empty skb [ 64.472366][ T6457] se_dev->se_dev_ptr already set for storage object [ 64.694116][ T6469] syzkaller0: entered promiscuous mode [ 64.695870][ T6469] syzkaller0: entered allmulticast mode [ 64.736027][ T5853] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 64.886204][ T5853] usb 10-1: Using ep0 maxpacket: 8 [ 64.890685][ T5853] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 64.894223][ T5853] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 64.899145][ T5853] usb 10-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 64.904227][ T5853] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.910267][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.241944][ T6474] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 65.264202][ T6474] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 65.301936][ T6459] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 65.313749][ T1487] usb 10-1: USB disconnect, device number 3 [ 65.546119][ T5745] Bluetooth: hci2: command tx timeout [ 65.546347][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 65.547016][ T5757] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.556485][ T5749] Bluetooth: hci3: command tx timeout [ 65.724069][ T6481] se_dev->se_dev_ptr already set for storage object [ 65.780005][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.784815][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.791041][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.793803][ T6491] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 65.953387][ T6505] usbip-vudc usbip-vudc.0: gadget not bound [ 65.965373][ T6505] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 65.968275][ T6505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.973601][ T6505] vhci_hcd vhci_hcd.0: Device attached [ 65.987040][ T6509] se_dev->se_dev_ptr already set for storage object [ 65.993804][ T6511] netlink: 'syz.5.187': attribute type 2 has an invalid length. [ 66.005104][ T6511] syz.5.187 uses obsolete (PF_INET,SOCK_PACKET) [ 66.216927][ T60] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 66.451340][ T6538] lo: entered allmulticast mode [ 66.454409][ T6538] tunl0: entered allmulticast mode [ 66.457611][ T6538] gre0: entered allmulticast mode [ 66.460516][ T6538] gretap0: entered allmulticast mode [ 66.463234][ T6538] erspan0: entered allmulticast mode [ 66.466614][ T6538] ip_vti0: entered allmulticast mode [ 66.469454][ T6538] ip6_vti0: entered allmulticast mode [ 66.472428][ T6538] sit0: entered allmulticast mode [ 66.475166][ T6538] ip6tnl0: entered allmulticast mode [ 66.478500][ T6538] ip6gre0: entered allmulticast mode [ 66.479876][ T6506] vhci_hcd: connection reset by peer [ 66.481628][ T6538] syz_tun: entered allmulticast mode [ 66.484606][ T5794] vhci_hcd vhci_hcd.0: stop threads [ 66.485560][ T6538] ip6gretap0: entered allmulticast mode [ 66.487653][ T5794] vhci_hcd vhci_hcd.0: release socket [ 66.492883][ T6538] bridge0: entered allmulticast mode [ 66.493975][ T5794] vhci_hcd vhci_hcd.0: disconnect device [ 66.495829][ T6538] vcan0: entered allmulticast mode [ 66.503456][ T6538] bond0: entered allmulticast mode [ 66.505743][ T6538] bond_slave_0: entered allmulticast mode [ 66.508933][ T6538] bond_slave_1: entered allmulticast mode [ 66.512343][ T6538] team0: entered allmulticast mode [ 66.514526][ T6538] team_slave_0: entered allmulticast mode [ 66.517705][ T6538] team_slave_1: entered allmulticast mode [ 66.521111][ T6538] dummy0: entered allmulticast mode [ 66.525107][ T6538] nlmon0: entered allmulticast mode [ 66.528382][ T6538] batadv0: entered allmulticast mode [ 66.531385][ T6538] vxcan0: entered allmulticast mode [ 66.534086][ T6538] vxcan1: entered allmulticast mode [ 66.537804][ T6538] veth0: entered allmulticast mode [ 66.540600][ T6538] veth1: entered allmulticast mode [ 66.543240][ T6538] wg0: entered allmulticast mode [ 66.546551][ T6538] wg1: entered allmulticast mode [ 66.549564][ T6538] wg2: entered allmulticast mode [ 66.552587][ T6538] veth0_to_bridge: entered allmulticast mode [ 66.555262][ T6538] bridge_slave_0: left promiscuous mode [ 66.558248][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.568696][ T6538] veth1_to_bridge: entered allmulticast mode [ 66.571467][ T6538] bridge_slave_1: left promiscuous mode [ 66.573443][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.581301][ T6538] veth0_to_bond: entered allmulticast mode [ 66.584757][ T6538] bond0: (slave bond_slave_0): Releasing backup interface [ 66.591611][ T6538] veth1_to_bond: entered allmulticast mode [ 66.594827][ T6538] bond0: (slave bond_slave_1): Releasing backup interface [ 66.610145][ T6538] veth0_to_team: entered allmulticast mode [ 66.616411][ T6538] team0: Port device team_slave_0 removed [ 66.618755][ T6538] veth1_to_team: entered allmulticast mode [ 66.623653][ T6538] team0: Port device team_slave_1 removed [ 66.625776][ T6538] veth0_to_batadv: entered allmulticast mode [ 66.628328][ T6538] batadv_slave_0: entered allmulticast mode [ 66.630506][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.632820][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.638475][ T6538] veth1_to_batadv: entered allmulticast mode [ 66.641418][ T6538] batadv_slave_1: entered allmulticast mode [ 66.644293][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.648798][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.651997][ T6538] xfrm0: entered allmulticast mode [ 66.654326][ T6538] veth0_to_hsr: entered allmulticast mode [ 66.657507][ T6538] hsr_slave_0: entered allmulticast mode [ 66.659783][ T6538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.706097][ T847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.750304][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.755907][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.763792][ T6559] se_dev->se_dev_ptr already set for storage object [ 66.827847][ T5851] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.856280][ T847] usb 8-1: Using ep0 maxpacket: 8 [ 66.859668][ T847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.863101][ T847] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.870566][ T847] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.873725][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.877211][ T847] usb 8-1: Product: syz [ 66.880344][ T847] usb 8-1: Manufacturer: syz [ 66.881895][ T847] usb 8-1: SerialNumber: syz [ 66.888636][ T847] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 66.988185][ T5851] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.991856][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.995205][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 66.998281][ T5851] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.002251][ T5851] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.005044][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.008867][ T5851] usb 7-1: config 0 descriptor?? [ 67.095413][ T34] usb 8-1: USB disconnect, device number 4 [ 67.106062][ T6579] se_dev->se_dev_ptr already set for storage object [ 67.110038][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 67.110053][ T42] audit: type=1800 audit(1785416105.742:86): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.217" name="members" dev="configfs" ino=15487 res=0 errno=0 [ 67.365093][ T42] audit: type=1800 audit(1785416105.992:87): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.224" name="cdrom" dev="configfs" ino=13142 res=0 errno=0 [ 67.373023][ T42] audit: type=1800 audit(1785416106.002:88): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.224" name="file" dev="configfs" ino=13143 res=0 errno=0 [ 67.381819][ T42] audit: type=1800 audit(1785416106.012:89): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.224" name="UDC" dev="configfs" ino=13144 res=0 errno=0 [ 