last executing test programs: 3.991399044s ago: executing program 3 (id=218): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.720695145s ago: executing program 3 (id=221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@loopback, @in6=@local, 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x5, 0xfffffffffffffffd, 0x8, 0x1, 0x1, 0x20000000, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) 2.720150296s ago: executing program 0 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1025}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "94c6a9dae9adf0a4fdc0bfb45ca0a70fd87800babf6ab68f66f230"}]}, 0x68}}, 0x0) 2.630066125s ago: executing program 0 (id=225): socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000001c0)="92", 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c28bd700002000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000002000000003000000000000000000000000000000000000000000000000189a6c96a20800000000000000fcffffffffffffff00000000000000000100af910000000000000000040000000400000000000000fdff00000000000000010300000000000a001000"], 0xc4}}, 0x4c050) (fail_nth: 5) 2.629941465s ago: executing program 3 (id=226): setns(0xc9, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, 0x0, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x400, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x5a, 0x1e, 0x1}]}, 0x24}}, 0x80) 2.550398865s ago: executing program 3 (id=227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000019100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f", @ANYRES8=r0], 0x17) 2.550089317s ago: executing program 3 (id=228): syz_open_dev$video(&(0x7f0000000440), 0x20000000000008, 0x8000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x1000000000003}) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xa}}]}, 0x2c}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20040) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000340)={0xffffffffffffe14, 0x0, [{0x97b, 0x0, 0x8005}, {0x82a, 0x0, 0x3}, {0x916, 0x0, 0x1f}, {0x8b, 0x0, 0x6}, {0x3b0, 0x0, 0x6}, {0x217}]}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000060033f03003000640000ac01a29e9e6add1fee835a7cce08a19d11af7c3fc84860af1672dbce67d421f166bb88c3d5527640b839f420e06b01fd73f60ae96c6d550082103bb0fa1c068bac378823a5dffffa38a16529f45c863e"], 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x400e, 0xc000, 0x8, 0x74}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000140)) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5cc}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 2.471062152s ago: executing program 0 (id=229): mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mount(&(0x7f0000000000)=@filename='./loop0\x00', &(0x7f0000000300)='./loop0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000100)='rtdev=./loop0\x00\xa3O;\x9bN\xf2\x86l\xbfF,\x7f\x8fJ<\xff\xa8\x01_\xf2\x81\xd4\xec\x83z\xc5\xdc\xc7\x81b\xfc Ae\x9c5\x9c\x03\xeb\xad\xd9&\x8fp\x9f\xea@T@\xff\x98\xf7\x86\xb8R\xd9\x84\f<\x9c5\x18\x1d\x85\xe5\xdd\xee\xb9\x1eN\a\xa5\x8b\xfe\xff\x89\xe6U\x99\xca]\xe9Fv\xdeo%\xf9\xcf\xdcL\xf8\x84\x1c\xc8w\x1cM\x9a\x82\xfc\x03i\xf3\xa0f\x95J\xc9\xc3\x8b<\'\x89\t\xde\x89BT\xadr\x1a\x19w9+i$\xc4&\x9f\x02\x94z\xf6\xd6\f\xf6\xbe2d\t=\xe6\xf3\xec\xfb\xc6\xfb\x1d\xb8\x18:\xe6\xfelX!\xe0\x8f{A\xe0\x1e\x1a\xbbz\xf9\x9dpU\x05\x19\x88\xa5\x8dc\xb7U\x9dM\xf8\x0f):\xa5\x83\rg}\xdf\xfa\xbf\xa2\x9b\xc0\xe0[\xa9\x8d\xbf\x1d\xdf\xe0\xe8\xca7\x1a-j\x8da\x01%\x86\xb4^>\b\x1d:\x1d9ot\xdf\'G\x19\xc7_\xa5') r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:logd_exec_t:s0 /usr/lib/telepathy/mission-control-5 00000000000000000013\x00\x00'], 0x5c) 2.281462491s ago: executing program 0 (id=232): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/31) lseek(r0, 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, &(0x7f0000000180)=[{}, {}], 0x2, 0x6, &(0x7f0000000280)={[0x6]}, 0x8) r7 = dup(r5) r8 = fcntl$getown(r3, 0x9) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r9, 0x388, 0xffff7fffffffff7f) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r5, &(0x7f0000000000)={r7, r1, 0xfffffff5}) syz_ublk_setup_queues(0xffffffffffffffff, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.209207074s ago: executing program 0 (id=233): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = semget(0x2, 0x4, 0x3a8) semtimedop(r2, &(0x7f0000001000)=[{0x3, 0xffff}], 0x1, &(0x7f0000001040)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) 1.937395878s ago: executing program 0 (id=237): socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000001c0)="92", 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x80ff, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c28bd700002000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000002000000003000000000000000000000000000000000000000000000000189a6c96a20800000000000000fcffffffffffffff00000000000000000100af910000000000000000040000000400000000000000fdff00000000000000010300000000000a001000"], 0xc4}}, 0x4c050) 1.84047957s ago: executing program 32 (id=237): socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000001c0)="92", 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x80ff, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c28bd700002000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000002000000003000000000000000000000000000000000000000000000000189a6c96a20800000000000000fcffffffffffffff00000000000000000100af910000000000000000040000000400000000000000fdff00000000000000010300000000000a001000"], 0xc4}}, 0x4c050) 1.60118545s ago: executing program 3 (id=242): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x7}, 0x8) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6erspan0\x00', 0x4}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e38000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000078a000/0x3000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.60095035s ago: executing program 2 (id=243): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f00000004c0)="2704b0a7a74ec383d300"/22, 0x16}], 0x2) dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0007040000080000000000000000000000000000000000000526"], 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[], 0x15c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r4, 0x0, 0xfffffcd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r5, 0x0, 0x20004c00) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x800000000008, 0x482) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00 \x00'}, 0x0, 0x1, {&(0x7f0000000300)}, 0x2}) 1.558208985s ago: executing program 2 (id=244): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) syz_clone(0x810011, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, 0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket(0xa, 0x3, 0x3a) 1.279829726s ago: executing program 1 (id=245): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x4, 0x3, 0x8, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f00000004c0)=[{0x412df, 0x2000000000000004}]}) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r6) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x20, 0x14, 0x601, 0x0, 0x0, "", [@generic="23000000010000000500020000000000"]}, 0x20}], 0x1}, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r9, &(0x7f0000000300), 0x10) sendto$phonet(r9, &(0x7f0000000400)="01010000000000000000", 0xa, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10) recvfrom$phonet(r9, &(0x7f0000000600)=""/256, 0x100, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) 440.292553ms ago: executing program 1 (id=246): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x1, @loopback, 0x2a2a072a}, 0x1c, 0x0, 0x700}}], 0x1, 0xff00) 440.058934ms ago: executing program 1 (id=247): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @remote}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="80000080003f210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 350.112507ms ago: executing program 2 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x50bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xf3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000500)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x28002, 0xcbdd}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x3, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x25e}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x680c, 0x8, 0xfffffffffffffbff, 0x5}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x2c3, 0x5}}, @wr_crn={0x67, 0x20, {0x8, 0xa}}, @nested_load_syzos={0x136, 0x84, {0x2, 0x7, [@wr_drn={0x68, 0x20, {0x3}}, @nested_load_code={0x12e, 0x44, {0x0, "0fc75c07af66ba6100ed0f38ca78bac401795d6b000f2222b8010000000f01c147afaf400f01c366bad104ec"}}]}}, @in_dx={0x69, 0x20, {0xa87d, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0xb}}, @nested_amd_invlpga={0x17d, 0x20, {0x2ffc, 0x3639}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x1ff8, 0x7cc}}, @out_dx={0x6a, 0x28, {0x655f, 0x0, 0x4}}, @code={0xa, 0x5b, {"66ba2000b8e5000000ef0f1a1d22ffffff3e2e0f01c30f3066baf80cb8b0753f8aef66bafc0ced0f218b66baf80cb858cd738aef66bafc0cb000ee0f2263b8010000000f01c1400fc739"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6008, 0x640b, 0x9, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x440c, 0xfffffffffffffff8, 0x6, 0x80a}}, @wr_drn={0x68, 0x20, {0x5, 0x719}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x3cf}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, &(0x7f0000000940)="0f0f87022a0000ae0f01caf30fc7b306a000000f22620fc7ba00000080fd643e0f01c20fc71e660f388003b8010000000f01d9", 0x33}], 0x1, 0x25, &(0x7f00000009c0), 0x0) 241.116145ms ago: executing program 2 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x8c}, 0x20000880) 159.499275ms ago: executing program 1 (id=250): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0x1, "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"}) ioctl$KDDELIO(r0, 0x4b35, 0x80000000) 159.243168ms ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r1 = socket$inet6(0xa, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) fadvise64(r3, 0x1, 0x2, 0x3) connect$inet6(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd98, 0x71cdc2a553839eed}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090) 153.34369ms ago: executing program 1 (id=252): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x7ffffffd, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x10e0}, 0x1, 0x60000000, 0x0, 0x8011}, 0x800) 203.103µs ago: executing program 2 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) (fail_nth: 4) 0s ago: executing program 1 (id=254): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x7f}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0x7, {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x200, 0x9f]}}, @common=@addrtype={{0x30}, {0x2, 0x90, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x6a, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) sendto$packet(r3, &(0x7f0000000300)="efb60f1972f8409a4ca5dd867c72b4b7bbe70eb067fa0e64ca931a74c1ce5bb7203574b2ee95ceffb80ab0104f8a9273cecd831f67ac25330ec92561b239936d8ee24d35aa9c2ca43d610339d552f74c611e3614452a674bd564b1aca435828a5ff4331335d57b5d5124ea95119f03b7dce9f6", 0x73, 0x4000044, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x40, 0x40, 0x1, 0x1, {{0x12, 0x4, 0x2, 0x2, 0x48, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x22, 0x0, 0x0, [0xffffffff, 0x7fff, 0xd35fc67]}, @lsrr={0x83, 0x1f, 0xf3, [@multicast1, @multicast1, @local, @loopback, @loopback, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x7, 0x0, 0x8, 0x8, 0x5}, &(0x7f0000000180)=0x98) kernel console output (not intermixed with test programs): .897:301): avc: denied { create } for pid=6155 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.864293][ T6158] fuse: Unknown parameter '18446744073709551615' [ 67.887589][ T43] audit: type=1400 audit(1791267917.927:302): avc: denied { create } for pid=6160 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.890045][ T43] audit: type=1400 audit(1791267917.927:303): avc: denied { connect } for pid=6160 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.901684][ T6164] syzkaller0: entered promiscuous mode [ 67.901704][ T6164] syzkaller0: entered allmulticast mode [ 67.912132][ T6164] tipc: Started in network mode [ 67.912158][ T6164] tipc: Node identity aa3df3c98189, cluster identity 4711 [ 67.913022][ T6164] tipc: Enabled bearer , priority 0 [ 67.918736][ T6161] tipc: Resetting bearer [ 67.935971][ T6161] tipc: Disabling bearer [ 67.946264][ T6159] IPVS: using max 24 ests per chain, 57600 per kthread [ 67.946894][ T6170] FAULT_INJECTION: forcing a failure. [ 67.946894][ T6170] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.946918][ T6170] CPU: 2 UID: 0 PID: 6170 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT(full) [ 67.946938][ T6170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.946948][ T6170] Call Trace: [ 67.946955][ T6170] [ 67.946962][ T6170] dump_stack_lvl+0x100/0x190 [ 67.946991][ T6170] should_fail_ex.cold+0x5/0xa [ 67.947018][ T6170] _copy_from_iter+0x43a/0x1690 [ 67.947046][ T6170] ? __pfx__copy_from_iter+0x10/0x10 [ 67.947068][ T6170] ? __pfx___alloc_skb+0x10/0x10 [ 67.947103][ T6170] netlink_sendmsg+0x808/0xda0 [ 67.947132][ T6170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.947158][ T6170] ? selinux_socket_sendmsg+0x198/0x2f0 [ 67.947184][ T6170] ____sys_sendmsg+0xa4d/0xbe0 [ 67.947202][ T6170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.947227][ T6170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.947250][ T6170] ? lock_acquire+0x1d1/0x380 [ 67.947271][ T6170] ? get_pid_task+0x2a/0x250 [ 67.947313][ T6170] ___sys_sendmsg+0x190/0x1e0 [ 67.947334][ T6170] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.947354][ T6170] ? get_pid_task+0x106/0x250 [ 67.947386][ T6170] ? find_held_lock+0x2b/0x80 [ 67.947434][ T6170] __sys_sendmsg+0x160/0x210 [ 67.947461][ T6170] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.947498][ T6170] do_syscall_64+0x123/0x790 [ 67.947521][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.947541][ T6170] RIP: 0033:0x7effddb9e199 [ 67.947556][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.947573][ T6170] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.947591][ T6170] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 67.947603][ T6170] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 67.947614][ T6170] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 67.947625][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.947635][ T6170] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 67.947659][ T6170] [ 67.953542][ T6168] net_ratelimit: 499 callbacks suppressed [ 67.953559][ T6168] netlink: zone id is out of range [ 67.953566][ T6168] netlink: zone id is out of range [ 67.953572][ T6168] netlink: zone id is out of range [ 67.953579][ T6168] netlink: zone id is out of range [ 67.953585][ T6168] netlink: zone id is out of range [ 67.953592][ T6168] netlink: zone id is out of range [ 67.953602][ T6168] netlink: zone id is out of range [ 67.953609][ T6168] netlink: zone id is out of range [ 67.953615][ T6168] netlink: zone id is out of range [ 67.953622][ T6168] netlink: zone id is out of range [ 68.106527][ T6183] FAULT_INJECTION: forcing a failure. [ 68.106527][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 68.106548][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT(full) [ 68.106576][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.106584][ T6183] Call Trace: [ 68.106589][ T6183] [ 68.106594][ T6183] dump_stack_lvl+0x100/0x190 [ 68.106614][ T6183] should_fail_ex.cold+0x5/0xa [ 68.106629][ T6183] should_failslab+0xc2/0x120 [ 68.106649][ T6183] __kmalloc_noprof+0xfc/0x840 [ 68.106662][ T6183] ? kobject_get_path+0xcf/0x2c0 [ 68.106680][ T6183] kobject_get_path+0xcf/0x2c0 [ 68.106697][ T6183] kobject_uevent_env+0x287/0x18b0 [ 68.106715][ T6183] ? bus_to_subsys+0x114/0x150 [ 68.106730][ T6183] device_del+0x605/0x9b0 [ 68.106746][ T6183] ? __pfx_device_del+0x10/0x10 [ 68.106761][ T6183] ? mark_held_locks+0x40/0x70 [ 68.106776][ T6183] cdev_device_del+0x1d/0x110 [ 68.106793][ T6183] posix_clock_unregister+0x45/0xd0 [ 68.106809][ T6183] ptp_clock_unregister+0xbe/0x270 [ 68.106825][ T6183] e1000e_ptp_remove+0xb9/0x140 [ 68.106840][ T6183] e1000_remove+0x4e/0x560 [ 68.106857][ T6183] pci_device_remove+0xb2/0x1d0 [ 68.106868][ T6183] ? __pfx_pci_device_remove+0x10/0x10 [ 68.106880][ T6183] device_remove+0xcb/0x180 [ 68.106895][ T6183] device_release_driver_internal+0x44e/0x620 [ 68.106913][ T6183] pci_stop_bus_device+0x120/0x160 [ 68.106928][ T6183] pci_stop_and_remove_bus_device+0x58/0xa0 [ 68.106942][ T6183] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 68.106956][ T6183] remove_store+0x123/0x140 [ 68.106971][ T6183] ? __pfx_remove_store+0x10/0x10 [ 68.106985][ T6183] ? find_held_lock+0x2b/0x80 [ 68.107001][ T6183] ? sysfs_file_kobj+0xe4/0x290 [ 68.107016][ T6183] ? sysfs_file_kobj+0xe4/0x290 [ 68.107031][ T6183] ? __pfx_remove_store+0x10/0x10 [ 68.107044][ T6183] dev_attr_store+0x58/0x80 [ 68.107060][ T6183] ? __pfx_dev_attr_store+0x10/0x10 [ 68.107076][ T6183] sysfs_kf_write+0xf2/0x150 [ 68.107091][ T6183] kernfs_fop_write_iter+0x3e0/0x5f0 [ 68.107104][ T6183] ? __pfx_sysfs_kf_write+0x10/0x10 [ 68.107119][ T6183] vfs_write+0x6af/0x1050 [ 68.107132][ T6183] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 68.107147][ T6183] ? __pfx_vfs_write+0x10/0x10 [ 68.107158][ T6183] ? find_held_lock+0x2b/0x80 [ 68.107183][ T6183] ksys_write+0x12a/0x250 [ 68.107196][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 68.107212][ T6183] do_syscall_64+0x123/0x790 [ 68.107226][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.107237][ T6183] RIP: 0033:0x7f759999e199 [ 68.107247][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.107257][ T6183] RSP: 002b:00007f759a81c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.107269][ T6183] RAX: ffffffffffffffda RBX: 00007f7599c25fa0 RCX: 00007f759999e199 [ 68.107292][ T6183] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 68.107298][ T6183] RBP: 00007f759a81c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.107304][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.107311][ T6183] R13: 00007f7599c26038 R14: 00007f7599c25fa0 R15: 00007fffe6a6b0d8 [ 68.107325][ T6183] [ 68.108320][ T6183] e1000e 0000:00:02.0 eth1: removed PHC [ 68.115120][ T6188] FAULT_INJECTION: forcing a failure. [ 68.115120][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 68.115156][ T6188] CPU: 2 UID: 0 PID: 6188 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 68.115174][ T6188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.115182][ T6188] Call Trace: [ 68.115189][ T6188] [ 68.115197][ T6188] dump_stack_lvl+0x100/0x190 [ 68.115230][ T6188] should_fail_ex.cold+0x5/0xa [ 68.115255][ T6188] should_failslab+0xc2/0x120 [ 68.115280][ T6188] __kmalloc_noprof+0xfc/0x840 [ 68.115302][ T6188] ? kobject_get_path+0xcf/0x2c0 [ 68.115326][ T6188] kobject_get_path+0xcf/0x2c0 [ 68.115348][ T6188] kobject_uevent_env+0x287/0x18b0 [ 68.115370][ T6188] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 68.115391][ T6188] ? kfree+0x22b/0x6d0 [ 68.115407][ T6188] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 68.115432][ T6188] ? __pfx_kvm_vm_release+0x10/0x10 [ 68.115450][ T6188] kvm_put_kvm+0xf9/0xc10 [ 68.115466][ T6188] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.115482][ T6188] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.115505][ T6188] ? kvm_irqfd_release+0xd3/0x110 [ 68.115525][ T6188] ? __pfx_kvm_vm_release+0x10/0x10 [ 68.115547][ T6188] kvm_vm_release+0x3c/0x50 [ 68.115567][ T6188] __fput+0x3ff/0xb50 [ 68.115596][ T6188] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.115626][ T6188] task_work_run+0x150/0x240 [ 68.115656][ T6188] ? __pfx_task_work_run+0x10/0x10 [ 68.115690][ T6188] exit_to_user_mode_loop+0x1d8/0x700 [ 68.115714][ T6188] ? rcu_is_watching+0x13/0xc0 [ 68.115742][ T6188] do_syscall_64+0x661/0x790 [ 68.115801][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.115820][ T6188] RIP: 0033:0x7effddb9e199 [ 68.115835][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.115852][ T6188] RSP: 002b:00007effdea2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.115870][ T6188] RAX: 0000000000000000 RBX: 00007effdde26180 RCX: 00007effddb9e199 [ 68.115882][ T6188] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 68.115892][ T6188] RBP: 00007effdea2b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.115902][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.115913][ T6188] R13: 00007effdde26218 R14: 00007effdde26180 R15: 00007ffefa14ce68 [ 68.115936][ T6188] [ 68.192466][ T6192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6192 comm=syz.0.77 [ 68.293609][ T6183] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 68.312076][ T6185] FAULT_INJECTION: forcing a failure. [ 68.312076][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.312106][ T6185] CPU: 2 UID: 0 PID: 6185 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 68.312126][ T6185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.312137][ T6185] Call Trace: [ 68.312143][ T6185] [ 68.312150][ T6185] dump_stack_lvl+0x100/0x190 [ 68.312183][ T6185] should_fail_ex.cold+0x5/0xa [ 68.312208][ T6185] _copy_from_user+0x2e/0xd0 [ 68.312229][ T6185] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 68.312271][ T6185] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 68.312300][ T6185] do_sock_getsockopt+0x530/0x6e0 [ 68.312322][ T6185] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 68.312347][ T6185] ? __fget_files+0x34/0x3d0 [ 68.312372][ T6185] ? find_held_lock+0x2b/0x80 [ 68.312406][ T6185] ? __fget_files+0x21f/0x3d0 [ 68.312439][ T6185] __sys_getsockopt+0x148/0x260 [ 68.312471][ T6185] ? __x64_sys_getsockopt+0xbd/0x160 [ 68.312495][ T6185] __x64_sys_getsockopt+0xbd/0x160 [ 68.312518][ T6185] ? do_syscall_64+0xae/0x790 [ 68.312537][ T6185] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.312556][ T6185] do_syscall_64+0x123/0x790 [ 68.312577][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.312595][ T6185] RIP: 0033:0x7ff40439e199 [ 68.312610][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.312627][ T6185] RSP: 002b:00007ff40526c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.312646][ T6185] RAX: ffffffffffffffda RBX: 00007ff404625fa0 RCX: 00007ff40439e199 [ 68.312658][ T6185] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 68.312668][ T6185] RBP: 00007ff4044358e0 R08: 0000200000000180 R09: 0000000000000000 [ 68.312679][ T6185] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.312690][ T6185] R13: 00007ff404626038 R14: 00007ff404625fa0 R15: 00007fff6a515778 [ 68.312713][ T6185] [ 68.364053][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 68.563883][ T6217] FAULT_INJECTION: forcing a failure. [ 68.563883][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 68.563917][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 68.563938][ T6217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.563950][ T6217] Call Trace: [ 68.563956][ T6217] [ 68.563964][ T6217] dump_stack_lvl+0x100/0x190 [ 68.563996][ T6217] should_fail_ex.cold+0x5/0xa [ 68.564024][ T6217] should_failslab+0xc2/0x120 [ 68.564051][ T6217] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.564073][ T6217] ? __lock_acquire+0x5c0/0x1f40 [ 68.564094][ T6217] ? dst_alloc+0x99/0x1a0 [ 68.564123][ T6217] dst_alloc+0x99/0x1a0 [ 68.564150][ T6217] rt_dst_alloc+0x35/0x3a0 [ 68.564170][ T6217] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 68.564202][ T6217] ip_route_output_key_hash+0x118/0x2b0 [ 68.564226][ T6217] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 68.564255][ T6217] ? ping_v4_sendmsg+0x4d5/0x19c0 [ 68.564275][ T6217] ? find_held_lock+0x2b/0x80 [ 68.564306][ T6217] ip_route_output_flow+0x27/0x150 [ 68.564331][ T6217] ping_v4_sendmsg+0xa9d/0x19c0 [ 68.564357][ T6217] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 68.564378][ T6217] ? __lock_acquire+0x5c0/0x1f40 [ 68.564410][ T6217] ? release_sock+0x21/0x280 [ 68.564447][ T6217] ? inet_autobind+0x145/0x1a0 [ 68.564465][ T6217] ? find_held_lock+0x2b/0x80 [ 68.564497][ T6217] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.564518][ T6217] ? inet_autobind+0x145/0x1a0 [ 68.564534][ T6217] ? __local_bh_enable_ip+0xa5/0x120 [ 68.564556][ T6217] ? inet_autobind+0x14a/0x1a0 [ 68.564574][ T6217] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 68.564596][ T6217] inet_sendmsg+0x11c/0x140 [ 68.564618][ T6217] ____sys_sendmsg+0x9c9/0xbe0 [ 68.564636][ T6217] ? __pfx_inet_sendmsg+0x10/0x10 [ 68.564660][ T6217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.564686][ T6217] ? lock_acquire+0x1d1/0x380 [ 68.564706][ T6217] ? get_pid_task+0x2a/0x250 [ 68.564734][ T6217] ___sys_sendmsg+0x190/0x1e0 [ 68.564759][ T6217] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.564779][ T6217] ? get_pid_task+0x106/0x250 [ 68.564814][ T6217] ? find_held_lock+0x2b/0x80 [ 68.564854][ T6217] __sys_sendmsg+0x160/0x210 [ 68.564880][ T6217] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.564919][ T6217] do_syscall_64+0x123/0x790 [ 68.564942][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.564960][ T6217] RIP: 0033:0x7effddb9e199 [ 68.564976][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.564993][ T6217] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.565012][ T6217] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 68.565024][ T6217] RDX: 0000000024048890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 68.565035][ T6217] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 68.565045][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.565056][ T6217] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 68.565080][ T6217] [ 69.043437][ T6266] FAULT_INJECTION: forcing a failure. [ 69.043437][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 69.043480][ T6266] CPU: 3 UID: 0 PID: 6266 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 69.043502][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.043513][ T6266] Call Trace: [ 69.043519][ T6266] [ 69.043526][ T6266] dump_stack_lvl+0x100/0x190 [ 69.043567][ T6266] should_fail_ex.cold+0x5/0xa [ 69.043593][ T6266] should_failslab+0xc2/0x120 [ 69.043624][ T6266] __kmalloc_noprof+0xfc/0x840 [ 69.043647][ T6266] ? tomoyo_encode2+0xfb/0x3c0 [ 69.043677][ T6266] tomoyo_encode2+0xfb/0x3c0 [ 69.043706][ T6266] tomoyo_encode+0x29/0x50 [ 69.043730][ T6266] tomoyo_realpath_from_path+0x18c/0x690 [ 69.043784][ T6266] tomoyo_check_open_permission+0x2af/0x3c0 [ 69.043808][ T6266] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 69.043839][ T6266] ? hook_file_open+0x248/0x8e0 [ 69.043874][ T6266] ? path_get+0x61/0x80 [ 69.043903][ T6266] tomoyo_file_open+0x6b/0x90 [ 69.043928][ T6266] security_file_open+0xb5/0x1e0 [ 69.043954][ T6266] do_dentry_open+0x588/0x14d0 [ 69.043983][ T6266] vfs_open+0x82/0x3f0 [ 69.044012][ T6266] path_openat+0x19fa/0x2440 [ 69.044041][ T6266] ? __pfx_path_openat+0x10/0x10 [ 69.044073][ T6266] do_file_open+0x20e/0x430 [ 69.044100][ T6266] ? __pfx_do_file_open+0x10/0x10 [ 69.044142][ T6266] ? _raw_spin_unlock+0x28/0x50 [ 69.044174][ T6266] ? alloc_fd+0x471/0x7a0 [ 69.044207][ T6266] do_sys_openat2+0x10f/0x1e0 [ 69.044234][ T6266] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.044261][ T6266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.044289][ T6266] __x64_sys_openat+0x12d/0x210 [ 69.044317][ T6266] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.044344][ T6266] ? ksys_write+0x1ac/0x250 [ 69.044373][ T6266] do_syscall_64+0x123/0x790 [ 69.044395][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.044414][ T6266] RIP: 0033:0x7ff40439e199 [ 69.044429][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.044444][ T6266] RSP: 002b:00007ff40526c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.044462][ T6266] RAX: ffffffffffffffda RBX: 00007ff404625fa0 RCX: 00007ff40439e199 [ 69.044474][ T6266] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 69.044485][ T6266] RBP: 00007ff4044358e0 R08: 0000000000000000 R09: 0000000000000000 [ 69.044496][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.044506][ T6266] R13: 00007ff404626038 R14: 00007ff404625fa0 R15: 00007fff6a515778 [ 69.044531][ T6266] [ 69.044592][ T6266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.246301][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.344941][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 69.397328][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 69.398244][ T9] usb 7-1: config index 0 descriptor too short (expected 47, got 46) [ 69.398264][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.398301][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 69.398331][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.452788][ T6296] dummy0 speed is unknown, defaulting to 1000 [ 69.821472][ T6317] random: crng reseeded on system resumption [ 70.206229][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.256330][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.273409][ T6342] FAULT_INJECTION: forcing a failure. [ 70.273409][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 70.273499][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT(full) [ 70.273521][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.273531][ T6342] Call Trace: [ 70.273538][ T6342] [ 70.273545][ T6342] dump_stack_lvl+0x100/0x190 [ 70.273576][ T6342] should_fail_ex.cold+0x5/0xa [ 70.273616][ T6342] should_failslab+0xc2/0x120 [ 70.273644][ T6342] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 70.273669][ T6342] ? __alloc_skb+0x140/0x710 [ 70.273708][ T6342] __alloc_skb+0x140/0x710 [ 70.273731][ T6342] ? __alloc_skb+0x5b7/0x710 [ 70.273754][ T6342] ? __pfx___alloc_skb+0x10/0x10 [ 70.273787][ T6342] hci_sock_sendmsg+0x1b27/0x26a0 [ 70.273821][ T6342] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 70.273850][ T6342] ? selinux_socket_sendmsg+0x198/0x2f0 [ 70.273879][ T6342] sock_write_iter+0x53a/0x5b0 [ 70.273899][ T6342] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 70.273932][ T6342] ? __pfx_sock_write_iter+0x10/0x10 [ 70.273960][ T6342] ? bpf_lsm_file_permission+0x9/0x10 [ 70.273986][ T6342] ? security_file_permission+0x76/0x210 [ 70.274013][ T6342] ? rw_verify_area+0xce/0x6d0 [ 70.274034][ T6342] vfs_write+0x6af/0x1050 [ 70.274056][ T6342] ? __pfx_sock_write_iter+0x10/0x10 [ 70.274079][ T6342] ? __pfx_vfs_write+0x10/0x10 [ 70.274098][ T6342] ? find_held_lock+0x2b/0x80 [ 70.274142][ T6342] ksys_write+0x1f8/0x250 [ 70.274164][ T6342] ? __pfx_ksys_write+0x10/0x10 [ 70.274194][ T6342] do_syscall_64+0x123/0x790 [ 70.274217][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.274237][ T6342] RIP: 0033:0x7ff40439e199 [ 70.274252][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.274269][ T6342] RSP: 002b:00007ff40526c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.274287][ T6342] RAX: ffffffffffffffda RBX: 00007ff404625fa0 RCX: 00007ff40439e199 [ 70.274299][ T6342] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 70.274310][ T6342] RBP: 00007ff40526c090 R08: 0000000000000000 R09: 0000000000000000 [ 70.274321][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.274332][ T6342] R13: 00007ff404626038 R14: 00007ff404625fa0 R15: 00007fff6a515778 [ 70.274357][ T6342] [ 70.275196][ T6342] Bluetooth: MGMT ver 1.23 [ 70.356842][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.360133][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.360160][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.360178][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.360211][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.366414][ T64] usb 5-1: config 0 descriptor?? [ 70.466863][ T42] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.467694][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.467710][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.467721][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.467766][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.471665][ T42] usb 8-1: config 0 descriptor?? [ 70.769497][ T6354] syzkaller0: entered promiscuous mode [ 70.769521][ T6354] syzkaller0: entered allmulticast mode [ 70.801610][ T64] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.884457][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.112'. [ 71.041396][ T6363] tipc: Enabled bearer , priority 0 [ 71.042313][ T6363] syzkaller0: entered promiscuous mode [ 71.042331][ T6363] syzkaller0: entered allmulticast mode [ 71.045846][ T6363] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 71.060765][ T6362] tipc: Resetting bearer [ 71.070330][ T6362] tipc: Disabling bearer [ 71.166142][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 71.239933][ T1349] cfg80211: failed to load regulatory.db [ 71.249885][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.477819][ T9] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 71.478136][ T9] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 71.945172][ T42] usbhid 8-1:0.0: can't add hid device: -71 [ 71.945251][ T42] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 71.951122][ T42] usb 8-1: USB disconnect, device number 3 [ 72.734487][ T5882] usb 5-1: USB disconnect, device number 2 [ 73.048595][ T1349] usb 7-1: USB disconnect, device number 3 [ 73.315777][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 73.320467][ T6408] FAULT_INJECTION: forcing a failure. [ 73.320467][ T6408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.320495][ T6408] CPU: 2 UID: 60928 PID: 6408 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 73.320511][ T6408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.320521][ T6408] Call Trace: [ 73.320527][ T6408] [ 73.320534][ T6408] dump_stack_lvl+0x100/0x190 [ 73.320563][ T6408] should_fail_ex.cold+0x5/0xa [ 73.320588][ T6408] _copy_from_user+0x2e/0xd0 [ 73.320607][ T6408] copy_mount_options+0x76/0x190 [ 73.320647][ T6408] __x64_sys_mount+0x1ab/0x310 [ 73.320667][ T6408] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.320692][ T6408] do_syscall_64+0x123/0x790 [ 73.320710][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.320730][ T6408] RIP: 0033:0x7ff40439e199 [ 73.320745][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.320763][ T6408] RSP: 002b:00007ff40526c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.320779][ T6408] RAX: ffffffffffffffda RBX: 00007ff404625fa0 RCX: 00007ff40439e199 [ 73.320787][ T6408] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 73.320798][ T6408] RBP: 00007ff4044358e0 R08: 0000200000000480 R09: 0000000000000000 [ 73.320808][ T6408] R10: ffffffffa04047c0 R11: 0000000000000246 R12: 0000000000000000 [ 73.320819][ T6408] R13: 00007ff404626038 R14: 00007ff404625fa0 R15: 00007fff6a515778 [ 73.320843][ T6408] [ 73.409384][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 73.420438][ T43] kauditd_printk_skb: 91 callbacks suppressed [ 73.420454][ T43] audit: type=1400 audit(1791267923.457:394): avc: denied { read } for pid=6413 comm="syz.1.139" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.420587][ T43] audit: type=1400 audit(1791267923.457:395): avc: denied { open } for pid=6413 comm="syz.1.139" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.425655][ T43] audit: type=1400 audit(1791267923.457:396): avc: denied { ioctl } for pid=6413 comm="syz.1.139" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.427085][ T43] audit: type=1400 audit(1791267923.457:397): avc: denied { set_context_mgr } for pid=6413 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.433605][ T43] audit: type=1400 audit(1791267923.467:398): avc: denied { map } for pid=6413 comm="syz.1.139" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.436047][ T43] audit: type=1400 audit(1791267923.467:399): avc: denied { call } for pid=6413 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.437208][ T43] audit: type=1400 audit(1791267923.477:400): avc: denied { transfer } for pid=6413 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.437672][ T6414] binder_alloc: 6413: binder_alloc_buf, no vma [ 73.483140][ T6416] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 73.496359][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.518488][ T6419] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.519408][ T6419] CIFS: Attempting to mount //127.0.0.1/share [ 73.532147][ T6420] net_ratelimit: 3028 callbacks suppressed [ 73.532163][ T6420] netlink: zone id is out of range [ 73.532169][ T6420] netlink: zone id is out of range [ 73.532175][ T6420] netlink: zone id is out of range [ 73.532181][ T6420] netlink: zone id is out of range [ 73.532186][ T6420] netlink: zone id is out of range [ 73.532192][ T6420] netlink: zone id is out of range [ 73.532201][ T6420] netlink: zone id is out of range [ 73.532207][ T6420] netlink: zone id is out of range [ 73.532213][ T6420] netlink: zone id is out of range [ 73.532219][ T6420] netlink: zone id is out of range [ 73.570412][ T43] audit: type=1400 audit(1791267923.607:401): avc: denied { write } for pid=6417 comm="syz.0.142" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.574707][ T6421] CIFS: VFS: Received Request not response [ 73.574737][ T6421] CIFS: VFS: Bad SMB detected. The Mid=0 [ 73.575831][ T6419] CIFS: VFS: cifs_mount failed w/return code = -5 [ 73.615065][ T43] audit: type=1400 audit(1791267923.647:402): avc: denied { mounton } for pid=6425 comm="syz.1.145" path="/44/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.621216][ T6428] FAULT_INJECTION: forcing a failure. [ 73.621216][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 73.621237][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 73.621250][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.621257][ T6428] Call Trace: [ 73.621261][ T6428] [ 73.621266][ T6428] dump_stack_lvl+0x100/0x190 [ 73.621287][ T6428] should_fail_ex.cold+0x5/0xa [ 73.621304][ T6428] should_failslab+0xc2/0x120 [ 73.621345][ T6428] __kvmalloc_node_noprof+0x113/0x9b0 [ 73.621361][ T6428] ? do_raw_spin_lock+0x128/0x260 [ 73.621377][ T6428] ? find_held_lock+0x2b/0x80 [ 73.621394][ T6428] ? simple_xattr_alloc+0x6c/0xd0 [ 73.621410][ T6428] simple_xattr_alloc+0x6c/0xd0 [ 73.621422][ T6428] shmem_initxattrs+0x16a/0x650 [ 73.621439][ T6428] security_inode_init_security+0x242/0x370 [ 73.621451][ T6428] ? __pfx_shmem_initxattrs+0x10/0x10 [ 73.621465][ T6428] ? __pfx_security_inode_init_security+0x10/0x10 [ 73.621488][ T6428] shmem_symlink+0x163/0xbf0 [ 73.621498][ T6428] ? __pfx_may_create+0x10/0x10 [ 73.621515][ T6428] ? __pfx_shmem_symlink+0x10/0x10 [ 73.621526][ T6428] ? inode_permission+0x374/0x620 [ 73.621537][ T6428] ? tomoyo_path_symlink+0x97/0xe0 [ 73.621558][ T6428] vfs_symlink+0x178/0x4d0 [ 73.621574][ T6428] filename_symlinkat+0x2a6/0x560 [ 73.621592][ T6428] ? __pfx_filename_symlinkat+0x10/0x10 [ 73.621609][ T6428] ? strncpy_from_user+0x19d/0x2d0 [ 73.621626][ T6428] ? do_getname+0x191/0x390 [ 73.621638][ T6428] __x64_sys_symlinkat+0x9c/0xe0 [ 73.621655][ T6428] do_syscall_64+0x123/0x790 [ 73.621670][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.621682][ T6428] RIP: 0033:0x7f9c4979e199 [ 73.621693][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.621704][ T6428] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 73.621715][ T6428] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 73.621722][ T6428] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000180 [ 73.621729][ T6428] RBP: 00007f9c498358e0 R08: 0000000000000000 R09: 0000000000000000 [ 73.621735][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.621741][ T6428] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 73.621756][ T6428] [ 73.647092][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.650334][ T9] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 73.650359][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.655065][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.655086][ T9] usb 7-1: Product: syz [ 73.655098][ T9] usb 7-1: Manufacturer: syz [ 73.655111][ T9] usb 7-1: SerialNumber: syz [ 73.658320][ T9] usb 7-1: config 0 descriptor?? [ 73.659399][ T6402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.663460][ T43] audit: type=1400 audit(1791267923.697:403): avc: denied { mount } for pid=6432 comm="syz.0.147" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.679819][ T9] usb 7-1: selecting invalid altsetting 0 [ 73.727518][ T6429] block nbd3: shutting down sockets [ 73.760673][ T6443] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 73.781332][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.791111][ T6445] bond1: (slave geneve2): making interface the new active one [ 73.793302][ T6445] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 73.795364][ T6444] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.873930][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.874315][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.874683][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.874973][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.875256][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.875590][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.875889][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.877064][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.877372][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.877656][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.878003][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.878254][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.878993][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.879995][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.880268][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.880530][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.880882][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.881147][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.881462][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.881734][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.882020][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.882352][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.882613][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.882875][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.883207][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.883477][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.883778][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.884090][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.884343][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.884648][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.884927][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.885182][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.885471][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.885731][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.886010][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.886402][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.886665][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.886935][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.887272][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.887528][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.887817][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.888131][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.888389][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.888698][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.888974][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.889235][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.889557][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.889814][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.890096][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.890402][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.890675][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.890937][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.891264][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.891529][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.891891][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.892154][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.892422][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.892739][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.893016][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.893281][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.893613][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.893878][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.894148][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.894472][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.894726][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.895117][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.895372][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.895634][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.895990][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.896330][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.896585][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.896923][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.897197][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.897461][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.897772][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.898050][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.898370][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.898625][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.898888][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.899221][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.899491][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.899777][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.900369][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.900649][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.900929][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.901238][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.901501][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.901812][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.902067][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.902320][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.902627][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.902898][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.903160][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.903470][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.903749][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.904