last executing test programs: 10.589969507s ago: executing program 0 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x28970, 0x1f280, 0x0, 0x8000396}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x5, 0x0, 0xcd}}, 0xf0}}, 0x0) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) 9.869412486s ago: executing program 0 (id=945): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1}, {r0, 0xb292}, {0xffffffffffffffff, 0x5028}, {}, {0xffffffffffffffff, 0x6000}], 0x5, 0xff) 8.438851889s ago: executing program 0 (id=956): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x1f00, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.325430288s ago: executing program 0 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 8.25836226s ago: executing program 0 (id=958): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/drivers/moschip7720/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0525 a4a1\n\x00', 0xa) 7.902782602s ago: executing program 0 (id=964): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$alg(0x26, 0x5, 0x0) flistxattr(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1b8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1da3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2591}]}]}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b641897}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffb60c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc65}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x727}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4dc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4a4, 0x3, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "dcd87e8774a12073d136f7cc1f97f30f0c444162a261ecad5e27f8c39484083fde0d20d66bc62a814fe47378be6bd20fd681cfae6a753077b8c00d9cf36bdb3c4bee78aa9ff5c818306ed5790b4301a79bf66e1cd099a92790acd5ffd4d6582b273e3fc274c04ebacf8c0a5cd83e6c53c387586b8a82d9aa8a3b4bd5ed8fbd3134513c78f2bc51c362d29e9eeb9c048e0e4e9ee6b92ff0a2398a6852ec6af707f6167bfa3c4551fcba7eda075a48b11603005fe96f0d83a6adc956fc66ad8c8955c832137d541f48ef6b5b5cec7189c61b4a0b9dbbb45d943e536795572bf60f8451464f19d95ddbbabb0f1a466efaa6f02b8dab22"}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, {0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "2d8d1a9b7ded4407cf31ec02a9e863d9d638826e0c5800e3b049b9c1fec95b09070bd4812c26e3585e290a9fc5f0e966ebfc8924c101fb7a4c8ff1e88007ab5365148bd1cc9fe342c9b643a1ac7714fdad77d57440a72ca947bc1c0f28a7caa3b87727d254623b1c71f9a3172abc6a77b37438c3ac36f9"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "4b561cd934d5d0c21c316e0cfc5ffff52109a35450bf3074baa0944e4df9c7ef6fe5ad2cfffcc76222a8b88b646f111c4893e33d3ce567065407bb3e4a17f7d66d130a0f4a2d659421e73180bd11affdb2517844be6c82d4db955629e1faa8a32844a179be340b473ab2b2dc09f9006f65c05de5e5fb4edabaa3f8e13ef833789d336432418e0463943931338a5b9247a40fdeab0ab492b863e9317e6b25eada35d0ff53d627a3c891386a25ba00"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "58d69167ae22648ef35083ab85ee1c50b983db41f23b5c3402c8ee33350629b892a870167eec66bf6919be3486a0b563180211be45962e191d57071b28ba247a7c1bdd600bb1daf11d76af63943a66cf46a2bdd4a0aade0b9af6df62c79caf05376698080f165f0157bf03f92c22d25e4a1f7b6dff2c6a4881abce868d6085989e3edeeeccb9cc342a28e5ac8a447ec547d7d9cebd4d17485e0e09bacc7cb28863b5680ead3364691205fd059b201acdf60e8f93be5136d2c8"}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "f0df4719abe6c0fd4b25a9efe4de35d45c7d3e0e5b1c0eee09b06f46ee0da8b0af83621dabf145e74f5d48b7d343e1583d2821553b00ac0c92ea4ec2c8bd90a0eca0aadc8c3d57b248b1a8f87b9dd6a5b06dd33ede8496a43520faca67a2fe44f8832694b81a0db0973de5602cd91d5375fc1f248ab7af12f66322f2931ddb3d4e8657bf658111d1c18a46b192876870d098f41135dc73f7238c82abc2933087d8e9f70d94d01e98ab2f452c5c8f8c1febe4939804d67882aa0f4a68693e3f1af12d5db8526732be4f3ce9199d8436f3aca84e291b314dee1c5ba8a2be3a423116c01b973b4021f3ddb538eab575"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x18, 0x6, 0x1, 0x0, "551288a7b04954377d59344b7626d9e43b2849c2"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6bc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1ff, 0x4) 7.795802312s ago: executing program 32 (id=964): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$alg(0x26, 0x5, 0x0) flistxattr(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1b8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1da3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2591}]}]}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b641897}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffb60c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc65}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x727}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4dc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4a4, 0x3, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "dcd87e8774a12073d136f7cc1f97f30f0c444162a261ecad5e27f8c39484083fde0d20d66bc62a814fe47378be6bd20fd681cfae6a753077b8c00d9cf36bdb3c4bee78aa9ff5c818306ed5790b4301a79bf66e1cd099a92790acd5ffd4d6582b273e3fc274c04ebacf8c0a5cd83e6c53c387586b8a82d9aa8a3b4bd5ed8fbd3134513c78f2bc51c362d29e9eeb9c048e0e4e9ee6b92ff0a2398a6852ec6af707f6167bfa3c4551fcba7eda075a48b11603005fe96f0d83a6adc956fc66ad8c8955c832137d541f48ef6b5b5cec7189c61b4a0b9dbbb45d943e536795572bf60f8451464f19d95ddbbabb0f1a466efaa6f02b8dab22"}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, {0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "2d8d1a9b7ded4407cf31ec02a9e863d9d638826e0c5800e3b049b9c1fec95b09070bd4812c26e3585e290a9fc5f0e966ebfc8924c101fb7a4c8ff1e88007ab5365148bd1cc9fe342c9b643a1ac7714fdad77d57440a72ca947bc1c0f28a7caa3b87727d254623b1c71f9a3172abc6a77b37438c3ac36f9"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "4b561cd934d5d0c21c316e0cfc5ffff52109a35450bf3074baa0944e4df9c7ef6fe5ad2cfffcc76222a8b88b646f111c4893e33d3ce567065407bb3e4a17f7d66d130a0f4a2d659421e73180bd11affdb2517844be6c82d4db955629e1faa8a32844a179be340b473ab2b2dc09f9006f65c05de5e5fb4edabaa3f8e13ef833789d336432418e0463943931338a5b9247a40fdeab0ab492b863e9317e6b25eada35d0ff53d627a3c891386a25ba00"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "58d69167ae22648ef35083ab85ee1c50b983db41f23b5c3402c8ee33350629b892a870167eec66bf6919be3486a0b563180211be45962e191d57071b28ba247a7c1bdd600bb1daf11d76af63943a66cf46a2bdd4a0aade0b9af6df62c79caf05376698080f165f0157bf03f92c22d25e4a1f7b6dff2c6a4881abce868d6085989e3edeeeccb9cc342a28e5ac8a447ec547d7d9cebd4d17485e0e09bacc7cb28863b5680ead3364691205fd059b201acdf60e8f93be5136d2c8"}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "f0df4719abe6c0fd4b25a9efe4de35d45c7d3e0e5b1c0eee09b06f46ee0da8b0af83621dabf145e74f5d48b7d343e1583d2821553b00ac0c92ea4ec2c8bd90a0eca0aadc8c3d57b248b1a8f87b9dd6a5b06dd33ede8496a43520faca67a2fe44f8832694b81a0db0973de5602cd91d5375fc1f248ab7af12f66322f2931ddb3d4e8657bf658111d1c18a46b192876870d098f41135dc73f7238c82abc2933087d8e9f70d94d01e98ab2f452c5c8f8c1febe4939804d67882aa0f4a68693e3f1af12d5db8526732be4f3ce9199d8436f3aca84e291b314dee1c5ba8a2be3a423116c01b973b4021f3ddb538eab575"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x18, 0x6, 0x1, 0x0, "551288a7b04954377d59344b7626d9e43b2849c2"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6bc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1ff, 0x4) 4.793077206s ago: executing program 3 (id=985): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x48000) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='%', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000ac1414aa000000"], 0x18}, 0x8050) (fail_nth: 3) 4.719703528s ago: executing program 3 (id=986): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) epoll_create(0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff", 0x13}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1102040000000000000001e2000028000180140004000100000000"], 0x3c}}, 0x804) 4.718642783s ago: executing program 3 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000000)='msdos\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x28, r2, 0x5, 0x70bd25, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r5, 0x89f2, &(0x7f0000000080)={0x0, 0x10, 0x4, 0x0, 0xc, "a500000500", 0xe7, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$TUNSETIFF(r4, 0xc0096616, 0x0) 1.649897891s ago: executing program 3 (id=1001): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00ff0300000000000000000080000008000000", @ANYRES32, @ANYBLOB="0000000000000000000458ecbbfd0dc81319a562e2a700190000000028c30c4b80784f59342f7d853ebcce7ea0876f7224eeb0b5d78af41adce2ccdde1258268f985edc528d071551bc8d162482c05d8c7485091e8c5afff700b6d4aff32ecb9d4803811cf6b11e8a0cfcbbf689c2ad9da4b8b69c9d7fe614fd4b01ebdc37082d99a4884e22394912a404082a89b7a5bf433b9bc460bf785fea4fc79d5c4afd46dada810f88b0f40", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0) lseek(r1, 0x851, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000005c0)={&(0x7f0000000540)="dbc8be4776765d4af47d95c2e31b7d7a3d64d5eefec884ba1f0a63c7bf5b9e0684afbf7f61524e5523916df5b36322635cec2299c7acc979b1bcba4e1ee48db9bec894f0d63df516630af8fe03193a9ba4d53677bca08afd4fa3d3a7e34d0b081bd52a99f25d2f35e8bb471198f1ca2c466efc2938420809bc7361", 0x7b, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000800)={r2, 0x7f, &(0x7f0000000780)=""/127}) read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000008c0)={0x0, 0xc8, "d866127c0e7b05bf26cb21e12a556611f950a3e540ee4cbfccf46fd57c2f16f85c030e117a5558c3821d4de833ddabe5c98db6b111aa96940c214a16442f2e141c4a64ce61bcb1d91c7843602e06947710ea29cc0904919eb532ebd05b030fb8bbf67d027c25cf8e38f50ea2e6e73029b3fcd6f7720a34ffe4214ee3cf7d6b384155712ef31220ca13f957292e0a2edb744047082110595573c5f149d4e045b62f8758b6b257fb076e6e9c8ce5b863549141455bff4e77fdf60008ad3f6d785ee66a5fc3f79535ee"}, &(0x7f00000009c0)=0xd0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000100)='test\x00', 0x2) ftruncate(r6, 0x1000) fcntl$addseals(r6, 0x409, 0x2) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000200)={r6, 0x0, 0x0, 0x1000}) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x10002, 0x0, 0x1000, 0x1000, &(0x7f0000800000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000080)={0x1000, 0x4000}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000a00)={r4, 0x2, 0xe7, "6cec4df2a137318b453ae2e6a6f9632852fcbf63fb15417d4021c69e56e9decb196860ca39f440a7243e72e0ac937cbdf7d7acff22309941cee8fe2143c0dc925798bc3e25e20bf0407b7c7b6ddf17917f429a2f0aa5e9b8f200e92ec37fff5a0aa8ea11394201f2ef9d27c8f7480900d163b0e60ee7e24cf2cc0b3864bc2fb2a92e70812d9e1f99573a7bbec152f1716a4691d905012ef35c2af337bbad91498dddd514357d57ee8dd5ae6c6ceddb64c6ec96175371af6f09ede2e9d39dee88ce0001b0103578c1df49754ca57e529c9bd028a3696c7efd7cef3a72bac2859d00054d6ce66f70"}, 0xef) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000a0000008c8b50000000000018280000", @ANYRES32=r0, @ANYBLOB="00004000a8335f8ecdbdd13e58f78250e80b3f00ff0002"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000b00)={0x0, @phonet={0x23, 0x77, 0x7, 0x6e}, @nfc={0x27, r12, 0x1, 0x7}, @qipcrtr={0x2a, 0x3, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='team0\x00', 0x5, 0x8, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x0, 0x65, 0xb8, &(0x7f0000000000)="fa0497e74a617a927c4ea879ef8690be6240516b972cc9cdec3ba1bd6c1b5fefe7bec1253adc39484f9198e07c80c6d6f2caab077d9297cc4acbf5a6eb39c91301fc8f781f723b467f0338cdd12ad0ce84655ce17ce96eac7b544d01c8f023f82f256378ff", &(0x7f0000000140)=""/184, 0x9, 0x0, 0x79, 0xf7, &(0x7f0000000200)="a6a1216b403fa4eea0055b3f4898cbfbf0abf23471c4c962708b13d10685ff19f5089589501ea635cd4fc293c94fa486fad23186dbfc7d938873bce199c821b4f2bb0e0cf2a4c21ace422c079b7e1689fec198e91dfc6335a715acfe8b982a335a58cbc960e3848c80a9055c005229aba4b85d35650f1c839d", &(0x7f00000003c0)="04c70c8f1d7f64a7baeb02da888f7b315ea75bf8a1b9059eef0d0ccff098e5b294397e6071a654caf90873a3a411d6d24210bfc89e9fea864baa43860c6b3f3a297d004671e37fa1d2d7e629fb2f4c0fc3459d28b731eb062fc0dd4deb7641aa1ca78feaf3bc3f45c1c1ca25a36ddd315db7e83851206f4ea3c3361371df26937c01e48a7d6163e940e2f52879c60e6ed6e2e67e495e4d89d9cd45e92110fe368482cd301ad3456d0c41fcf86b9d6b050c0b85ba2480676beb339f0895f06cd780230133a9f4331fd83214629f6606cd624b6701ed952fa8c6b301d1ce8f3efa68c9927c5407e3d6600c5a32e20f4d34fdd2b384ee77f0", 0x4, 0x0, 0x8}, 0x50) 1.518527393s ago: executing program 3 (id=1002): syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.26893641s ago: executing program 2 (id=1005): keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x6, 0x1, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.139423747s ago: executing program 2 (id=1006): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3], 0x44}}, 0x28000) 1.138808312s ago: executing program 2 (id=1007): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 608.947676ms ago: executing program 3 (id=1018): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1}, {r0, 0xb292}, {0xffffffffffffffff, 0x5028}, {}, {0xffffffffffffffff, 0x6000}], 0x5, 0xff) 519.897604ms ago: executing program 1 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x41009432, 0x0) 519.594699ms ago: executing program 1 (id=1020): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @mcast2, 0x7fff}], 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 448.458556ms ago: executing program 4 (id=1021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000009900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000a080}], 0x1, 0x4040005) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000000b80)=""/188, 0xbc}, {&(0x7f0000000c40)=""/66, 0x42}], 0x5}, 0x4}], 0x1, 0x10102, 0x0) 442.186722ms ago: executing program 4 (id=1022): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/224, 0xe0, 0x42, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 349.656848ms ago: executing program 1 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000300)={0x3ff, 0x4, 0x7000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x1}) 349.427018ms ago: executing program 4 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd03, &(0x7f00000001c0)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 349.299494ms ago: executing program 4 (id=1025): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read$proc_mixer(r7, &(0x7f0000001640)=""/205, 0xcd) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xfffffe01, 0x4) 206.946471ms ago: executing program 4 (id=1026): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) close(0x3) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bcab}}}, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) close(0x3) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bcab}}}, 0x0) (async) 206.601005ms ago: executing program 4 (id=1027): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 201.165644ms ago: executing program 2 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 94.619901ms ago: executing program 1 (id=1029): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)) dup(r1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000200)={0x1, 0x2, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = memfd_create(&(0x7f0000001840)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^ 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.676834][ T7775] RSP: 002b:00007fb19181a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.676846][ T7775] RAX: ffffffffffffffda RBX: 00007fb190c25fa0 RCX: 00007fb19099e159 [ 130.676853][ T7775] RDX: 0000000000012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.676860][ T7775] RBP: 00007fb19181a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.676867][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.676873][ T7775] R13: 00007fb190c26038 R14: 00007fb190c25fa0 R15: 00007ffd9be57598 [ 130.676894][ T7775] [ 130.676899][ T7775] Mem-Info: [ 130.724054][ T5512] usb usb8-port1: unable to enumerate USB device [ 130.724780][ T7775] active_anon:10366 inactive_anon:14 isolated_anon:0 [ 130.724780][ T7775] active_file:774 inactive_file:37236 isolated_file:0 [ 130.724780][ T7775] unevictable:1000 dirty:149 writeback:93 [ 130.724780][ T7775] slab_reclaimable:8359 slab_unreclaimable:65790 [ 130.724780][ T7775] mapped:25570 shmem:1555 pagetables:1223 [ 130.724780][ T7775] sec_pagetables:299 bounce:0 [ 130.724780][ T7775] kernel_misc_reclaimable:0 [ 130.724780][ T7775] free:468501 free_pcp:9138 free_cma:0 [ 130.796764][ T7775] Node 0 active_anon:40948kB inactive_anon:56kB active_file:3096kB inactive_file:131368kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102280kB dirty:596kB writeback:124kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13248kB pagetables:4608kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.811797][ T7775] Node 1 active_anon:516kB inactive_anon:0kB active_file:0kB inactive_file:17576kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.826300][ T7775] Node 0 DMA free:15120kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:76kB free_cma:0kB [ 130.838918][ T7775] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 130.851443][ T7775] Node 0 DMA32 free:225960kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40748kB inactive_anon:56kB active_file:3096kB inactive_file:131368kB unevictable:2000kB writepending:532kB zspages:0kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:30132kB local_pcp:9008kB free_cma:0kB [ 130.865244][ T7775] lowmem_reserve[]: 0 0 0 0 0 [ 130.867620][ T7775] Node 1 Normal free:1632924kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:516kB inactive_anon:0kB active_file:0kB inactive_file:17576kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6304kB local_pcp:728kB free_cma:0kB [ 130.881056][ T7775] lowmem_reserve[]: 0 0 0 0 0 [ 130.883077][ T7775] Node 0 DMA: 4*4kB (UM) 6*8kB (UM) 5*16kB (UM) 4*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (M) 2*512kB (UM) 0*1024kB 2*2048kB (M) 2*4096kB (M) = 15120kB [ 130.890072][ T7775] Node 0 DMA32: 364*4kB (UM) 648*8kB (UME) 228*16kB (UME) 120*32kB (UME) 46*64kB (UME) 30*128kB (UME) 28*256kB (UM) 22*512kB (M) 14*1024kB (M) 16*2048kB (UM) 34*4096kB (UM) = 225712kB [ 130.898917][ T7775] Node 1 Normal: 100*4kB (UME) 68*8kB (UME) 66*16kB (UME) 63*32kB (UME) 40*64kB (UME) 26*128kB (UM) 16*256kB (UME) 8*512kB (M) 7*1024kB (UME) 10*2048kB (UME) 388*4096kB (UM) = 1634992kB [ 130.908387][ T7775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.912509][ T7775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 130.916548][ T7775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.920571][ T7775] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 130.924708][ T7775] 39561 total pagecache pages [ 130.926696][ T7775] 0 pages in swap cache [ 130.928744][ T7775] Free swap = 124996kB [ 130.930959][ T7775] Total swap = 124996kB [ 130.933100][ T7775] 1048443 pages RAM [ 130.935035][ T7775] 0 pages HighMem/MovableOnly [ 130.937099][ T7775] 285655 pages reserved [ 130.938901][ T7775] 0 pages cma reserved [ 131.027979][ T7792] FAULT_INJECTION: forcing a failure. [ 131.027979][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 131.032090][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.032108][ T7792] Tainted: [L]=SOFTLOCKUP [ 131.032112][ T7792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.032118][ T7792] Call Trace: [ 131.032123][ T7792] [ 131.032127][ T7792] dump_stack_lvl+0x100/0x190 [ 131.032147][ T7792] should_fail_ex.cold+0x5/0xa [ 131.032163][ T7792] should_failslab+0xc2/0x120 [ 131.032181][ T7792] __kmalloc_noprof+0xfc/0x820 [ 131.032196][ T7792] ? tomoyo_encode2+0xfb/0x3c0 [ 131.032216][ T7792] tomoyo_encode2+0xfb/0x3c0 [ 131.032234][ T7792] tomoyo_encode+0x29/0x50 [ 131.032251][ T7792] tomoyo_realpath_from_path+0x18c/0x690 [ 131.032271][ T7792] tomoyo_path_number_perm+0x23c/0x580 [ 131.032286][ T7792] ? tomoyo_path_number_perm+0x22e/0x580 [ 131.032302][ T7792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.032329][ T7792] ? find_held_lock+0x2b/0x80 [ 131.032343][ T7792] ? hook_file_ioctl_common+0x140/0x440 [ 131.032358][ T7792] ? __fget_files+0x21f/0x3d0 [ 131.032376][ T7792] security_file_ioctl+0xd3/0x230 [ 131.032393][ T7792] __x64_sys_ioctl+0xb7/0x210 [ 131.032408][ T7792] do_syscall_64+0x123/0x790 [ 131.032421][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.032432][ T7792] RIP: 0033:0x7fb19099e159 [ 131.032442][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.032453][ T7792] RSP: 002b:00007fb19181a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.032464][ T7792] RAX: ffffffffffffffda RBX: 00007fb190c25fa0 RCX: 00007fb19099e159 [ 131.032471][ T7792] RDX: 0000200000000240 RSI: 0000000000005412 RDI: 0000000000000003 [ 131.032477][ T7792] RBP: 00007fb19181a090 R08: 0000000000000000 R09: 0000000000000000 [ 131.032483][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.032490][ T7792] R13: 00007fb190c26038 R14: 00007fb190c25fa0 R15: 00007ffd9be57598 [ 131.032503][ T7792] [ 131.032514][ T7792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.032856][ T1160] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.125922][ T7792] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 131.128268][ T1160] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.513323][ T7795] FAULT_INJECTION: forcing a failure. [ 131.513323][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 131.517326][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.1.