last executing test programs: 5.704511694s ago: executing program 0 (id=8129): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8140, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$alg(0x26, 0x5, 0x0) write$sequencer(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x5450, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001000)={r2, 0x0, "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", "4b735dacd4072a843c6101c01ec45f5bf1f75e15dd47381f684b683e25546c89c63ef253d95df07a572cd727be7e8df45f7924dd853b5694b03e46b0bfb92ff5020c8346ce598438784d83df078cd275a11c13b164fd58e653fdca6e7bc1c0bb28c91cffb192005cc1e116fca111fc150adb835de4312dbaea8825bf8ec5186081f5b003fad4de232a82be7e0d9a55b2fc94f576d28589019273738e2bedcbb2a31296b02e16b6e3c0464bfd00ca0caf6aa813a2c691ede32a72ed3f6939e95c8f543dac1d6e5e891e250d03aaa853e0b5ff120d22c2b30c8a2377cb43473428123bd2572e6d7696112cc5596b75def2ae9847863fddd653066fcf48628b6e57e85dbec12029f100e0c2b42f304363a71e42789ba7f0410e10f9eb7ba49d97c35aaf33b5c3d87c87d6b279bc5c16c76b1fc2b62c61e606223012643e37db86445acf287efde84a038ac22102e0c9a4e59fe4bc5809f30bc65ad588411b7fac999dae64c29395fc1b5b5541e8649d75cf4ab01d64796e158a13ac0c76edb2de7aeaa099511c6f22d821baebe8b737337f7f1bba88d9878a3630d084f521cce81059b9baf5ffd0b964951ebcf8451a6e8d7213bd291a2413ecfe9e8214cc082e34e17f72cb1929ac32f65df6deb78e84031f8cc840964a886f66a698a0554d2e36651772272b61dc4dda67fd91aa8cf2c7c1226cb20480be32e46fd7306653a8d5bbdaaf284d93a2863c80cc342676003ea91d410add232e27d3badf4236fb0c344845de35ee43b47cc6531bf316e9d23de651164c94f02f311eff81b6c082b0616926d67311fc6a7e138a6224acf314cce758f91bb12d161d83c293685cf9d7ef59fd909160347847285b96a7057bdb9d91fcc4410accb46567c393663dd1263b0e3d03f7c26ae86db7ead3cbf57aa73df40e7e1e8c7204d317686aaaa1e72c358c036289e15ec00383b4b08c82f4418a2d6c6b1ff357b70d61608c38b905d696578f126fbb1b80d4cd159a2425c81e390f64dc56fd46e496ba1c1d84a4cfef05f8d090c315756db3f12524a63aaa002bcb5b8e45acb5626fc14df6287e763f96d958d29bc8bb647f79306dd7fb7203137dce7c76b93a77cdf829bf366e10d28f93e6c95f783bad4d4de1bd8aea89dcc2345a5200f7a2503ea03d1e5f3b4b11e578b8a845b90b87405ee458ed2b9f755efab0ad1551e75070eee3d3c5b01b4afd29a61a1a45a22ef6e037f2c3acc0a0f531d1993881a142884113d73a449d3e354cc5b2871986538a17e180f07c053c46fec56965dec98c187f1c290ba67cbf020d1c8c7b06d7768e95396b4b7346cdcc1a485c6b7ded241ad80cf5cc0b2f8ddf38912fffb4f0731363a248f1d52fd5204675f48cddd1a59380da8c88d7044309daa9b5f9c6201f0651a505d5bcd74f6e21b3586a4b9fab9e83751a467223bb59e585508d166619f88d7d463b43ed04b1aa9781ecbfdba8631dfb4439e029a7e492f09a96a0656d6e2bee0877c5f213f21c5c2660a901aa14f3e58112d819c041d9a7817e62d4f02aa69dcfc8ec2e12d207e56aacc5783d6bb03615be41d3753039aad9faa9f36d8cf1bb17f93bb059f31b6bb0f73e74ca01b0bf7a28bfb8f5e93b0f07887c361e09dc5d07ee2417da24866311467849b87289999741722c67a56dd4387a6248479fa3e240d6febb48a65a06373ea91df5fa5128a2c8444b3526caabdabc9ff5354c766eb4fb47e7cc1fdcfdd239cb6855dad6f70986c3fc6be35e4a6cb6f6c53e5c7e54a581027e41371758c8426ccaf3376ebc50a6bce90ddc72833c3ac80ba22f5233019c3bb4aee8c650a444e5cd737b581ab5ff411a835b41bc063d0740b07578b8206902ff62b6496f4797dd84fc278b4873ac47b4f80bc2ac203cd617b49b39188cbcbdd8448b9c67ec2d33c444b1789cc64e3f2bc4ec2ada80326829f8b69b1e0e103144e7f3ffb520933521c165b6b0f2860a0e3feddae4ca2833ebc117e26e4a65b29b7a29438d10ff2acc75be46fabc423935fd53dc2fa8cb52ff8a1657e287c3e1e88b61561aea8a62b2b9368276a7f1f149b9724c75207de1d714d53144eb4e88e54066f863e35b5ee27e765f4da9f998861d19e48e85ecc01ff36dbc57e7868bff4369a8c7b04a7f83ddbe79a85f4bfdc2804e53a4d4cf1ae3598870d907c3ec8ab52724ceefba27ed257b3c47ff0dccc994e77af64f593558e0d61ea10b8b2e163bcad03548e30eadd431500540f76d46083d60ff680db8fd8a4ecd901d2f8497231abf1b176bdb81b53711545fffe078322a11edf502934dbcd22ebed8093b43dd6f83acc6400e108d16b2e057ee3ad82979e3994cc1f9a290ec54be28b7781d015c4901457429deffb5fd6480227e73dc54d0c40b72d41af61b5c16c3a8704c08043847dc6e438f6b3a4c6ca1c8975618c40b3015947dcf3faaf19a70e3a14b3dd4ddfd6c5ff1abd9c595ab6dab067dce7b7600eb5f927ceb5ad4663bcd1072aaa37df6d5fd3578927d0653985ab3f2a5b03de1421292c72281a1b97e5e074668db558be27ded0fddabb112a14c0f22b080d3ff8b8faf5c399beaf04347f598e870e44d2f1bc18a33b7cd2727ce8899f999143deb3fa94c0a5386f5874375af7d20952842d4d8ab35f90a1d37da199173969dfc55df767eb1086b13f19ab38e61f97ab632dad007c815ece4bd1924be9e1e2b8ae9ce81bf8606ced3495aee9d8f73e82b312946f5ca1b34c86b6f6c7129c309693d1b8bde7a39ce89213efbc3ff79bcbdf23e3719cc6fb8226403d4353833dfb97944973b4607595a7dd20d7e4a187a2cc34ab53f35f55be4207af1e13817b9a8259f4ab3c2bc34df101f4681a7110987ff162c073b325590a874030dc587d325c127fdbf8ee95f8e177a423e54fccb286ba4c44cfda5f748ab6fa7c0b8b5507609c45401e40eef9d612a324f89a9e3b65be9712dd399e993e9dbcd12b2cdff6939ef3ab4f7ef0fb5aeb3cecb02a260c4876bc2870b83fce5418405f6fed1c469f75cb83234a6d312e12464cfb998658cb67dcd9cfaed506b21bd634775dbefca0f6733b1dee6b6f770ec2f5f886f53746ef87b56f1d60b0fcab7a0f7daef725138e927d14397ab52f8ef068f8be8df20d4199d40158b8d2d8901b72ded1066b1c0868bf4ebfa2d902c9f46b1a4bce0a5fa88552551f9e7b149b7ab37f72eb2c6edbced462b89b4839b9998f23d8218fe1c4f7e4a68c020b5028f9323d577d614fad43022239748193918c10c12feceaf9304b769fadb560056aed05b035f2ce0bce97303f6ef40672c4cbbe49496b2bdd5fa6f2dc779ba5c4868a800cbffa9ce16ed665d88a7002561f94e78b62fc3d5676f68cd31fe43a80f61a6747c4083a3d71a32e508ac3d7a4448cb6ed1545da7e6e46c95dde5b8755ef046154f8c97f01b65da0638e4dd93b216564cb85a281ee6d1f16669ac0eddc6f88629f89dac3fb4174586aa77cc925240671e176f18b52511955cca4eb5e22d1181792529e434004b984e49819f7ec83c8f182668c7988b908d5409d7dfebaa505de5cfd046ca747c48dc2b20cd310b38543baae059e4f033b2b76160521ff3080bc1b646ec551aa72df884364a41f3fd52929c9134c95331edfd92dcbaad1c0e4df93ff1b848f32b40fe705435d3d3642d1b737d8cef2b7228a8f952d360e21d2df4fb4d3fd85d20ae32eafb59cb7c8ee94f12d587a9e542f5a290de38a89a64071400895584fd652ff6b6918c5b2251a0fa704868ef479b66308bfff5e8eaeb09842321ca666b3be650a4cc821aa09040cfbf3243f2da8d93ada02177c66e80280819b8c3620e2186e9567861bc9194c489cb596134ab779e5009a65d0e17583666f0dcd80f11de43c9029e60960791e03a118bb59bb2cde7923c99ecc03b2b8405f41532d6ffbf426c3bc0cf4fd8daafe6552345b4c2f0d339b2362f97e9ac2f2e2a1d3192ce1804f54e0db24a0ffa9796aa9567c16eb7e843831164d343aa2b40a30242f44fdf26d8f7bf6de64c63bff2b61f97b3d1495092f858057f8a7f9b2449264479ab18b85432add66ffa7a106b76144c5b28db6a16f30bb05b5a0fb2bfc7e9e9817d16651939d8f772c15b701a13ce38e989b4ce2ad20c91e309f3ada35a9d2825d9ba9f5c1fcb672134a6d09d1bd5dfa061db69aeca5e28cb8248910ccf680159e040ea1c55a046d9c0bdf8df38dd8d2bd276eeb8e89a21701e380841ca4ffc394edd5da6fc4621a157e2c607ba4d83bff47d7320afbb13bf864da730c7a97bd1018cd41f76192d9fd791783d5f1c3419a8f126ac184a9e95475e03a8830163f9cc08767db07fc982d851cb479d43d257a36374cf4403f0e05c9173bdbf8fca670c070632c523902c10d2c351a86a9bce85dd3430b0d7aa1736aa488fc2fce90b3019257bb3c58911b7deba4505a20a35ad5ecf1ab484cdc977053cc7b26369660356d3ee4d3d4da458ada24e50fcb23db36a13f7f6f48614800f54b00ccb172c14cab33f7e07df6547360e2120e68c5397026398aff32c493f629acceb5aae3cc00f0e53a9232aa55a6b98a4e15611e69cd6e27afa8e49e03dc8d1f8688e628a90016da44975f543c2be327989323f43d4b40ee8a6f12e0c8d6067e92985b3effadace17ed32d5b44fc71d66630a9b555f943a7441ede09c1f009a91f5237f433a2eda7c2579072f2a0ce8cf01e5350e716a587f230e8ee0da0fb7bb237652e435e72d776da49af7723dcc8548752a7c34f49942cbb1e4cb5894d8b767db419b8dc8496ff07f2683f1e6909db307b1acfb0352d8b2e35d73bde60ce5633635d84db2541e2767cfddc30f9ce65c1924d81dec9a5700b210904e83ed465193f1011dd9430ab663dad2773f010ad0a37fe875655cab97838669e4e35b57476560386c50569646856226c34fcd10e037b6d6172a26015e5a7f84b40c2a5f8dcbd78ffc01f01c53f2000a3baee3e4c7a077eb3f5f2c3fb1db59ff366f618d16b25818fe74112db40d1363b25dfe82bf082514ca6388997615fd58fce1d3eccf65647c954ab18f1488c6a15917dfd36f834f51ba28e6c31746ea2567334db21ffd1e84ecce1055c645afe5c3a0177208a6364662a808dc3381632144196d932fc4472b0809140f5cf950bb5dd0d238d39cf4e98cb37461ba8f156ee1f58e139f17017db4718003587b6536c4882daa28358dd93cc281982117472b6e37cc5b76268131df231e5f7a90de206311d596b0ec6277df510af3e1617b117dc0cfc407b9afaf019ae10f7121943d489f2960fa529a0e963b6a0b1b144eda2c001680734a9dba2cea19733eabffd732575a7b5b40088af90ff9e610d906801a905eefb0decc8cb6f29eab479140a03645918274a3"}) close(r0) accept(r3, &(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000002080)=0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0xd, 0x0, &(0x7f00000021c0)) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r7 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800) close(r7) close(r6) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000020c0)=0x8, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000002140)={'sit0\x00', &(0x7f0000002100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f, 0x11}}) 5.543228453s ago: executing program 0 (id=8130): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000)={0x80042, 0x1}, 0x18) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240040c0}, 0xc000) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000054) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r4 