028][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.904333][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.904596][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.904918][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.905185][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.905446][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.905756][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.906012][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.906363][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.906691][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.906956][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.907220][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.907567][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.907862][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.908176][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.908427][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.908700][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.909033][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.909299][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.909559][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.909893][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.910167][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.910433][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.910766][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.911039][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.911366][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.911625][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.911914][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.912241][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.912491][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.912751][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.913078][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.913354][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.913632][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.913944][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.914217][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.914537][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.914812][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.915103][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.915422][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.915674][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.915967][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.916682][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.916950][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.917224][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.917538][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.917820][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.918137][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.918435][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.918728][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.919052][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.919321][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.919586][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.919924][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.920238][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.920501][ T6402] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 74.280501][ T6451] syz.3.152 uses obsolete (PF_INET,SOCK_PACKET) [ 74.287856][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 74.287871][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 74.288318][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 74.288330][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 74.457016][ T6457] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 74.459365][ T6457] process 'syz.3.155' launched '/dev/fd/4' with NULL argv: empty string added [ 74.462855][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 74.470336][ T6457] overlayfs: failed to resolve './bus': -2 [ 74.521749][ T6461] smpboot: CPU 1 is now offline [ 74.606638][ T6467] tipc: Started in network mode [ 74.606655][ T6467] tipc: Node identity ac1414aa, cluster identity 4711 [ 74.607052][ T6467] tipc: New replicast peer: 172.20.20.187 [ 74.607429][ T6467] tipc: Enabled bearer , priority 10 [ 74.607840][ T6467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6467 comm=syz.3.160 [ 74.956269][ T5521] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 75.107133][ T5521] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 75.107708][ T5521] usb 6-1: config 0 has no interfaces? [ 75.109489][ T5521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.109502][ T5521] usb 6-1: Product: syz [ 75.109510][ T5521] usb 6-1: Manufacturer: syz [ 75.109517][ T5521] usb 6-1: SerialNumber: syz [ 75.112048][ T5521] usb 6-1: config 0 descriptor?? [ 75.269749][ T6484] FAULT_INJECTION: forcing a failure. [ 75.269749][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.269780][ T6484] CPU: 2 UID: 0 PID: 6484 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(full) [ 75.269801][ T6484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.269812][ T6484] Call Trace: [ 75.269819][ T6484] [ 75.269827][ T6484] dump_stack_lvl+0x100/0x190 [ 75.269858][ T6484] should_fail_ex.cold+0x5/0xa [ 75.269885][ T6484] _copy_from_iter+0x1f4/0x1690 [ 75.269914][ T6484] ? __pfx__copy_from_iter+0x10/0x10 [ 75.269936][ T6484] ? trace_kmalloc+0xeb/0x110 [ 75.269961][ T6484] ? __kasan_kmalloc+0xaa/0xb0 [ 75.269985][ T6484] ? __kmalloc_noprof+0x350/0x840 [ 75.270008][ T6484] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 75.270036][ T6484] kernfs_fop_write_iter+0x186/0x5f0 [ 75.270061][ T6484] vfs_write+0x6af/0x1050 [ 75.270084][ T6484] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 75.270108][ T6484] ? __pfx_vfs_write+0x10/0x10 [ 75.270127][ T6484] ? find_held_lock+0x2b/0x80 [ 75.270173][ T6484] ksys_write+0x12a/0x250 [ 75.270194][ T6484] ? __pfx_ksys_write+0x10/0x10 [ 75.270223][ T6484] do_syscall_64+0x123/0x790 [ 75.270248][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.270267][ T6484] RIP: 0033:0x7f9c4979e199 [ 75.270284][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.270302][ T6484] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.270321][ T6484] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 75.270334][ T6484] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 75.270346][ T6484] RBP: 00007f9c4a74c090 R08: 0000000000000000 R09: 0000000000000000 [ 75.270357][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.270368][ T6484] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 75.270393][ T6484] [ 75.334607][ T5882] usb 6-1: USB disconnect, device number 2 [ 75.587022][ T6498] kvm: MWAIT instruction emulated as NOP! [ 75.640616][ T6401] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 75.738076][ T1349] tipc: Node number set to 2886997162 [ 76.013521][ T6510] Invalid ELF header type: 0 != 1 [ 76.041487][ T6514] FAULT_INJECTION: forcing a failure. [ 76.041487][ T6514] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.041510][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 76.041523][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.041529][ T6514] Call Trace: [ 76.041533][ T6514] [ 76.041538][ T6514] dump_stack_lvl+0x100/0x190 [ 76.041572][ T6514] should_fail_ex.cold+0x5/0xa [ 76.041592][ T6514] ? prepare_alloc_pages+0x16d/0x5b0 [ 76.041624][ T6514] should_fail_alloc_page+0xeb/0x140 [ 76.041653][ T6514] prepare_alloc_pages+0x1f0/0x5b0 [ 76.041672][ T6514] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 76.041685][ T6514] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 76.041700][ T6514] ? is_bpf_text_address+0x94/0x1a0 [ 76.041716][ T6514] ? kernel_text_address+0x8d/0x100 [ 76.041734][ T6514] ? __kernel_text_address+0xd/0x30 [ 76.041744][ T6514] ? unwind_get_return_address+0x59/0xa0 [ 76.041760][ T6514] ? arch_stack_walk+0xa6/0xf0 [ 76.041776][ T6514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 76.041788][ T6514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 76.041802][ T6514] ? mas_next_node+0x29c/0x1020 [ 76.041818][ T6514] ? stack_trace_save+0x8e/0xc0 [ 76.041833][ T6514] ? look_up_lock_class+0x64/0x120 [ 76.041846][ T6514] ? mt_validate_nulls+0x22f/0xae0 [ 76.041860][ T6514] ? __lock_acquire+0x5c0/0x1f40 [ 76.041875][ T6514] ? __lock_acquire+0x5c0/0x1f40 [ 76.041887][ T6514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.041917][ T6514] ? policy_nodemask+0xed/0x4f0 [ 76.041936][ T6514] alloc_pages_mpol+0x201/0x550 [ 76.041952][ T6514] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 76.041968][ T6514] ? find_held_lock+0x2b/0x80 [ 76.041983][ T6514] ? __pud_alloc+0x4f6/0x690 [ 76.041999][ T6514] ? __pud_alloc+0x4f6/0x690 [ 76.042014][ T6514] alloc_pages_noprof+0x1a/0x160 [ 76.042025][ T6514] __pmd_alloc+0x3b/0x950 [ 76.042039][ T6514] ? __pud_alloc+0x4fb/0x690 [ 76.042055][ T6514] __handle_mm_fault+0xa9d/0x2f60 [ 76.042075][ T6514] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.042091][ T6514] ? __pfx_mt_find+0x10/0x10 [ 76.042114][ T6514] handle_mm_fault+0x363/0xa20 [ 76.042134][ T6514] __get_user_pages+0x8ae/0x2c30 [ 76.042153][ T6514] ? __pfx___get_user_pages+0x10/0x10 [ 76.042168][ T6514] ? lock_acquire+0x1d1/0x380 [ 76.042257][ T6514] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 76.042279][ T6514] get_user_pages_remote+0x3d2/0xb10 [ 76.042296][ T6514] ? __pfx_get_user_pages_remote+0x10/0x10 [ 76.042316][ T6514] get_arg_page+0xf4/0x310 [ 76.042329][ T6514] ? __pfx_get_arg_page+0x10/0x10 [ 76.042345][ T6514] ? do_raw_spin_lock+0x128/0x260 [ 76.042360][ T6514] ? alloc_bprm+0x54e/0x9e0 [ 76.042372][ T6514] ? alloc_bprm+0x54e/0x9e0 [ 76.042386][ T6514] copy_string_kernel+0x17d/0x3f0 [ 76.042398][ T6514] ? alloc_bprm+0x596/0x9e0 [ 76.042412][ T6514] do_execveat_common.isra.0+0x2e6/0x580 [ 76.042429][ T6514] __x64_sys_execve+0x93/0xd0 [ 76.042443][ T6514] do_syscall_64+0x123/0x790 [ 76.042456][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.042468][ T6514] RIP: 0033:0x7f759999e199 [ 76.042478][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.042489][ T6514] RSP: 002b:00007f759a81c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 76.042501][ T6514] RAX: ffffffffffffffda RBX: 00007f7599c25fa0 RCX: 00007f759999e199 [ 76.042508][ T6514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 76.042514][ T6514] RBP: 00007f759a81c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.042521][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.042527][ T6514] R13: 00007f7599c26038 R14: 00007f7599c25fa0 R15: 00007fffe6a6b0d8 [ 76.042541][ T6514] [ 76.461506][ T6541] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 76.475067][ T6540] GUP no longer grows the stack in syz.1.185 (6540): 200000004000-20000000a000 (200000002000) [ 76.475094][ T6540] CPU: 3 UID: 0 PID: 6540 Comm: syz.1.185 Not tainted syzkaller #0 PREEMPT(full) [ 76.475116][ T6540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.475127][ T6540] Call Trace: [ 76.475135][ T6540] [ 76.475142][ T6540] dump_stack_lvl+0x100/0x190 [ 76.475174][ T6540] gup_vma_lookup.cold+0x83/0x96 [ 76.475203][ T6540] __get_user_pages+0x252/0x2c30 [ 76.475232][ T6540] ? lock_acquire+0x1d1/0x380 [ 76.475254][ T6540] ? mtree_load+0xdc/0xb50 [ 76.475275][ T6540] ? __pfx___get_user_pages+0x10/0x10 [ 76.475297][ T6540] ? mtree_load+0x388/0xb50 [ 76.475323][ T6540] ? mtree_load+0x388/0xb50 [ 76.475351][ T6540] get_user_pages_remote+0x3d2/0xb10 [ 76.475375][ T6540] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 76.475400][ T6540] ? __pfx_get_user_pages_remote+0x10/0x10 [ 76.475434][ T6540] __access_remote_vm+0x3bb/0x890 [ 76.475462][ T6540] ? __pfx___access_remote_vm+0x10/0x10 [ 76.475482][ T6540] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 76.475501][ T6540] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 76.475522][ T6540] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 76.475548][ T6540] proc_pid_cmdline_read+0x552/0x9a0 [ 76.475576][ T6540] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 76.475604][ T6540] ? rw_verify_area+0xce/0x6d0 [ 76.475626][ T6540] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 76.475650][ T6540] vfs_readv+0x5d8/0x8d0 [ 76.475676][ T6540] ? __pfx_vfs_readv+0x10/0x10 [ 76.475701][ T6540] ? lock_acquire+0x1d1/0x380 [ 76.475746][ T6540] ? __fget_files+0x34/0x3d0 [ 76.475786][ T6540] ? __fget_files+0x21f/0x3d0 [ 76.475816][ T6540] ? do_preadv+0x1ac/0x270 [ 76.475834][ T6540] do_preadv+0x1ac/0x270 [ 76.475855][ T6540] ? __pfx_do_preadv+0x10/0x10 [ 76.475881][ T6540] do_syscall_64+0x123/0x790 [ 76.475904][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.475923][ T6540] RIP: 0033:0x7ff40439e199 [ 76.475939][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.475956][ T6540] RSP: 002b:00007ff40526c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 76.475975][ T6540] RAX: ffffffffffffffda RBX: 00007ff404625fa0 RCX: 00007ff40439e199 [ 76.475988][ T6540] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000006a [ 76.475999][ T6540] RBP: 00007ff4044358e0 R08: 00000000fffffff9 R09: 0000000000000000 [ 76.476010][ T6540] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 76.476021][ T6540] R13: 00007ff404626038 R14: 00007ff404625fa0 R15: 00007fff6a515778 [ 76.476045][ T6540] [ 76.565962][ T6552] FAULT_INJECTION: forcing a failure. [ 76.565962][ T6552] name failslab, interval 1, probability 0, space 0, times 0 [ 76.565982][ T6552] CPU: 2 UID: 0 PID: 6552 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(full) [ 76.565994][ T6552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.566001][ T6552] Call Trace: [ 76.566004][ T6552] [ 76.566009][ T6552] dump_stack_lvl+0x100/0x190 [ 76.566028][ T6552] should_fail_ex.cold+0x5/0xa [ 76.566044][ T6552] should_failslab+0xc2/0x120 [ 76.566060][ T6552] __kmalloc_cache_node_noprof+0x94/0x720 [ 76.566074][ T6552] ? kasan_save_stack+0x30/0x50 [ 76.566087][ T6552] ? kasan_save_track+0x14/0x30 [ 76.566120][ T6552] ? __kasan_kmalloc+0xaa/0xb0 [ 76.566133][ T6552] ? __get_vm_area_node+0x124/0x350 [ 76.566151][ T6552] __get_vm_area_node+0x124/0x350 [ 76.566167][ T6552] __vmalloc_node_range_noprof+0x268/0x1420 [ 76.566184][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.566202][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.566217][ T6552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 76.566235][ T6552] ? trace_kmalloc+0xeb/0x110 [ 76.566250][ T6552] ? __kasan_kmalloc+0xaa/0xb0 [ 76.566264][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.566276][ T6552] __vmalloc_node_noprof+0xad/0xf0 [ 76.566292][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.566306][ T6552] vc_do_resize+0x249/0xeb0 [ 76.566323][ T6552] ? lock_acquire+0x1d1/0x380 [ 76.566336][ T6552] ? __pfx_vc_do_resize+0x10/0x10 [ 76.566350][ T6552] ? rcu_is_watching+0x13/0xc0 [ 76.566369][ T6552] vt_ioctl+0x227a/0x3170 [ 76.566382][ T6552] ? __pfx_vt_ioctl+0x10/0x10 [ 76.566392][ T6552] ? tomoyo_path_number_perm+0x28f/0x580 [ 76.566410][ T6552] ? tomoyo_path_number_perm+0x188/0x580 [ 76.566431][ T6552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.566446][ T6552] ? tty_jobctrl_ioctl+0x152/0xce0 [ 76.566457][ T6552] ? __pfx_vt_ioctl+0x10/0x10 [ 76.566469][ T6552] tty_ioctl+0x26a/0x1800 [ 76.566484][ T6552] ? __pfx_tty_ioctl+0x10/0x10 [ 76.566497][ T6552] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 76.566513][ T6552] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.566530][ T6552] ? __fget_files+0x34/0x3d0 [ 76.566551][ T6552] ? selinux_file_ioctl+0x13b/0x290 [ 76.566564][ T6552] ? selinux_file_ioctl+0xb6/0x290 [ 76.566579][ T6552] ? __pfx_tty_ioctl+0x10/0x10 [ 76.566594][ T6552] __x64_sys_ioctl+0x18e/0x210 [ 76.566608][ T6552] do_syscall_64+0x123/0x790 [ 76.566622][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.566633][ T6552] RIP: 0033:0x7f9c4979e199 [ 76.566642][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.566653][ T6552] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.566664][ T6552] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 76.566671][ T6552] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000003 [ 76.566678][ T6552] RBP: 00007f9c4a74c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.566685][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.566691][ T6552] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 76.566705][ T6552] [ 76.570999][ T6552] syz.0.187: vmalloc error: size 32752, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 76.571122][ T6552] CPU: 2 UID: 0 PID: 6552 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(full) [ 76.571147][ T6552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.571155][ T6552] Call Trace: [ 76.571159][ T6552] [ 76.571164][ T6552] dump_stack_lvl+0x100/0x190 [ 76.571182][ T6552] warn_alloc.cold+0x9e/0xb2 [ 76.571209][ T6552] ? __pfx_warn_alloc+0x10/0x10 [ 76.571220][ T6552] ? __kasan_kmalloc+0x8a/0xb0 [ 76.571235][ T6552] ? kasan_save_track+0x14/0x30 [ 76.571248][ T6552] ? __kasan_kmalloc+0xaa/0xb0 [ 76.571264][ T6552] ? __get_vm_area_node+0x22b/0x350 [ 76.571282][ T6552] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 76.571303][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.571319][ T6552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 76.571338][ T6552] ? trace_kmalloc+0xeb/0x110 [ 76.571352][ T6552] ? __kasan_kmalloc+0xaa/0xb0 [ 76.571366][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.571379][ T6552] __vmalloc_node_noprof+0xad/0xf0 [ 76.571394][ T6552] ? vc_do_resize+0x249/0xeb0 [ 76.571408][ T6552] vc_do_resize+0x249/0xeb0 [ 76.571429][ T6552] ? lock_acquire+0x1d1/0x380 [ 76.571442][ T6552] ? __pfx_vc_do_resize+0x10/0x10 [ 76.571456][ T6552] ? rcu_is_watching+0x13/0xc0 [ 76.571474][ T6552] vt_ioctl+0x227a/0x3170 [ 76.571487][ T6552] ? __pfx_vt_ioctl+0x10/0x10 [ 76.571497][ T6552] ? tomoyo_path_number_perm+0x28f/0x580 [ 76.571514][ T6552] ? tomoyo_path_number_perm+0x188/0x580 [ 76.571531][ T6552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.571546][ T6552] ? tty_jobctrl_ioctl+0x152/0xce0 [ 76.571557][ T6552] ? __pfx_vt_ioctl+0x10/0x10 [ 76.571568][ T6552] tty_ioctl+0x26a/0x1800 [ 76.571583][ T6552] ? __pfx_tty_ioctl+0x10/0x10 [ 76.571596][ T6552] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 76.571613][ T6552] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.571630][ T6552] ? __fget_files+0x34/0x3d0 [ 76.571651][ T6552] ? selinux_file_ioctl+0x13b/0x290 [ 76.571664][ T6552] ? selinux_file_ioctl+0xb6/0x290 [ 76.571678][ T6552] ? __pfx_tty_ioctl+0x10/0x10 [ 76.571693][ T6552] __x64_sys_ioctl+0x18e/0x210 [ 76.571724][ T6552] do_syscall_64+0x123/0x790 [ 76.571740][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.571752][ T6552] RIP: 0033:0x7f9c4979e199 [ 76.571761][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.571772][ T6552] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.571782][ T6552] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 76.571789][ T6552] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000003 [ 76.571796][ T6552] RBP: 00007f9c4a74c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.571802][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.571809][ T6552] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 76.571823][ T6552] [ 76.572702][ T6552] Mem-Info: [ 76.572709][ T6552] active_anon:9665 inactive_anon:0 isolated_anon:0 [ 76.572709][ T6552] active_file:0 inactive_file:65303 isolated_file:0 [ 76.572709][ T6552] unevictable:1000 dirty:506 writeback:0 [ 76.572709][ T6552] slab_reclaimable:11897 slab_unreclaimable:66959 [ 76.572709][ T6552] mapped:25201 shmem:1614 pagetables:1233 [ 76.572709][ T6552] sec_pagetables:293 bounce:0 [ 76.572709][ T6552] kernel_misc_reclaimable:0 [ 76.572709][ T6552] free:454233 free_pcp:9375 free_cma:0 [ 76.572736][ T6552] Node 0 active_anon:38660kB inactive_anon:0kB active_file:0kB inactive_file:261004kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100804kB dirty:2012kB writeback:0kB shmem:4456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13552kB pagetables:4692kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.572763][ T6552] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.572789][ T6552] Node 0 DMA free:15256kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:88kB free_cma:0kB [ 76.572818][ T6552] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 76.573459][ T6552] Node 0 DMA32 free:151872kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38660kB inactive_anon:0kB active_file:0kB inactive_file:261004kB unevictable:2000kB writepending:2012kB zspages:0kB present:2080628kB managed:1253104kB mlocked:0kB bounce:0kB free_pcp:33616kB local_pcp:19472kB free_cma:0kB [ 76.573491][ T6552] lowmem_reserve[]: 0 0 0 0 0 [ 76.573509][ T6552] Node 1 Normal free:1649804kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3780kB local_pcp:1508kB free_cma:0kB [ 76.573538][ T6552] lowmem_reserve[]: 0 0 0 0 0 [ 76.573556][ T6552] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 3*4096kB (M) = 15256kB [ 76.573631][ T6552] Node 0 DMA32: 174*4kB (UME) 705*8kB (UM) 393*16kB (UME) 378*32kB (UME) 133*64kB (UME) 66*128kB (UME) 42*256kB (UME) 28*512kB (UME) 21*1024kB (UME) 7*2048kB (UME) 12*4096kB (UM) = 151760kB [ 76.573715][ T6552] Node 1 Normal: 3*4kB (UM) 6*8kB (U) 9*16kB (UM) 14*32kB (UM) 6*64kB (UM) 3*128kB (M) 1*256kB (U) 3*512kB (M) 0*1024kB 2*2048kB (UM) 401*4096kB (M) = 1649804kB [ 76.573867][ T6552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.573876][ T6552] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.573884][ T6552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.573892][ T6552] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.573900][ T6552] 66913 total pagecache pages [ 76.573905][ T6552] 0 pages in swap cache [ 76.573908][ T6552] Free swap = 124996kB [ 76.573912][ T6552] Total swap = 124996kB [ 76.573916][ T6552] 1048443 pages RAM [ 76.573920][ T6552] 0 pages HighMem/MovableOnly [ 76.573923][ T6552] 285857 pages reserved [ 76.573927][ T6552] 0 pages cma reserved [ 76.653672][ T5521] usb 7-1: USB disconnect, device number 4 [ 76.796439][ T6564] FAULT_INJECTION: forcing a failure. [ 76.796439][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 76.796464][ T6564] CPU: 2 UID: 0 PID: 6564 Comm: syz.0.193 Not tainted syzkaller #0 PREEMPT(full) [ 76.796481][ T6564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.796490][ T6564] Call Trace: [ 76.796496][ T6564] [ 76.796503][ T6564] dump_stack_lvl+0x100/0x190 [ 76.796531][ T6564] should_fail_ex.cold+0x5/0xa [ 76.796553][ T6564] should_failslab+0xc2/0x120 [ 76.796573][ T6564] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.796591][ T6564] ? security_file_alloc+0x34/0x2c0 [ 76.796615][ T6564] security_file_alloc+0x34/0x2c0 [ 76.796637][ T6564] init_file+0x95/0x480 [ 76.796661][ T6564] alloc_empty_file+0x79/0x1c0 [ 76.796687][ T6564] path_openat+0xdb/0x2440 [ 76.796713][ T6564] ? __pfx_path_openat+0x10/0x10 [ 76.796742][ T6564] do_file_open+0x20e/0x430 [ 76.796767][ T6564] ? __pfx_do_file_open+0x10/0x10 [ 76.796806][ T6564] ? _raw_spin_unlock+0x28/0x50 [ 76.796826][ T6564] ? alloc_fd+0x471/0x7a0 [ 76.796856][ T6564] do_sys_openat2+0x10f/0x1e0 [ 76.796882][ T6564] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.796908][ T6564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.796929][ T6564] ? __fget_files+0x21f/0x3d0 [ 76.796950][ T6564] __x64_sys_openat+0x12d/0x210 [ 76.796975][ T6564] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.797000][ T6564] ? ksys_write+0x1ac/0x250 [ 76.797026][ T6564] do_syscall_64+0x123/0x790 [ 76.797041][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.797059][ T6564] RIP: 0033:0x7f9c4979e199 [ 76.797073][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.797089][ T6564] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.797106][ T6564] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 76.797118][ T6564] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 76.797128][ T6564] RBP: 00007f9c4a74c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.797139][ T6564] R10: 00000000000000f6 R11: 0000000000000246 R12: 0000000000000001 [ 76.797147][ T6564] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 76.797165][ T6564] [ 76.868718][ T6570] MTD: Couldn't look up 'mtd0/file0': -2 [ 76.871093][ T6570] fuse: Bad value for 'user_id' [ 76.871108][ T6570] fuse: Bad value for 'user_id' [ 77.047458][ T6582] jffs2: notice: (6582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.052969][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.201'. [ 77.053133][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.201'. [ 77.053286][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.201'. [ 77.053451][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.201'. [ 77.116237][ T853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.168476][ T5521] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.226512][ T6595] warning: `syz.3.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.276342][ T853] usb 5-1: Using ep0 maxpacket: 32 [ 77.277058][ T853] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.278021][ T853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.278040][ T853] usb 5-1: config 0 has no interfaces? [ 77.279951][ T853] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.279970][ T853] usb 5-1: Product: syz [ 77.279981][ T853] usb 5-1: Manufacturer: syz [ 77.279995][ T853] usb 5-1: SerialNumber: syz [ 77.282357][ T853] usb 5-1: config 0 descriptor?? [ 77.331609][ T5521] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.332737][ T5521] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 77.332759][ T5521] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.334754][ T5521] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.334774][ T5521] usb 7-1: Product: syz [ 77.334786][ T5521] usb 7-1: Manufacturer: syz [ 77.334799][ T5521] usb 7-1: SerialNumber: syz [ 77.339430][ T5521] usb 7-1: config 0 descriptor?? [ 77.343498][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.351693][ T5521] usb 7-1: selecting invalid altsetting 0 [ 77.549252][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.549420][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.549619][ T6575] usb 7-1: cannot submit qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. urb 0, error -2: endpoint not enabled [ 77.549824][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.549995][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.550201][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.550370][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.550566][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.550786][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.550961][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.551167][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.551333][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.551486][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.551688][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.551886][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.552120][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.552466][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.552774][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.553228][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.553529][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.553822][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.554169][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.554452][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.554738][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.555127][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.555414][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.555723][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.556072][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.559758][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.560521][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.560683][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.560849][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.561417][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.561582][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.561751][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.562094][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.562413][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.562687][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.563119][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.563404][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.563689][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.564058][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.564476][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.564818][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.565103][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.565428][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.565828][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.568281][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.568447][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.568649][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.568813][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.568972][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.569162][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.569327][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.569578][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.569740][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.569903][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.570120][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.570303][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.570505][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.571971][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.572153][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.572390][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.572622][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.572794][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.572989][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573216][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573384][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573583][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573626][ T6610] FAULT_INJECTION: forcing a failure. [ 77.573626][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 77.573644][ T6610] CPU: 2 UID: 0 PID: 6610 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 77.573657][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.573664][ T6610] Call Trace: [ 77.573667][ T6610] [ 77.573672][ T6610] dump_stack_lvl+0x100/0x190 [ 77.573691][ T6610] should_fail_ex.cold+0x5/0xa [ 77.573707][ T6610] should_failslab+0xc2/0x120 [ 77.573724][ T6610] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 