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.517344][ T7795] Tainted: [L]=SOFTLOCKUP [ 131.517348][ T7795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.517370][ T7795] Call Trace: [ 131.517377][ T7795] [ 131.517382][ T7795] dump_stack_lvl+0x100/0x190 [ 131.517402][ T7795] should_fail_ex.cold+0x5/0xa [ 131.517423][ T7795] should_failslab+0xc2/0x120 [ 131.517440][ T7795] kmem_cache_alloc_noprof+0x91/0x6a0 [ 131.517456][ T7795] ? __send_signal_locked+0x155/0x12d0 [ 131.517476][ T7795] __send_signal_locked+0x155/0x12d0 [ 131.517495][ T7795] force_sig_info_to_task+0x450/0x660 [ 131.517515][ T7795] force_sig_fault+0xc3/0x100 [ 131.517533][ T7795] ? __pfx_force_sig_fault+0x10/0x10 [ 131.517552][ T7795] ? __pfx___up_read+0x10/0x10 [ 131.517562][ T7795] ? fixup_vdso_exception+0x2d1/0x370 [ 131.517576][ T7795] __bad_area_nosemaphore+0x31b/0x3f0 [ 131.517590][ T7795] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 131.517604][ T7795] do_user_addr_fault+0x8ca/0x12f0 [ 131.517620][ T7795] exc_page_fault+0x6f/0xd0 [ 131.517632][ T7795] asm_exc_page_fault+0x26/0x30 [ 131.517643][ T7795] RIP: 0033:0x7f0b1b9877a1 [ 131.517652][ T7795] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 131.517662][ T7795] RSP: 002b:00007f0b1c79abd8 EFLAGS: 00010283 [ 131.517671][ T7795] RAX: 0000000000000000 RBX: 00000000000002a2 RCX: 0000000000000000 [ 131.517677][ T7795] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f0b1c79ac00 [ 131.517684][ T7795] RBP: 00007f0b1c79ac00 R08: 0000000000000000 R09: 0000000000000000 [ 131.517690][ T7795] R10: 0000000000000000 R11: 0000000000101000 R12: cccccccccccccccd [ 131.517697][ T7795] R13: 00007f0b1bc26128 R14: 00007f0b1bc26090 R15: 00007ffcb8482158 [ 131.517711][ T7795] [ 131.628143][ T7797] i2c i2c-0: delete_device: Extra parameters [ 131.669924][ T7801] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 131.673591][ T42] audit: type=1400 audit(1787904351.605:497): avc: denied { create } for pid=7798 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 131.680980][ T42] audit: type=1400 audit(1787904351.615:498): avc: denied { write } for pid=7798 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 132.171523][ T5817] libceph: connect (2)127.0.0.1:6789 error -101 [ 132.174623][ T5817] libceph: ceph_tcp_connect failed: -101 [ 132.176770][ T5817] libceph: mon0 (2)127.0.0.1:6789 connect error [ 132.393755][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 132.400112][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 132.404292][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 132.408437][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 132.425318][ T5817] libceph: connect (2)127.0.0.1:6789 error -101 [ 132.427924][ T5817] libceph: ceph_tcp_connect failed: -101 [ 132.429842][ T5817] libceph: mon0 (2)127.0.0.1:6789 connect error [ 132.741201][ T7828] ceph: No mds server is up or the cluster is laggy [ 132.805505][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808356][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.033684][ T5730] Bluetooth: hci4: command 0x1003 tx timeout [ 133.034999][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.053751][ T5512] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 133.140546][ T7860] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 133.200034][ T5512] usb 7-1: device descriptor read/64, error -71 [ 133.209033][ T7868] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 133.221503][ T7868] CIFS: Unable to determine destination address [ 133.265639][ T7875] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.746'. [ 133.301048][ T42] audit: type=1400 audit(1787904353.235:499): avc: denied { setopt } for pid=7876 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.332865][ T42] audit: type=1400 audit(1787904353.265:500): avc: denied { mount } for pid=7876 comm="syz.3.748" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 133.453897][ T5512] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 133.512140][ T42] audit: type=1400 audit(1787904353.445:501): avc: denied { write } for pid=7897 comm="syz.3.754" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.519763][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.754'. [ 133.527735][ T7898] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 133.533298][ T42] audit: type=1400 audit(1787904353.465:502): avc: denied { read } for pid=7897 comm="syz.3.754" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.572062][ T7902] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.756'. [ 133.623700][ T5512] usb 7-1: device descriptor read/64, error -71 [ 133.703747][ T5817] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 133.734015][ T5512] usb usb7-port1: attempt power cycle [ 133.764324][ T5842] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 133.875075][ T5817] usb 5-1: not running at top speed; connect to a high speed hub [ 133.878839][ T5817] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 133.882924][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.891034][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.893771][ T5817] usb 5-1: Product: syz [ 133.895119][ T5817] usb 5-1: Manufacturer: syz [ 133.896602][ T5817] usb 5-1: SerialNumber: syz [ 133.904432][ T5817] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 133.907115][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 133.909697][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 133.913117][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 133.923295][ T5817] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 133.927872][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 133.931537][ T5817] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 133.935516][ T5842] usb 6-1: not running at top speed; connect to a high speed hub [ 133.936349][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 133.938807][ T5842] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 133.942179][ T5817] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 133.947626][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.948633][ T5817] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 133.954389][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.957384][ T5817] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 133.957954][ T5842] usb 6-1: Product: syz [ 133.962204][ T5842] usb 6-1: Manufacturer: syz [ 133.964448][ T5842] usb 6-1: SerialNumber: syz [ 133.986912][ T5842] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 133.989390][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 133.991758][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 134.012578][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 134.016836][ T42] audit: type=1400 audit(1787904353.955:503): avc: denied { append } for pid=7923 comm="syz.3.765" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.021110][ T5842] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 134.029568][ T42] audit: type=1400 audit(1787904353.955:504): avc: denied { ioctl } for pid=7923 comm="syz.3.765" path="/dev/usbmon3" dev="devtmpfs" ino=745 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.037080][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 134.042975][ T5842] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 134.048584][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 134.053476][ T5842] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 134.060972][ T5842] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 134.066756][ T5842] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 134.074971][ T5512] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 134.094173][ T5512] usb 7-1: device descriptor read/8, error -71 [ 134.101943][ T7924] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 134.107498][ T7896] FAULT_INJECTION: forcing a failure. [ 134.107498][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 134.113172][ T7896] CPU: 2 UID: 0 PID: 7896 Comm: syz.0.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.113256][ T7896] Tainted: [L]=SOFTLOCKUP [ 134.113263][ T7896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.113272][ T7896] Call Trace: [ 134.113282][ T7896] [ 134.113289][ T7896] dump_stack_lvl+0x100/0x190 [ 134.113334][ T7896] should_fail_ex.cold+0x5/0xa [ 134.113394][ T7896] should_failslab+0xc2/0x120 [ 134.113431][ T7896] kmem_cache_alloc_noprof+0x91/0x6a0 [ 134.113459][ T7896] ? alloc_empty_file+0x5b/0x1c0 [ 134.113483][ T7896] alloc_empty_file+0x5b/0x1c0 [ 134.113519][ T7896] path_openat+0xdb/0x2440 [ 134.113553][ T7896] ? __pfx_path_openat+0x10/0x10 [ 134.113588][ T7896] do_file_open+0x20e/0x430 [ 134.113617][ T7896] ? __pfx_do_file_open+0x10/0x10 [ 134.113662][ T7896] ? _raw_spin_unlock+0x28/0x50 [ 134.113698][ T7896] ? alloc_fd+0x471/0x7a0 [ 134.113732][ T7896] do_sys_openat2+0x10f/0x1e0 [ 134.113753][ T7896] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.113772][ T7896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.113795][ T7896] ? __fget_files+0x21f/0x3d0 [ 134.113825][ T7896] __x64_sys_openat+0x12d/0x210 [ 134.113846][ T7896] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.113865][ T7896] ? ksys_write+0x1ac/0x250 [ 134.113897][ T7896] do_syscall_64+0x123/0x790 [ 134.113929][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.113950][ T7896] RIP: 0033:0x7fb19099e159 [ 134.113967][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.113984][ T7896] RSP: 002b:00007fb19181a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.114004][ T7896] RAX: ffffffffffffffda RBX: 00007fb190c25fa0 RCX: 00007fb19099e159 [ 134.114016][ T7896] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 134.114027][ T7896] RBP: 00007fb19181a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.114038][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.114048][ T7896] R13: 00007fb190c26038 R14: 00007fb190c25fa0 R15: 00007ffd9be57598 [ 134.114075][ T7896] [ 134.178796][ T5093] usb 6-1: USB disconnect, device number 18 [ 134.189426][ T10] usb 5-1: USB disconnect, device number 18 [ 134.202992][ T5093] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 134.218731][ T5093] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 134.223238][ T5093] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 134.224903][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 134.228937][ T5093] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 134.235165][ T5093] keyspan 6-1:1.0: device disconnected [ 134.240367][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 134.255112][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 134.265443][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 134.272156][ T10] keyspan 5-1:1.0: device disconnected [ 134.343811][ T5512] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 134.365322][ T5512] usb 7-1: device descriptor read/8, error -71 [ 134.477960][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 134.483693][ T7932] FAULT_INJECTION: forcing a failure. [ 134.483693][ T7932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.484012][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 134.484179][ T5512] usb usb7-port1: unable to enumerate USB device [ 134.489292][ T7932] CPU: 3 UID: 0 PID: 7932 Comm: syz.3.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.489311][ T7932] Tainted: [L]=SOFTLOCKUP [ 134.489315][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.489321][ T7932] Call Trace: [ 134.489332][ T7932] [ 134.489337][ T7932] dump_stack_lvl+0x100/0x190 [ 134.489379][ T7932] should_fail_ex.cold+0x5/0xa [ 134.489398][ T7932] ? prepare_alloc_pages+0x16d/0x5b0 [ 134.489422][ T7932] should_fail_alloc_page+0xeb/0x140 [ 134.489440][ T7932] prepare_alloc_pages+0x1f0/0x5b0 [ 134.489458][ T7932] ? __lock_acquire+0x4c5/0x1ec0 [ 134.489476][ T7932] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 134.489494][ T7932] ? __lock_acquire+0x4c5/0x1ec0 [ 134.489514][ T7932] ? __lock_acquire+0x4c5/0x1ec0 [ 134.489530][ T7932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.489549][ T7932] ? __lock_acquire+0x4c5/0x1ec0 [ 134.489573][ T7932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.489591][ T7932] ? policy_nodemask+0xed/0x4f0 [ 134.489610][ T7932] alloc_pages_mpol+0x201/0x550 [ 134.489628][ T7932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 134.489649][ T7932] folio_alloc_mpol_noprof+0x36/0x260 [ 134.489663][ T7932] vma_alloc_folio_noprof+0xed/0x1d0 [ 134.489675][ T7932] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 134.489692][ T7932] do_anonymous_page+0xac9/0x2050 [ 134.489709][ T7932] ? __pfx_do_anonymous_page+0x10/0x10 [ 134.489720][ T7932] ? rcu_read_unlock+0x2d/0xb0 [ 134.489732][ T7932] ? rcu_read_unlock+0x2d/0xb0 [ 134.489744][ T7932] ? __pte_offset_map+0x179/0x310 [ 134.489762][ T7932] __handle_mm_fault+0x1ff3/0x2f60 [ 134.489777][ T7932] ? __pfx___handle_mm_fault+0x10/0x10 [ 134.489789][ T7932] ? pte_offset_map_lock+0x174/0x320 [ 134.489805][ T7932] ? find_held_lock+0x2b/0x80 [ 134.489817][ T7932] ? find_held_lock+0x2b/0x80 [ 134.489830][ T7932] ? follow_page_pte+0x536/0x1360 [ 134.489854][ T7932] handle_mm_fault+0x37b/0xa30 [ 134.489869][ T7932] __get_user_pages+0x1169/0x3280 [ 134.489892][ T7932] ? __pfx___get_user_pages+0x10/0x10 [ 134.489909][ T7932] ? __pfx_down_read_killable+0x10/0x10 [ 134.489927][ T7932] ? __pfx_gup_fast_fallback+0x10/0x10 [ 134.489952][ T7932] get_user_pages_unlocked+0x1cb/0x7d0 [ 134.489978][ T7932] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 134.490005][ T7932] ? get_user_pages_fast_only+0xae/0xf0 [ 134.490028][ T7932] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 134.490045][ T7932] ? __pfx___might_resched+0x10/0x10 [ 134.490063][ T7932] hva_to_pfn+0x871/0xd60 [ 134.490082][ T7932] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x240 [ 134.490095][ T7932] ? __pfx_hva_to_pfn+0x10/0x10 [ 134.490112][ T7932] ? __lock_acquire+0x4c5/0x1ec0 [ 134.490136][ T7932] kvm_follow_pfn+0x291/0x430 [ 134.490153][ T7932] __kvm_faultin_pfn+0x11c/0x1a0 [ 134.490170][ T7932] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 134.490186][ T7932] ? __pfx_xa_load+0x10/0x10 [ 134.490202][ T7932] ? kvm_tdp_mmu_map+0xb07/0x2160 [ 134.490218][ T7932] kvm_mmu_faultin_pfn+0xb73/0x2250 [ 134.490233][ T7932] ? __pfx_fast_page_fault+0x10/0x10 [ 134.490245][ T7932] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 134.490258][ T7932] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 134.490273][ T7932] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 134.490290][ T7932] kvm_tdp_page_fault+0x182/0x3d0 [ 134.490306][ T7932] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 134.490323][ T7932] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 134.490338][ T7932] ? lock_acquire+0x1b9/0x370 [ 134.490357][ T7932] ? kvm_sched_in+0x9a/0xf0 [ 134.490369][ T7932] kvm_mmu_page_fault+0x1dd/0x1ab0 [ 134.490392][ T7932] ? __schedule+0x126b/0x6920 [ 134.490407][ T7932] ? __pfx_clockevents_program_event+0x10/0x10 [ 134.490424][ T7932] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 134.490444][ T7932] ? __pfx___schedule+0x10/0x10 [ 134.490459][ T7932] ? irqentry_exit+0x24d/0xa10 [ 134.490473][ T7932] handle_ept_violation+0x3a5/0x860 [ 134.490485][ T7932] ? __pfx_handle_ept_violation+0x10/0x10 [ 134.490496][ T7932] vmx_handle_exit+0x4d6/0x1ef0 [ 134.490509][ T7932] vcpu_run+0x35b1/0x5df0 [ 134.490526][ T7932] ? __pfx_vcpu_run+0x10/0x10 [ 134.490541][ T7932] ? rcu_is_watching+0x13/0xc0 [ 134.490555][ T7932] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 134.490565][ T7932] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 134.490586][ T7932] kvm_vcpu_ioctl+0x730/0x1700 [ 134.490611][ T7932] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.490635][ T7932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.490655][ T7932] ? do_vfs_ioctl+0x226/0x13e0 [ 134.490669][ T7932] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.490681][ T7932] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 134.490699][ T7932] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.490725][ T7932] ? selinux_file_ioctl+0x13b/0x290 [ 134.490740][ T7932] ? selinux_file_ioctl+0xb6/0x290 [ 134.490757][ T7932] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.490771][ T7932] __x64_sys_ioctl+0x18e/0x210 [ 134.490786][ T7932] do_syscall_64+0x123/0x790 [ 134.490799][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.490810][ T7932] RIP: 0033:0x7f4e5c99e159 [ 134.490832][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.490842][ T7932] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.490856][ T7932] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 134.490863][ T7932] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 134.490869][ T7932] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 134.490875][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.490882][ T7932] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 134.490897][ T7932] [ 134.713012][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 134.715606][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 134.735678][ T7937] FAULT_INJECTION: forcing a failure. [ 134.735678][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.741040][ T7937] CPU: 3 UID: 0 PID: 7937 Comm: syz.0.