67.417312][ T5851] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 67.418975][ T42] audit: type=1800 audit(1785416106.052:90): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.226" name="members" dev="configfs" ino=13151 res=0 errno=0 [ 67.438782][ T5851] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.551511][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.557038][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.619470][ T6549] usb 5-1: USB disconnect, device number 2 [ 67.632693][ T42] audit: type=1800 audit(1785416106.262:91): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.235" name="cdrom" dev="configfs" ino=15505 res=0 errno=0 [ 67.639978][ T42] audit: type=1800 audit(1785416106.262:92): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.235" name="file" dev="configfs" ino=15506 res=0 errno=0 [ 67.647224][ T42] audit: type=1800 audit(1785416106.262:93): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.235" name="UDC" dev="configfs" ino=15507 res=0 errno=0 [ 67.679429][ T42] audit: type=1800 audit(1785416106.312:94): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.237" name="members" dev="configfs" ino=14143 res=0 errno=0 [ 67.905465][ T5853] usb 7-1: USB disconnect, device number 4 [ 68.099821][ T42] audit: type=1800 audit(1785416106.732:95): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.246" name="cdrom" dev="configfs" ino=14805 res=0 errno=0 [ 68.150350][ T6655] block2mtd: error: cannot open device /dev [ 68.217184][ T6665] tipc: Started in network mode [ 68.220708][ T6665] tipc: Node identity ac14142f, cluster identity 4711 [ 68.223257][ T6665] tipc: New replicast peer: 0.0.0.0 [ 68.226428][ T6665] tipc: Enabled bearer , priority 10 [ 68.290516][ T6676] zero sized request [ 68.307961][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.312435][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.325443][ T6680] no more MTRRs available [ 68.333957][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.338061][ T6678] netlink: 9 bytes leftover after parsing attributes in process `syz.3.262'. [ 68.340844][ T6678] 0·: renamed from hsr0 (while UP) [ 68.340885][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.347981][ T6678] 0·: entered allmulticast mode [ 68.355137][ T6678] hsr_slave_0: entered allmulticast mode [ 68.358387][ T6678] hsr_slave_1: entered allmulticast mode [ 68.361633][ T6678] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 68.858018][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.967598][ T6763] se_dev->se_dev_ptr already set for storage object [ 68.991304][ T6768] no more MTRRs available [ 69.029377][ T10] usb 9-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 69.035089][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.043782][ T10] usb 9-1: Product: syz [ 69.045164][ T10] usb 9-1: Manufacturer: syz [ 69.051470][ T10] usb 9-1: SerialNumber: syz [ 69.064612][ T10] digi_acceleport 9-1:1.0: Digi 2 port USB adapter converter detected [ 69.067432][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.079087][ T10] usb 9-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 69.085509][ T10] usb 9-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 69.094382][ T10] usb 9-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 69.122724][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.135329][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.187981][ T6790] no more MTRRs available [ 69.200700][ T6792] se_dev->se_dev_ptr already set for storage object [ 69.359626][ T6183] tipc: Node number set to 2886997039 [ 69.417426][ T6815] no more MTRRs available [ 69.422705][ T6817] se_dev->se_dev_ptr already set for storage object [ 69.610811][ T6838] no more MTRRs available [ 69.641981][ T6840] se_dev->se_dev_ptr already set for storage object [ 69.835436][ T6858] no more MTRRs available [ 69.837188][ T847] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 