77.573738][ T6610] ? sidtab_sid2str_get+0x84/0x670 [ 77.573746][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573755][ T6610] ? sidtab_sid2str_get+0x17a/0x670 [ 77.573773][ T6610] kmemdup_noprof+0x29/0x60 [ 77.573785][ T6610] sidtab_sid2str_get+0x17a/0x670 [ 77.573803][ T6610] security_sid_to_context_core+0x373/0x700 [ 77.573820][ T6610] avc_audit_post_callback+0x1aa/0x910 [ 77.573837][ T6610] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 77.573854][ T6610] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 77.573870][ T6610] ? skb_put+0x138/0x180 [ 77.573892][ T6610] ? audit_log_n_string+0x2a3/0x5a0 [ 77.573908][ T6610] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 77.573915][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.573925][ T6610] common_lsm_audit+0x23f/0x2b0 [ 77.573945][ T6610] ? __pfx_common_lsm_audit+0x10/0x10 [ 77.573960][ T6610] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.573973][ T6610] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.573986][ T6610] slow_avc_audit+0x186/0x210 [ 77.574003][ T6610] ? __pfx_slow_avc_audit+0x10/0x10 [ 77.574022][ T6610] ? avc_denied+0x14a/0x190 [ 77.574039][ T6610] ? avc_has_perm_noaudit+0x3a2/0x470 [ 77.574058][ T6610] avc_has_perm+0x1a6/0x1e0 [ 77.574069][ T6610] ? __pfx_avc_has_perm+0x10/0x10 [ 77.574088][ T6610] ? selinux_inode_permission+0x14a/0x1130 [ 77.574109][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.574108][ T6610] may_create+0x271/0x440 [ 77.574123][ T6610] ? __pfx_may_create+0x10/0x10 [ 77.574137][ T6610] ? make_vfsgid+0xf1/0x140 [ 77.574153][ T6610] ? bpf_lsm_inode_permission+0x9/0x10 [ 77.574167][ T6610] ? security_inode_permission+0xbf/0x250 [ 77.574183][ T6610] security_inode_create+0xe5/0x280 [ 77.574201][ T6610] may_o_create+0x306/0x3a0 [ 77.574215][ T6610] lookup_open+0xe35/0x1990 [ 77.574232][ T6610] path_openat+0xa2c/0x2440 [ 77.574249][ T6610] ? __pfx_path_openat+0x10/0x10 [ 77.574267][ T6610] do_file_open+0x20e/0x430 [ 77.574272][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.574284][ T6610] ? __pfx_do_file_open+0x10/0x10 [ 77.574308][ T6610] ? _raw_spin_unlock+0x28/0x50 [ 77.574325][ T6610] ? alloc_fd+0x471/0x7a0 [ 77.574343][ T6610] do_sys_openat2+0x10f/0x1e0 [ 77.574360][ T6610] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.574376][ T6610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.574389][ T6610] ? __fget_files+0x21f/0x3d0 [ 77.574407][ T6610] __x64_sys_creat+0xcc/0x120 [ 77.574417][ T6610] ? __pfx___x64_sys_creat+0x10/0x10 [ 77.574427][ T6610] ? __pfx_ksys_write+0x10/0x10 [ 77.574433][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.574442][ T6610] ? do_syscall_64+0xae/0x790 [ 77.574455][ T6610] do_syscall_64+0x123/0x790 [ 77.574468][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.574479][ T6610] RIP: 0033:0x7f759999e199 [ 77.574489][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.574499][ T6610] RSP: 002b:00007f759a81c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 77.574511][ T6610] RAX: ffffffffffffffda RBX: 00007f7599c25fa0 RCX: 00007f759999e199 [ 77.574518][ T6610] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000040 [ 77.574524][ T6610] RBP: 00007f759a81c090 R08: 0000000000000000 R09: 0000000000000000 [ 77.574531][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.574537][ T6610] R13: 00007f7599c26038 R14: 00007f7599c25fa0 R15: 00007fffe6a6b0d8 [ 77.574551][ T6610] [ 77.574625][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.574790][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.574985][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.575146][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.575308][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.575588][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.575808][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.576007][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.576286][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.576562][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.576758][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.576958][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.577176][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.577396][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.577556][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.577717][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.578755][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.578956][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.579115][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.579315][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.579473][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.579634][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.579846][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580005][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580197][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580356][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580516][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580705][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.580867][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581068][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581261][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581420][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581578][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581769][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.581933][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582123][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582282][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582440][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582630][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582792][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.582949][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.583139][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.583369][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.583529][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.583741][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.583906][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.584100][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.584262][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.584459][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.584726][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.584914][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.585072][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.585270][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.585579][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.585873][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.586560][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.586852][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.587180][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.587463][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.587769][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.588115][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.589211][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.589498][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.589840][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.590126][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.590410][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.590787][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.591072][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.591408][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.591754][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.592043][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.592380][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.592667][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.592955][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.593458][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.593770][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.594061][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.594404][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.594690][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.595042][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.595445][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.595839][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.596434][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.596722][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.597011][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.597297][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.597555][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.597717][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.597960][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.598122][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.598281][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.598478][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.598683][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.598925][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.599085][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.599246][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.599458][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.599618][ T6575] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.605696][ T5879] usb 7-1: USB disconnect, device number 5 [ 78.201331][ T6617] syz.2.211 (6617) used greatest stack depth: 19288 bytes left [ 78.635554][ T6630] FAULT_INJECTION: forcing a failure. [ 78.635554][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 78.635583][ T6630] CPU: 3 UID: 0 PID: 6630 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 78.635602][ T6630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.635612][ T6630] Call Trace: [ 78.635618][ T6630] [ 78.635626][ T6630] dump_stack_lvl+0x100/0x190 [ 78.635654][ T6630] should_fail_ex.cold+0x5/0xa [ 78.635679][ T6630] should_failslab+0xc2/0x120 [ 78.635726][ T6630] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 78.635749][ T6630] ? __alloc_skb+0x140/0x710 [ 78.635779][ T6630] __alloc_skb+0x140/0x710 [ 78.635804][ T6630] ? __alloc_skb+0x5b7/0x710 [ 78.635827][ T6630] ? __pfx___alloc_skb+0x10/0x10 [ 78.635856][ T6630] hci_sock_sendmsg+0x1b27/0x26a0 [ 78.635887][ T6630] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 78.635914][ T6630] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.635939][ T6630] sock_write_iter+0x53a/0x5b0 [ 78.635957][ T6630] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 78.635983][ T6630] ? __pfx_sock_write_iter+0x10/0x10 [ 78.636008][ T6630] ? bpf_lsm_file_permission+0x9/0x10 [ 78.636032][ T6630] ? security_file_permission+0x76/0x210 [ 78.636057][ T6630] ? rw_verify_area+0xce/0x6d0 [ 78.636077][ T6630] vfs_write+0x6af/0x1050 [ 78.636110][ T6630] ? __pfx_sock_write_iter+0x10/0x10 [ 78.636133][ T6630] ? __pfx_vfs_write+0x10/0x10 [ 78.636150][ T6630] ? find_held_lock+0x2b/0x80 [ 78.636190][ T6630] ksys_write+0x1f8/0x250 [ 78.636210][ T6630] ? __pfx_ksys_write+0x10/0x10 [ 78.636236][ T6630] do_syscall_64+0x123/0x790 [ 78.636258][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.636276][ T6630] RIP: 0033:0x7f759999e199 [ 78.636290][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.636306][ T6630] RSP: 002b:00007f759a81c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.636323][ T6630] RAX: ffffffffffffffda RBX: 00007f7599c25fa0 RCX: 00007f759999e199 [ 78.636335][ T6630] RDX: 0000000000000017 RSI: 0000200000019100 RDI: 0000000000000004 [ 78.636345][ T6630] RBP: 00007f759a81c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.636356][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.636366][ T6630] R13: 00007f7599c26038 R14: 00007f7599c25fa0 R15: 00007fffe6a6b0d8 [ 78.636390][ T6630] [ 78.675656][ T43] kauditd_printk_skb: 83 callbacks suppressed [ 78.675673][ T43] audit: type=1400 audit(1791267928.707:487): avc: denied { map_create } for pid=6631 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.675766][ T43] audit: type=1400 audit(1791267928.707:488): avc: denied { map_read map_write } for pid=6631 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.867453][ T5731] Bluetooth: hci0: ACL packet for unknown connection handle 655 [ 78.920413][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.066223][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 79.069357][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 79.075739][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 79.075766][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.075798][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.079532][ T9] usb 8-1: config 0 descriptor?? [ 79.348174][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 79.348253][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 79.351398][ T9] usb 8-1: USB disconnect, device number 4 [ 79.637358][ T853] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.798029][ T853] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.799026][ T853] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 79.799049][ T853] usb 7-1: config 0 interface 0 has no altsetting 0 [ 79.800921][ T853] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.800940][ T853] usb 7-1: Product: syz [ 79.800953][ T853] usb 7-1: Manufacturer: syz [ 79.800965][ T853] usb 7-1: SerialNumber: syz [ 79.803346][ T853] usb 7-1: config 0 descriptor?? [ 79.804060][ T6637] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.812684][ T853] usb 7-1: selecting invalid altsetting 0 [ 79.886898][ T5521] usb 5-1: USB disconnect, device number 3 [ 80.002147][ T6650] FAULT_INJECTION: forcing a failure. [ 80.002147][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 80.002168][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 80.002181][ T6650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.002188][ T6650] Call Trace: [ 80.002192][ T6650] [ 80.002197][ T6650] dump_stack_lvl+0x100/0x190 [ 80.002217][ T6650] should_fail_ex.cold+0x5/0xa [ 80.002231][ T6650] ? __netlink_lookup+0x652/0x900 [ 80.002247][ T6650] should_failslab+0xc2/0x120 [ 80.002267][ T6650] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.002289][ T6650] ? skb_clone+0x190/0x400 [ 80.002318][ T6650] skb_clone+0x190/0x400 [ 80.002345][ T6650] netlink_deliver_tap+0xaed/0xcc0 [ 80.002372][ T6650] netlink_unicast+0x62b/0x850 [ 80.002388][ T6650] ? __pfx_netlink_unicast+0x10/0x10 [ 80.002407][ T6650] netlink_sendmsg+0x8b0/0xda0 [ 80.002424][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.002454][ T6650] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.002472][ T6650] ____sys_sendmsg+0xa4d/0xbe0 [ 80.002483][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.002499][ T6650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.002514][ T6650] ? lock_acquire+0x1d1/0x380 [ 80.002527][ T6650] ? get_pid_task+0x2a/0x250 [ 80.002543][ T6650] ___sys_sendmsg+0x190/0x1e0 [ 80.002556][ T6650] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.002568][ T6650] ? get_pid_task+0x106/0x250 [ 80.002588][ T6650] ? find_held_lock+0x2b/0x80 [ 80.002613][ T6650] __sys_sendmsg+0x160/0x210 [ 80.002629][ T6650] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.002652][ T6650] do_syscall_64+0x123/0x790 [ 80.002666][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.002678][ T6650] RIP: 0033:0x7f9c4979e199 [ 80.002687][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.002698][ T6650] RSP: 002b:00007f9c4a74c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.002710][ T6650] RAX: ffffffffffffffda RBX: 00007f9c49a25fa0 RCX: 00007f9c4979e199 [ 80.002717][ T6650] RDX: 000000000004c050 RSI: 0000200000000000 RDI: 0000000000000005 [ 80.002724][ T6650] RBP: 00007f9c4a74c090 R08: 0000000000000000 R09: 0000000000000000 [ 80.002731][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.002737][ T6650] R13: 00007f9c49a26038 R14: 00007f9c49a25fa0 R15: 00007ffd24835928 [ 80.002751][ T6650] [ 80.002788][ T6650] __nla_validate_parse: 18 callbacks suppressed [ 80.002796][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 80.003354][ T43] audit: type=1400 audit(1791267930.037:489): avc: denied { getopt } for pid=6647 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.011151][ T6649] UHID_CREATE from different security context by process 169 (syz.1.224), this is not allowed. [ 80.013470][ T43] audit: type=1400 audit(1791267930.047:490): avc: denied { watch } for pid=6647 comm="syz.1.224" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.019979][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.020333][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.020669][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.020947][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.021218][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.021668][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.021922][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.022244][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.022566][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.022962][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.023193][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.023362][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.023545][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.023833][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.024121][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.024438][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.024827][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.025182][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.025588][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.025883][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.026266][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.026620][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.026900][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.028159][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.028491][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.029854][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.030147][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.030404][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.031093][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.031355][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.031624][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.031927][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.032273][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.032569][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.032860][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.033192][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.033476][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.033741][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.034037][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.034277][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.034565][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.034885][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.035164][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.035544][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.035855][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.036207][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.036562][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.036852][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.037137][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.037445][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.037732][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.038017][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.038409][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.038699][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.039038][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.039324][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.039593][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.039915][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.040177][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.040442][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.040762][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.040947][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.041117][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.041327][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.041503][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.041705][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.041925][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.042096][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.042303][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.042476][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.042644][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.042925][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.043210][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.043509][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.044204][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.044470][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.044797][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.045100][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.045393][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.045715][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.045966][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.047131][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.047511][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.047843][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.048123][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.048490][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.048778][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.049108][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.049284][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.049448][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.049734][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.049896][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.050054][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.050310][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.050558][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.050813][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.051115][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.051372][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.051757][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.052006][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.052255][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.052578][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.052822][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.053076][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.053394][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.053648][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.053897][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.054199][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.054457][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.054750][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.055015][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.055182][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.055389][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.055578][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.055841][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.056744][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.057005][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.057278][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.057658][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.057962][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.058318][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.058596][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.058875][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.059225][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.059520][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.059834][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.060173][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.060462][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.060723][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.061061][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.061349][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.061678][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.062540][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.062809][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.063130][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.063414][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.063724][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.064069][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.064361][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.064613][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.064942][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.065217][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.065517][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.065797][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.066066][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.069068][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.069305][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.069611][ T6637] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.080620][ T64] usb 7-1: USB disconnect, device number 6 [ 80.127505][ T6657] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 80.184819][ T6659] capability: warning: `syz.3.228' uses 32-bit capabilities (legacy support in use) [ 80.189081][ T6657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.201042][ T6657] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 80.292487][ T43] audit: type=1400 audit(1791267930.337:491): avc: denied { create } for pid=6658 comm="syz.0.229" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.300579][ T43] audit: type=1400 audit(1791267930.337:492): avc: denied { mounton } for pid=6658 comm="syz.0.229" path="/68/loop0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.301834][ T6667] XFS (loop0): Invalid device [./loop0], error=-16 [ 80.303407][ T43] audit: type=1400 audit(1791267930.337:493): avc: denied { compute_member } for pid=6658 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.323682][ T43] audit: type=1400 audit(1791267930.367:494): avc: denied { unlink } for pid=5733 comm="syz-executor" name="loop0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.355964][ T43] audit: type=1400 audit(1791267930.397:495): avc: denied { mount } for pid=6668 comm="syz.0.232" name="/" dev="ecryptfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 80.400861][ T43] audit: type=1400 audit(1791267930.437:496): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 80.649633][ T6675] netlink: 'syz.2.235': attribute type 5 has an invalid length. [ 80.650573][ T6675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.727233][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.787743][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.836084][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 80.861226][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.885280][ T6683] FAULT_INJECTION: forcing a failure. [ 80.885280][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 80.885311][ T6683] CPU: 3 UID: 0 PID: 6683 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 80.885332][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.885343][ T6683] Call Trace: [ 80.885349][ T6683] [ 80.885358][ T6683] dump_stack_lvl+0x100/0x190 [ 80.885390][ T6683] should_fail_ex.cold+0x5/0xa [ 80.885417][ T6683] should_failslab+0xc2/0x120 [ 80.885445][ T6683] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.885473][ T6683] ? jffs2_init_fs_context+0x3f/0xd0 [ 80.885503][ T6683] jffs2_init_fs_context+0x3f/0xd0 [ 80.885529][ T6683] alloc_fs_context+0x60c/0xf40 [ 80.885554][ T6683] path_mount+0xdbd/0x24c0 [ 80.885577][ T6683] ? __pfx_path_mount+0x10/0x10 [ 80.885595][ T6683] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.885620][ T6683] ? putname+0xb1/0x110 [ 80.885643][ T6683] ? kmem_cache_free+0x127/0x6c0 [ 80.885668][ T6683] ? __x64_sys_mount+0x293/0x310 [ 80.885687][ T6683] __x64_sys_mount+0x293/0x310 [ 80.885707][ T6683] ? __pfx___x64_sys_mount+0x10/0x10 [ 80.885733][ T6683] do_syscall_64+0x123/0x790 [ 80.885757][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.885778][ T6683] RIP: 0033:0x7effddb9e199 [ 80.885792][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.885811][ T6683] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.885828][ T6683] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 80.885843][ T6683] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 80.885856][ T6683] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 80.885869][ T6683] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 80.885881][ T6683] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 80.885905][ T6683] [ 80.925472][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.929282][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.930187][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.934382][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.938412][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.980608][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.067355][ T6696] use of bytesused == 0 is deprecated and will be removed in the future, [ 81.067365][ T6696] use the actual size instead. [ 81.147936][ T12] bridge_slave_1: left allmulticast mode [ 81.147973][ T12] bridge_slave_1: left promiscuous mode [ 81.149233][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.154190][ T12] bridge_slave_0: left allmulticast mode [ 81.154213][ T12] bridge_slave_0: left promiscuous mode [ 81.154376][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.280124][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.281806][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.283194][ T12] bond0 (unregistering): Released all slaves [ 81.285986][ T12] bond1 (unregistering): Released all slaves [ 81.286225][ T853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 81.358771][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.359505][ T5444] 8021q: adding VLAN 0 to HW filter on device eth1 [ 81.447064][ T853] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 81.447869][ T853] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.447894][ T853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.459171][ T853] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 81.459286][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 