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.741063][ T7937] Tainted: [L]=SOFTLOCKUP [ 134.741066][ T7937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.741073][ T7937] Call Trace: [ 134.741077][ T7937] [ 134.741082][ T7937] dump_stack_lvl+0x100/0x190 [ 134.741102][ T7937] should_fail_ex.cold+0x5/0xa [ 134.741117][ T7937] _copy_from_user+0x2e/0xd0 [ 134.741135][ T7937] kvm_arch_vm_ioctl+0x1386/0x18d0 [ 134.741150][ T7937] ? register_lock_class+0x3f/0x7b0 [ 134.741168][ T7937] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 134.741181][ T7937] ? ima_match_policy+0x8b8/0x23e0 [ 134.741196][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 134.741216][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 134.741234][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 134.741253][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 134.741275][ T7937] ? find_held_lock+0x2b/0x80 [ 134.741287][ T7937] ? is_bpf_text_address+0x8a/0x1a0 [ 134.741299][ T7937] ? is_bpf_text_address+0x8a/0x1a0 [ 134.741310][ T7937] ? bpf_ksym_find+0x128/0x1c0 [ 134.741322][ T7937] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.741338][ T7937] ? is_bpf_text_address+0x94/0x1a0 [ 134.741370][ T7937] ? kernel_text_address+0x8d/0x100 [ 134.741385][ T7937] ? __kernel_text_address+0xd/0x30 [ 134.741399][ T7937] ? unwind_get_return_address+0x59/0xa0 [ 134.741413][ T7937] ? arch_stack_walk+0xa6/0xf0 [ 134.741429][ T7937] ? tomoyo_path_number_perm+0x46d/0x580 [ 134.741444][ T7937] ? stack_trace_save+0x8e/0xc0 [ 134.741458][ T7937] ? __pfx_stack_trace_save+0x10/0x10 [ 134.741472][ T7937] ? stack_depot_save_flags+0x27/0x9f0 [ 134.741485][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 134.741501][ T7937] ? tomoyo_path_number_perm+0x46d/0x580 [ 134.741518][ T7937] kvm_vm_ioctl+0x1560/0x4180 [ 134.741529][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.741545][ T7937] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 134.741565][ T7937] ? kasan_quarantine_put+0x104/0x240 [ 134.741580][ T7937] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.741592][ T7937] ? find_held_lock+0x2b/0x80 [ 134.741604][ T7937] ? tomoyo_path_number_perm+0x28f/0x580 [ 134.741619][ T7937] ? tomoyo_path_number_perm+0x28f/0x580 [ 134.741636][ T7937] ? tomoyo_path_number_perm+0x188/0x580 [ 134.741652][ T7937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.741671][ T7937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.741688][ T7937] ? do_vfs_ioctl+0x226/0x13e0 [ 134.741702][ T7937] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.741714][ T7937] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 134.741733][ T7937] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.741757][ T7937] ? selinux_file_ioctl+0x13b/0x290 [ 134.741773][ T7937] ? selinux_file_ioctl+0xb6/0x290 [ 134.741789][ T7937] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 134.741801][ T7937] __x64_sys_ioctl+0x18e/0x210 [ 134.741816][ T7937] do_syscall_64+0x123/0x790 [ 134.741828][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.741839][ T7937] RIP: 0033:0x7fb19099e159 [ 134.741850][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.741860][ T7937] RSP: 002b:00007fb19181a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.741871][ T7937] RAX: ffffffffffffffda RBX: 00007fb190c25fa0 RCX: 00007fb19099e159 [ 134.741878][ T7937] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000004 [ 134.741884][ T7937] RBP: 00007fb19181a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.741890][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.741896][ T7937] R13: 00007fb190c26038 R14: 00007fb190c25fa0 R15: 00007ffd9be57598 [ 134.741910][ T7937] [ 134.757153][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.882002][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.885195][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.887687][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.889982][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.892184][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.895327][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.897966][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 134.909188][ T10] hid-generic 0000:0000:0001.0003: hidraw1: HID v0.10 Device [syz0] on syz1 [ 134.940469][ T7942] fido_id[7942]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.002628][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 135.002644][ T42] audit: type=1400 audit(1787904354.935:507): avc: denied { read } for pid=7951 comm="syz.0.777" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.012844][ T42] audit: type=1400 audit(1787904354.935:508): avc: denied { open } for pid=7951 comm="syz.0.777" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.021293][ T42] audit: type=1400 audit(1787904354.945:509): avc: denied { append } for pid=7951 comm="syz.0.777" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.028782][ T42] audit: type=1400 audit(1787904354.955:510): avc: denied { ioctl } for pid=7951 comm="syz.0.777" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.072049][ T7954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 135.074708][ T7954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.079012][ T7954] vhci_hcd vhci_hcd.0: Device attached [ 135.087523][ T7954] vhci_hcd vhci_hcd.0: port 0 already used [ 135.119052][ T7955] vhci_hcd: connection closed [ 135.134803][ T12] vhci_hcd vhci_hcd.0: stop threads [ 135.143805][ T12] vhci_hcd vhci_hcd.0: release socket [ 135.146603][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 135.203658][ T849] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 135.364542][ T849] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 135.369004][ T849] usb 6-1: config index 0 descriptor too short (expected 71, got 53) [ 135.374605][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.380631][ T849] usb 6-1: Product: syz [ 135.382534][ T849] usb 6-1: Manufacturer: syz [ 135.385100][ T849] usb 6-1: SerialNumber: syz [ 135.395959][ T849] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 135.738848][ T7962] FAULT_INJECTION: forcing a failure. [ 135.738848][ T7962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.743475][ T7962] CPU: 3 UID: 0 PID: 7962 Comm: syz.0.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.743493][ T7962] Tainted: [L]=SOFTLOCKUP [ 135.743496][ T7962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.743515][ T7962] Call Trace: [ 135.743520][ T7962] [ 135.743525][ T7962] dump_stack_lvl+0x100/0x190 [ 135.743545][ T7962] should_fail_ex.cold+0x5/0xa [ 135.743560][ T7962] _copy_from_user+0x2e/0xd0 [ 135.743578][ T7962] get_timespec64+0x8d/0x240 [ 135.743594][ T7962] ? __pfx_get_timespec64+0x10/0x10 [ 135.743613][ T7962] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 135.743629][ T7962] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 135.743649][ T7962] do_syscall_64+0x123/0x790 [ 135.743663][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.743674][ T7962] RIP: 0033:0x7fb19099e159 [ 135.743683][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.743694][ T7962] RSP: 002b:00007fb19181a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 135.743704][ T7962] RAX: ffffffffffffffda RBX: 00007fb190c25fa0 RCX: 00007fb19099e159 [ 135.743711][ T7962] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000002 [ 135.743717][ T7962] RBP: 00007fb19181a090 R08: 0000000000000000 R09: 0000000000000000 [ 135.743724][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.743730][ T7962] R13: 00007fb190c26038 R14: 00007fb190c25fa0 R15: 00007ffd9be57598 [ 135.743743][ T7962] [ 135.846334][ T42] audit: type=1400 audit(1787904355.785:511): avc: denied { write } for pid=7965 comm="syz.2.781" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 135.858405][ T42] audit: type=1400 audit(1787904355.785:512): avc: denied { open } for pid=7965 comm="syz.2.781" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 135.870014][ T42] audit: type=1400 audit(1787904355.785:513): avc: denied { ioctl } for pid=7965 comm="syz.2.781" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.237814][ T7986] netlink: 'syz.3.790': attribute type 10 has an invalid length. [ 136.243020][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.246509][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.257026][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.260543][ T7986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.264588][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.267548][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.274093][ T7986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.331445][ T7989] SELinux: common socket does not define every permission it declares [ 136.334866][ T7989] SELinux: failed to load policy [ 136.383090][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 136.473665][ T5512] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 136.603705][ T5512] usb 5-1: device descriptor read/64, error -71 [ 136.762606][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 136.794574][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 136.799116][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 136.801773][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 136.804546][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 136.845687][ T8006] FAULT_INJECTION: forcing a failure. [ 136.845687][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 136.850091][ T8006] CPU: 3 UID: 0 PID: 8006 Comm: syz.2.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.850110][ T8006] Tainted: [L]=SOFTLOCKUP [ 136.850114][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.850120][ T8006] Call Trace: [ 136.850126][ T8006] [ 136.850131][ T8006] dump_stack_lvl+0x100/0x190 [ 136.850161][ T8006] should_fail_ex.cold+0x5/0xa [ 136.850177][ T8006] should_failslab+0xc2/0x120 [ 136.850199][ T8006] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.850215][ T8006] ? __send_signal_locked+0x155/0x12d0 [ 136.850234][ T8006] __send_signal_locked+0x155/0x12d0 [ 136.850253][ T8006] force_sig_info_to_task+0x450/0x660 [ 136.850272][ T8006] force_sig_fault+0xc3/0x100 [ 136.850288][ T8006] ? __pfx_force_sig_fault+0x10/0x10 [ 136.850307][ T8006] ? __pfx___up_read+0x10/0x10 [ 136.850317][ T8006] ? fixup_vdso_exception+0x2d1/0x370 [ 136.850331][ T8006] __bad_area_nosemaphore+0x31b/0x3f0 [ 136.850344][ T8006] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 136.850357][ T8006] do_user_addr_fault+0x8ca/0x12f0 [ 136.850373][ T8006] exc_page_fault+0x6f/0xd0 [ 136.850388][ T8006] asm_exc_page_fault+0x26/0x30 [ 136.850398][ T8006] RIP: 0033:0x7feac6d877a1 [ 136.850412][ T8006] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 136.850423][ T8006] RSP: 002b:00007feac7cb2bd8 EFLAGS: 00010283 [ 136.850433][ T8006] RAX: 0000000000000000 RBX: 00000000000002a2 RCX: 0000000000000000 [ 136.850440][ T8006] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007feac7cb2c00 [ 136.850447][ T8006] RBP: 00007feac7cb2c00 R08: 0000000000000000 R09: 0000000000000000 [ 136.850454][ T8006] R10: 0000000000000000 R11: 000000000010107e R12: cccccccccccccccd [ 136.850461][ T8006] R13: 00007feac7026038 R14: 00007feac7025fa0 R15: 00007ffc35e28fb8 [ 136.850474][ T8006] [ 136.855559][ T5512] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 136.967291][ T42] audit: type=1400 audit(1787904356.905:514): avc: denied { read } for pid=8007 comm="syz.2.799" path="socket:[24984]" dev="sockfs" ino=24984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.064938][ T5512] usb 5-1: device descriptor read/64, error -71 [ 137.174629][ T5512] usb usb5-port1: attempt power cycle [ 137.197740][ T8016] syzkaller0: entered promiscuous mode [ 137.199710][ T8016] syzkaller0: entered allmulticast mode [ 137.299993][ T8012] mmap: syz.3.801 (8012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.328506][ T42] audit: type=1400 audit(1787904357.265:515): avc: denied { mount } for pid=8011 comm="syz.3.801" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 137.377799][ T8017] (syz.3.801,8017,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 137.380670][ T8017] (syz.3.801,8017,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 137.382902][ T8017] (syz.3.801,8017,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 137.385724][ T8017] (syz.3.801,8017,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 137.388831][ T8012] (syz.3.801,8012,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 137.391821][ T8012] (syz.3.801,8012,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 137.394362][ T8012] (syz.3.801,8012,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 137.397255][ T8012] (syz.3.801,8012,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 137.423044][ T8023] FAULT_INJECTION: forcing a failure. [ 137.423044][ T8023] name failslab, interval 1, probability 0, space 0, times 0 [ 137.427590][ T8023] CPU: 0 UID: 0 PID: 8023 Comm: syz.2.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.427623][ T8023] Tainted: [L]=SOFTLOCKUP [ 137.427627][ T8023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.427633][ T8023] Call Trace: [ 137.427638][ T8023] [ 137.427642][ T8023] dump_stack_lvl+0x100/0x190 [ 137.427662][ T8023] should_fail_ex.cold+0x5/0xa [ 137.427678][ T8023] should_failslab+0xc2/0x120 [ 137.427696][ T8023] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 137.427712][ T8023] ? __alloc_skb+0x5b7/0x710 [ 137.427738][ T8023] ? __alloc_skb+0x140/0x710 [ 137.427757][ T8023] __alloc_skb+0x140/0x710 [ 137.427774][ T8023] ? __alloc_skb+0x5b7/0x710 [ 137.427791][ T8023] ? __pfx___alloc_skb+0x10/0x10 [ 137.427813][ T8023] netlink_alloc_large_skb+0x69/0x150 [ 137.427832][ T8023] netlink_sendmsg+0x680/0xda0 [ 137.427851][ T8023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.427870][ T8023] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.427888][ T8023] ____sys_sendmsg+0xa4d/0xbe0 [ 137.427902][ T8023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.427920][ T8023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.427941][ T8023] ___sys_sendmsg+0x190/0x1e0 [ 137.427957][ T8023] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.427973][ T8023] ? get_pid_task+0x106/0x250 [ 137.427991][ T8023] ? find_held_lock+0x2b/0x80 [ 137.428013][ T8023] __sys_sendmsg+0x160/0x210 [ 137.428025][ T8023] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.428049][ T8023] do_syscall_64+0x123/0x790 [ 137.428063][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.428075][ T8023] RIP: 0033:0x7feac6d9e159 [ 137.428085][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.428096][ T8023] RSP: 002b:00007feac7cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.428108][ T8023] RAX: ffffffffffffffda RBX: 00007feac7025fa0 RCX: 00007feac6d9e159 [ 137.428115][ T8023] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 000000000000001c [ 137.428121][ T8023] RBP: 00007feac7cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 137.428128][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.428135][ T8023] R13: 00007feac7026038 R14: 00007feac7025fa0 R15: 00007ffc35e28fb8 [ 137.428149][ T8023] [ 137.428599][ T42] audit: type=1400 audit(1787904357.365:516): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 137.513701][ T5512] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 137.556370][ T5512] usb 5-1: device descriptor read/8, error -71 [ 137.640149][ T8031] FAULT_INJECTION: forcing a failure. [ 137.640149][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 137.646090][ T8031] CPU: 1 UID: 0 PID: 8031 Comm: syz.3.809 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.646117][ T8031] Tainted: [L]=SOFTLOCKUP [ 137.646123][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.646133][ T8031] Call Trace: [ 137.646139][ T8031] [ 137.646147][ T8031] dump_stack_lvl+0x100/0x190 [ 137.646176][ T8031] should_fail_ex.cold+0x5/0xa [ 137.646199][ T8031] should_failslab+0xc2/0x120 [ 137.646222][ T8031] __kmalloc_noprof+0xfc/0x820 [ 137.646245][ T8031] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 137.646272][ T8031] kernfs_fop_write_iter+0x26a/0x5f0 [ 137.646296][ T8031] vfs_write+0x6af/0x1050 [ 137.646318][ T8031] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.646341][ T8031] ? __pfx_vfs_write+0x10/0x10 [ 137.646366][ T8031] ? find_held_lock+0x2b/0x80 [ 137.646401][ T8031] ksys_write+0x12a/0x250 [ 137.646421][ T8031] ? __pfx_ksys_write+0x10/0x10 [ 137.646449][ T8031] do_syscall_64+0x123/0x790 [ 137.646470][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.646487][ T8031] RIP: 0033:0x7f4e5c99e159 [ 137.646501][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.646516][ T8031] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.646533][ T8031] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 137.646544][ T8031] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000003 [ 137.646554][ T8031] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 137.646564][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.646574][ T8031] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 137.646598][ T8031] [ 137.776683][ T8035] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 137.863824][ T5512] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 137.884241][ T5512] usb 5-1: device descriptor read/8, error -71 [ 137.975767][ T8044] FAULT_INJECTION: forcing a failure. [ 137.975767][ T8044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.982367][ T8044] CPU: 1 UID: 0 PID: 8044 Comm: syz.3.