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) flock(r4, 0xb) r5 = memfd_create(&(0x7f00000000c0)='ns/user\x00', 0x0) write$P9_ROPEN(r5, 0x0, 0x0) (async) write$P9_ROPEN(r5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0x5450, 0x0) 4.061045255s ago: executing program 1 (id=8133): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x5452, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) memfd_secret(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80240, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 3.873404956s ago: executing program 1 (id=8134): r0 = io_uring_setup(0x7b97, &(0x7f0000000300)) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0xb, 0x80040) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) close(r3) recvmsg$inet_nvme(r1, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002740)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 3.196986353s ago: executing program 1 (id=8135): r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$smackfs_ptrace(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x9000000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0x10000, 0x4) 2.722824199s ago: executing program 0 (id=8136): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0xb, 0x80040) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2b4, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff289}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x1000}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78e}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8, 0x3, "23af77cd"}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x7eaa}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd, @private2, 0xf6f}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2c12b43d}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x683}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5af}]}]}, 0x2b4}}, 0x20001080) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000031014080325bd7000fedbdf254c"], 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x40) 2.467933343s ago: executing program 0 (id=8137): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 2.33542192s ago: executing program 0 (id=8138): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000002c0)={{[0x8, 0x3, 0x3, 0x6]}, 0x0, 0x3, 0x7fffffff, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0xffff, 0x3]}, {0x3, 0x1000, 0xfffffffa, 0x3}}, 0x6, 0x0, '/sys/kernel/debug/binder/transactions\x00'}, {{@_ha_fsid={[0x0, 0xa52b]}, {0x7, 0x9, 0xfffeffff, 0xffffffff}}, 0x26, 0x0, '/sys/kernel/debug/binder/transactions\x00'}, {{@_ha_fsid={[0x8, 0x7]}, {0xfffe, 0xb, 0x8001, 0x3ff}}, 0x80000000, 0x0, '$}-[+-.\x00'}, {{@align=0x5, {0x8, 0x8, 0x3ff, 0x7}}, 0x0, 0x0, '\x00'}, {{@align=0x9, {0x101, 0x6, 0x5, 0x8}}, 0xc9, 0x0, '/sys/kernel/debug/binder/transactions\x00'}, {{@_ha_fsid={[0xa, 0xfffffff9]}, {0xc, 0x1, 0x7, 0x7fff}}, 0xa, 0x0, '/sys/kernel/debug/binder/transactions\x00'}, {{@_ha_fsid={[0x7fff, 0x9]}, {0x4307, 0x5, 0x8, 0x2}}, 0x5, 0x0, '/sys/kernel/debug/binder/transactions\x00'}, {{@_ha_fsid={[0x2, 0x7]}, {0x3, 0x0, 0xd562, 0xffff}}, 0x2, 0x0, '/sys/kernel/debug/binder/transactions\x00'}]}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)={0xbe, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim, @ra={0x5, 0x2, 0x7fff}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x2, [0xfffffffffffffff7, 0x5, 0x9, 0xfffffffeffffffff, 0xc]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7c60}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x7f}]}, 0x70) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x5, 0xaad, 0x4, 0x7fffffff, 0x6, 0x0, [{0xfd1, 0x1, 0x8000000000000001, '\x00', 0x200}, {0x5, 0x5a65c070, 0x3, '\x00', 0x804}, {0xd98, 0x3, 0x9}, {0x400, 0x9, 0xfffffffffffffffe, '\x00', 0x106}, {0x9, 0xaf, 0x6, '\x00', 0x2}, {0x8b8, 0x6, 0x6, '\x00', 0x200}]}) fstatfs(r0, &(0x7f0000000500)=""/116) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000580)={0x0, 0x1, 0x93, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000980)={r2, "09ecdfd3c1229abc053b456c5c15c1b3"}) r3 = openat2(r0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x400, 0x1a, 0x16}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000001a00)) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x4e23, 0x8, @loopback, 0x2}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001a80), 0x121380, 0x0) write$rfkill(r5, &(0x7f0000001ac0)={0x7, 0x7, 0x0, 0x1, 0x1}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x70, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$cgroup_ro(r3, &(0x7f0000001cc0)='cpuacct.usage_user\x00', 0x0, 0x0) shutdown(r4, 0x1) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001d00)=""/134, &(0x7f0000001dc0)=0x86) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001f00)={r4}) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000001f40)=[{{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x8) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001f80), &(0x7f0000001fc0)={0x0, 0xfb, 0x4c, 0x4, 0x3, "c36ac0152794ab06f646da2fde06e2bc", "e69e6e4fa1122f8c6171de28be84519dd73ec3cc68d25abbc049236b70ab9619d39ab2db99c634d145201dbe6532187c4ccef69970a6d5"}, 0x4c, 0x0) pwritev(r6, &(0x7f0000002200)=[{&(0x7f0000002040)="df6c8b7c19ca4fea49b957d0e50b7bf146863576daee1c68b2d380dc3f0bbca5b554acd9afdd811469dbdde6c57a4a4a81f69d74152d2838ce2c603b90b13c314f09290e3bc5935b5e5eca95133471231730e14b5f73bb03b2d75bd08afac0a04f95720dbbf4bacadbbe7f5d0e4f7abbea263e11359be286ac1d6b878a250bc9e7294cf6ae3ac6e4", 0x88}, {&(0x7f0000002100)="7582a8dcfb048dc3f8c9315b94616c83db58dbd567f23cce948f0463b79ce46411b462741209d9638efa45b2da33f10aa9ee1a84efeb356736e1bf2d7e45020cd2c27c6d09bea72218f8c7c7713f90c48f4eed2c17bae0dd9c3f6fc0ef86d286cc0d122b46649ffb81bb085157b08dc751fb64ccf2f0f19b9eb0d37f7136bd44a7d5c6002299f0e21843b1a68cfcfc56b0dbadf89e6425514bf1d0fe022392edf708b7d7c58066b6fc4a14088f3909d2ea1889e3eeb6e45dde9e821be563d03bbb6057e4c2d23046aa6f6957948c4d7fe5462c2c3f76ec9fd651a767c34bf21f199a97997562c721d76d", 0xea}], 0x2, 0xfff, 0x81) ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, &(0x7f0000002240)={0x3, 0x1}) fcntl$setlease(r9, 0x400, 0x1) 2.252687915s ago: executing program 1 (id=8139): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0xb, 0x80040) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xffffffff, &(0x7f0000000080)=[{0xea, 0x1, 0x5}, {0x0, 0x894d, 0xa0000000000}, {0xd41, 0x5, 0x400}, {0x0, 0x9, 0xf}, {0x7fffffff, 0x3}], 0x5, 0xc, 0x72, 0x1, 0x1, 0xd}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_WRITE(r2, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5f}, 0x1, 0x0, 0x0, 0x24000081}, 0x20000880) close$binfmt(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x12, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 2.105124994s ago: executing program 0 (id=8140): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 32) r1 = syz_io_uring_complete(0x0, 0x0) (rerun: 32) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) (async, rerun: 32) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x708, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x805) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000680)={0x3, 0x0, 0x1b, 0x19, 0x1f, &(0x7f0000000280)}) (async, rerun: 64) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0x7, 0x3, 0x9, 0x8}, {0x1, 0x7, 0x4, 0xffffffff}, {0x4, 0x9, 0x40, 0x3}, {0x5, 0xf, 0x5, 0x400}, {0x0, 0x4a, 0x80, 0xfffffff8}]}, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4fa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000009c0)=0x220000, 0x4) r6 = accept$inet(r1, &(0x7f0000000a00), &(0x7f0000000a40)=0x10) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000a80), &(0x7f0000000ac0)=0x40) (async, rerun: 64) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000b00)={0x0, {{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x1, 0x9, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x510) (rerun: 64) fallocate(r0, 0x3, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001080)={'wpan4\x00', 0x0}) (async) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x80) (async) memfd_create(&(0x7f0000001180)='&\n:\x00', 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000011c0)) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001200)={0x1, 0x37, 0x2}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001340)={'tunl0\x00', &(0x7f00000012c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x1, 0xe2bf, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x66, 0x0, 0xe8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, {[@rr={0x7, 0x13, 0x32, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @noop, @lsrr={0x83, 0x1f, 0x25, [@multicast1, @multicast2, @broadcast, @private=0xa010100, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x44, 