81.459315][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 81.462501][ T6684] dummy0 speed is unknown, defaulting to 1000 [ 81.471952][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 81.471990][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 81.500051][ T853] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 81.501025][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 81.501061][ T853] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 81.512411][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.518033][ T9] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 81.518051][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.519366][ T853] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 81.522796][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.522809][ T9] usb 7-1: Product: syz [ 81.522816][ T9] usb 7-1: Manufacturer: syz [ 81.522824][ T9] usb 7-1: SerialNumber: syz [ 81.535831][ T9] usb 7-1: config 0 descriptor?? [ 81.536368][ T6699] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.564086][ T9] usb 7-1: selecting invalid altsetting 0 [ 81.625594][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.762125][ T10] usb 7-1: USB disconnect, device number 7 [ 81.903043][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.962409][ T12] hsr_slave_0: left promiscuous mode [ 81.963113][ T12] hsr_slave_1: left promiscuous mode [ 81.963499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.963516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.964892][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.964902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.972590][ T12] veth1_macvtap: left promiscuous mode [ 81.972620][ T12] veth0_macvtap: left promiscuous mode [ 81.972666][ T12] veth1_vlan: left promiscuous mode [ 81.972717][ T12] veth0_vlan: left promiscuous mode [ 82.156069][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.171167][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.281146][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 82.368508][ T6740] syzkaller0: entered promiscuous mode [ 82.368522][ T6740] syzkaller0: entered allmulticast mode [ 82.574336][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.574467][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.574573][ T6684] bridge_slave_0: entered allmulticast mode [ 82.576042][ T6684] bridge_slave_0: entered promiscuous mode [ 82.589449][ T6757] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.592085][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.594201][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.594280][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.594378][ T6684] bridge_slave_1: entered allmulticast mode [ 82.595725][ T6684] bridge_slave_1: entered promiscuous mode [ 82.646373][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.649027][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.663304][ T12] IPVS: stop unused estimator thread 0... [ 82.677253][ T6684] team0: Port device team_slave_0 added [ 82.683009][ T6684] team0: Port device team_slave_1 added [ 82.687926][ T6767] FAULT_INJECTION: forcing a failure. [ 82.687926][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 82.687954][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 82.687990][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.688002][ T6767] Call Trace: [ 82.688009][ T6767] [ 82.688016][ T6767] dump_stack_lvl+0x100/0x190 [ 82.688048][ T ** replaying previous printk message ** [ 82.688048][ T6767] should_fail_ex.cold+0x5/0xa [ 82.688075][ T6767] should_failslab+0xc2/0x120 [ 82.688100][ T6767] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 82.688126][ T6767] ? kvasprintf_const+0x66/0x1a0 [ 82.688155][ T6767] kvasprintf+0xbc/0x150 [ 82.688175][ T6767] ? __pfx_kvasprintf+0x10/0x10 [ 82.688200][ T6767] ? acpi_dev_for_each_child+0x88/0xc0 [ 82.688227][ T6767] ? find_held_lock+0x2b/0x80 [ 82.688258][ T6767] kvasprintf_const+0x66/0x1a0 [ 82.688314][ T6767] kobject_set_name_vargs+0x5a/0x140 [ 82.688343][ T6767] dev_set_name+0xc7/0x100 [ 82.688363][ T6767] ? __pfx_dev_set_name+0x10/0x10 [ 82.688389][ T6767] ? set_primary_fwnode+0x11a/0x2a0 [ 82.688416][ T6767] ? pci_dev_assign_slot+0x1ea/0x270 [ 82.688448][ T6767] pci_setup_device+0x5f5/0x2500 [ 82.688473][ T6767] ? __pfx_pci_setup_device+0x10/0x10 [ 82.688497][ T6767] ? kasan_save_track+0x14/0x30 [ 82.688519][ T6767] ? __kasan_kmalloc+0xaa/0xb0 [ 82.688543][ T6767] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.688563][ T6767] ? lockdep_init_map_type+0x5c/0x250 [ 82.688586][ T6767] ? __raw_spin_lock_init+0x3a/0x110 [ 82.688615][ T6767] pci_scan_single_device+0x1ac/0x240 [ 82.688635][ T6767] ? __pfx_pci_scan_single_device+0x10/0x10 [ 82.688662][ T6767] pci_scan_slot+0x1c9/0x7c0 [ 82.688685][ T6767] ? __pfx_pci_scan_slot+0x10/0x10 [ 82.688706][ T6767] ? rcu_is_watching+0x13/0xc0 [ 82.688736][ T6767] pci_scan_child_bus_extend+0x6b/0x7b0 [ 82.688755][ T6767] ? pci_find_next_bus+0x60/0xb0 [ 82.688782][ T6767] pci_rescan_bus+0x18/0x40 [ 82.688802][ T6767] rescan_store+0xfb/0x130 [ 82.688827][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 82.688848][ T6767] ? sysfs_file_kobj+0xe4/0x290 [ 82.688875][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 82.688895][ T6767] bus_attr_store+0x74/0xb0 [ 82.688913][ T6767] ? __pfx_bus_attr_store+0x10/0x10 [ 82.688931][ T6767] sysfs_kf_write+0xf2/0x150 [ 82.688957][ T6767] kernfs_fop_write_iter+0x3e0/0x5f0 [ 82.688977][ T6767] ? __pfx_sysfs_kf_write+0x10/0x10 [ 82.689005][ T6767] vfs_write+0x6af/0x1050 [ 82.689027][ T6767] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.689051][ T6767] ? __pfx_vfs_write+0x10/0x10 [ 82.689070][ T6767] ? find_held_lock+0x2b/0x80 [ 82.689115][ T6767] ksys_write+0x12a/0x250 [ 82.689135][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 82.689165][ T6767] do_syscall_64+0x123/0x790 [ 82.689188][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.689207][ T6767] RIP: 0033:0x7effddb9e199 [ 82.689223][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.689239][ T6767] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.689258][ T6767] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 82.689269][ T6767] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 82.689280][ T6767] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 82.689291][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.689302][ T6767] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 82.689327][ T6767] [ 82.691995][ T6767] pci (null): [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 82.703045][ T6767] pci (null): BAR 0 [mem 0xfea80000-0xfea9ffff] [ 82.703121][ T6767] pci (null): BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 82.708304][ T6767] pci (null): BAR 2 [io 0xc080-0xc09f] [ 82.708404][ T6767] pci (null): BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 82.708632][ T6767] pci (null): ROM [mem 0xfea00000-0xfea3ffff pref] [ 82.709077][ T6767] pci (null): enabling Extended Tags [ 82.710063][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.710073][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.710086][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.710882][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.710890][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.710903][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.715303][ T6769] x_tables: duplicate underflow at hook 2 [ 82.722915][ T6767] ------------[ cut here ]------------ [ 82.722926][ T6767] ret < 0 [ 82.722932][ T6767] WARNING: drivers/pci/probe.c:2770 at pci_device_add+0x1343/0x1820, CPU#0: syz.2.253/6767 [ 82.750037][ T6684] hsr_slave_0: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.750965][ T6684] hsr_slave_1: entered promiscuous mode [ 82.751521][ T6684] debugfs: 'hsr0' already exists in 'hsr' [ 82.751539][ T6684] Cannot create hsr debugfs directory [ 82.876507][ T6684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.938287][ T6767] Modules linked in: [ 82.939991][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 82.943922][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.948221][ T6767] RIP: 0010:pci_device_add+0x1343/0x1820 [ 82.950598][ T6767] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 60 b1 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 4e b1 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 40 b1 a2 fc 90 0f 0b 90 e9 11 fa ff ff [ 82.959199][ T6767] RSP: 0018:ffffc90003fcf930 EFLAGS: 00010293 [ 82.961773][ T6767] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 82.965115][ T6767] RDX: ffff88802d302580 RSI: ffffffff856996a2 RDI: ffff88802d302580 [ 82.969209][ T6767] RBP: ffff88801c6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 82.972570][ T6767] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888023632028 [ 82.975877][ T6767] R13: ffff888023632000 R14: 0000000000000001 R15: ffff8880236cc000 [ 82.979157][ T6767] FS: 00007effdea6d6c0(0000) GS:ffff8880d5b4e000(0000) knlGS:0000000000000000 [ 82.982920][ T6767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.985803][ T6767] CR2: 00007ff40526bff8 CR3: 000000004a49c000 CR4: 0000000000352ef0 [ 82.989260][ T6767] Call Trace: [ 82.990330][ T6767] [ 82.991269][ T6767] ? __pfx_pci_device_add+0x10/0x10 [ 82.993320][ T6767] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.995658][ T6767] ? __raw_spin_lock_init+0x3a/0x110 [ 82.999549][ T6767] pci_scan_single_device+0x1d0/0x240 [ 83.001894][ T6767] ? __pfx_pci_scan_single_device+0x10/0x10 [ 83.004425][ T6767] pci_scan_slot+0x1c9/0x7c0 [ 83.006473][ T6767] ? __pfx_pci_scan_slot+0x10/0x10 [ 83.008681][ T6767] ? rcu_is_watching+0x13/0xc0 [ 83.010709][ T6767] pci_scan_child_bus_extend+0x6b/0x7b0 [ 83.013091][ T6767] ? pci_find_next_bus+0x60/0xb0 [ 83.015234][ T6767] pci_rescan_bus+0x18/0x40 [ 83.017386][ T6767] rescan_store+0xfb/0x130 [ 83.019329][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 83.021489][ T6767] ? sysfs_file_kobj+0xe4/0x290 [ 83.023579][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 83.025762][ T6767] bus_attr_store+0x74/0xb0 [ 83.027811][ T6767] ? __pfx_bus_attr_store+0x10/0x10 [ 83.029987][ T6767] sysfs_kf_write+0xf2/0x150 [ 83.031586][ T5742] Bluetooth: hci2: command tx timeout [ 83.034202][ T6767] kernfs_fop_write_iter+0x3e0/0x5f0 [ 83.036517][ T6767] ? __pfx_sysfs_kf_write+0x10/0x10 [ 83.038750][ T6767] vfs_write+0x6af/0x1050 [ 83.040637][ T6767] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.043128][ T6767] ? __pfx_vfs_write+0x10/0x10 [ 83.045172][ T6767] ? find_held_lock+0x2b/0x80 [ 83.047268][ T6767] ksys_write+0x12a/0x250 [ 83.049097][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 83.051169][ T6767] do_syscall_64+0x123/0x790 [ 83.053169][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.055660][ T6767] RIP: 0033:0x7effddb9e199 [ 83.057691][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.066076][ T6767] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.069883][ T6767] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 83.073229][ T6767] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 83.076824][ T6767] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 83.080280][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.083581][ T6767] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 83.087063][ T6767] [ 83.088408][ T6767] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.091493][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 83.095330][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.099087][ T6767] Call Trace: [ 83.100154][ T6767] [ 83.101133][ T6767] dump_stack_lvl+0x100/0x190 [ 83.102654][ T6767] vpanic+0x553/0x970 [ 83.103942][ T6767] ? __pfx_vpanic+0x10/0x10 [ 83.105502][ T6767] panic+0xd1/0xe0 [ 83.107123][ T6767] ? __pfx_panic+0x10/0x10 [ 83.109039][ T6767] check_panic_on_warn.cold+0x19/0x34 [ 83.111371][ T6767] ? pci_device_add+0x1343/0x1820 [ 83.113512][ T6767] __warn.cold+0x191/0x318 [ 83.115427][ T6767] __report_bug+0x30f/0x440 [ 83.117234][ T6767] ? pci_device_add+0x1343/0x1820 [ 83.119426][ T6767] ? __pfx___report_bug+0x10/0x10 [ 83.121273][ T6767] ? kasan_quarantine_put+0x104/0x240 [ 83.123563][ T6767] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.125857][ T6767] ? device_add+0x2e0/0x1970 [ 83.127887][ T6767] ? pci_device_add+0x1343/0x1820 [ 83.129646][ T6767] report_bug+0xb3/0x220 [ 83.131432][ T6767] ? pci_device_add+0x1343/0x1820 [ 83.133538][ T6767] handle_bug+0x16a/0x2a0 [ 83.135314][ T6767] exc_invalid_op+0x17/0x50 [ 83.137297][ T6767] asm_exc_invalid_op+0x1a/0x20 [ 83.139156][ T6767] RIP: 0010:pci_device_add+0x1343/0x1820 [ 83.141603][ T6767] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 60 b1 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 4e b1 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 40 b1 a2 fc 90 0f 0b 90 e9 11 fa ff ff [ 83.149169][ T6767] RSP: 0018:ffffc90003fcf930 EFLAGS: 00010293 [ 83.151723][ T6767] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 83.154417][ T6767] RDX: ffff88802d302580 RSI: ffffffff856996a2 RDI: ffff88802d302580 [ 83.157209][ T6767] RBP: ffff88801c6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 83.160079][ T6767] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888023632028 [ 83.162560][ T6767] R13: ffff888023632000 R14: 0000000000000001 R15: ffff8880236cc000 [ 83.165053][ T6767] ? pci_device_add+0x1342/0x1820 [ 83.167144][ T6767] ? __pfx_pci_device_add+0x10/0x10 [ 83.169224][ T6767] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 83.171445][ T6767] ? __raw_spin_lock_init+0x3a/0x110 [ 83.173547][ T6767] pci_scan_single_device+0x1d0/0x240 [ 83.175610][ T6767] ? __pfx_pci_scan_single_device+0x10/0x10 [ 83.177954][ T6767] pci_scan_slot+0x1c9/0x7c0 [ 83.179922][ T6767] ? __pfx_pci_scan_slot+0x10/0x10 [ 83.182074][ T6767] ? rcu_is_watching+0x13/0xc0 [ 83.183690][ T6767] pci_scan_child_bus_extend+0x6b/0x7b0 [ 83.185522][ T6767] ? pci_find_next_bus+0x60/0xb0 [ 83.187662][ T6767] pci_rescan_bus+0x18/0x40 [ 83.189573][ T6767] rescan_store+0xfb/0x130 [ 83.191465][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 83.193558][ T6767] ? sysfs_file_kobj+0xe4/0x290 [ 83.195592][ T6767] ? __pfx_rescan_store+0x10/0x10 [ 83.197398][ T6767] bus_attr_store+0x74/0xb0 [ 83.199338][ T6767] ? __pfx_bus_attr_store+0x10/0x10 [ 83.201123][ T6767] sysfs_kf_write+0xf2/0x150 [ 83.202649][ T6767] kernfs_fop_write_iter+0x3e0/0x5f0 [ 83.204317][ T6767] ? __pfx_sysfs_kf_write+0x10/0x10 [ 83.205980][ T6767] vfs_write+0x6af/0x1050 [ 83.207354][ T6767] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.209240][ T6767] ? __pfx_vfs_write+0x10/0x10 [ 83.211249][ T6767] ? find_held_lock+0x2b/0x80 [ 83.213006][ T6767] ksys_write+0x12a/0x250 [ 83.214837][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 83.216644][ T6767] do_syscall_64+0x123/0x790 [ 83.218130][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.220468][ T6767] RIP: 0033:0x7effddb9e199 [ 83.222282][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.229319][ T6767] RSP: 002b:00007effdea6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.232805][ T6767] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e199 [ 83.236090][ T6767] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 83.239404][ T6767] RBP: 00007effdea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 83.242509][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.245817][ T6767] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007ffefa14ce68 [ 83.249066][ T6767] [ 83.251078][ T6767] Kernel Offset: disabled [ 83.252782][ T6767] Rebooting in 86400 seconds..