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.982393][ T8044] Tainted: [L]=SOFTLOCKUP [ 137.982398][ T8044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.982408][ T8044] Call Trace: [ 137.982415][ T8044] [ 137.982423][ T8044] dump_stack_lvl+0x100/0x190 [ 137.982452][ T8044] should_fail_ex.cold+0x5/0xa [ 137.982478][ T8044] ? prepare_alloc_pages+0x16d/0x5b0 [ 137.982506][ T8044] should_fail_alloc_page+0xeb/0x140 [ 137.982533][ T8044] prepare_alloc_pages+0x1f0/0x5b0 [ 137.982563][ T8044] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 137.982587][ T8044] ? find_held_lock+0x2b/0x80 [ 137.982607][ T8044] ? ima_match_policy+0x8b8/0x23e0 [ 137.982627][ T8044] ? ima_match_policy+0x8b8/0x23e0 [ 137.982652][ T8044] ? __lock_acquire+0x4c5/0x1ec0 [ 137.982680][ T8044] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.982704][ T8044] ? __lock_acquire+0x4c5/0x1ec0 [ 137.982732][ T8044] ? __lock_acquire+0x4c5/0x1ec0 [ 137.982767][ T8044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.982795][ T8044] ? policy_nodemask+0xed/0x4f0 [ 137.982824][ T8044] alloc_pages_mpol+0x201/0x550 [ 137.982850][ T8044] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.982882][ T8044] alloc_pages_noprof+0x1a/0x160 [ 137.982902][ T8044] __pmd_alloc+0x3b/0x950 [ 137.982930][ T8044] __handle_mm_fault+0xa9d/0x2f60 [ 137.982954][ T8044] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.982969][ T8044] ? __pfx_mt_find+0x10/0x10 [ 137.983003][ T8044] ? find_vma+0xbf/0x140 [ 137.983025][ T8044] ? __pfx_find_vma+0x10/0x10 [ 137.983050][ T8044] handle_mm_fault+0x37b/0xa30 [ 137.983075][ T8044] do_user_addr_fault+0x745/0x12f0 [ 137.983099][ T8044] exc_page_fault+0x6f/0xd0 [ 137.983117][ T8044] asm_exc_page_fault+0x26/0x30 [ 137.983136][ T8044] RIP: 0010:_copy_from_user+0x93/0xd0 [ 137.983163][ T8044] Code: bf e6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 69 99 59 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 55 ba [ 137.983180][ T8044] RSP: 0018:ffffc90000fd7c00 EFLAGS: 00050246 [ 137.983195][ T8044] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000018 [ 137.983204][ T8044] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90000fd7ce0 [ 137.983214][ T8044] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520001faf9e [ 137.983224][ T8044] R10: ffffc90000fd7cf7 R11: 0000000000000000 R12: 0000000000000000 [ 137.983235][ T8044] R13: ffffc90000fd7ce0 R14: ffffc90000fd7ce0 R15: ffffffff8f067220 [ 137.983261][ T8044] __ext4_ioctl+0x2b2a/0x4200 [ 137.983288][ T8044] ? __pfx___ext4_ioctl+0x10/0x10 [ 137.983311][ T8044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.983336][ T8044] ? do_vfs_ioctl+0x226/0x13e0 [ 137.983376][ T8044] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.983396][ T8044] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 137.983424][ T8044] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.983464][ T8044] ? selinux_file_ioctl+0x13b/0x290 [ 137.983492][ T8044] ? selinux_file_ioctl+0xb6/0x290 [ 137.983518][ T8044] ? __pfx_ext4_ioctl+0x10/0x10 [ 137.983537][ T8044] __x64_sys_ioctl+0x18e/0x210 [ 137.983559][ T8044] do_syscall_64+0x123/0x790 [ 137.983580][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.983598][ T8044] RIP: 0033:0x7f4e5c99e159 [ 137.983612][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.983628][ T8044] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.983644][ T8044] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 137.983654][ T8044] RDX: 0000000000000000 RSI: 00000000c0185879 RDI: 0000000000000003 [ 137.983662][ T8044] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 137.983672][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.983682][ T8044] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 137.983707][ T8044] [ 138.136404][ T5512] usb usb5-port1: unable to enumerate USB device [ 138.460102][ T8054] sch_fq: defrate 2 ignored. [ 138.873704][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 138.878278][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 138.881011][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 138.884033][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 138.964386][ T8064] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 138.964411][ T8064] kvm: kvm [8063]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 139.338324][ T65] Bluetooth: hci0: Zero size dump init pkt [ 139.338788][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.824'. [ 140.193638][ T5512] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 140.333823][ T5512] usb 7-1: device descriptor read/64, error -71 [ 140.484016][ T849] usb 6-1: mos7720: usb_control_msg() failed: -110 [ 140.488723][ T849] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 140.496043][ T849] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 140.521827][ T5093] usb 6-1: USB disconnect, device number 19 [ 140.521841][ C3] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 140.542664][ T5093] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 140.564622][ T5093] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 140.576562][ T5093] mos7720 6-1:1.0: device disconnected [ 140.594583][ T5512] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 140.727674][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 140.727691][ T42] audit: type=1400 audit(1787904360.665:518): avc: denied { ioctl } for pid=8098 comm="syz.1.836" path="socket:[23500]" dev="sockfs" ino=23500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.741131][ T5512] usb 7-1: device descriptor read/64, error -71 [ 140.778616][ T42] audit: type=1400 audit(1787904360.715:519): avc: denied { connect } for pid=8098 comm="syz.1.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.821308][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8107 comm=syz.3.837 [ 140.853928][ T5512] usb usb7-port1: attempt power cycle [ 140.953807][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 140.958977][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 140.962256][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 140.965947][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 141.193696][ T5512] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 141.214334][ T5512] usb 7-1: device descriptor read/8, error -71 [ 141.453966][ T5512] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 141.472666][ T8113] kvm: kvm [8112]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 141.474438][ T5512] usb 7-1: device descriptor read/8, error -71 [ 141.593675][ T5512] usb usb7-port1: unable to enumerate USB device [ 141.853995][ T1483] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 142.015377][ T1483] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 142.022123][ T1483] usb 5-1: config index 0 descriptor too short (expected 71, got 53) [ 142.029260][ T1483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.033037][ T1483] usb 5-1: Product: syz [ 142.036645][ T1483] usb 5-1: Manufacturer: syz [ 142.038885][ T1483] usb 5-1: SerialNumber: syz [ 142.047637][ T1483] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 142.341850][ T42] audit: type=1800 audit(1787904362.275:520): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.846" name="file0" dev="overlay" ino=1213 res=0 errno=0 [ 142.342777][ T8130] FAULT_INJECTION: forcing a failure. [ 142.342777][ T8130] name failslab, interval 1, probability 0, space 0, times 0 [ 142.355116][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.1.846 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.355136][ T8130] Tainted: [L]=SOFTLOCKUP [ 142.355141][ T8130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.355148][ T8130] Call Trace: [ 142.355161][ T8130] [ 142.355167][ T8130] dump_stack_lvl+0x100/0x190 [ 142.355196][ T8130] should_fail_ex.cold+0x5/0xa [ 142.355212][ T8130] should_failslab+0xc2/0x120 [ 142.355236][ T8130] __kmalloc_flags_noprof+0x122/0x8b0 [ 142.355264][ T8130] ? find_held_lock+0x2b/0x80 [ 142.355280][ T8130] ? __pcs_replace_empty_main+0x13c/0x680 [ 142.355294][ T8130] ? __pcs_replace_empty_main+0x414/0x680 [ 142.355311][ T8130] __pcs_replace_empty_main+0x414/0x680 [ 142.355328][ T8130] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 142.355346][ T8130] ? backing_file_read_iter+0x1f8/0x7d0 [ 142.355367][ T8130] backing_file_read_iter+0x1f8/0x7d0 [ 142.355389][ T8130] ? kasan_save_stack+0x30/0x50 [ 142.355405][ T8130] ? kasan_save_track+0x14/0x30 [ 142.355422][ T8130] ? __kasan_slab_alloc+0x89/0x90 [ 142.355441][ T8130] ovl_read_iter+0x24e/0x2d0 [ 142.355455][ T8130] ? __pfx_ovl_read_iter+0x10/0x10 [ 142.355467][ T8130] ? __pfx_ovl_file_accessed+0x10/0x10 [ 142.355481][ T8130] ? rw_verify_area+0xce/0x6d0 [ 142.355496][ T8130] aio_read+0x312/0x4d0 [ 142.355510][ T8130] ? __pfx_aio_read+0x10/0x10 [ 142.355522][ T8130] ? __lock_acquire+0x4c5/0x1ec0 [ 142.355548][ T8130] ? __might_fault+0xc5/0x140 [ 142.355566][ T8130] ? io_submit_one+0x4c8/0x1fb0 [ 142.355578][ T8130] io_submit_one+0x4c8/0x1fb0 [ 142.355593][ T8130] ? __lock_acquire+0x4c5/0x1ec0 [ 142.355613][ T8130] ? __pfx_io_submit_one+0x10/0x10 [ 142.355631][ T8130] ? __might_fault+0xc5/0x140 [ 142.355648][ T8130] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 142.355662][ T8130] __x64_sys_io_submit+0x1b1/0x3a0 [ 142.355677][ T8130] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 142.355699][ T8130] do_syscall_64+0x123/0x790 [ 142.355719][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.355731][ T8130] RIP: 0033:0x7f0b1b99e159 [ 142.355743][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.355755][ T8130] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 142.355771][ T8130] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 142.355779][ T8130] RDX: 0000200000001d00 RSI: 0000000000000001 RDI: 00007f0b1c79a000 [ 142.355786][ T8130] RBP: 00007f0b1c7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 142.355793][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.355800][ T8130] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 142.355816][ T8130] [ 142.965624][ T8143] FAULT_INJECTION: forcing a failure. [ 142.965624][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.969581][ T8143] CPU: 3 UID: 0 PID: 8143 Comm: syz.3.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.969598][ T8143] Tainted: [L]=SOFTLOCKUP [ 142.969601][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.969607][ T8143] Call Trace: [ 142.969612][ T8143] [ 142.969616][ T8143] dump_stack_lvl+0x100/0x190 [ 142.969635][ T8143] should_fail_ex.cold+0x5/0xa [ 142.969650][ T8143] _copy_from_user+0x2e/0xd0 [ 142.969668][ T8143] copy_msghdr_from_user+0x9f/0x4c0 [ 142.969703][ T8143] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.969725][ T8143] ___sys_sendmsg+0x106/0x1e0 [ 142.969740][ T8143] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.969758][ T8143] ? get_pid_task+0x106/0x250 [ 142.969776][ T8143] ? find_held_lock+0x2b/0x80 [ 142.969798][ T8143] __sys_sendmsg+0x160/0x210 [ 142.969809][ T8143] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.969827][ T8143] do_syscall_64+0x123/0x790 [ 142.969840][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.969852][ T8143] RIP: 0033:0x7f4e5c99e159 [ 142.969862][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.969872][ T8143] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.969883][ T8143] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 142.969890][ T8143] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.969896][ T8143] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 142.969903][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.969912][ T8143] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 142.969933][ T8143] [ 143.003649][ T24] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 143.045427][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 143.050573][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 143.058941][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 143.064507][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 143.184559][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.188588][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.191979][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.197291][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.303055][ T42] audit: type=1400 audit(1787904363.235:521): avc: denied { open } for pid=8157 comm="syz.3.858" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 143.408433][ T24] usb 6-1: usb_control_msg returned -32 [ 143.410422][ T24] usbtmc 6-1:16.0: can't read capabilities [ 143.603870][ T5093] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 143.754375][ T5093] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 143.760021][ T42] audit: type=1400 audit(1787904363.695:522): avc: denied { write } for pid=8138 comm="syz.1.849" name="usbtmc0" dev="devtmpfs" ino=3259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.760797][ T5093] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 143.772074][ T5093] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.775320][ T5093] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.778992][ T5093] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 143.785250][ T5093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.788475][ T5093] usb 8-1: Product: syz [ 143.790216][ T5093] usb 8-1: Manufacturer: syz [ 143.791713][ T5093] usb 8-1: SerialNumber: syz [ 143.795917][ T5093] usb 8-1: config 0 descriptor?? [ 143.973707][ T7742] usb 6-1: USB disconnect, device number 20 [ 144.000568][ T5093] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 144.133762][ T5512] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 144.200883][ T8165] FAULT_INJECTION: forcing a failure. [ 144.200883][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 144.206904][ T8165] CPU: 3 UID: 0 PID: 8165 Comm: syz.3.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.206927][ T8165] Tainted: [L]=SOFTLOCKUP [ 144.206932][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.206939][ T8165] Call Trace: [ 144.206944][ T8165] [ 144.206950][ T8165] dump_stack_lvl+0x100/0x190 [ 144.206972][ T8165] should_fail_ex.cold+0x5/0xa [ 144.206989][ T8165] should_failslab+0xc2/0x120 [ 144.207010][ T8165] kmem_cache_alloc_noprof+0x91/0x6a0 [ 144.207028][ T8165] ? trace_kmem_cache_alloc+0xdd/0x100 [ 144.207047][ T8165] ? security_file_alloc+0x34/0x2c0 [ 144.207070][ T8165] security_file_alloc+0x34/0x2c0 [ 144.207090][ T8165] init_file+0x95/0x480 [ 144.207111][ T8165] alloc_empty_file+0x79/0x1c0 [ 144.207123][ T8165] path_openat+0xdb/0x2440 [ 144.207145][ T8165] ? __pfx_path_openat+0x10/0x10 [ 144.207168][ T8165] do_file_open+0x20e/0x430 [ 144.207188][ T8165] ? __pfx_do_file_open+0x10/0x10 [ 144.207217][ T8165] ? _raw_spin_unlock+0x28/0x50 [ 144.207237][ T8165] ? alloc_fd+0x471/0x7a0 [ 144.207260][ T8165] do_sys_openat2+0x10f/0x1e0 [ 144.207272][ T8165] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.207285][ T8165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.207300][ T8165] ? __fget_files+0x21f/0x3d0 [ 144.207322][ T8165] __x64_sys_openat+0x12d/0x210 [ 144.207335][ T8165] ? __pfx___x64_sys_openat+0x10/0x10 [ 144.207347][ T8165] ? ksys_write+0x1ac/0x250 [ 144.207367][ T8165] do_syscall_64+0x123/0x790 [ 144.207384][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.207398][ T8165] RIP: 0033:0x7f4e5c95e98e [ 144.207409][ T8165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.207421][ T8165] RSP: 002b:00007f4e5d86bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.207434][ T8165] RAX: ffffffffffffffda RBX: 00007f4e5d86c6c0 RCX: 00007f4e5c95e98e [ 144.207442][ T8165] RDX: 0000000000000002 RSI: 00007f4e5d86bc00 RDI: ffffffffffffff9c [ 144.207450][ T8165] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 144.207457][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.207464][ T8165] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 144.207479][ T8165] [ 144.209651][ T24] usb 8-1: USB disconnect, device number 23 [ 144.293603][ T5512] usb 7-1: Using ep0 maxpacket: 8 [ 144.304817][ T5512] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.308598][ T5512] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.311299][ T5512] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.314994][ T5512] usb 7-1: config 0 has no interface number 0 [ 144.317044][ T5512] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.321441][ T5512] usb 7-1: config 0 descriptor?? [ 144.324875][ T5512] ldusb 7-1:0.55: Interrupt in endpoint not found [ 144.784702][ T2315] usb 7-1: USB disconnect, device number 34 [ 144.870945][ T8176] kvm: kvm [8175]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 144.880542][ T8176] kvm: kvm [8175]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 145.062417][ T8188] Bluetooth: hci4: Frame reassembly failed (-12) [ 145.113814][ T1159] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 145.118166][ T1159] (NULL device *): queue 0 connect admin queue failed (-111). [ 145.120650][ T1159] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 145.123303][ T1159] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 145.337120][ T8192] tmpfs: Bad value for 'mpol' [ 146.347777][ T8203] netlink: 'syz.2.873': attribute type 7 has an invalid length. [ 146.351648][ T8203] netlink: 'syz.2.873': attribute type 7 has an invalid length. [ 146.357406][ T8203] syz.2.873 uses obsolete (PF_INET,SOCK_PACKET) [ 146.373425][ T8203] CIFS: VFS: UNC: path must begin with // or \\ [ 146.378358][ T8203] Malformed UNC in devname [ 146.378358][ T8203] [ 146.381220][ T8203] CIFS: VFS: Malformed UNC in devname [ 146.593827][ T8208] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 147.023626][ T5826] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 147.113681][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.113741][ T5730] Bluetooth: hci4: command 0x1003 tx timeout [ 147.113748][ T1483] usb 5-1: mos7720: usb_control_msg() failed: -110 [ 147.125451][ T1483] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 147.131845][ T1483] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 147.164228][ T5817] usb 5-1: USB disconnect, device number 23 [ 147.164293][ C2] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 147.173257][ T5817] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 147.173722][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 147.179000][ T5826] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.180525][ T5817] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 147.184813][ T5826] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.186516][ T5817] mos7720 5-1:1.0: device disconnected [ 147.189604][ T5826] usb 6-1: config 0 has no interface number 0 [ 147.191591][ T5826] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.196386][ T5826] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 147.201039][ T5826] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.203783][ T63] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 147.206785][ T5826] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.219531][ T63] (NULL device *): queue 0 connect admin queue failed (-111). [ 147.220223][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.221985][ T63] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 147.221999][ T63] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 147.226335][ T42] audit: type=1400 audit(1787904367.155:523): avc: denied { connect } for pid=8215 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.231113][ T5826] usb 6-1: config 0 descriptor?? [ 147.238051][ T42] audit: type=1400 audit(1787904367.165:524): avc: denied { watch } for pid=8215 comm="syz.0.879" path="/236/file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.254345][ T5826] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.294868][ T8222] bond0: (slave bond_slave_1): Releasing backup interface [ 147.323777][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 