0x11, "cb0d4357ea14e4fe626f44560ae745"}]}}}}}) getsockname$packet(r0, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000013c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001780)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xf8, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 287.951924ms ago: executing program 1 (id=8141): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) memfd_secret(0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (fail_nth: 6) 0s ago: executing program 1 (id=8142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x200000002) syz_clone(0x88200, 0x0, 0x2f, 0x0, 0x0, 0x0) io_uring_setup(0x794f, &(0x7f0000000000)) (fail_nth: 25) kernel console output (not intermixed with test programs): l0_svc+0x1c/0x34 [ 3384.318602][T24325] el0_svc+0x38/0x15c [ 3384.318641][T24325] el0t_64_sync_handler+0xa0/0xf0 [ 3384.318678][T24325] el0t_64_sync+0x1a4/0x1a8 [ 3384.410245][T24327] fuse: fd is not a fuse device [ 3387.309959][T24334] FAULT_INJECTION: forcing a failure. [ 3387.309959][T24334] name failslab, interval 1, probability 0, space 0, times 0 [ 3387.310287][T24334] CPU: 1 UID: 0 PID: 24334 Comm: syz.0.7316 Tainted: G L syzkaller #0 PREEMPT [ 3387.310412][T24334] Tainted: [L]=SOFTLOCKUP [ 3387.310437][T24334] Hardware name: linux,dummy-virt (DT) [ 3387.310462][T24334] Call trace: [ 3387.310481][T24334] show_stack+0x18/0x24 (C) [ 3387.310547][T24334] dump_stack_lvl+0x60/0x80 [ 3387.310586][T24334] dump_stack+0x18/0x24 [ 3387.310685][T24334] should_fail_ex+0x1e0/0x238 [ 3387.310750][T24334] should_failslab+0x54/0x80 [ 3387.310805][T24334] __kmalloc_cache_noprof+0x54/0x4c8 [ 3387.310919][T24334] io_uring_alloc_task_context+0x50/0x1b4 [ 3387.311020][T24334] __io_uring_add_tctx_node+0x180/0x1c0 [ 3387.311113][T24334] io_uring_setup+0x76c/0x800 [ 3387.311188][T24334] __arm64_sys_io_uring_setup+0x5c/0xc0 [ 3387.311263][T24334] invoke_syscall+0x54/0x10c [ 3387.311360][T24334] el0_svc_common.constprop.0+0x40/0xe0 [ 3387.311540][T24334] do_el0_svc+0x1c/0x34 [ 3387.311607][T24334] el0_svc+0x38/0x15c [ 3387.311707][T24334] el0t_64_sync_handler+0xa0/0xf0 [ 3387.311830][T24334] el0t_64_sync+0x1a4/0x1a8 [ 3388.543989][T24350] fuse: fd is not a fuse device [ 3390.099010][ T6684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.215733][ T6684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.355255][ T6684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.492479][ T6684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.969342][T24370] fuse: fd is not a fuse device [ 3392.428733][ T6684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3392.464468][ T6684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3392.514309][ T6684] bond0 (unregistering): Released all slaves [ 3392.757786][ T6684] hsr_slave_0: left promiscuous mode [ 3392.761528][ T6684] hsr_slave_1: left promiscuous mode [ 3392.782632][ T6684] veth1_macvtap: left promiscuous mode [ 3392.790250][ T6684] veth0_macvtap: left promiscuous mode [ 3392.791804][ T6684] veth1_vlan: left promiscuous mode [ 3392.795694][ T6684] veth0_vlan: left promiscuous mode [ 3395.442110][T24358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3395.461316][T24358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3395.755069][ T35] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 3395.926560][ T35] usb 1-1: Invalid ep0 maxpacket: 32 [ 3396.075739][ T35] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 3396.236404][ T35] usb 1-1: Invalid ep0 maxpacket: 32 [ 3396.238417][ T35] usb usb1-port1: attempt power cycle [ 3396.463761][T24358] hsr_slave_0: entered promiscuous mode [ 3396.467006][T24358] hsr_slave_1: entered promiscuous mode [ 3396.469956][T24358] debugfs: 'hsr0' already exists in 'hsr' [ 3396.470982][T24358] Cannot create hsr debugfs directory [ 3396.627887][ T35] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 3396.658094][ T35] usb 1-1: Invalid ep0 maxpacket: 32 [ 3396.802488][ T35] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 3396.827156][ T35] usb 1-1: Invalid ep0 maxpacket: 32 [ 3396.828481][ T35] usb usb1-port1: unable to enumerate USB device [ 3397.316766][T24358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3397.338578][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3397.344367][T24358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3397.374389][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3397.391061][T24358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3397.414436][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3397.421947][T24358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3397.437771][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3398.274311][T24358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3401.228702][T24358] veth0_vlan: entered promiscuous mode [ 3401.296523][T24358] veth1_vlan: entered promiscuous mode [ 3401.423884][T24358] veth0_macvtap: entered promiscuous mode [ 3401.452224][T24358] veth1_macvtap: entered promiscuous mode [ 3401.614654][T14065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.616215][T14065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.616415][T14065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.616593][T14065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.235464][T24444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.238806][T24444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3402.545586][T24452] fuse: fd is not a fuse device [ 3402.681846][T24454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.685771][T24454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3402.704223][T24454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.705892][T24454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3404.255583][T24462] FAULT_INJECTION: forcing a failure. [ 3404.255583][T24462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3404.256773][T24462] CPU: 1 UID: 0 PID: 24462 Comm: syz.1.7332 Tainted: G L syzkaller #0 PREEMPT [ 3404.256909][T24462] Tainted: [L]=SOFTLOCKUP [ 3404.256984][T24462] Hardware name: linux,dummy-virt (DT) [ 3404.257029][T24462] Call trace: [ 3404.257064][T24462] show_stack+0x18/0x24 (C) [ 3404.257211][T24462] dump_stack_lvl+0x60/0x80 [ 3404.257285][T24462] dump_stack+0x18/0x24 [ 3404.257357][T24462] should_fail_ex+0x1e0/0x238 [ 3404.257449][T24462] should_fail+0x14/0x40 [ 3404.257517][T24462] should_fail_usercopy+0x1c/0x40 [ 3404.257581][T24462] _inline_copy_from_user+0x24/0xa8 [ 3404.257661][T24462] copy_msghdr_from_user+0x58/0x160 [ 3404.257735][T24462] ___sys_sendmsg+0x90/0x108 [ 3404.257845][T24462] __sys_sendmsg+0x9c/0x100 [ 3404.257952][T24462] __arm64_sys_sendmsg+0x24/0x38 [ 3404.258055][T24462] invoke_syscall+0x54/0x10c [ 3404.258286][T24462] el0_svc_common.constprop.0+0x40/0xe0 [ 3404.258365][T24462] do_el0_svc+0x1c/0x34 [ 3404.258450][T24462] el0_svc+0x38/0x15c [ 3404.258566][T24462] el0t_64_sync_handler+0xa0/0xf0 [ 3404.258669][T24462] el0t_64_sync+0x1a4/0x1a8 [ 3404.365521][T24464] fuse: fd is not a fuse device [ 3406.414227][T24480] fuse: Unknown parameter '00000000000000000000004' [ 3406.544306][T24482] fuse: fd is not a fuse device [ 3408.232864][T24495] fuse: fd is not a fuse device [ 3409.987053][T24509] FAULT_INJECTION: forcing a failure. [ 3409.987053][T24509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3409.990204][T24509] CPU: 1 UID: 0 PID: 24509 Comm: syz.1.7348 Tainted: G L syzkaller #0 PREEMPT [ 3409.990348][T24509] Tainted: [L]=SOFTLOCKUP [ 3409.990390][T24509] Hardware name: linux,dummy-virt (DT) [ 3409.990446][T24509] Call trace: [ 3409.990486][T24509] show_stack+0x18/0x24 (C) [ 3409.990614][T24509] dump_stack_lvl+0x60/0x80 [ 3409.990701][T24509] dump_stack+0x18/0x24 [ 3409.990767][T24509] should_fail_ex+0x1e0/0x238 [ 3409.990844][T24509] should_fail+0x14/0x40 [ 3409.990912][T24509] should_fail_usercopy+0x1c/0x40 [ 3409.990979][T24509] _inline_copy_from_user+0x24/0xa8 [ 3409.991068][T24509] copy_msghdr_from_user+0x58/0x160 [ 3409.991147][T24509] ___sys_sendmsg+0x90/0x108 [ 3409.991219][T24509] __sys_sendmsg+0x9c/0x100 [ 3409.991298][T24509] __arm64_sys_sendmsg+0x24/0x38 [ 3409.991366][T24509] invoke_syscall+0x54/0x10c [ 3409.991457][T24509] el0_svc_common.constprop.0+0x40/0xe0 [ 3409.991537][T24509] do_el0_svc+0x1c/0x34 [ 3409.991610][T24509] el0_svc+0x38/0x15c [ 3409.991722][T24509] el0t_64_sync_handler+0xa0/0xf0 [ 3409.991802][T24509] el0t_64_sync+0x1a4/0x1a8 [ 3410.115978][T24511] fuse: fd is not a fuse device [ 3411.516894][T24523] fuse: fd is not a fuse device [ 3411.568895][T24525] FAULT_INJECTION: forcing a failure. [ 3411.568895][T24525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3411.572196][T24525] CPU: 0 UID: 0 PID: 24525 Comm: syz.0.7355 Tainted: G L syzkaller #0 PREEMPT [ 3411.572337][T24525] Tainted: [L]=SOFTLOCKUP [ 3411.572360][T24525] Hardware name: linux,dummy-virt (DT) [ 3411.572383][T24525] Call trace: [ 3411.572406][T24525] show_stack+0x18/0x24 (C) [ 3411.572482][T24525] dump_stack_lvl+0x60/0x80 [ 3411.572521][T24525] dump_stack+0x18/0x24 [ 3411.572557][T24525] should_fail_ex+0x1e0/0x238 [ 3411.572598][T24525] should_fail+0x14/0x40 [ 3411.572633][T24525] should_fail_usercopy+0x1c/0x40 [ 3411.572680][T24525] _inline_copy_from_user+0x24/0xa8 [ 3411.572721][T24525] copy_msghdr_from_user+0x58/0x160 [ 3411.572758][T24525] ___sys_sendmsg+0x90/0x108 [ 3411.572794][T24525] __sys_sendmsg+0x9c/0x100 [ 3411.572831][T24525] __arm64_sys_sendmsg+0x24/0x38 [ 3411.572868][T24525] invoke_syscall+0x54/0x10c [ 3411.572905][T24525] el0_svc_common.constprop.0+0x40/0xe0 [ 3411.572994][T24525] do_el0_svc+0x1c/0x34 [ 3411.573032][T24525] el0_svc+0x38/0x15c [ 3411.573073][T24525] el0t_64_sync_handler+0xa0/0xf0 [ 3411.573111][T24525] el0t_64_sync+0x1a4/0x1a8 [ 3412.080577][T24536] fuse: fd is not a fuse device [ 3414.001681][T24553] FAULT_INJECTION: forcing a failure. [ 3414.001681][T24553] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.002126][T24553] CPU: 1 UID: 0 PID: 24553 Comm: syz.1.7363 Tainted: G L syzkaller #0 PREEMPT [ 3414.002200][T24553] Tainted: [L]=SOFTLOCKUP [ 3414.002221][T24553] Hardware name: linux,dummy-virt (DT) [ 3414.002244][T24553] Call trace: [ 3414.002262][T24553] show_stack+0x18/0x24 (C) [ 3414.002326][T24553] dump_stack_lvl+0x60/0x80 [ 3414.002453][T24553] dump_stack+0x18/0x24 [ 3414.002496][T24553] should_fail_ex+0x1e0/0x238 [ 3414.002570][T24553] should_failslab+0x54/0x80 [ 3414.002634][T24553] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3414.002697][T24553] __kernfs_new_node+0x70/0x240 [ 3414.002765][T24553] kernfs_new_node+0x88/0xc0 [ 3414.002833][T24553] kernfs_create_link+0xc0/0xf4 [ 3414.002927][T24553] sysfs_do_create_link_sd+0x6c/0x100 [ 3414.003023][T24553] sysfs_create_link+0x20/0x40 [ 3414.003133][T24553] module_add_driver+0xa0/0x180 [ 3414.003213][T24553] bus_add_driver+0xf8/0x208 [ 3414.003277][T24553] driver_register+0x68/0x130 [ 3414.003367][T24553] usb_gadget_register_driver_owner+0x54/0xfc [ 3414.003442][T24553] raw_ioctl+0x728/0xd38 [ 3414.003516][T24553] __arm64_sys_ioctl+0xac/0x104 [ 3414.003614][T24553] invoke_syscall+0x54/0x10c [ 3414.003722][T24553] el0_svc_common.constprop.0+0x40/0xe0 [ 3414.003816][T24553] do_el0_svc+0x1c/0x34 [ 3414.003904][T24553] el0_svc+0x38/0x15c [ 3414.003980][T24553] el0t_64_sync_handler+0xa0/0xf0 [ 3414.004069][T24553] el0t_64_sync+0x1a4/0x1a8 [ 3414.007927][T24553] bus_add_driver: failed to create module links for raw-gadget.0 [ 3414.008165][T24553] UDC core: USB Raw Gadget: driver registration failed: -12 [ 3414.008260][T24553] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 3414.096366][T24555] fuse: fd is not a fuse device [ 3414.844356][T24567] fuse: fd is not a fuse device [ 3415.310574][T21236] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3416.466363][T21236] usb 1-1: Using ep0 maxpacket: 16 [ 3416.502786][T21236] usb 1-1: language id specifier not provided by device, defaulting to English [ 3416.522054][T21236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3416.522464][T21236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.522752][T21236] usb 1-1: Product: syz [ 3416.522820][T21236] usb 1-1: Manufacturer: 艉㑩㇇⤉㊙뎸侘椢瞊았㟲훿銪஬ꇉ썣峮톈ზ䢁秴鼥暆ꀳᶛ褢鵦舧ࢦꇵꙛﲹ䨵ダᄗ鳭鄽支㗂ㅹ릒ᄆﷄ쮇莅ᅯ͠磩꧑浄錫兔䬦顡ֺ벨క鵢䐘㞻齩ᵻ鏋褄酣믣珝㔝磊킸䡏锺垧彫דּ疷ᵎາ᥋㪽츨됵㲝駭 [ 3416.522947][T21236] usb 1-1: SerialNumber: syz [ 3416.724044][T21236] usb 1-1: 1:1 : unknown format tag 0x6 is detected. processed as MPEG. [ 3416.724542][T21236] usb 1-1: found format II with max.bitrate = 7, frame size=4 [ 3416.727728][T21236] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 3417.215028][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3417.219443][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.614013][T21236] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 3417.614467][T21236] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 3417.623193][T21236] usb 1-1: unit 1 not found! [ 3417.832914][T21236] usb 1-1: USB disconnect, device number 46 [ 3419.471222][T24582] fuse: Bad value for 'fd' [ 3420.265667][T24591] FAULT_INJECTION: forcing a failure. [ 3420.265667][T24591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3420.266135][T24591] CPU: 1 UID: 0 PID: 24591 Comm: syz.0.7377 Tainted: G L syzkaller #0 PREEMPT [ 3420.266270][T24591] Tainted: [L]=SOFTLOCKUP [ 3420.266316][T24591] Hardware name: linux,dummy-virt (DT) [ 3420.266362][T24591] Call trace: [ 3420.266400][T24591] show_stack+0x18/0x24 (C) [ 3420.266562][T24591] dump_stack_lvl+0x60/0x80 [ 3420.266678][T24591] dump_stack+0x18/0x24 [ 3420.266880][T24591] should_fail_ex+0x1e0/0x238 [ 3420.266967][T24591] should_fail+0x14/0x40 [ 3420.267084][T24591] should_fail_usercopy+0x1c/0x40 [ 3420.267209][T24591] _inline_copy_from_user+0x24/0xa8 [ 3420.267624][T24591] get_user_ifreq+0x68/0x84 [ 3420.267754][T24591] sock_ioctl+0x28c/0x360 [ 3420.267966][T24591] __arm64_sys_ioctl+0xac/0x104 [ 3420.268078][T24591] invoke_syscall+0x54/0x10c [ 3420.268253][T24591] el0_svc_common.constprop.0+0x40/0xe0 [ 3420.268338][T24591] do_el0_svc+0x1c/0x34 [ 3420.268410][T24591] el0_svc+0x38/0x15c [ 3420.268524][T24591] el0t_64_sync_handler+0xa0/0xf0 [ 3420.268599][T24591] el0t_64_sync+0x1a4/0x1a8 [ 3420.480095][T24593] FAULT_INJECTION: forcing a failure. [ 3420.480095][T24593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3420.480553][T24593] CPU: 1 UID: 0 PID: 24593 Comm: syz.0.7378 Tainted: G L syzkaller #0 PREEMPT [ 3420.480685][T24593] Tainted: [L]=SOFTLOCKUP [ 3420.480730][T24593] Hardware name: linux,dummy-virt (DT) [ 3420.480777][T24593] Call trace: [ 3420.480815][T24593] show_stack+0x18/0x24 (C) [ 3420.481013][T24593] dump_stack_lvl+0x60/0x80 [ 3420.481193][T24593] dump_stack+0x18/0x24 [ 3420.481329][T24593] should_fail_ex+0x1e0/0x238 [ 3420.481451][T24593] should_fail+0x14/0x40 [ 3420.481741][T24593] should_fail_usercopy+0x1c/0x40 [ 3420.481844][T24593] restore_altstack+0x34/0x128 [ 3420.481999][T24593] __arm64_sys_rt_sigreturn+0xd4/0x238 [ 3420.482109][T24593] invoke_syscall+0x54/0x10c [ 3420.482210][T24593] el0_svc_common.constprop.0+0x40/0xe0 [ 3420.482316][T24593] do_el0_svc+0x1c/0x34 [ 3420.482440][T24593] el0_svc+0x38/0x15c [ 3420.482598][T24593] el0t_64_sync_handler+0xa0/0xf0 [ 3420.482682][T24593] el0t_64_sync+0x1a4/0x1a8 [ 3420.988802][T24595] fuse: Bad value for 'fd' [ 3421.970142][T24606] fuse: Bad value for 'fd' [ 3423.696737][T24619] fuse: Bad value for 'fd' [ 3425.102927][T24635] fuse: Bad value for 'fd' [ 3425.445140][T24637] FAULT_INJECTION: forcing a failure. [ 3425.445140][T24637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3425.445575][T24637] CPU: 1 UID: 0 PID: 24637 Comm: syz.0.7396 Tainted: G L syzkaller #0 PREEMPT [ 3425.445710][T24637] Tainted: [L]=SOFTLOCKUP [ 3425.445758][T24637] Hardware name: linux,dummy-virt (DT) [ 3425.445807][T24637] Call trace: [ 3425.445847][T24637] show_stack+0x18/0x24 (C) [ 3425.445974][T24637] dump_stack_lvl+0x60/0x80 [ 3425.446501][T24637] dump_stack+0x18/0x24 [ 3425.446779][T24637] should_fail_ex+0x1e0/0x238 [ 3425.446882][T24637] should_fail+0x14/0x40 [ 3425.447102][T24637] should_fail_usercopy+0x1c/0x40 [ 3425.447217][T24637] _inline_copy_from_user+0x24/0xa8 [ 3425.447583][T24637] move_addr_to_kernel+0x44/0xbc [ 3425.447678][T24637] copy_msghdr_from_user+0x128/0x160 [ 3425.447881][T24637] ___sys_sendmsg+0x90/0x108 [ 3425.447968][T24637] __sys_sendmsg+0x9c/0x100 [ 3425.448250][T24637] __arm64_sys_sendmsg+0x24/0x38 [ 3425.448418][T24637] invoke_syscall+0x54/0x10c [ 3425.448506][T24637] el0_svc_common.constprop.0+0x40/0xe0 [ 3425.448644][T24637] do_el0_svc+0x1c/0x34 [ 3425.448731][T24637] el0_svc+0x38/0x15c [ 3425.448804][T24637] el0t_64_sync_handler+0xa0/0xf0 [ 3425.448893][T24637] el0t_64_sync+0x1a4/0x1a8 [ 3428.409875][T24654] fuse: Bad value for 'fd' [ 3428.946379][T13772] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 3429.173936][T13772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3429.192123][T13772] usb 1-1: not running at top speed; connect to a high speed hub [ 3429.232160][T13772] usb 1-1: config 1 has an invalid descriptor of length 132, skipping remainder of the config [ 3429.232548][T13772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3429.324779][T13772] usb 1-1: string descriptor 0 read error: -22 [ 3429.325590][T13772] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3429.325789][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.385624][T13772] usb 1-1: 0:2 : does not exist [ 3429.839588][T13772] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 3429.905718][T13772] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3429.906117][T13772] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 3429.913275][T13772] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 3429.976846][T13772] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3430.004358][T13772] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 