69.849092][ T6860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.873373][ T6862] se_dev->se_dev_ptr already set for storage object [ 69.905324][ T6860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.910482][ T6860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.006956][ T847] usb 10-1: not running at top speed; connect to a high speed hub [ 70.010311][ T847] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 70.013850][ T847] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.018983][ T847] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 70.021959][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.025151][ T847] usb 10-1: Product: syz [ 70.026938][ T847] usb 10-1: Manufacturer: syz [ 70.028475][ T847] usb 10-1: SerialNumber: syz [ 70.038967][ T847] oti6858 10-1:1.0: oti6858 converter detected [ 70.042558][ T847] usb 10-1: oti6858 converter now attached to ttyUSB3 [ 70.216814][ T6878] no more MTRRs available [ 70.301802][ T6882] se_dev->se_dev_ptr already set for storage object [ 70.435025][ T5749] Bluetooth: hci1: failed to read key size for handle 200 [ 70.681214][ T6899] no more MTRRs available [ 70.811900][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.867945][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.872698][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.908950][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.912087][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.269981][ C3] digi_2 ttyUSB0: digi_read_bulk_callback: nonzero read bulk status: status=-71, port=0 [ 71.272892][ C3] digi_2 ttyUSB1: digi_read_bulk_callback: nonzero read bulk status: status=-71, port=1 [ 71.275782][ C3] digi_2 ttyUSB2: digi_read_bulk_callback: nonzero read bulk status: status=-71, port=2 [ 71.278587][ C3] usb-serial (null): digi_read_bulk_callback: nonzero read bulk status: status=-71, port=3 [ 71.283626][ T34] usb 9-1: USB disconnect, device number 2 [ 71.283843][ T6836] [ 71.286188][ T6836] ============================================ [ 71.288083][ T6836] WARNING: possible recursive locking detected [ 71.290016][ T6836] syzkaller #0 Tainted: G S [ 71.292407][ T6836] -------------------------------------------- [ 71.294485][ T6836] syz.5.335/6836 is trying to acquire lock: [ 71.296336][ T6836] ffff8880213cc818 (&priv->dp_port_lock){..-.}-{3:3}, at: digi_set_modem_signals.constprop.0+0x1c4/0x870 [ 71.300269][ T6836] [ 71.300269][ T6836] but task is already holding lock: [ 71.303063][ T6836] ffff8880213cdc18 (&priv->dp_port_lock){..-.}-{3:3}, at: digi_set_modem_signals.constprop.0+0x1b7/0x870 [ 71.307176][ T6836] [ 71.307176][ T6836] other info that might help us debug this: [ 71.309715][ T6836] Possible unsafe locking scenario: [ 71.309715][ T6836] [ 71.312138][ T6836] CPU0 [ 71.313331][ T6836] ---- [ 71.314532][ T6836] lock(&priv->dp_port_lock); [ 71.315991][ T6836] lock(&priv->dp_port_lock); [ 71.317524][ T6836] [ 71.317524][ T6836] *** DEADLOCK *** [ 71.317524][ T6836] [ 71.320112][ T6836] May be due to missing lock nesting notation [ 71.320112][ T6836] [ 71.322903][ T6836] 2 locks held by syz.5.335/6836: [ 71.324490][ T6836] #0: ffff8880254aa1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 71.328070][ T6836] #1: ffff8880213cdc18 (&priv->dp_port_lock){..-.}-{3:3}, at: digi_set_modem_signals.constprop.0+0x1b7/0x870 [ 71.331921][ T6836] [ 71.331921][ T6836] stack backtrace: [ 71.334000][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.5.335 Tainted: G S syzkaller #0 PREEMPT(full) [ 71.334019][ T6836] Tainted: [S]=CPU_OUT_OF_SPEC [ 71.334023][ T6836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.334031][ T6836] Call Trace: [ 71.334037][ T6836] [ 71.334042][ T6836] dump_stack_lvl+0x100/0x190 [ 71.334056][ T6836] print_deadlock_bug.cold+0xbd/0xca [ 71.334074][ T6836] __lock_acquire+0x1256/0x1a40 [ 71.334094][ T6836] lock_acquire+0x1b9/0x370 [ 71.334112][ T6836] ? digi_set_modem_signals.constprop.0+0x1c4/0x870 [ 71.334125][ T6836] ? _raw_spin_lock_irqsave+0x52/0x60 [ 71.334137][ T6836] ? __pfx_digi_dtr_rts+0x10/0x10 [ 71.334147][ T6836] _raw_spin_lock+0x2e/0x40 [ 71.334158][ T6836] ? digi_set_modem_signals.constprop.0+0x1c4/0x870 [ 71.334170][ T6836] digi_set_modem_signals.constprop.0+0x1c4/0x870 [ 71.334181][ T6836] ? mark_held_locks+0x40/0x70 [ 71.334197][ T6836] ? irqentry_exit+0x24d/0xa00 [ 71.334211][ T6836] ? __pfx_digi_set_modem_signals.constprop.0+0x10/0x10 [ 71.334224][ T6836] ? preempt_schedule_thunk+0x16/0x40 [ 71.334241][ T6836] ? preempt_schedule_common+0x42/0xc0 [ 71.334254][ T6836] ? preempt_schedule_thunk+0x16/0x40 [ 71.334270][ T6836] ? __pfx_digi_dtr_rts+0x10/0x10 [ 71.334280][ T6836] serial_port_dtr_rts+0x8a/0xb0 [ 71.334299][ T6836] ? __pfx_serial_port_dtr_rts+0x10/0x10 [ 71.334312][ T6836] tty_port_block_til_ready+0x5ae/0x910 [ 71.334330][ T6836] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 71.334347][ T6836] ? __pfx_autoremove_wake_function+0x10/0x10 [ 71.334363][ T6836] ? serial_port_activate+0xab/0x290 [ 71.334380][ T6836] tty_port_open+0x19c/0x1f0 [ 71.334396][ T6836] ? __pfx_serial_open+0x10/0x10 [ 71.334411][ T6836] tty_open+0x3dd/0xfa0 [ 71.334427][ T6836] ? __pfx_tty_open+0x10/0x10 [ 71.334442][ T6836] ? chrdev_open+0x589/0x6a0 [ 71.334453][ T6836] ? chrdev_open+0x589/0x6a0 [ 71.334463][ T6836] ? __pfx_tty_open+0x10/0x10 [ 71.334477][ T6836] chrdev_open+0x234/0x6a0 [ 71.334488][ T6836] ? __pfx_chrdev_open+0x10/0x10 [ 71.334498][ T6836] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 71.334512][ T6836] do_dentry_open+0x6ab/0x14d0 [ 71.334523][ T6836] ? __pfx_chrdev_open+0x10/0x10 [ 71.334534][ T6836] vfs_open+0x82/0x3f0 [ 71.334547][ T6836] path_openat+0x2873/0x4280 [ 71.334560][ T6836] ? __pfx_path_openat+0x10/0x10 [ 71.334572][ T6836] do_file_open+0x20e/0x430 [ 71.334581][ T6836] ? __lock_acquire+0x49f/0x1a40 [ 71.334597][ T6836] ? __pfx_do_file_open+0x10/0x10 [ 71.334611][ T6836] ? _raw_spin_unlock+0x28/0x50 [ 71.334621][ T6836] ? alloc_fd+0x471/0x7a0 [ 71.334632][ T6836] do_sys_openat2+0x10f/0x1e0 [ 71.334645][ T6836] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.334660][ T6836] __ia32_compat_sys_openat+0x12d/0x210 [ 71.334675][ T6836] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 71.334692][ T6836] __do_fast_syscall_32+0xe7/0x970 [ 71.334706][ T6836] ? lockdep_hardirqs_on+0x78/0x100 [ 71.334718][ T6836] do_fast_syscall_32+0x32/0x70 [ 71.334732][ T6836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.334746][ T6836] RIP: 0023:0xf7ff7fec [ 71.334762][ T6836] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 71.334767][ T6836] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 71.334778][ T6836] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 71.334785][ T6836] RDX: 000000000000e002 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.334791][ T6836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.334799][ T6836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.334806][ T6836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.334815][ T6836] [ 71.462560][ T60] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 71.465042][ T6836] digi_2 ttyUSB0: digi_set_modem_signals: usb_submit_urb failed, ret=-19 [ 71.468198][ T6836] digi_2 ttyUSB0: digi_set_modem_signals: usb_submit_urb failed, ret=-19 [ 71.471886][ T34] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 71.475642][ T34] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 71.476470][ T9] usb 10-1: USB disconnect, device number 4 [ 71.479323][ T34] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 71.482671][ T9] oti6858 ttyUSB3: oti6858 converter now disconnected from ttyUSB3 [ 71.483822][ T34] digi_acceleport 9-1:1.0: device disconnected [ 71.487092][ T9] oti6858 10-1:1.0: device disconnected [ 81.151371][ T1043] cfg80211: failed to load regulatory.db