147.361933][ T42] audit: type=1400 audit(1787904367.295:525): avc: denied { execute } for pid=8223 comm="syz.3.883" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.483619][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 147.488683][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.499289][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.504934][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.509718][ T9] usb 7-1: config 0 has no interface number 0 [ 147.512549][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.519089][ T9] usb 7-1: config 0 descriptor?? [ 147.526569][ T9] ldusb 7-1:0.55: Interrupt in endpoint not found [ 147.567694][ T5826] usb 6-1: USB disconnect, device number 21 [ 147.588047][ T5826] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 147.631646][ T8236] loop2: detected capacity change from 0 to 7 [ 147.637725][ T8236] Dev loop2: unable to read RDB block 7 [ 147.643452][ T8236] loop2: unable to read partition table [ 147.647745][ T8236] loop2: partition table beyond EOD, truncated [ 147.650425][ T8236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.666107][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 147.679658][ T42] audit: type=1400 audit(1787904367.615:526): avc: denied { ioctl } for pid=8235 comm="syz.1.888" path="socket:[27017]" dev="sockfs" ino=27017 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.853734][ T1483] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 147.986874][ T5826] usb 7-1: USB disconnect, device number 35 [ 148.004883][ T1483] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 148.011498][ T1483] usb 8-1: config index 0 descriptor too short (expected 71, got 53) [ 148.017360][ T1483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.020148][ T1483] usb 8-1: Product: syz [ 148.022010][ T1483] usb 8-1: Manufacturer: syz [ 148.024138][ T1483] usb 8-1: SerialNumber: syz [ 148.034567][ T1483] mos7720 8-1:1.0: Moschip 2 port adapter converter detected [ 148.509013][ T42] audit: type=1400 audit(1787904368.445:527): avc: denied { read } for pid=8261 comm="syz.1.898" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.523007][ T42] audit: type=1400 audit(1787904368.445:528): avc: denied { open } for pid=8261 comm="syz.1.898" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.532575][ T42] audit: type=1400 audit(1787904368.455:529): avc: denied { write } for pid=8261 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.574085][ T8269] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 149.273761][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 149.278304][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 149.280985][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 149.283903][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 149.433637][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 149.593721][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 149.596610][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.601773][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.605436][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.608911][ T9] usb 5-1: config 0 has no interface number 0 [ 149.610962][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.617425][ T9] usb 5-1: config 0 descriptor?? [ 149.622952][ T9] ldusb 5-1:0.55: Interrupt in endpoint not found [ 149.743133][ T42] audit: type=1400 audit(1787904369.675:530): avc: denied { write } for pid=8295 comm="syz.2.908" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.880802][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.883448][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.081522][ T5512] usb 5-1: USB disconnect, device number 24 [ 150.153796][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 150.305372][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 150.310235][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 150.315102][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.319464][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 150.323806][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.329796][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.333786][ T9] usb 6-1: Product: syz [ 150.335740][ T9] usb 6-1: Manufacturer: syz [ 150.337966][ T9] usb 6-1: SerialNumber: syz [ 150.342250][ T9] usb 6-1: config 0 descriptor?? [ 150.549608][ T9] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 150.667665][ T8314] SELinux: common socket does not define every permission it declares [ 150.671168][ T8314] SELinux: failed to load policy [ 150.712779][ T42] audit: type=1800 audit(1787904370.645:531): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.916" name="file0" dev="overlay" ino=1155 res=0 errno=0 [ 150.748846][ T8308] FAULT_INJECTION: forcing a failure. [ 150.748846][ T8308] name failslab, interval 1, probability 0, space 0, times 0 [ 150.753440][ T8308] CPU: 2 UID: 0 PID: 8308 Comm: syz.1.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.753458][ T8308] Tainted: [L]=SOFTLOCKUP [ 150.753462][ T8308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.753468][ T8308] Call Trace: [ 150.753472][ T8308] [ 150.753478][ T8308] dump_stack_lvl+0x100/0x190 [ 150.753522][ T8308] should_fail_ex.cold+0x5/0xa [ 150.753537][ T8308] should_failslab+0xc2/0x120 [ 150.753559][ T8308] __kmalloc_noprof+0xfc/0x820 [ 150.753573][ T8308] ? rcu_is_watching+0x13/0xc0 [ 150.753586][ T8308] ? tomoyo_realpath_from_path+0xb6/0x690 [ 150.753606][ T8308] tomoyo_realpath_from_path+0xb6/0x690 [ 150.753627][ T8308] tomoyo_check_open_permission+0x2af/0x3c0 [ 150.753643][ T8308] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 150.753662][ T8308] ? hook_file_open+0x24f/0x8f0 [ 150.753684][ T8308] ? path_get+0x61/0x80 [ 150.753696][ T8308] tomoyo_file_open+0x6b/0x90 [ 150.753708][ T8308] security_file_open+0xb5/0x1e0 [ 150.753719][ T8308] do_dentry_open+0x588/0x14d0 [ 150.753737][ T8308] vfs_open+0x82/0x3f0 [ 150.753748][ T8308] path_openat+0x19fa/0x2440 [ 150.753767][ T8308] ? __pfx_path_openat+0x10/0x10 [ 150.753787][ T8308] do_file_open+0x20e/0x430 [ 150.753805][ T8308] ? __pfx_do_file_open+0x10/0x10 [ 150.753835][ T8308] ? _raw_spin_unlock+0x28/0x50 [ 150.753854][ T8308] ? alloc_fd+0x471/0x7a0 [ 150.753874][ T8308] do_sys_openat2+0x10f/0x1e0 [ 150.753885][ T8308] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.753896][ T8308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.753909][ T8308] ? __fget_files+0x21f/0x3d0 [ 150.753927][ T8308] __x64_sys_openat+0x12d/0x210 [ 150.753937][ T8308] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.753948][ T8308] ? ksys_write+0x1ac/0x250 [ 150.753966][ T8308] do_syscall_64+0x123/0x790 [ 150.753978][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.753990][ T8308] RIP: 0033:0x7f0b1b95e98e [ 150.754000][ T8308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.754010][ T8308] RSP: 002b:00007f0b1c7bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.754021][ T8308] RAX: ffffffffffffffda RBX: 00007f0b1c7bc6c0 RCX: 00007f0b1b95e98e [ 150.754028][ T8308] RDX: 0000000000000002 RSI: 00007f0b1c7bbc00 RDI: ffffffffffffff9c [ 150.754034][ T8308] RBP: 00007f0b1c7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 150.754040][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.754046][ T8308] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 150.754060][ T8308] [ 150.847483][ T8308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.852226][ T24] usb 6-1: USB disconnect, device number 22 [ 151.364850][ T63] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 151.369897][ T63] (NULL device *): queue 0 connect admin queue failed (-111). [ 151.372978][ T63] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 151.378621][ T63] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 151.455245][ T8329] FAULT_INJECTION: forcing a failure. [ 151.455245][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 151.459492][ T8329] CPU: 2 UID: 0 PID: 8329 Comm: syz.1.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.459509][ T8329] Tainted: [L]=SOFTLOCKUP [ 151.459512][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.459519][ T8329] Call Trace: [ 151.459525][ T8329] [ 151.459529][ T8329] dump_stack_lvl+0x100/0x190 [ 151.459563][ T8329] should_fail_ex.cold+0x5/0xa [ 151.459576][ T8329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 151.459591][ T8329] should_failslab+0xc2/0x120 [ 151.459608][ T8329] kmem_cache_alloc_noprof+0x91/0x6a0 [ 151.459624][ T8329] ? skb_clone+0x190/0x400 [ 151.459646][ T8329] skb_clone+0x190/0x400 [ 151.459656][ T8329] netlink_deliver_tap+0xaed/0xcc0 [ 151.459675][ T8329] netlink_unicast+0x62b/0x850 [ 151.459693][ T8329] ? __pfx_netlink_unicast+0x10/0x10 [ 151.459713][ T8329] netlink_sendmsg+0x8b0/0xda0 [ 151.459731][ T8329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.459749][ T8329] ? selinux_socket_sendmsg+0x198/0x2f0 [ 151.459766][ T8329] ____sys_sendmsg+0xa4d/0xbe0 [ 151.459779][ T8329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.459796][ T8329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.459818][ T8329] ___sys_sendmsg+0x190/0x1e0 [ 151.459833][ T8329] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.459848][ T8329] ? get_pid_task+0x106/0x250 [ 151.459866][ T8329] ? find_held_lock+0x2b/0x80 [ 151.459887][ T8329] __sys_sendmsg+0x160/0x210 [ 151.459898][ T8329] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.459916][ T8329] do_syscall_64+0x123/0x790 [ 151.459929][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.459947][ T8329] RIP: 0033:0x7f0b1b99e159 [ 151.459957][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.459968][ T8329] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.459979][ T8329] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 151.459986][ T8329] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 000000000000001c [ 151.459992][ T8329] RBP: 00007f0b1c7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 151.459998][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.460004][ T8329] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 151.460018][ T8329] [ 151.567161][ T42] audit: type=1400 audit(1787904371.505:532): avc: denied { setopt } for pid=8330 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.793293][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 151.796373][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 151.800921][ T8343] binder: 8342:8343 ioctl c018620c 200000000240 returned -22 [ 151.813655][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 151.854532][ T8347] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 151.960562][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 151.964111][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 151.964633][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.965598][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.965612][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.965669][ T24] usb 6-1: config 0 has no interface number 0 [ 151.979593][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.982726][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.987044][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.991180][ T24] usb 6-1: config 0 descriptor?? [ 151.995259][ T24] ldusb 6-1:0.55: Interrupt in endpoint not found [ 152.455290][ T24] usb 6-1: USB disconnect, device number 23 [ 152.608417][ T8366] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 152.901922][ T8361] overlayfs: statfs failed on './file0' [ 152.990506][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 152.990518][ T42] audit: type=1400 audit(1787904372.925:535): avc: denied { execute } for pid=8372 comm="syz.1.937" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 153.030897][ T8375] FAULT_INJECTION: forcing a failure. [ 153.030897][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.039938][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.1.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.039960][ T8375] Tainted: [L]=SOFTLOCKUP [ 153.039964][ T8375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.039971][ T8375] Call Trace: [ 153.039975][ T8375] [ 153.039981][ T8375] dump_stack_lvl+0x100/0x190 [ 153.040003][ T8375] should_fail_ex.cold+0x5/0xa [ 153.040019][ T8375] _copy_to_user+0x32/0xd0 [ 153.040038][ T8375] simple_read_from_buffer+0xcb/0x170 [ 153.040056][ T8375] proc_fail_nth_read+0x1af/0x230 [ 153.040086][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.040104][ T8375] ? rw_verify_area+0xce/0x6d0 [ 153.040117][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.040133][ T8375] vfs_read+0x1e4/0xb40 [ 153.040148][ T8375] ? __pfx_vfs_read+0x10/0x10 [ 153.040160][ T8375] ? find_held_lock+0x2b/0x80 [ 153.040174][ T8375] ? __fget_files+0x215/0x3d0 [ 153.040193][ T8375] ? __fget_files+0x21f/0x3d0 [ 153.040213][ T8375] ksys_read+0x12a/0x250 [ 153.040226][ T8375] ? __pfx_ksys_read+0x10/0x10 [ 153.040240][ T8375] ? trace_hardirqs_off+0x70/0x170 [ 153.040255][ T8375] do_syscall_64+0x123/0x790 [ 153.040269][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.040282][ T8375] RIP: 0033:0x7f0b1b95e98e [ 153.040293][ T8375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.040307][ T8375] RSP: 002b:00007f0b1c7bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.040319][ T8375] RAX: ffffffffffffffda RBX: 00007f0b1c7bc6c0 RCX: 00007f0b1b95e98e [ 153.040326][ T8375] RDX: 000000000000000f RSI: 00007f0b1c7bc0a0 RDI: 0000000000000005 [ 153.040332][ T8375] RBP: 00007f0b1c7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 153.040338][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.040345][ T8375] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 153.040358][ T8375] [ 153.124264][ T1483] usb 8-1: mos7720: usb_control_msg() failed: -110 [ 153.131802][ T1483] usb 8-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 153.141798][ T1483] usb 8-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 153.176802][ T1483] usb 8-1: USB disconnect, device number 24 [ 153.178842][ C2] usb 8-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 153.237936][ T1483] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 153.260520][ T1483] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 153.261692][ T42] audit: type=1400 audit(1787904373.195:536): avc: denied { mounton } for pid=8379 comm="syz.2.941" path="/proc/532/cgroup" dev="proc" ino=28941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 153.264524][ T1483] mos7720 8-1:1.0: device disconnected [ 153.433789][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 153.439010][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 153.442177][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 153.445659][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 153.573682][ T5842] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 153.623642][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 153.747585][ T5842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 153.755315][ T5842] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 153.758171][ T5842] usb 7-1: no configurations [ 153.759527][ T5842] usb 7-1: can't read configurations, error -22 [ 153.773628][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 153.776149][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.780478][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.783129][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.786961][ T24] usb 5-1: config 0 has no interface number 0 [ 153.788913][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.792978][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.797907][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.802373][ T24] usb 5-1: config 0 descriptor?? [ 153.806471][ T24] ldusb 5-1:0.55: Interrupt in endpoint not found [ 154.264302][ T24] usb 5-1: USB disconnect, device number 25 [ 154.392134][ T42] audit: type=1400 audit(1787904374.325:537): avc: denied { create } for pid=8413 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.403139][ T8401] kvm: kvm [8400]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 154.413327][ T8401] kvm: kvm [8400]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 154.445021][ T8418] FAULT_INJECTION: forcing a failure. [ 154.445021][ T8418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.449653][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.3.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.449672][ T8418] Tainted: [L]=SOFTLOCKUP [ 154.449675][ T8418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.449681][ T8418] Call Trace: [ 154.449687][ T8418] [ 154.449692][ T8418] dump_stack_lvl+0x100/0x190 [ 154.449711][ T8418] should_fail_ex.cold+0x5/0xa [ 154.449730][ T8418] _copy_from_user+0x2e/0xd0 [ 154.449748][ T8418] bpf_prog_test_run_xdp+0x128d/0x1670 [ 154.449769][ T8418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 154.449788][ T8418] ? fput+0x7c/0x100 [ 154.449805][ T8418] ? __bpf_prog_get+0x97/0x290 [ 154.449816][ T8418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 154.449832][ T8418] __sys_bpf+0x2265/0x4a30 [ 154.449854][ T8418] ? __pfx___sys_bpf+0x10/0x10 [ 154.449868][ T8418] ? find_held_lock+0x2b/0x80 [ 154.449881][ T8418] ? get_pid_task+0xfc/0x250 [ 154.449893][ T8418] ? get_pid_task+0xfc/0x250 [ 154.449909][ T8418] ? find_held_lock+0x2b/0x80 [ 154.449927][ T8418] ? rcu_read_lock_any_held+0x6a/0x90 [ 154.449940][ T8418] ? find_held_lock+0x2b/0x80 [ 154.449952][ T8418] ? ksys_write+0x190/0x250 [ 154.449965][ T8418] ? ksys_write+0x190/0x250 [ 154.449988][ T8418] ? fput+0x7c/0x100 [ 154.450004][ T8418] ? ksys_write+0x1ac/0x250 [ 154.450019][ T8418] ? __x64_sys_bpf+0xce/0x140 [ 154.450033][ T8418] __x64_sys_bpf+0xce/0x140 [ 154.450048][ T8418] ? do_syscall_64+0xae/0x790 [ 154.450061][ T8418] do_syscall_64+0x123/0x790 [ 154.450073][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.450085][ T8418] RIP: 0033:0x7f4e5c99e159 [ 154.450095][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.450105][ T8418] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.450116][ T8418] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 154.450123][ T8418] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 154.450129][ T8418] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.450136][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.450142][ T8418] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 154.450155][ T8418] [ 154.877931][ T8427] tipc: Enabling of bearer rejected, failed to enable media [ 154.912884][ T8433] ======================================================= [ 154.912884][ T8433] WARNING: The mand mount option has been deprecated and [ 154.912884][ T8433] and is ignored by this kernel. Remove the mand [ 154.912884][ T8433] option from the mount to silence this warning. [ 154.912884][ T8433] ======================================================= [ 154.929065][ T42] audit: type=1400 audit(1787904374.865:538): avc: denied { remount } for pid=8432 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 154.930707][ T8433] option changes via remount are deprecated (pid=8432 comm=syz.0.957) [ 155.041977][ T5878] syz_tun (unregistering): left allmulticast mode [ 155.125550][ T8437] FAULT_INJECTION: forcing a failure. [ 155.125550][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 155.130548][ T8437] CPU: 2 UID: 0 PID: 8437 Comm: syz.1.