3430.102851][T13772] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3430.185632][T13772] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3430.311165][T13772] usb 1-1: USB disconnect, device number 47 [ 3434.397395][T24664] FAULT_INJECTION: forcing a failure. [ 3434.397395][T24664] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.397824][T24664] CPU: 1 UID: 0 PID: 24664 Comm: syz.0.7404 Tainted: G L syzkaller #0 PREEMPT [ 3434.397949][T24664] Tainted: [L]=SOFTLOCKUP [ 3434.398000][T24664] Hardware name: linux,dummy-virt (DT) [ 3434.398047][T24664] Call trace: [ 3434.398088][T24664] show_stack+0x18/0x24 (C) [ 3434.398405][T24664] dump_stack_lvl+0x60/0x80 [ 3434.398579][T24664] dump_stack+0x18/0x24 [ 3434.398770][T24664] should_fail_ex+0x1e0/0x238 [ 3434.398937][T24664] should_failslab+0x54/0x80 [ 3434.399078][T24664] kmem_cache_alloc_lru_noprof+0x5c/0x488 [ 3434.399262][T24664] __d_alloc+0x40/0x280 [ 3434.399418][T24664] d_alloc_pseudo+0x10/0x50 [ 3434.399556][T24664] alloc_file_pseudo+0x6c/0x120 [ 3434.399755][T24664] create_pipe_files+0xd4/0x244 [ 3434.399872][T24664] do_pipe2+0x50/0x158 [ 3434.400102][T24664] __arm64_sys_pipe2+0x1c/0x38 [ 3434.400190][T24664] invoke_syscall+0x54/0x10c [ 3434.400264][T24664] el0_svc_common.constprop.0+0x40/0xe0 [ 3434.400338][T24664] do_el0_svc+0x1c/0x34 [ 3434.400422][T24664] el0_svc+0x38/0x15c [ 3434.400502][T24664] el0t_64_sync_handler+0xa0/0xf0 [ 3434.400567][T24664] el0t_64_sync+0x1a4/0x1a8 [ 3435.802915][T24668] fuse: fd is not a fuse device [ 3436.087578][T24670] FAULT_INJECTION: forcing a failure. [ 3436.087578][T24670] name failslab, interval 1, probability 0, space 0, times 0 [ 3436.087995][T24670] CPU: 1 UID: 0 PID: 24670 Comm: syz.0.7406 Tainted: G L syzkaller #0 PREEMPT [ 3436.088121][T24670] Tainted: [L]=SOFTLOCKUP [ 3436.088163][T24670] Hardware name: linux,dummy-virt (DT) [ 3436.088256][T24670] Call trace: [ 3436.088303][T24670] show_stack+0x18/0x24 (C) [ 3436.088425][T24670] dump_stack_lvl+0x60/0x80 [ 3436.088532][T24670] dump_stack+0x18/0x24 [ 3436.088612][T24670] should_fail_ex+0x1e0/0x238 [ 3436.088704][T24670] should_failslab+0x54/0x80 [ 3436.088785][T24670] __kmalloc_node_track_caller_noprof+0xac/0x570 [ 3436.088861][T24670] kstrdup+0x48/0xa0 [ 3436.089004][T24670] kstrdup_const+0x40/0x4c [ 3436.089109][T24670] __kernfs_new_node+0x54/0x240 [ 3436.089186][T24670] kernfs_new_node+0x88/0xc0 [ 3436.089275][T24670] kernfs_create_link+0xc0/0xf4 [ 3436.089360][T24670] sysfs_do_create_link_sd+0x6c/0x100 [ 3436.089442][T24670] sysfs_create_link+0x20/0x40 [ 3436.089519][T24670] device_add+0x260/0x7f0 [ 3436.089606][T24670] device_register+0x20/0x30 [ 3436.089699][T24670] tty_register_device_attr+0x108/0x240 [ 3436.089781][T24670] tty_register_device+0x18/0x24 [ 3436.089887][T24670] gsm_activate_mux+0x94/0x144 [ 3436.089971][T24670] gsmld_ioctl+0x3a8/0x5e8 [ 3436.090051][T24670] tty_ioctl+0x108/0x99c [ 3436.090146][T24670] __arm64_sys_ioctl+0xac/0x104 [ 3436.090240][T24670] invoke_syscall+0x54/0x10c [ 3436.090414][T24670] el0_svc_common.constprop.0+0x40/0xe0 [ 3436.090505][T24670] do_el0_svc+0x1c/0x34 [ 3436.090584][T24670] el0_svc+0x38/0x15c [ 3436.090676][T24670] el0t_64_sync_handler+0xa0/0xf0 [ 3436.090754][T24670] el0t_64_sync+0x1a4/0x1a8 [ 3438.438464][T24680] fuse: fd is not a fuse device [ 3441.367577][T24691] FAULT_INJECTION: forcing a failure. [ 3441.367577][T24691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3441.367886][T24691] CPU: 1 UID: 0 PID: 24691 Comm: syz.0.7414 Tainted: G L syzkaller #0 PREEMPT [ 3441.368017][T24691] Tainted: [L]=SOFTLOCKUP [ 3441.368063][T24691] Hardware name: linux,dummy-virt (DT) [ 3441.368106][T24691] Call trace: [ 3441.368140][T24691] show_stack+0x18/0x24 (C) [ 3441.368296][T24691] dump_stack_lvl+0x60/0x80 [ 3441.368447][T24691] dump_stack+0x18/0x24 [ 3441.368546][T24691] should_fail_ex+0x1e0/0x238 [ 3441.368662][T24691] should_fail_alloc_page+0x60/0x80 [ 3441.368770][T24691] __alloc_frozen_pages_noprof+0xe4/0x1144 [ 3441.368871][T24691] alloc_pages_mpol+0x70/0x1a4 [ 3441.369002][T24691] folio_alloc_mpol_noprof+0x14/0x68 [ 3441.369104][T24691] vma_alloc_folio_noprof+0x80/0xcc [ 3441.369205][T24691] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 3441.369286][T24691] do_anonymous_page+0x348/0x9f8 [ 3441.369404][T24691] __handle_mm_fault+0x88c/0xc3c [ 3441.369503][T24691] handle_mm_fault+0x98/0x340 [ 3441.369582][T24691] do_page_fault+0x378/0x77c [ 3441.369677][T24691] do_translation_fault+0x5c/0x6c [ 3441.369752][T24691] do_mem_abort+0x40/0x90 [ 3441.369839][T24691] el0_da+0x30/0x100 [ 3441.370026][T24691] el0t_64_sync_handler+0xd0/0xf0 [ 3441.370109][T24691] el0t_64_sync+0x1a4/0x1a8 [ 3441.395237][T24691] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3441.673141][ T7599] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 3441.894257][ T7599] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3441.904885][ T7599] usb 1-1: not running at top speed; connect to a high speed hub [ 3441.917783][ T7599] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3441.951700][ T7599] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3441.955067][ T7599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.957554][ T7599] usb 1-1: Product: syz [ 3441.958722][ T7599] usb 1-1: Manufacturer: syz [ 3441.959637][ T7599] usb 1-1: SerialNumber: syz [ 3442.120102][T24693] fuse: fd is not a fuse device [ 3442.238110][ T7599] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3442.247903][ T7599] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3442.346571][ T7599] usb 1-1: USB disconnect, device number 48 [ 3443.765346][T24701] FAULT_INJECTION: forcing a failure. [ 3443.765346][T24701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3443.765862][T24701] CPU: 1 UID: 0 PID: 24701 Comm: syz.0.7418 Tainted: G L syzkaller #0 PREEMPT [ 3443.765993][T24701] Tainted: [L]=SOFTLOCKUP [ 3443.766035][T24701] Hardware name: linux,dummy-virt (DT) [ 3443.766080][T24701] Call trace: [ 3443.766116][T24701] show_stack+0x18/0x24 (C) [ 3443.766274][T24701] dump_stack_lvl+0x60/0x80 [ 3443.766351][T24701] dump_stack+0x18/0x24 [ 3443.766477][T24701] should_fail_ex+0x1e0/0x238 [ 3443.766567][T24701] should_fail+0x14/0x40 [ 3443.766640][T24701] should_fail_usercopy+0x1c/0x40 [ 3443.768083][T24701] _copy_from_iter+0x60/0x6a0 [ 3443.768183][T24701] isotp_sendmsg+0x1dc/0x820 [ 3443.768269][T24701] __sock_sendmsg+0x54/0x60 [ 3443.768353][T24701] ____sys_sendmsg+0x24c/0x2a4 [ 3443.768444][T24701] ___sys_sendmsg+0xb0/0x108 [ 3443.768523][T24701] __sys_sendmsg+0x9c/0x100 [ 3443.768610][T24701] __arm64_sys_sendmsg+0x24/0x38 [ 3443.768694][T24701] invoke_syscall+0x54/0x10c [ 3443.769846][T24701] el0_svc_common.constprop.0+0x40/0xe0 [ 3443.769937][T24701] do_el0_svc+0x1c/0x34 [ 3443.770195][T24701] el0_svc+0x38/0x15c [ 3443.770335][T24701] el0t_64_sync_handler+0xa0/0xf0 [ 3443.770428][T24701] el0t_64_sync+0x1a4/0x1a8 [ 3446.969060][T24707] fuse: fd is not a fuse device [ 3448.631693][T24720] fuse: fd is not a fuse device [ 3449.766563][T24727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3449.768196][T24727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3450.548952][T24736] fuse: fd is not a fuse device [ 3450.926069][T24744] FAULT_INJECTION: forcing a failure. [ 3450.926069][T24744] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.927431][T24744] CPU: 1 UID: 0 PID: 24744 Comm: syz.0.7434 Tainted: G L syzkaller #0 PREEMPT [ 3450.927566][T24744] Tainted: [L]=SOFTLOCKUP [ 3450.927606][T24744] Hardware name: linux,dummy-virt (DT) [ 3450.927650][T24744] Call trace: [ 3450.927688][T24744] show_stack+0x18/0x24 (C) [ 3450.927813][T24744] dump_stack_lvl+0x60/0x80 [ 3450.927889][T24744] dump_stack+0x18/0x24 [ 3450.927962][T24744] should_fail_ex+0x1e0/0x238 [ 3450.928044][T24744] should_failslab+0x54/0x80 [ 3450.928127][T24744] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3450.928212][T24744] skb_clone+0x60/0xc4 [ 3450.928300][T24744] __netlink_deliver_tap+0x1cc/0x294 [ 3450.928381][T24744] netlink_unicast+0x380/0x3b8 [ 3450.928471][T24744] netlink_sendmsg+0x194/0x410 [ 3450.928550][T24744] __sock_sendmsg+0x54/0x60 [ 3450.928686][T24744] ____sys_sendmsg+0x24c/0x2a4 [ 3450.928796][T24744] ___sys_sendmsg+0xb0/0x108 [ 3450.928889][T24744] __sys_sendmsg+0x9c/0x100 [ 3450.928995][T24744] __arm64_sys_sendmsg+0x24/0x38 [ 3450.929075][T24744] invoke_syscall+0x54/0x10c [ 3450.929149][T24744] el0_svc_common.constprop.0+0x40/0xe0 [ 3450.929262][T24744] do_el0_svc+0x1c/0x34 [ 3450.929336][T24744] el0_svc+0x38/0x15c [ 3450.929452][T24744] el0t_64_sync_handler+0xa0/0xf0 [ 3450.929564][T24744] el0t_64_sync+0x1a4/0x1a8 [ 3451.038737][T24746] fuse: fd is not a fuse device [ 3451.627625][T24756] fuse: fd is not a fuse device [ 3452.878543][T24778] fuse: fd is not a fuse device [ 3454.601225][T24790] fuse: fd is not a fuse device [ 3454.675241][T24793] FAULT_INJECTION: forcing a failure. [ 3454.675241][T24793] name failslab, interval 1, probability 0, space 0, times 0 [ 3454.688628][T24793] CPU: 0 UID: 0 PID: 24793 Comm: syz.1.7451 Tainted: G L syzkaller #0 PREEMPT [ 3454.688765][T24793] Tainted: [L]=SOFTLOCKUP [ 3454.688788][T24793] Hardware name: linux,dummy-virt (DT) [ 3454.688811][T24793] Call trace: [ 3454.688830][T24793] show_stack+0x18/0x24 (C) [ 3454.688897][T24793] dump_stack_lvl+0x60/0x80 [ 3454.688995][T24793] dump_stack+0x18/0x24 [ 3454.689038][T24793] should_fail_ex+0x1e0/0x238 [ 3454.689081][T24793] should_failslab+0x54/0x80 [ 3454.689123][T24793] __kmalloc_noprof+0xac/0x560 [ 3454.689161][T24793] tomoyo_realpath_from_path+0x44/0x1d4 [ 3454.689204][T24793] tomoyo_path_number_perm+0xe0/0x21c [ 3454.689242][T24793] tomoyo_file_ioctl+0x1c/0x30 [ 3454.689280][T24793] security_file_ioctl+0x8c/0x19c [ 3454.689322][T24793] __arm64_sys_ioctl+0x48/0x104 [ 3454.689366][T24793] invoke_syscall+0x54/0x10c [ 3454.689404][T24793] el0_svc_common.constprop.0+0x40/0xe0 [ 3454.689443][T24793] do_el0_svc+0x1c/0x34 [ 3454.689480][T24793] el0_svc+0x38/0x15c [ 3454.689521][T24793] el0t_64_sync_handler+0xa0/0xf0 [ 3454.689559][T24793] el0t_64_sync+0x1a4/0x1a8 [ 3454.703953][T24793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3454.706493][T24793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3454.709579][T24793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3455.163526][T24801] fuse: fd is not a fuse device [ 3455.965870][T24816] fuse: fd is not a fuse device [ 3459.202296][T24846] FAULT_INJECTION: forcing a failure. [ 3459.202296][T24846] name failslab, interval 1, probability 0, space 0, times 0 [ 3459.202685][T24846] CPU: 1 UID: 0 PID: 24846 Comm: syz.1.7464 Tainted: G L syzkaller #0 PREEMPT [ 3459.202806][T24846] Tainted: [L]=SOFTLOCKUP [ 3459.202847][T24846] Hardware name: linux,dummy-virt (DT) [ 3459.202892][T24846] Call trace: [ 3459.202928][T24846] show_stack+0x18/0x24 (C) [ 3459.203066][T24846] dump_stack_lvl+0x60/0x80 [ 3459.203159][T24846] dump_stack+0x18/0x24 [ 3459.203254][T24846] should_fail_ex+0x1e0/0x238 [ 3459.203342][T24846] should_failslab+0x54/0x80 [ 3459.203452][T24846] kmem_cache_alloc_node_noprof+0x5c/0x4a4 [ 3459.203535][T24846] __alloc_skb+0x74/0x2c4 [ 3459.203632][T24846] netlink_alloc_large_skb+0x94/0xc8 [ 3459.203812][T24846] netlink_sendmsg+0x10c/0x410 [ 3459.203931][T24846] __sock_sendmsg+0x54/0x60 [ 3459.204011][T24846] ____sys_sendmsg+0x24c/0x2a4 [ 3459.204082][T24846] ___sys_sendmsg+0xb0/0x108 [ 3459.204162][T24846] __sys_sendmsg+0x9c/0x100 [ 3459.204238][T24846] __arm64_sys_sendmsg+0x24/0x38 [ 3459.204332][T24846] invoke_syscall+0x54/0x10c [ 3459.204416][T24846] el0_svc_common.constprop.0+0x40/0xe0 [ 3459.204490][T24846] do_el0_svc+0x1c/0x34 [ 3459.204568][T24846] el0_svc+0x38/0x15c [ 3459.204683][T24846] el0t_64_sync_handler+0xa0/0xf0 [ 3459.204797][T24846] el0t_64_sync+0x1a4/0x1a8 [ 3460.706299][T24859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3460.712268][T24859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3460.738229][T24859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7470'. [ 3462.454468][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3462.487068][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3462.685549][T24863] FAULT_INJECTION: forcing a failure. [ 3462.685549][T24863] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.690184][T24863] CPU: 0 UID: 0 PID: 24863 Comm: syz.0.7471 Tainted: G L syzkaller #0 PREEMPT [ 3462.690280][T24863] Tainted: [L]=SOFTLOCKUP [ 3462.690302][T24863] Hardware name: linux,dummy-virt (DT) [ 3462.690324][T24863] Call trace: [ 3462.690342][T24863] show_stack+0x18/0x24 (C) [ 3462.690410][T24863] dump_stack_lvl+0x60/0x80 [ 3462.690447][T24863] dump_stack+0x18/0x24 [ 3462.690482][T24863] should_fail_ex+0x1e0/0x238 [ 3462.690523][T24863] should_failslab+0x54/0x80 [ 3462.690563][T24863] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3462.690600][T24863] skb_clone+0x60/0xc4 [ 3462.690638][T24863] __netlink_deliver_tap+0x1cc/0x294 [ 3462.690688][T24863] netlink_unicast+0x380/0x3b8 [ 3462.690726][T24863] netlink_sendmsg+0x194/0x410 [ 3462.690764][T24863] __sock_sendmsg+0x54/0x60 [ 3462.690858][T24863] ____sys_sendmsg+0x24c/0x2a4 [ 3462.690902][T24863] ___sys_sendmsg+0xb0/0x108 [ 3462.690965][T24863] __sys_sendmsg+0x9c/0x100 [ 3462.691002][T24863] __arm64_sys_sendmsg+0x24/0x38 [ 3462.691088][T24863] invoke_syscall+0x54/0x10c [ 3462.691131][T24863] el0_svc_common.constprop.0+0x40/0xe0 [ 3462.691167][T24863] do_el0_svc+0x1c/0x34 [ 3462.691201][T24863] el0_svc+0x38/0x15c [ 3462.691242][T24863] el0t_64_sync_handler+0xa0/0xf0 [ 3462.691277][T24863] el0t_64_sync+0x1a4/0x1a8 [ 3468.548508][ T788] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 3468.740174][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3468.748039][ T788] usb 1-1: not running at top speed; connect to a high speed hub [ 3468.766020][ T788] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3468.787895][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3468.789001][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.791307][ T788] usb 1-1: Product: syz [ 3468.794444][ T788] usb 1-1: Manufacturer: syz [ 3468.796138][ T788] usb 1-1: SerialNumber: syz [ 3469.064303][T24885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7481'. [ 3469.089300][ T788] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3469.104311][ T788] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3469.190476][ T788] usb 1-1: USB disconnect, device number 49 [ 3471.138272][ T788] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 3471.316478][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 3471.335316][ T788] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3471.337639][ T788] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3471.338482][ T788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3471.371886][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3471.372883][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.374129][ T788] usb 1-1: Product: syz [ 3471.375006][ T788] usb 1-1: Manufacturer: syz [ 3471.375712][ T788] usb 1-1: SerialNumber: syz [ 3471.395847][T24889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3471.399584][T24889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3471.983380][ T788] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3472.036076][ T788] usb 1-1: USB disconnect, device number 50 [ 3472.582197][T24900] FAULT_INJECTION: forcing a failure. [ 3472.582197][T24900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3472.584820][T24900] CPU: 0 UID: 0 PID: 24900 Comm: syz.1.7487 Tainted: G L syzkaller #0 PREEMPT [ 3472.585033][T24900] Tainted: [L]=SOFTLOCKUP [ 3472.585074][T24900] Hardware name: linux,dummy-virt (DT) [ 3472.585119][T24900] Call trace: [ 3472.585154][T24900] show_stack+0x18/0x24 (C) [ 3472.585279][T24900] dump_stack_lvl+0x60/0x80 [ 3472.585348][T24900] dump_stack+0x18/0x24 [ 3472.585414][T24900] should_fail_ex+0x1e0/0x238 [ 3472.585492][T24900] should_fail+0x14/0x40 [ 3472.585561][T24900] should_fail_usercopy+0x1c/0x40 [ 3472.585645][T24900] _inline_copy_from_user+0x24/0xa8 [ 3472.585729][T24900] copy_from_sockptr_offset.constprop.0+0x2c/0x38 [ 3472.585805][T24900] do_sock_getsockopt+0x1b8/0x360 [ 3472.585879][T24900] __sys_getsockopt+0x7c/0xec [ 3472.585980][T24900] __arm64_sys_getsockopt+0x24/0x34 [ 3472.586061][T24900] invoke_syscall+0x54/0x10c [ 3472.586186][T24900] el0_svc_common.constprop.0+0x40/0xe0 [ 3472.586265][T24900] do_el0_svc+0x1c/0x34 [ 3472.586334][T24900] el0_svc+0x38/0x15c [ 3472.586449][T24900] el0t_64_sync_handler+0xa0/0xf0 [ 3472.586554][T24900] el0t_64_sync+0x1a4/0x1a8 [ 3474.037808][T24912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3474.039025][T24912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3487.081503][T25040] FAULT_INJECTION: forcing a failure. [ 3487.081503][T25040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3487.088779][T25040] CPU: 0 UID: 0 PID: 25040 Comm: syz.0.7539 Tainted: G L syzkaller #0 PREEMPT [ 3487.089009][T25040] Tainted: [L]=SOFTLOCKUP [ 3487.089077][T25040] Hardware name: linux,dummy-virt (DT) [ 3487.089121][T25040] Call trace: [ 3487.089158][T25040] show_stack+0x18/0x24 (C) [ 3487.089283][T25040] dump_stack_lvl+0x60/0x80 [ 3487.089356][T25040] dump_stack+0x18/0x24 [ 3487.089438][T25040] should_fail_ex+0x1e0/0x238 [ 3487.089521][T25040] should_fail+0x14/0x40 [ 3487.089590][T25040] should_fail_usercopy+0x1c/0x40 [ 3487.089671][T25040] _copy_from_iter+0x60/0x6a0 [ 3487.089753][T25040] netlink_sendmsg+0x15c/0x410 [ 3487.089835][T25040] __sock_sendmsg+0x54/0x60 [ 3487.089912][T25040] ____sys_sendmsg+0x24c/0x2a4 [ 3487.089984][T25040] ___sys_sendmsg+0xb0/0x108 [ 3487.090053][T25040] __sys_sendmsg+0x9c/0x100 [ 3487.090129][T25040] __arm64_sys_sendmsg+0x24/0x38 [ 3487.090201][T25040] invoke_syscall+0x54/0x10c [ 3487.090274][T25040] el0_svc_common.constprop.0+0x40/0xe0 [ 3487.090352][T25040] do_el0_svc+0x1c/0x34 [ 3487.090424][T25040] el0_svc+0x38/0x15c [ 3487.090504][T25040] el0t_64_sync_handler+0xa0/0xf0 [ 3487.090579][T25040] el0t_64_sync+0x1a4/0x1a8 [ 3488.221739][T13772] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 3494.063636][T25108] FAULT_INJECTION: forcing a failure. [ 3494.063636][T25108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3494.073117][T25108] CPU: 0 UID: 0 PID: 25108 Comm: syz.0.7557 Tainted: G L syzkaller #0 PREEMPT [ 3494.073304][T25108] Tainted: [L]=SOFTLOCKUP [ 3494.073348][T25108] Hardware name: linux,dummy-virt (DT) [ 3494.073406][T25108] Call trace: [ 3494.073445][T25108] show_stack+0x18/0x24 (C) [ 3494.073574][T25108] dump_stack_lvl+0x60/0x80 [ 3494.073651][T25108] dump_stack+0x18/0x24 [ 3494.073724][T25108] should_fail_ex+0x1e0/0x238 [ 3494.073803][T25108] should_fail_alloc_page+0x60/0x80 [ 3494.073890][T25108] __alloc_frozen_pages_noprof+0xe4/0x1144 [ 3494.073968][T25108] alloc_pages_mpol+0x70/0x1a4 [ 3494.074049][T25108] alloc_frozen_pages_noprof+0x48/0xd4 [ 3494.074129][T25108] alloc_pages_noprof+0x10/0x28 [ 3494.074208][T25108] __pmd_alloc+0x40/0x2c0 [ 3494.074283][T25108] __handle_mm_fault+0x468/0xc3c [ 3494.074359][T25108] handle_mm_fault+0x98/0x340 [ 3494.074447][T25108] do_page_fault+0x23c/0x77c [ 3494.074519][T25108] do_translation_fault+0x5c/0x6c [ 3494.074590][T25108] do_mem_abort+0x40/0x90 [ 3494.074660][T25108] el1_abort+0x44/0x64 [ 3494.074740][T25108] el1h_64_sync_handler+0x50/0xac [ 3494.074812][T25108] el1h_64_sync+0x6c/0x70 [ 3494.074887][T25108] __arch_copy_from_user+0x14/0x23c (P) [ 3494.074973][T25108] copy_msghdr_from_user+0x58/0x160 [ 3494.075049][T25108] ___sys_sendmsg+0x90/0x108 [ 3494.075121][T25108] __sys_sendmsg+0x9c/0x100 [ 3494.075194][T25108] __arm64_sys_sendmsg+0x24/0x38 [ 3494.075267][T25108] invoke_syscall+0x54/0x10c [ 3494.075339][T25108] el0_svc_common.constprop.0+0x40/0xe0 [ 3494.075425][T25108] do_el0_svc+0x1c/0x34 [ 3494.075498][T25108] el0_svc+0x38/0x15c [ 3494.075569][T25108] el0t_64_sync_handler+0xa0/0xf0 [ 3494.075644][T25108] el0t_64_sync+0x1a4/0x1a8 [ 3496.118379][ T788] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 3496.313228][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3496.319713][ T788] usb 1-1: not running at top speed; connect to a high speed hub [ 3496.337714][ T788] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3496.367543][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3496.369508][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.374661][ T788] usb 1-1: Product: syz [ 3496.375652][ T788] usb 1-1: Manufacturer: syz [ 3496.376522][ T788] usb 1-1: SerialNumber: syz [ 3496.656766][T25126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7566'. [ 3496.717615][ T788] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3496.724191][ T788] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3496.900743][ T788] usb 1-1: USB disconnect, device number 52 [ 3499.307395][ T788] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3499.507564][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 3499.546241][ T788] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3499.546605][ T788] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3499.546931][ T788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3499.682114][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3499.682473][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.682708][ T788] usb 1-1: Product: syz [ 3499.682826][ T788] usb 1-1: Manufacturer: syz [ 3499.682941][ T788] usb 1-1: SerialNumber: syz [ 3499.734659][T25140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3499.756175][T25140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3500.073583][ T788] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3500.122009][ T788] usb 1-1: USB disconnect, device number 53 [ 3501.976377][T25159] FAULT_INJECTION: forcing a failure. [ 3501.976377][T25159] name failslab, interval 1, probability 0, space 0, times 0 [ 3501.979404][T25159] CPU: 0 UID: 0 PID: 25159 Comm: syz.1.7578 Tainted: G L syzkaller #0 PREEMPT [ 3501.979584][T25159] Tainted: [L]=SOFTLOCKUP [ 3501.979639][T25159] Hardware name: linux,dummy-virt (DT) [ 3501.979682][T25159] Call trace: [ 3501.979714][T25159] show_stack+0x18/0x24 (C) [ 3501.979834][T25159] dump_stack_lvl+0x60/0x80 [ 3501.979907][T25159] dump_stack+0x18/0x24 [ 3501.979985][T25159] should_fail_ex+0x1e0/0x238 [ 3501.980060][T25159] should_failslab+0x54/0x80 [ 3501.980138][T25159] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3501.980212][T25159] __kernfs_new_node+0x70/0x240 [ 3501.980293][T25159] kernfs_new_node+0x88/0xc0 [ 3501.980361][T25159] kernfs_create_link+0xc0/0xf4 [ 3501.980435][T25159] sysfs_do_create_link_sd+0x6c/0x100 [ 3501.980509][T25159] sysfs_create_link+0x20/0x40 [ 3501.980583][T25159] module_add_driver+0xa0/0x180 [ 3501.980675][T25159] bus_add_driver+0xf8/0x208 [ 3501.980746][T25159] driver_register+0x68/0x130 [ 3501.980813][T25159] usb_gadget_register_driver_owner+0x54/0xfc [ 3501.980896][T25159] raw_ioctl+0x728/0xd38 [ 3501.981016][T25159] __arm64_sys_ioctl+0xac/0x104 [ 3501.981098][T25159] invoke_syscall+0x54/0x10c [ 3501.981172][T25159] el0_svc_common.constprop.0+0x40/0xe0 [ 3501.981245][T25159] do_el0_svc+0x1c/0x34 [ 3501.981314][T25159] el0_svc+0x38/0x15c [ 3501.981393][T25159] el0t_64_sync_handler+0xa0/0xf0 [ 3501.981469][T25159] el0t_64_sync+0x1a4/0x1a8 [ 3502.015385][T25159] bus_add_driver: failed to create module links for raw-gadget.0 [ 3502.017956][T25159] UDC core: USB Raw Gadget: driver registration failed: -12 [ 3502.025306][T25159] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 3503.360423][T25179] FAULT_INJECTION: forcing a failure. [ 3503.360423][T25179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3503.376607][T25179] CPU: 0 UID: 0 PID: 25179 Comm: syz.0.7585 Tainted: G L syzkaller #0 PREEMPT [ 3503.376827][T25179] Tainted: [L]=SOFTLOCKUP [ 3503.376871][T25179] Hardware name: linux,dummy-virt (DT) [ 3503.376914][T25179] Call trace: [ 3503.376999][T25179] show_stack+0x18/0x24 (C) [ 3503.377213][T25179] dump_stack_lvl+0x60/0x80 [ 3503.377292][T25179] dump_stack+0x18/0x24 [ 3503.377362][T25179] should_fail_ex+0x1e0/0x238 [ 3503.377439][T25179] should_fail+0x14/0x40 [ 3503.377536][T25179] should_fail_usercopy+0x1c/0x40 [ 3503.377611][T25179] simple_read_from_buffer+0x5c/0x134 [ 3503.377727][T25179] proc_fail_nth_read+0xb4/0x140 [ 3503.377812][T25179] vfs_read+0xc4/0x31c [ 3503.377888][T25179] ksys_read+0x70/0x110 [ 3503.377957][T25179] __arm64_sys_read+0x1c/0x28 [ 3503.378075][T25179] invoke_syscall+0x54/0x10c [ 3503.378209][T25179] el0_svc_common.constprop.0+0x40/0xe0 [ 3503.378335][T25179] do_el0_svc+0x1c/0x34 [ 3503.378418][T25179] el0_svc+0x38/0x15c [ 3503.378527][T25179] el0t_64_sync_handler+0xa0/0xf0 [ 3503.378670][T25179] el0t_64_sync+0x1a4/0x1a8 [ 3505.026788][T25188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3505.028377][T25188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3505.755075][T25203] FAULT_INJECTION: forcing a failure. [ 3505.755075][T25203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3505.755563][T25203] CPU: 1 UID: 0 PID: 25203 Comm: syz.0.7595 Tainted: G L syzkaller #0 PREEMPT [ 3505.755699][T25203] Tainted: [L]=SOFTLOCKUP [ 3505.755747][T25203] Hardware name: linux,dummy-virt (DT) [ 3505.755793][T25203] Call trace: [ 3505.755951][T25203] show_stack+0x18/0x24 (C) [ 3505.756117][T25203] dump_stack_lvl+0x60/0x80 [ 3505.756269][T25203] dump_stack+0x18/0x24 [ 3505.756383][T25203] should_fail_ex+0x1e0/0x238 [ 3505.756535][T25203] should_fail+0x14/0x40 [ 3505.756616][T25203] should_fail_usercopy+0x1c/0x40 [ 3505.756694][T25203] ip_tunnel_parm_from_user+0x40/0x180 [ 3505.756884][T25203] ip_tunnel_siocdevprivate+0x50/0xc4 [ 3505.757004][T25203] ipip6_tunnel_siocdevprivate+0x17c/0x634 [ 3505.757230][T25203] dev_ifsioc+0x178/0x600 [ 3505.757355][T25203] dev_ioctl+0x404/0x520 [ 3505.757625][T25203] sock_ioctl+0x2a8/0x360 [ 3505.757735][T25203] __arm64_sys_ioctl+0xac/0x104 [ 3505.757829][T25203] invoke_syscall+0x54/0x10c [ 3505.757897][T25203] el0_svc_common.constprop.0+0x40/0xe0 [ 3505.758009][T25203] do_el0_svc+0x1c/0x34 [ 3505.758074][T25203] el0_svc+0x38/0x15c [ 3505.758138][T25203] el0t_64_sync_handler+0xa0/0xf0 [ 3505.758325][T25203] el0t_64_sync+0x1a4/0x1a8 [ 3505.889204][T25205] FAULT_INJECTION: forcing a failure. [ 3505.889204][T25205] name failslab, interval 1, probability 0, space 0, times 0 [ 3505.889430][T25205] CPU: 1 UID: 0 PID: 25205 Comm: syz.0.7596 Tainted: G L syzkaller #0 PREEMPT [ 3505.889539][T25205] Tainted: [L]=SOFTLOCKUP [ 3505.889580][T25205] Hardware name: linux,dummy-virt (DT) [ 