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.130567][ T8437] Tainted: [L]=SOFTLOCKUP [ 155.130571][ T8437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.130578][ T8437] Call Trace: [ 155.130583][ T8437] [ 155.130589][ T8437] dump_stack_lvl+0x100/0x190 [ 155.130609][ T8437] should_fail_ex.cold+0x5/0xa [ 155.130624][ T8437] should_failslab+0xc2/0x120 [ 155.130642][ T8437] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 155.130659][ T8437] ? __d_alloc+0x35/0xa50 [ 155.130673][ T8437] __d_alloc+0x35/0xa50 [ 155.130685][ T8437] d_alloc_parallel+0x105/0x14c0 [ 155.130705][ T8437] ? __pfx_d_alloc_parallel+0x10/0x10 [ 155.130719][ T8437] ? __pfx___might_resched+0x10/0x10 [ 155.130735][ T8437] ? try_to_unlazy+0x296/0x910 [ 155.130752][ T8437] ? down_read+0x13b/0x4c0 [ 155.130766][ T8437] ? __pfx_down_read+0x10/0x10 [ 155.130781][ T8437] __lookup_slow+0x98/0x320 [ 155.130794][ T8437] lookup_slow+0x50/0x70 [ 155.130806][ T8437] path_lookupat+0x5e8/0xc40 [ 155.130824][ T8437] filename_lookup+0x202/0x590 [ 155.130839][ T8437] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 155.130856][ T8437] ? __pfx_filename_lookup+0x10/0x10 [ 155.130885][ T8437] filename_linkat+0x145/0x640 [ 155.130913][ T8437] ? __pfx_filename_linkat+0x10/0x10 [ 155.130929][ T8437] ? do_getname+0x191/0x390 [ 155.130942][ T8437] __x64_sys_linkat+0xf6/0x150 [ 155.130954][ T8437] do_syscall_64+0x123/0x790 [ 155.130967][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.130979][ T8437] RIP: 0033:0x7f0b1b99e159 [ 155.130989][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.130999][ T8437] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 155.131011][ T8437] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 155.131018][ T8437] RDX: ffffffffffffff9c RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 155.131024][ T8437] RBP: 00007f0b1c7bc090 R08: 0000000000001000 R09: 0000000000000000 [ 155.131031][ T8437] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 155.131037][ T8437] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 155.131050][ T8437] [ 155.233106][ T8439] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.961'. [ 155.468721][ T42] audit: type=1400 audit(1787904375.405:539): avc: denied { execute } for pid=8446 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 155.478834][ T42] audit: type=1400 audit(1787904375.405:540): avc: denied { execute_no_trans } for pid=8446 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 155.513636][ T1159] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 155.519052][ T1159] (NULL device *): queue 0 connect admin queue failed (-111). [ 155.521731][ T1159] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 155.524861][ T1159] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 155.559046][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.567662][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.570582][ T5730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.574489][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.577499][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.003815][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.006998][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.009837][ T8449] bridge_slave_0: entered allmulticast mode [ 156.014028][ T8449] bridge_slave_0: entered promiscuous mode [ 156.019310][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.022243][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.025374][ T8449] bridge_slave_1: entered allmulticast mode [ 156.029194][ T8449] bridge_slave_1: entered promiscuous mode [ 156.058223][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.064961][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.090088][ T8449] team0: Port device team_slave_0 added [ 156.095439][ T8449] team0: Port device team_slave_1 added [ 156.118902][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.121603][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.131476][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.137658][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.140432][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.150231][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.164955][ T849] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 156.185953][ T8475] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.970'. [ 156.206134][ T8449] hsr_slave_0: entered promiscuous mode [ 156.208528][ T8449] hsr_slave_1: entered promiscuous mode [ 156.211770][ T8449] debugfs: 'hsr0' already exists in 'hsr' [ 156.213952][ T8449] Cannot create hsr debugfs directory [ 156.229961][ T8477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.314181][ T849] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 156.318263][ T849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.322267][ T849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.325817][ T849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 156.329072][ T849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.334124][ T849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.336902][ T849] usb 7-1: Product: syz [ 156.338294][ T849] usb 7-1: Manufacturer: syz [ 156.339828][ T849] usb 7-1: SerialNumber: syz [ 156.346518][ T849] usb 7-1: config 0 descriptor?? [ 156.346711][ T8449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.355995][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.359400][ T8449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.364549][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.367474][ T8449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.377726][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.381690][ T8449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.391978][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.398095][ T8479] kvm: kvm [8478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 156.409648][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.411165][ T8479] kvm: kvm [8478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 156.412333][ T8449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.418279][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.420562][ T8449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.469062][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.479908][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.483990][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.494751][ T8449] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.500934][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.503842][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.511100][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.514176][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.554380][ T849] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 156.752168][ T8470] FAULT_INJECTION: forcing a failure. [ 156.752168][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 156.758026][ T8470] CPU: 3 UID: 0 PID: 8470 Comm: syz.2.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.758044][ T8470] Tainted: [L]=SOFTLOCKUP [ 156.758048][ T8470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.758054][ T8470] Call Trace: [ 156.758058][ T8470] [ 156.758062][ T8470] dump_stack_lvl+0x100/0x190 [ 156.758081][ T8470] should_fail_ex.cold+0x5/0xa [ 156.758097][ T8470] should_failslab+0xc2/0x120 [ 156.758113][ T8470] __kmalloc_noprof+0xfc/0x820 [ 156.758129][ T8470] ? tomoyo_encode2+0xfb/0x3c0 [ 156.758149][ T8470] tomoyo_encode2+0xfb/0x3c0 [ 156.758167][ T8470] tomoyo_encode+0x29/0x50 [ 156.758184][ T8470] tomoyo_realpath_from_path+0x18c/0x690 [ 156.758204][ T8470] tomoyo_check_open_permission+0x2af/0x3c0 [ 156.758220][ T8470] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 156.758239][ T8470] ? hook_file_open+0x24f/0x8f0 [ 156.758261][ T8470] ? path_get+0x61/0x80 [ 156.758273][ T8470] tomoyo_file_open+0x6b/0x90 [ 156.758285][ T8470] security_file_open+0xb5/0x1e0 [ 156.758296][ T8470] do_dentry_open+0x588/0x14d0 [ 156.758313][ T8470] vfs_open+0x82/0x3f0 [ 156.758325][ T8470] path_openat+0x19fa/0x2440 [ 156.758343][ T8470] ? __pfx_path_openat+0x10/0x10 [ 156.758363][ T8470] do_file_open+0x20e/0x430 [ 156.758380][ T8470] ? __pfx_do_file_open+0x10/0x10 [ 156.758410][ T8470] ? _raw_spin_unlock+0x28/0x50 [ 156.758426][ T8470] ? alloc_fd+0x471/0x7a0 [ 156.758446][ T8470] do_sys_openat2+0x10f/0x1e0 [ 156.758456][ T8470] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.758467][ T8470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.758480][ T8470] ? __fget_files+0x21f/0x3d0 [ 156.758498][ T8470] __x64_sys_openat+0x12d/0x210 [ 156.758509][ T8470] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.758519][ T8470] ? ksys_write+0x1ac/0x250 [ 156.758537][ T8470] do_syscall_64+0x123/0x790 [ 156.758550][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.758561][ T8470] RIP: 0033:0x7feac6d5e98e [ 156.758570][ T8470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.758580][ T8470] RSP: 002b:00007feac7cb2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.758592][ T8470] RAX: ffffffffffffffda RBX: 00007feac7cb36c0 RCX: 00007feac6d5e98e [ 156.758599][ T8470] RDX: 0000000000000002 RSI: 00007feac7cb2c00 RDI: ffffffffffffff9c [ 156.758605][ T8470] RBP: 00007feac7cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 156.758611][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.758617][ T8470] R13: 00007feac7026038 R14: 00007feac7025fa0 R15: 00007ffc35e28fb8 [ 156.758630][ T8470] [ 156.758642][ T8470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.818707][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.821270][ T849] usb 7-1: USB disconnect, device number 38 [ 156.971028][ T8449] veth0_vlan: entered promiscuous mode [ 156.976785][ T8449] veth1_vlan: entered promiscuous mode [ 156.994526][ T8449] veth0_macvtap: entered promiscuous mode [ 157.002952][ T8449] veth1_macvtap: entered promiscuous mode [ 157.015660][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.025936][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.053851][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.057814][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.075761][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.081141][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.106107][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.108845][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.131411][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.134969][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.147757][ T42] audit: type=1400 audit(1787904377.085:541): avc: denied { mounton } for pid=8449 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 157.194301][ T42] audit: type=1800 audit(1787904377.135:542): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.965" name="file0" dev="overlay" ino=25 res=0 errno=0 [ 157.284499][ T849] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 157.436152][ T849] usb 8-1: not running at top speed; connect to a high speed hub [ 157.437726][ T8523] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 157.441669][ T849] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 157.448059][ T849] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.455350][ T849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.458901][ T849] usb 8-1: Product: syz [ 157.460593][ T849] usb 8-1: Manufacturer: syz [ 157.462258][ T849] usb 8-1: SerialNumber: syz [ 157.472281][ T849] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 157.475052][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.477475][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 157.480548][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 157.484326][ T849] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 157.487996][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 157.491530][ T849] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 157.495269][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 157.498916][ T849] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 157.502755][ T849] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 157.507360][ T849] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 157.593890][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 157.600023][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 157.602488][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 157.605512][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 157.675057][ T5730] Bluetooth: hci1: command tx timeout [ 157.795192][ T8512] usb 8-1: USB disconnect, device number 25 [ 157.801098][ T8512] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 157.806003][ T8512] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 157.813109][ T8512] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 157.820214][ T8512] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 157.824288][ T8512] keyspan 8-1:1.0: device disconnected [ 157.918418][ T8526] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.978'. [ 158.293676][ T1483] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 158.348700][ T8541] vlan2: entered promiscuous mode [ 158.350943][ T8541] hsr0: entered promiscuous mode [ 158.352950][ T8541] vlan2: entered allmulticast mode [ 158.355404][ T8541] hsr0: entered allmulticast mode [ 158.357432][ T8541] hsr_slave_0: entered allmulticast mode [ 158.359238][ T8541] hsr_slave_1: entered allmulticast mode [ 158.398307][ T8545] FAULT_INJECTION: forcing a failure. [ 158.398307][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.402682][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.3.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.402699][ T8545] Tainted: [L]=SOFTLOCKUP [ 158.402703][ T8545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.402710][ T8545] Call Trace: [ 158.402714][ T8545] [ 158.402719][ T8545] dump_stack_lvl+0x100/0x190 [ 158.402738][ T8545] should_fail_ex.cold+0x5/0xa [ 158.402753][ T8545] _copy_from_user+0x2e/0xd0 [ 158.402771][ T8545] ____sys_sendmsg+0x1d1/0xbe0 [ 158.402787][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.402806][ T8545] ___sys_sendmsg+0x190/0x1e0 [ 158.402821][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.402836][ T8545] ? get_pid_task+0x106/0x250 [ 158.402853][ T8545] ? find_held_lock+0x2b/0x80 [ 158.402873][ T8545] __sys_sendmsg+0x160/0x210 [ 158.402884][ T8545] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.402901][ T8545] do_syscall_64+0x123/0x790 [ 158.402915][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.402926][ T8545] RIP: 0033:0x7f4e5c99e159 [ 158.402936][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.402946][ T8545] RSP: 002b:00007f4e5d86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.402958][ T8545] RAX: ffffffffffffffda RBX: 00007f4e5cc25fa0 RCX: 00007f4e5c99e159 [ 158.402965][ T8545] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 158.402971][ T8545] RBP: 00007f4e5d86c090 R08: 0000000000000000 R09: 0000000000000000 [ 158.402982][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.402988][ T8545] R13: 00007f4e5cc26038 R14: 00007f4e5cc25fa0 R15: 00007ffcc7528a58 [ 158.403001][ T8545] [ 158.473631][ T1483] usb 7-1: Using ep0 maxpacket: 8 [ 158.475752][ T1483] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 158.480018][ T1483] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 158.482891][ T1483] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.487194][ T1483] usb 7-1: config 0 has no interface number 0 [ 158.491438][ T1483] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.495306][ T1483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.500751][ T1483] usb 7-1: config 0 descriptor?? [ 158.505554][ T1483] ldusb 7-1:0.55: Interrupt in endpoint not found [ 158.506862][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 158.512605][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 158.523763][ T5093] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 158.552999][ T8549] ./dev/sda1: Can't open blockdev [ 158.569684][ T8554] CIFS: Attempting to mount //127.0.0.1/share [ 158.578776][ T8554] CIFS: VFS: Error connecting to socket. Aborting operation. [ 158.582006][ T8554] CIFS: VFS: cifs_mount failed w/return code = -111 [ 158.674096][ T5093] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 158.677533][ T5093] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.680537][ T5093] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.694027][ T5093] as10x_usb: device has been detected [ 158.697027][ T5093] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 158.710737][ T5093] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 158.727148][ T5093] as10x_usb: error during firmware upload part1 [ 158.729266][ T5093] Registered device Abilis Systems DVB-Titan [ 158.863685][ T1483] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 158.967857][ T5826] usb 7-1: USB disconnect, device number 39 [ 159.003697][ T1483] usb 8-1: device descriptor read/64, error -71 [ 159.273618][ T1483] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 159.413619][ T1483] usb 8-1: device descriptor read/64, error -71 [ 159.523974][ T1483] usb usb8-port1: attempt power cycle [ 159.542525][ T8565] FAULT_INJECTION: forcing a failure. [ 159.542525][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 159.546583][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.2.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.546601][ T8565] Tainted: [L]=SOFTLOCKUP [ 159.546605][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.546611][ T8565] Call Trace: [ 159.546615][ T8565] [ 159.546620][ T8565] dump_stack_lvl+0x100/0x190 [ 159.546640][ T8565] should_fail_ex.cold+0x5/0xa [ 159.546654][ T8565] should_failslab+0xc2/0x120 [ 159.546672][ T8565] __kvmalloc_node_noprof+0x116/0x970 [ 159.546688][ T8565] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 159.546707][ T8565] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 159.546725][ T8565] mmu_topup_memory_caches+0x25/0x170 [ 159.546744][ T8565] kvm_mmu_load+0xe2/0x2570 [ 159.546761][ T8565] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 159.546779][ T8565] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 159.546793][ T8565] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 159.546806][ T8565] ? __pfx_kvm_mmu_load+0x10/0x10 [ 159.546822][ T8565] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 159.546838][ T8565] ? kvm_check_and_inject_events+0x873/0x12a0 [ 159.546855][ T8565] ? record_steal_time+0x3f0/0xbb0 [ 159.546870][ T8565] vcpu_run+0x3ab0/0x5df0 [ 159.546886][ T8565] ? __pfx_vcpu_run+0x10/0x10 [ 159.546900][ T8565] ? rcu_is_watching+0x13/0xc0 [ 159.546915][ T8565] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 159.546925][ T8565] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 159.546939][ T8565] kvm_vcpu_ioctl+0x730/0x1700 [ 159.546955][ T8565] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.546969][ T8565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.546987][ T8565] ? do_vfs_ioctl+0x226/0x13e0 [ 159.547001][ T8565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 159.547013][ T8565] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 159.547032][ T8565] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.547057][ T8565] ? selinux_file_ioctl+0x13b/0x290 [ 159.547072][ T8565] ? selinux_file_ioctl+0xb6/0x290 [ 159.547089][ T8565] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.547103][ T8565] __x64_sys_ioctl+0x18e/0x210 [ 159.547118][ T8565] do_syscall_64+0x123/0x790 [ 159.547131][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.547142][ T8565] RIP: 0033:0x7feac6d9e159 [ 159.547152][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.547162][ T8565] RSP: 002b:00007feac7cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.547173][ T8565] RAX: ffffffffffffffda RBX: 00007feac7025fa0 RCX: 00007feac6d9e159 [ 159.547180][ T8565] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 159.547186][ T8565] RBP: 00007feac7cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 159.547192][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.547199][ T8565] R13: 00007feac7026038 R14: 00007feac7025fa0 R15: 00007ffc35e28fb8 [ 159.547212][ T8565] [ 159.673958][ T1159] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 159.678550][ T1159] (NULL device *): queue 0 connect admin queue failed (-111). [ 159.682183][ T1159] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 159.686254][ T1159] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 159.753771][ T5730] Bluetooth: hci1: command tx timeout [ 159.788022][ T8569] FAULT_INJECTION: forcing a failure. [ 159.788022][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.792211][ T8569] CPU: 2 UID: 0 PID: 8569 Comm: syz.1.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.792230][ T8569] Tainted: [L]=SOFTLOCKUP [ 159.792234][ T8569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.792240][ T8569] Call Trace: [ 159.792245][ T8569] [ 159.792251][ T8569] dump_stack_lvl+0x100/0x190 [ 159.792270][ T8569] should_fail_ex.cold+0x5/0xa [ 159.792285][ T8569] _copy_to_user+0x32/0xd0 [ 159.792304][ T8569] pagemap_read+0x51b/0x830 [ 159.792322][ T8569] ? __pfx_pagemap_read+0x10/0x10 [ 159.792340][ T8569] ? rw_verify_area+0xce/0x6d0 [ 159.792353][ T8569] ? __pfx_pagemap_read+0x10/0x10 [ 159.792369][ T8569] vfs_read+0x1e4/0xb40 [ 159.792384][ T8569] ? __pfx_vfs_read+0x10/0x10 [ 159.792396][ T8569] ? find_held_lock+0x2b/0x80 [ 159.792414][ T8569] ? __fget_files+0x215/0x3d0 [ 159.792429][ T8569] ? __fget_files+0x215/0x3d0 [ 159.792447][ T8569] ? __fget_files+0x21f/0x3d0 [ 159.792466][ T8569] __x64_sys_pread64+0x1eb/0x250 [ 159.792480][ T8569] ? __pfx___x64_sys_pread64+0x10/0x10 [ 159.792498][ T8569] do_syscall_64+0x123/0x790 [ 159.792512][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.792524][ T8569] RIP: 0033:0x7f0b1b99e159 [ 159.792533][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.792543][ T8569] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 159.792554][ T8569] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 159.792561][ T8569] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000003 [ 159.792567][ T8569] RBP: 00007f0b1c7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 159.792573][ T8569] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.792579][ T8569] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 159.792592][ T8569] [ 159.926603][ T42] audit: type=1400 audit(1787904379.865:543): avc: denied { search } for pid=8571 comm="syz.1.992" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.931567][ T8572] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 159.936379][ T42] audit: type=1400 audit(1787904379.865:544): avc: denied { search } for pid=8571 comm="syz.1.992" name="per_cpu" dev="tracefs" ino=5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.943597][ T1483] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 159.949084][ T42] audit: type=1400 audit(1787904379.865:545): avc: denied { search } for pid=8571 comm="syz.1.992" name="cpu0" dev="tracefs" ino=5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.959498][ T42] audit: type=1400 audit(1787904379.865:546): avc: denied { search } for pid=8571 comm="syz.1.992" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.968518][ T42] audit: type=1400 audit(1787904379.865:547): avc: denied { search } for pid=8571 comm="syz.1.992" name="per_cpu" dev="tracefs" ino=5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.974402][ T1483] usb 8-1: device descriptor read/8, error -71 [ 159.977546][ T42] audit: type=1400 audit(1787904379.865:548): avc: denied { search } for pid=8571 comm="syz.1.992" name="cpu0" dev="tracefs" ino=5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.986001][ T42] audit: type=1400 audit(1787904379.865:549): avc: denied { getattr } for pid=8571 comm="syz.1.992" path="/256/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 159.994614][ T42] audit: type=1400 audit(1787904379.865:550): avc: denied { mounton } for pid=8571 comm="syz.1.992" path="/256/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 160.010437][ T42] audit: type=1804 audit(1787904379.945:551): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.992" name="/newroot/256/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=5508 res=1 errno=0 [ 160.223790][ T1483] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 160.244261][ T1483] usb 8-1: device descriptor read/8, error -71 [ 160.355277][ T1483] usb usb8-port1: unable to enumerate USB device [ 160.441493][ T8590] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 160.503691][ T1483] usb 9-1: USB disconnect, device number 2 [ 160.518442][ T1483] Unregistered device Abilis Systems DVB-Titan [ 160.519701][ T1483] as10x_usb: device has been disconnected [ 161.037665][ T42] audit: type=1400 audit(1787904380.975:552): avc: denied { map } for pid=8596 comm="syz.4.1000" path="socket:[29398]" dev="sockfs" ino=29398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.053666][ T849] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 161.203626][ T849] usb 6-1: Using ep0 maxpacket: 8 [ 161.206620][ T849] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.212061][ T849] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.216269][ T849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.220501][ T849] usb 6-1: config 0 has no interface number 0 [ 161.223234][ T849] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.228042][ T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.234222][ T849] usb 6-1: config 0 descriptor?? [ 161.239394][ T849] ldusb 6-1:0.55: Interrupt in endpoint not found [ 161.700436][ T2315] usb 6-1: USB disconnect, device number 24 [ 161.755567][ T1263] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 161.761272][ T1263] (NULL device *): queue 0 connect admin queue failed (-111). [ 161.767357][ T1263] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 161.772211][ T1263] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 161.833801][ T5730] Bluetooth: hci1: command tx timeout [ 161.994031][ T8613] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 161.998261][ T8613] bond1 (unregistering): Released all slaves [ 162.037158][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 162.040180][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 162.104112][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1006'. [ 162.238384][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'. [ 162.271177][ T8619] kvm: kvm [8618]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 162.596270][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 162.891403][ T8676] device-mapper: ioctl: name not supplied when creating device [ 162.895965][ T1483] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 163.053686][ T1483] usb 8-1: Using ep0 maxpacket: 8 [ 163.056348][ T1483] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.064937][ T1483] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.067765][ T1483] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.071266][ T1483] usb 8-1: config 0 has no interface number 0 [ 163.073724][ T1483] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.077661][ T1483] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.082375][ T1483] usb 8-1: config 0 descriptor?? [ 163.086447][ T1483] ldusb 8-1:0.55: Interrupt in endpoint not found [ 163.242894][ T8706] netlink: 'syz.1.1033': attribute type 178 has an invalid length. [ 163.265763][ T8705] Console: switching to colour dummy device 80x25 [ 163.436355][ T1483] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 163.483782][ T8705] ============================================================================= [ 163.486064][ T8705] [ 163.486073][ T8705] ====================================================== [ 163.486079][ T8705] WARNING: possible circular locking dependency detected [ 163.486089][ T8705] syzkaller #0 Tainted: G L [ 163.486099][ T8705] ------------------------------------------------------ [ 163.486104][ T8705] syz.1.1033/8705 is trying to acquire lock: [ 163.486113][ T8705] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 163.486159][ T8705] [ 163.486159][ T8705] but task is already holding lock: [ 163.486164][ T8705] ffff888027d4d618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 163.486209][ T8705] [ 163.486209][ T8705] which lock already depends on the new lock. [ 163.486209][ T8705] [ 163.486215][ T8705] [ 163.486215][ T8705] the existing dependency chain (in reverse order) is: [ 163.486220][ T8705] [ 163.486220][ T8705] -> #4 (&n->list_lock){-.-.}-{3:3}: [ 163.486241][ T8705] lock_acquire+0x1b9/0x370 [ 163.486265][ T8705] _raw_spin_lock_irqsave+0x3a/0x60 [ 163.486292][ T8705] get_from_partial_node+0x7d/0x5b0 [ 163.486309][ T8705] ___slab_alloc+0x78/0x800 [ 163.486335][ T8705] kmem_cache_alloc_noprof+0x3a9/0x6a0 [ 163.486358][ T8705] kmem_alloc_batch+0x49/0x170 [ 163.486373][ T8705] debug_objects_fill_pool+0x24d/0x550 [ 163.486389][ T8705] debug_object_activate+0x103/0x4b0 [ 163.486404][ T8705] insert_work+0x2e/0x230 [ 163.486421][ T8705] __queue_work+0xa60/0x1370 [ 163.486438][ T8705] queue_work_node+0x30b/0x3b0 [ 163.486454][ T8705] padata_do_multithreaded+0x614/0x930 [ 163.486469][ T8705] hugetlb_bootmem_struct_page_init+0x37a/0x3c0 [ 163.486485][ T8705] page_alloc_init_late+0x1c/0x5c0 [ 163.486494][ T8705] kernel_init_freeable+0x464/0x7b0 [ 163.486505][ T8705] kernel_init+0x21/0x1e0 [ 163.486517][ T8705] ret_from_fork+0x730/0xd60 [ 163.486532][ T8705] ret_from_fork_asm+0x1a/0x30 [ 163.486542][ T8705] [ 163.486542][ T8705] -> #3 (&pool->lock){-.-.}-{2:2}: [ 163.486555][ T8705] lock_acquire+0x1b9/0x370 [ 163.486569][ T8705] _raw_spin_lock+0x2e/0x40 [ 163.486583][ T8705] __queue_work+0x2ef/0x1370 [ 163.486598][ T8705] queue_work_on+0x1a9/0x1e0 [ 163.486615][ T8705] rpm_suspend+0xf6b/0x1220 [ 163.486633][ T8705] rpm_idle+0x60c/0x790 [ 163.486648][ T8705] __pm_runtime_idle+0xba/0x1a0 [ 163.486664][ T8705] __device_attach+0x37e/0x4d0 [ 163.486680][ T8705] device_initial_probe+0xaf/0xd0 [ 163.486695][ T8705] bus_probe_device+0x64/0x160 [ 163.486719][ T8705] device_add+0x121d/0x1970 [ 163.486735][ T8705] serial_base_port_add+0x227/0x2b0 [ 163.486753][ T8705] serial_core_register_port+0x13c/0x16f0 [ 163.486768][ T8705] serial8250_register_8250_port+0x15af/0x2330 [ 163.486789][ T8705] serial_pnp_probe+0x436/0x930 [ 163.486809][ T8705] pnp_device_probe+0x2b3/0x4a0 [ 163.486825][ T8705] really_probe+0x241/0xa60 [ 163.486839][ T8705] __driver_probe_device+0x210/0x460 [ 163.486854][ T8705] driver_probe_device+0x4a/0x140 [ 163.486869][ T8705] __driver_attach+0x21f/0x5b0 [ 163.486884][ T8705] bus_for_each_dev+0x13e/0x1d0 [ 163.486904][ T8705] bus_add_driver+0x305/0x5b0 [ 163.486925][ T8705] driver_register+0x1e2/0x360 [ 163.486942][ T8705] serial8250_init+0xcc/0x1c0 [ 163.486956][ T8705] do_one_initcall+0x11c/0x6f0 [ 163.486970][ T8705] kernel_init_freeable+0x6ea/0x7b0 [ 163.486986][ T8705] kernel_init+0x21/0x1e0 [ 163.487005][ T8705] ret_from_fork+0x730/0xd60 [ 163.487029][ T8705] ret_from_fork_asm+0x1a/0x30 [ 163.487042][ T8705] [ 163.487042][ T8705] -> #2 (&dev->power.lock){-...}-{3:3}: [ 163.487063][ T8705] lock_acquire+0x1b9/0x370 [ 163.487084][ T8705] _raw_spin_lock_irqsave+0x3a/0x60 [ 163.487102][ T8705] __pm_runtime_resume+0xa9/0x170 [ 163.487113][ T8705] __uart_start+0x1b0/0x510 [ 163.487126][ T8705] uart_write+0x211/0xb20 [ 163.487134][ T8705] n_tty_write+0x431/0x1160 [ 163.487145][ T8705] file_tty_write.isra.0+0x4d2/0x890 [ 163.487154][ T8705] redirected_tty_write+0xd4/0x120 [ 163.487162][ T8705] vfs_write+0x6af/0x1050 [ 163.487175][ T8705] ksys_write+0x12a/0x250 [ 163.487186][ T8705] do_syscall_64+0x123/0x790 [ 163.487196][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.487206][ T8705] [ 163.487206][ T8705] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 163.487221][ T8705] lock_acquire+0x1b9/0x370 [ 163.487241][ T8705] _raw_spin_lock_irqsave+0x3a/0x60 [ 163.487263][ T8705] serial8250_console_write+0x177/0x1a50 [ 163.487282][ T8705] console_flush_one_record+0x78e/0xf10 [ 163.487300][ T8705] console_unlock+0x103/0x260 [ 163.487315][ T8705] vprintk_emit+0x407/0x6b0 [ 163.487338][ T8705] _printk+0xcf/0x110 [ 163.487352][ T8705] register_console.cold+0xc0/0x248 [ 163.487368][ T8705] univ8250_console_init+0x6f/0x80 [ 163.487382][ T8705] console_init+0x3d5/0x5b0 [ 163.487403][ T8705] start_kernel+0x314/0x490 [ 163.487419][ T8705] x86_64_start_reservations+0x24/0x30 [ 163.487437][ T8705] x86_64_start_kernel+0x12b/0x130 [ 163.487454][ T8705] common_startup_64+0x13e/0x158 [ 163.487471][ T8705] [ 163.487471][ T8705] -> #0 (console_owner){-.-.}-{0:0}: [ 163.487492][ T8705] check_prev_add+0xeb/0xe60 [ 163.487513][ T8705] __lock_acquire+0x1492/0x1ec0 [ 163.487534][ T8705] lock_acquire+0x1b9/0x370 [ 163.487554][ T8705] console_lock_spinning_enable+0x72/0x80 [ 163.487569][ T8705] console_flush_one_record+0x737/0xf10 [ 163.487580][ T8705] console_unlock+0x103/0x260 [ 163.487590][ T8705] vprintk_emit+0x407/0x6b0 [ 163.487600][ T8705] _printk+0xcf/0x110 [ 163.487608][ T8705] __slab_bug+0x4f/0xb0 [ 163.487618][ T8705] slab_bug+0x5d/0x80 [ 163.487626][ T8705] __kmem_cache_shutdown.cold+0x39/0x177 [ 163.487638][ T8705] kmem_cache_destroy+0x73/0x190 [ 163.487648][ T8705] virtio_gpu_free_vbufs+0x38/0x80 [ 163.487661][ T8705] virtio_gpu_release+0x5c/0x1c0 [ 163.487671][ T8705] drm_dev_put.part.0+0xbd/0x140 [ 163.487681][ T8705] drm_dev_put+0x1f/0x30 [ 163.487689][ T8705] virtio_dev_remove+0xb8/0x170 [ 163.487698][ T8705] device_remove+0xcb/0x180 [ 163.487706][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.487717][ T8705] bus_remove_device+0x2bc/0x560 [ 163.487732][ T8705] device_del+0x376/0x9b0 [ 163.487743][ T8705] device_unregister+0x1d/0xe0 [ 163.487755][ T8705] unregister_virtio_device+0x39/0x60 [ 163.487769][ T8705] virtio_pci_remove+0x7c/0x110 [ 163.487790][ T8705] pci_device_remove+0xb2/0x1d0 [ 163.487811][ T8705] device_remove+0xcb/0x180 [ 163.487825][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.487842][ T8705] pci_stop_bus_device+0x120/0x160 [ 163.487865][ T8705] pci_stop_and_remove_bus_device+0x58/0xa0 [ 163.487890][ T8705] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 163.487915][ T8705] remove_store+0x123/0x140 [ 163.487930][ T8705] dev_attr_store+0x58/0x80 [ 163.487946][ T8705] sysfs_kf_write+0xf2/0x150 [ 163.487968][ T8705] kernfs_fop_write_iter+0x3e0/0x5f0 [ 163.487987][ T8705] vfs_write+0x6af/0x1050 [ 163.488005][ T8705] ksys_write+0x12a/0x250 [ 163.488024][ T8705] do_syscall_64+0x123/0x790 [ 163.488038][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.488053][ T8705] [ 163.488053][ T8705] other info that might help us debug this: [ 163.488053][ T8705] [ 163.488058][ T8705] Chain exists of: [ 163.488058][ T8705] console_owner --> &pool->lock --> &n->list_lock [ 163.488058][ T8705] [ 163.488080][ T8705] Possible unsafe locking scenario: [ 163.488080][ T8705] [ 163.488085][ T8705] CPU0 CPU1 [ 163.488087][ T8705] ---- ---- [ 163.488090][ T8705] lock(&n->list_lock); [ 163.488096][ T8705] lock(&pool->lock); [ 163.488103][ T8705] lock(&n->list_lock); [ 163.488110][ T8705] lock(console_owner); [ 163.488116][ T8705] [ 163.488116][ T8705] *** DEADLOCK *** [ 163.488116][ T8705] [ 163.488118][ T8705] locks held by syz.1.1033/8705: 11, last CPU#1: [ 163.488126][ T8705] #0: ffff8880325b90b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 163.488148][ T8705] #1: ffff888058b8e460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 163.488175][ T8705] #2: ffff8880134a0080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 163.488201][ T8705] #3: ffffffff8fa7d5e0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 163.488231][ T8705] #4: ffff8880231ee1f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 163.488256][ T8705] #5: ffff8880260cf1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 163.488283][ T8705] #6: ffffffff8ec7a830 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 163.488318][ T8705] #7: ffffffff8ef940c0 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 163.488361][ T8705] #8: ffff888027d4d618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 163.488407][ T8705] #9: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 163.488442][ T8705] #10: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 163.488482][ T8705] [ 163.488482][ T8705] stack backtrace: [ 163.488493][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.1.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.488515][ T8705] Tainted: [L]=SOFTLOCKUP [ 163.488521][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.488531][ T8705] Call Trace: [ 163.488537][ T8705] [ 163.488543][ T8705] dump_stack_lvl+0x100/0x190 [ 163.488567][ T8705] print_circular_bug.cold+0x178/0x1be [ 163.488592][ T8705] check_noncircular+0x146/0x160 [ 163.488614][ T8705] check_prev_add+0xeb/0xe60 [ 163.488628][ T8705] ? printk_get_next_message+0x30a/0x6c0 [ 163.488641][ T8705] __lock_acquire+0x1492/0x1ec0 [ 163.488658][ T8705] lock_acquire+0x1b9/0x370 [ 163.488673][ T8705] ? console_lock_spinning_enable+0x61/0x80 [ 163.488685][ T8705] ? console_lock_spinning_enable+0x4a/0x80 [ 163.488697][ T8705] console_lock_spinning_enable+0x72/0x80 [ 163.488708][ T8705] ? console_lock_spinning_enable+0x61/0x80 [ 163.488719][ T8705] console_flush_one_record+0x737/0xf10 [ 163.488732][ T8705] ? __pfx_console_flush_one_record+0x10/0x10 [ 163.488746][ T8705] ? is_printk_cpu_sync_owner+0x32/0x40 [ 163.488760][ T8705] console_unlock+0x103/0x260 [ 163.488771][ T8705] ? __pfx_console_unlock+0x10/0x10 [ 163.488783][ T8705] ? do_raw_spin_unlock+0x145/0x1e0 [ 163.488794][ T8705] ? _printk+0xcf/0x110 [ 163.488804][ T8705] vprintk_emit+0x407/0x6b0 [ 163.488816][ T8705] ? __pfx_vprintk_emit+0x10/0x10 [ 163.488831][ T8705] _printk+0xcf/0x110 [ 163.488840][ T8705] ? __pfx__printk+0x10/0x10 [ 163.488851][ T8705] ? do_raw_spin_lock+0x128/0x260 [ 163.488862][ T8705] __slab_bug+0x4f/0xb0 [ 163.488873][ T8705] slab_bug+0x5d/0x80 [ 163.488884][ T8705] __kmem_cache_shutdown.cold+0x39/0x177 [ 163.488898][ T8705] kmem_cache_destroy+0x73/0x190 [ 163.488909][ T8705] virtio_gpu_free_vbufs+0x38/0x80 [ 163.488923][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 163.488934][ T8705] virtio_gpu_release+0x5c/0x1c0 [ 163.488944][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 163.488955][ T8705] drm_dev_put.part.0+0xbd/0x140 [ 163.488965][ T8705] drm_dev_put+0x1f/0x30 [ 163.488973][ T8705] virtio_dev_remove+0xb8/0x170 [ 163.488983][ T8705] ? __pfx_virtio_dev_remove+0x10/0x10 [ 163.488993][ T8705] device_remove+0xcb/0x180 [ 163.489002][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.489015][ T8705] bus_remove_device+0x2bc/0x560 [ 163.489031][ T8705] ? __pfx_bus_remove_device+0x10/0x10 [ 163.489047][ T8705] ? __pfx_device_remove_attrs+0x10/0x10 [ 163.489064][ T8705] device_del+0x376/0x9b0 [ 163.489074][ T8705] ? __pfx_device_del+0x10/0x10 [ 163.489083][ T8705] ? __pfx___might_resched+0x10/0x10 [ 163.489098][ T8705] ? __pfx_pci_device_is_present+0x10/0x10 [ 163.489110][ T8705] device_unregister+0x1d/0xe0 [ 163.489120][ T8705] unregister_virtio_device+0x39/0x60 [ 163.489130][ T8705] virtio_pci_remove+0x7c/0x110 [ 163.489145][ T8705] pci_device_remove+0xb2/0x1d0 [ 163.489158][ T8705] ? __pfx_pci_device_remove+0x10/0x10 [ 163.489172][ T8705] device_remove+0xcb/0x180 [ 163.489182][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.489195][ T8705] pci_stop_bus_device+0x120/0x160 [ 163.489233][ T8705] pci_stop_and_remove_bus_device+0x58/0xa0 [ 163.489250][ T8705] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 163.489267][ T8705] remove_store+0x123/0x140 [ 163.489277][ T8705] ? __pfx_remove_store+0x10/0x10 [ 163.489287][ T8705] ? find_held_lock+0x2b/0x80 [ 163.489299][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 163.489313][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 163.489333][ T8705] ? __pfx_remove_store+0x10/0x10 [ 163.489342][ T8705] dev_attr_store+0x58/0x80 [ 163.489354][ T8705] ? __pfx_dev_attr_store+0x10/0x10 [ 163.489366][ T8705] sysfs_kf_write+0xf2/0x150 [ 163.489380][ T8705] kernfs_fop_write_iter+0x3e0/0x5f0 [ 163.489393][ T8705] ? __pfx_sysfs_kf_write+0x10/0x10 [ 163.489408][ T8705] vfs_write+0x6af/0x1050 [ 163.489420][ T8705] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 163.489439][ T8705] ? __pfx_vfs_write+0x10/0x10 [ 163.489456][ T8705] ? find_held_lock+0x2b/0x80 [ 163.489480][ T8705] ksys_write+0x12a/0x250 [ 163.489500][ T8705] ? __pfx_ksys_write+0x10/0x10 [ 163.489522][ T8705] do_syscall_64+0x123/0x790 [ 163.489540][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.489557][ T8705] RIP: 0033:0x7f0b1b99e159 [ 163.489570][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.489586][ T8705] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.489602][ T8705] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 163.489613][ T8705] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 163.489623][ T8705] RBP: 00007f0b1ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 163.489633][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.489643][ T8705] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 163.489658][ T8705] [ 163.550798][ T24] usb 8-1: USB disconnect, device number 30 [ 163.551585][ T8705] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 163.685630][ T1483] usb 7-1: not running at top speed; connect to a high speed hub [ 163.686524][ T8705] ----------------------------------------------------------------------------- [ 163.686524][ T8705] [ 163.686538][ T8705] Object 0xffff888023e5c000 @offset=0 [ 163.688932][ T1483] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 163.690346][ T8705] Object 0xffff888023e5c118 @offset=280 [ 163.690360][ T8705] Slab 0xffffea00008f9700 objects=29 used=2 fp=0xffff888023e5c230 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 163.692949][ T1483] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.693796][ T8705] ------------[ cut here ]------------ [ 163.698169][ T1483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.699234][ T8705] 1 [ 163.699239][ T8705] WARNING: mm/slub.c:1245 at __slab_err+0x15/0x20, CPU#1: syz.1.1033/8705 [ 163.701445][ T1483] usb 7-1: Product: syz [ 163.703360][ T8705] Modules linked in: [ 163.703376][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.1.1033 Tainted: G B L syzkaller #0 PREEMPT(full) [ 163.703396][ T8705] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 163.703401][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.703409][ T8705] RIP: 0010:__slab_err+0x15/0x20 [ 163.703423][ T8705] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 163.706476][ T1483] usb 7-1: Manufacturer: syz [ 163.707612][ T8705] RSP: 0018:ffffc90003c9f740 EFLAGS: 00010093 [ 163.709629][ T1483] usb 7-1: SerialNumber: syz [ 163.711335][ T8705] [ 163.711342][ T8705] RAX: 0000000000000000 RBX: ffffc90003c9f790 RCX: 0000000000000001 [ 163.711354][ T8705] RDX: ffff88802ab84b00 RSI: ffffffff81c769bd RDI: ffff88802ab84b00 [ 163.719367][ T1483] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 163.719436][ T8705] RBP: ffff888027d4d618 R08: 0000000000000007 R09: 0000000000000000 [ 163.722480][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 163.723676][ T8705] R10: 0000000000000000 R11: 0000000020202020 R12: 0000000000001ea0 [ 163.723687][ T8705] R13: ffff888023e5dfb8 R14: ffff888027d4d600 R15: ffffea00008f9700 [ 163.723695][ T8705] FS: 00007f0b1c7bc6c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 163.723719][ T8705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.723729][ T8705] CR2: 00007f0b19bb2f00 CR3: 0000000053dd6000 CR4: 0000000000352ef0 [ 163.723737][ T8705] Call Trace: [ 163.723742][ T8705] [ 163.727522][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 163.728329][ T8705] __kmem_cache_shutdown.cold+0x16e/0x177 [ 163.731269][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 163.732088][ T8705] kmem_cache_destroy+0x73/0x190 [ 163.736662][ T1483] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 163.738133][ T8705] virtio_gpu_free_vbufs+0x38/0x80 [ 163.741233][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 163.741990][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 163.742007][ T8705] virtio_gpu_release+0x5c/0x1c0 [ 163.742018][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 163.742030][ T8705] drm_dev_put.part.0+0xbd/0x140 [ 163.742040][ T8705] drm_dev_put+0x1f/0x30 [ 163.747410][ T1483] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 163.749801][ T8705] virtio_dev_remove+0xb8/0x170 [ 163.749832][ T8705] ? __pfx_virtio_dev_remove+0x10/0x10 [ 163.749850][ T8705] device_remove+0xcb/0x180 [ 163.749873][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.749895][ T8705] bus_remove_device+0x2bc/0x560 [ 163.749929][ T8705] ? __pfx_bus_remove_device+0x10/0x10 [ 163.749952][ T8705] ? __pfx_device_remove_attrs+0x10/0x10 [ 163.749980][ T8705] device_del+0x376/0x9b0 [ 163.749998][ T8705] ? __pfx_device_del+0x10/0x10 [ 163.750013][ T8705] ? __pfx___might_resched+0x10/0x10 [ 163.750038][ T8705] ? __pfx_pci_device_is_present+0x10/0x10 [ 163.750061][ T8705] device_unregister+0x1d/0xe0 [ 163.750075][ T8705] unregister_virtio_device+0x39/0x60 [ 163.750090][ T8705] virtio_pci_remove+0x7c/0x110 [ 163.750112][ T8705] pci_device_remove+0xb2/0x1d0 [ 163.750134][ T8705] ? __pfx_pci_device_remove+0x10/0x10 [ 163.750157][ T8705] device_remove+0xcb/0x180 [ 163.750174][ T8705] device_release_driver_internal+0x44e/0x620 [ 163.750193][ T8705] pci_stop_bus_device+0x120/0x160 [ 163.750224][ T8705] pci_stop_and_remove_bus_device+0x58/0xa0 [ 163.750251][ T8705] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 163.754317][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 163.755266][ T8705] remove_store+0x123/0x140 [ 163.758895][ T1483] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 163.759499][ T8705] ? __pfx_remove_store+0x10/0x10 [ 163.759523][ T8705] ? find_held_lock+0x2b/0x80 [ 163.759547][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 163.763238][ T1483] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 163.764815][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 163.764847][ T8705] ? __pfx_remove_store+0x10/0x10 [ 163.764863][ T8705] dev_attr_store+0x58/0x80 [ 163.764885][ T8705] ? __pfx_dev_attr_store+0x10/0x10 [ 163.767412][ T1483] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 163.768922][ T8705] sysfs_kf_write+0xf2/0x150 [ 163.768944][ T8705] kernfs_fop_write_iter+0x3e0/0x5f0 [ 163.768958][ T8705] ? __pfx_sysfs_kf_write+0x10/0x10 [ 163.768974][ T8705] vfs_write+0x6af/0x1050 [ 163.833710][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 163.834017][ T8705] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 163.933669][ T5730] Bluetooth: hci1: command tx timeout [ 163.934240][ T8705] ? __pfx_vfs_write+0x10/0x10 [ 163.944346][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 163.944524][ T8705] ? find_held_lock+0x2b/0x80 [ 163.946529][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 163.948127][ T8705] ksys_write+0x12a/0x250 [ 163.950126][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 163.951592][ T8705] ? __pfx_ksys_write+0x10/0x10 [ 164.035401][ T8701] FAULT_INJECTION: forcing a failure. [ 164.035401][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 164.036527][ T8705] do_syscall_64+0x123/0x790 [ 164.036547][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.036560][ T8705] RIP: 0033:0x7f0b1b99e159 [ 164.038564][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.2.1032 Tainted: G B L syzkaller #0 PREEMPT(full) [ 164.038593][ T8701] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 164.038599][ T8701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.038609][ T8701] Call Trace: [ 164.038616][ T8701] [ 164.038623][ T8701] dump_stack_lvl+0x100/0x190 [ 164.038650][ T8701] should_fail_ex.cold+0x5/0xa [ 164.038669][ T8701] ? __kmalloc_cache_noprof+0x6b/0x6b0 [ 164.038690][ T8701] should_failslab+0xc2/0x120 [ 164.038715][ T8701] __kmalloc_cache_noprof+0x91/0x6b0 [ 164.038735][ T8701] ? alloc_tty_struct+0x96/0x8c0 [ 164.038756][ T8701] alloc_tty_struct+0x96/0x8c0 [ 164.038774][ T8701] ? __pfx_alloc_tty_struct+0x10/0x10 [ 164.038793][ T8701] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 164.038814][ T8701] tty_init_dev.part.0+0x20/0x470 [ 164.038831][ T8701] tty_open+0xa63/0xfa0 [ 164.038849][ T8701] ? __pfx_tty_open+0x10/0x10 [ 164.038866][ T8701] ? chrdev_open+0x589/0x6a0 [ 164.038887][ T8701] ? lock_release+0x24d/0x310 [ 164.038912][ T8701] ? __pfx_tty_open+0x10/0x10 [ 164.038928][ T8701] chrdev_open+0x234/0x6a0 [ 164.038952][ T8701] ? __pfx_chrdev_open+0x10/0x10 [ 164.038976][ T8701] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 164.038998][ T8701] do_dentry_open+0x6ab/0x14d0 [ 164.039019][ T8701] ? __pfx_chrdev_open+0x10/0x10 [ 164.039045][ T8701] vfs_open+0x82/0x3f0 [ 164.039062][ T8701] path_openat+0x19fa/0x2440 [ 164.039088][ T8701] ? __pfx_path_openat+0x10/0x10 [ 164.039116][ T8701] do_file_open+0x20e/0x430 [ 164.039145][ T8701] ? __pfx_do_file_open+0x10/0x10 [ 164.039177][ T8701] ? _raw_spin_unlock+0x28/0x50 [ 164.039201][ T8701] ? alloc_fd+0x471/0x7a0 [ 164.039229][ T8701] do_sys_openat2+0x10f/0x1e0 [ 164.039245][ T8701] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.039261][ T8701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.039280][ T8701] ? __fget_files+0x21f/0x3d0 [ 164.039306][ T8701] __x64_sys_openat+0x12d/0x210 [ 164.039329][ T8701] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.039345][ T8701] ? ksys_write+0x1ac/0x250 [ 164.039366][ T8701] ? rcu_is_watching+0x13/0xc0 [ 164.039386][ T8701] do_syscall_64+0x123/0x790 [ 164.039404][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.039421][ T8701] RIP: 0033:0x7feac6d9e159 [ 164.039435][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.039451][ T8701] RSP: 002b:00007feac7cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.039469][ T8701] RAX: ffffffffffffffda RBX: 00007feac7025fa0 RCX: 00007feac6d9e159 [ 164.039480][ T8701] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 164.039490][ T8701] RBP: 00007feac7cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 164.039501][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.039511][ T8701] R13: 00007feac7026038 R14: 00007feac7025fa0 R15: 00007ffc35e28fb8 [ 164.039527][ T8701] [ 164.044537][ T1037] usb 7-1: USB disconnect, device number 40 [ 164.045638][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.045652][ T8705] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.045665][ T8705] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 164.045672][ T8705] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 164.045678][ T8705] RBP: 00007f0b1ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 164.084137][ T1037] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 164.086299][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.086317][ T8705] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 164.086335][ T8705] [ 164.086345][ T8705] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.086361][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.1.1033 Tainted: G B L syzkaller #0 PREEMPT(full) [ 164.086378][ T8705] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 164.086382][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.086389][ T8705] Call Trace: [ 164.086394][ T8705] [ 164.086398][ T8705] dump_stack_lvl+0x100/0x190 [ 164.086416][ T8705] vpanic+0x553/0x970 [ 164.086427][ T8705] ? __pfx_vpanic+0x10/0x10 [ 164.086436][ T8705] ? lock_release+0x24d/0x310 [ 164.086454][ T8705] panic+0xd1/0xe0 [ 164.086464][ T8705] ? __pfx_panic+0x10/0x10 [ 164.086476][ T8705] check_panic_on_warn.cold+0x19/0x34 [ 164.086487][ T8705] ? __slab_err+0x15/0x20 [ 164.086497][ T8705] __warn.cold+0x191/0x318 [ 164.086508][ T8705] __report_bug+0x30f/0x440 [ 164.086519][ T8705] ? __slab_err+0x15/0x20 [ 164.086530][ T8705] ? __pfx___report_bug+0x10/0x10 [ 164.086541][ T8705] ? irq_work_queue+0xd1/0x100 [ 164.086552][ T8705] ? __wake_up_klogd+0xe5/0x140 [ 164.086563][ T8705] ? vprintk_emit+0x1c9/0x6b0 [ 164.086575][ T8705] ? __pfx_vprintk_emit+0x10/0x10 [ 164.086586][ T8705] ? __pfx_vprintk_emit+0x10/0x10 [ 164.086599][ T8705] ? __slab_err+0x15/0x20 [ 164.086609][ T8705] report_bug+0xb3/0x220 [ 164.086620][ T8705] ? __slab_err+0x15/0x20 [ 164.086630][ T8705] handle_bug+0x16a/0x2a0 [ 164.086644][ T8705] exc_invalid_op+0x17/0x50 [ 164.086656][ T8705] asm_exc_invalid_op+0x1a/0x20 [ 164.086667][ T8705] RIP: 0010:__slab_err+0x15/0x20 [ 164.086679][ T8705] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 164.086690][ T8705] RSP: 0018:ffffc90003c9f740 EFLAGS: 00010093 [ 164.086699][ T8705] RAX: 0000000000000000 RBX: ffffc90003c9f790 RCX: 0000000000000001 [ 164.086706][ T8705] RDX: ffff88802ab84b00 RSI: ffffffff81c769bd RDI: ffff88802ab84b00 [ 164.086713][ T8705] RBP: ffff888027d4d618 R08: 0000000000000007 R09: 0000000000000000 [ 164.086720][ T8705] R10: 0000000000000000 R11: 0000000020202020 R12: 0000000000001ea0 [ 164.086726][ T8705] R13: ffff888023e5dfb8 R14: ffff888027d4d600 R15: ffffea00008f9700 [ 164.086735][ T8705] ? add_taint+0x6d/0xb0 [ 164.086749][ T8705] __kmem_cache_shutdown.cold+0x16e/0x177 [ 164.086764][ T8705] kmem_cache_destroy+0x73/0x190 [ 164.086776][ T8705] virtio_gpu_free_vbufs+0x38/0x80 [ 164.086792][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 164.086805][ T8705] virtio_gpu_release+0x5c/0x1c0 [ 164.086816][ T8705] ? __pfx_virtio_gpu_release+0x10/0x10 [ 164.086827][ T8705] drm_dev_put.part.0+0xbd/0x140 [ 164.086839][ T8705] drm_dev_put+0x1f/0x30 [ 164.086848][ T8705] virtio_dev_remove+0xb8/0x170 [ 164.086859][ T8705] ? __pfx_virtio_dev_remove+0x10/0x10 [ 164.086869][ T8705] device_remove+0xcb/0x180 [ 164.086879][ T8705] device_release_driver_internal+0x44e/0x620 [ 164.086893][ T8705] bus_remove_device+0x2bc/0x560 [ 164.086910][ T8705] ? __pfx_bus_remove_device+0x10/0x10 [ 164.086926][ T8705] ? __pfx_device_remove_attrs+0x10/0x10 [ 164.086943][ T8705] device_del+0x376/0x9b0 [ 164.086954][ T8705] ? __pfx_device_del+0x10/0x10 [ 164.086964][ T8705] ? __pfx___might_resched+0x10/0x10 [ 164.086978][ T8705] ? __pfx_pci_device_is_present+0x10/0x10 [ 164.086993][ T8705] device_unregister+0x1d/0xe0 [ 164.087003][ T8705] unregister_virtio_device+0x39/0x60 [ 164.087014][ T8705] virtio_pci_remove+0x7c/0x110 [ 164.087029][ T8705] pci_device_remove+0xb2/0x1d0 [ 164.087043][ T8705] ? __pfx_pci_device_remove+0x10/0x10 [ 164.087058][ T8705] device_remove+0xcb/0x180 [ 164.087068][ T8705] device_release_driver_internal+0x44e/0x620 [ 164.087081][ T8705] pci_stop_bus_device+0x120/0x160 [ 164.087098][ T8705] pci_stop_and_remove_bus_device+0x58/0xa0 [ 164.087115][ T8705] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 164.087132][ T8705] remove_store+0x123/0x140 [ 164.087143][ T8705] ? __pfx_remove_store+0x10/0x10 [ 164.087154][ T8705] ? find_held_lock+0x2b/0x80 [ 164.087166][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 164.087181][ T8705] ? sysfs_file_kobj+0xe4/0x290 [ 164.087196][ T8705] ? __pfx_remove_store+0x10/0x10 [ 164.087206][ T8705] dev_attr_store+0x58/0x80 [ 164.087219][ T8705] ? __pfx_dev_attr_store+0x10/0x10 [ 164.087231][ T8705] sysfs_kf_write+0xf2/0x150 [ 164.087247][ T8705] kernfs_fop_write_iter+0x3e0/0x5f0 [ 164.087261][ T8705] ? __pfx_sysfs_kf_write+0x10/0x10 [ 164.087276][ T8705] vfs_write+0x6af/0x1050 [ 164.087290][ T8705] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 164.087310][ T8705] ? __pfx_vfs_write+0x10/0x10 [ 164.087322][ T8705] ? find_held_lock+0x2b/0x80 [ 164.087338][ T8705] ksys_write+0x12a/0x250 [ 164.087351][ T8705] ? __pfx_ksys_write+0x10/0x10 [ 164.087371][ T8705] do_syscall_64+0x123/0x790 [ 164.087389][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.087408][ T8705] RIP: 0033:0x7f0b1b99e159 [ 164.087423][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.087440][ T8705] RSP: 002b:00007f0b1c7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.087458][ T8705] RAX: ffffffffffffffda RBX: 00007f0b1bc25fa0 RCX: 00007f0b1b99e159 [ 164.087468][ T8705] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 164.087478][ T8705] RBP: 00007f0b1ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 164.087485][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.087491][ T8705] R13: 00007f0b1bc26038 R14: 00007f0b1bc25fa0 R15: 00007ffcb8482158 [ 164.087501][ T8705] [ 164.089279][ T8705] Kernel Offset: disabled