3505.889633][T25205] Call trace: [ 3505.889672][T25205] show_stack+0x18/0x24 (C) [ 3505.889819][T25205] dump_stack_lvl+0x60/0x80 [ 3505.889897][T25205] dump_stack+0x18/0x24 [ 3505.889970][T25205] should_fail_ex+0x1e0/0x238 [ 3505.890047][T25205] should_failslab+0x54/0x80 [ 3505.890128][T25205] __kmalloc_noprof+0xac/0x560 [ 3505.890202][T25205] raw_event_queue_add+0x48/0xc0 [ 3505.890288][T25205] gadget_bind+0x11c/0x218 [ 3505.890364][T25205] gadget_bind_driver+0x90/0x284 [ 3505.890441][T25205] really_probe+0xbc/0x2c0 [ 3505.890519][T25205] __driver_probe_device+0x80/0x14c [ 3505.890591][T25205] driver_probe_device+0x3c/0x120 [ 3505.890671][T25205] __driver_attach+0x90/0x160 [ 3505.890742][T25205] bus_for_each_dev+0x7c/0xdc [ 3505.890823][T25205] driver_attach+0x24/0x30 [ 3505.890893][T25205] bus_add_driver+0xe4/0x208 [ 3505.890962][T25205] driver_register+0x68/0x130 [ 3505.891034][T25205] usb_gadget_register_driver_owner+0x54/0xfc [ 3505.891108][T25205] raw_ioctl+0x728/0xd38 [ 3505.891190][T25205] __arm64_sys_ioctl+0xac/0x104 [ 3505.891274][T25205] invoke_syscall+0x54/0x10c [ 3505.891346][T25205] el0_svc_common.constprop.0+0x40/0xe0 [ 3505.891423][T25205] do_el0_svc+0x1c/0x34 [ 3505.891494][T25205] el0_svc+0x38/0x15c [ 3505.891569][T25205] el0t_64_sync_handler+0xa0/0xf0 [ 3505.891649][T25205] el0t_64_sync+0x1a4/0x1a8 [ 3505.893395][T25205] raw-gadget.0 gadget.0: failed to queue connect event [ 3505.893583][T25205] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 3505.893727][T25205] raw-gadget.0 gadget.0: probe with driver raw-gadget.0 failed with error -12 [ 3505.899342][T25205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3505.900580][T25205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3509.541251][T25236] Restarting kernel threads ... [ 3509.543713][T25236] Done restarting kernel threads. [ 3509.566616][T25236] "syz.1.7607" (25236) uses obsolete ecb(arc4) skcipher [ 3512.374872][T25243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3512.378978][T25243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3512.548791][T25245] FAULT_INJECTION: forcing a failure. [ 3512.548791][T25245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3512.549319][T25245] CPU: 1 UID: 0 PID: 25245 Comm: syz.1.7610 Tainted: G L syzkaller #0 PREEMPT [ 3512.549460][T25245] Tainted: [L]=SOFTLOCKUP [ 3512.549508][T25245] Hardware name: linux,dummy-virt (DT) [ 3512.549555][T25245] Call trace: [ 3512.549593][T25245] show_stack+0x18/0x24 (C) [ 3512.549811][T25245] dump_stack_lvl+0x60/0x80 [ 3512.549897][T25245] dump_stack+0x18/0x24 [ 3512.549982][T25245] should_fail_ex+0x1e0/0x238 [ 3512.550076][T25245] should_fail+0x14/0x40 [ 3512.550156][T25245] should_fail_usercopy+0x1c/0x40 [ 3512.550266][T25245] _copy_from_iter+0x60/0x6a0 [ 3512.550392][T25245] isotp_sendmsg+0x1dc/0x820 [ 3512.550727][T25245] __sock_sendmsg+0x54/0x60 [ 3512.550824][T25245] ____sys_sendmsg+0x24c/0x2a4 [ 3512.551188][T25245] ___sys_sendmsg+0xb0/0x108 [ 3512.551284][T25245] __sys_sendmsg+0x9c/0x100 [ 3512.551371][T25245] __arm64_sys_sendmsg+0x24/0x38 [ 3512.552119][T25245] invoke_syscall+0x54/0x10c [ 3512.552212][T25245] el0_svc_common.constprop.0+0x40/0xe0 [ 3512.552390][T25245] do_el0_svc+0x1c/0x34 [ 3512.552572][T25245] el0_svc+0x38/0x15c [ 3512.552684][T25245] el0t_64_sync_handler+0xa0/0xf0 [ 3512.552877][T25245] el0t_64_sync+0x1a4/0x1a8 [ 3517.547176][T25308] FAULT_INJECTION: forcing a failure. [ 3517.547176][T25308] name failslab, interval 1, probability 0, space 0, times 0 [ 3517.547543][T25308] CPU: 1 UID: 0 PID: 25308 Comm: syz.1.7620 Tainted: G L syzkaller #0 PREEMPT [ 3517.547670][T25308] Tainted: [L]=SOFTLOCKUP [ 3517.547713][T25308] Hardware name: linux,dummy-virt (DT) [ 3517.547756][T25308] Call trace: [ 3517.547794][T25308] show_stack+0x18/0x24 (C) [ 3517.548178][T25308] dump_stack_lvl+0x60/0x80 [ 3517.548264][T25308] dump_stack+0x18/0x24 [ 3517.548336][T25308] should_fail_ex+0x1e0/0x238 [ 3517.548429][T25308] should_failslab+0x54/0x80 [ 3517.548500][T25308] __kmalloc_noprof+0xac/0x560 [ 3517.548731][T25308] tomoyo_realpath_from_path+0x44/0x1d4 [ 3517.548830][T25308] tomoyo_check_open_permission+0x128/0x190 [ 3517.548906][T25308] tomoyo_file_open+0x30/0x3c [ 3517.549027][T25308] security_file_open+0x74/0x148 [ 3517.549108][T25308] do_dentry_open+0xe0/0x53c [ 3517.549214][T25308] vfs_open+0x2c/0xe8 [ 3517.549724][T25308] path_openat+0x7a8/0x1074 [ 3517.550363][T25308] do_file_open+0xb0/0x168 [ 3517.550568][T25308] do_sys_openat2+0x84/0x104 [ 3517.550690][T25308] __arm64_sys_openat+0x64/0xc0 [ 3517.551010][T25308] invoke_syscall+0x54/0x10c [ 3517.551284][T25308] el0_svc_common.constprop.0+0x40/0xe0 [ 3517.551384][T25308] do_el0_svc+0x1c/0x34 [ 3517.551468][T25308] el0_svc+0x38/0x15c [ 3517.551546][T25308] el0t_64_sync_handler+0xa0/0xf0 [ 3517.551615][T25308] el0t_64_sync+0x1a4/0x1a8 [ 3517.566336][T25308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3517.571235][T25308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3517.572645][T25308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3523.584488][T25330] FAULT_INJECTION: forcing a failure. [ 3523.584488][T25330] name failslab, interval 1, probability 0, space 0, times 0 [ 3523.587366][T25330] CPU: 0 UID: 0 PID: 25330 Comm: syz.1.7629 Tainted: G L syzkaller #0 PREEMPT [ 3523.587568][T25330] Tainted: [L]=SOFTLOCKUP [ 3523.587609][T25330] Hardware name: linux,dummy-virt (DT) [ 3523.587652][T25330] Call trace: [ 3523.587685][T25330] show_stack+0x18/0x24 (C) [ 3523.587813][T25330] dump_stack_lvl+0x60/0x80 [ 3523.587938][T25330] dump_stack+0x18/0x24 [ 3523.588021][T25330] should_fail_ex+0x1e0/0x238 [ 3523.588100][T25330] should_failslab+0x54/0x80 [ 3523.588182][T25330] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3523.588255][T25330] __kernfs_new_node+0x70/0x240 [ 3523.588340][T25330] kernfs_new_node+0x88/0xc0 [ 3523.588430][T25330] kernfs_create_link+0xc0/0xf4 [ 3523.588503][T25330] sysfs_do_create_link_sd+0x6c/0x100 [ 3523.588580][T25330] sysfs_create_link+0x20/0x40 [ 3523.588651][T25330] device_add+0x260/0x7f0 [ 3523.588730][T25330] device_register+0x20/0x30 [ 3523.588807][T25330] tty_register_device_attr+0x108/0x240 [ 3523.588886][T25330] tty_register_device+0x18/0x24 [ 3523.589013][T25330] gsm_activate_mux+0x94/0x144 [ 3523.589097][T25330] gsmld_ioctl+0x3a8/0x5e8 [ 3523.589177][T25330] tty_ioctl+0x108/0x99c [ 3523.589256][T25330] __arm64_sys_ioctl+0xac/0x104 [ 3523.589340][T25330] invoke_syscall+0x54/0x10c [ 3523.589428][T25330] el0_svc_common.constprop.0+0x40/0xe0 [ 3523.589501][T25330] do_el0_svc+0x1c/0x34 [ 3523.589571][T25330] el0_svc+0x38/0x15c [ 3523.589653][T25330] el0t_64_sync_handler+0xa0/0xf0 [ 3523.589723][T25330] el0t_64_sync+0x1a4/0x1a8 [ 3524.565430][T21236] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 3524.792423][T21236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3524.816120][T21236] usb 1-1: not running at top speed; connect to a high speed hub [ 3524.851615][T21236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3524.852066][T21236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3524.887485][T21236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3524.887876][T21236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.887996][T21236] usb 1-1: Product: 떃꼄蒬쇪곘嚗᭡㡿৺ꁦ布䍁懺槖⎨㢼蓏鉯㣘০믡휹҉巃驴꟣욠땔ἅ懣م揔疶坦ओ䔁潞嚫䠗規斟쨃ൽ齲蘌ᇚꭜ뎯緣꭮蛓ꡜ鼔⫲ᦼ뗼๨鐱铸燧௻径꒒뒺袣↺퉀ꢁᘌ␨₳腐䳕곈啍䢬ㅅ洕円䠨絆騡报庚醎 [ 3524.888117][T21236] usb 1-1: Manufacturer: ш [ 3524.888171][T21236] usb 1-1: SerialNumber: syz [ 3525.188997][T21236] usb 1-1: 0:2 : does not exist [ 3525.218686][T21236] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 3525.302226][T21236] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3525.302581][T21236] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 3525.302833][T21236] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 3525.339268][T21236] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3525.377140][T21236] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 3525.484978][T21236] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3526.065696][T21236] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3526.135338][T21236] usb 1-1: USB disconnect, device number 54 [ 3526.410879][T25351] FAULT_INJECTION: forcing a failure. [ 3526.410879][T25351] name failslab, interval 1, probability 0, space 0, times 0 [ 3526.411344][T25351] CPU: 1 UID: 0 PID: 25351 Comm: syz.1.7640 Tainted: G L syzkaller #0 PREEMPT [ 3526.411465][T25351] Tainted: [L]=SOFTLOCKUP [ 3526.411510][T25351] Hardware name: linux,dummy-virt (DT) [ 3526.411556][T25351] Call trace: [ 3526.411597][T25351] show_stack+0x18/0x24 (C) [ 3526.411711][T25351] dump_stack_lvl+0x60/0x80 [ 3526.411859][T25351] dump_stack+0x18/0x24 [ 3526.411945][T25351] should_fail_ex+0x1e0/0x238 [ 3526.412054][T25351] should_failslab+0x54/0x80 [ 3526.412193][T25351] __kmalloc_noprof+0xac/0x560 [ 3526.412276][T25351] tomoyo_realpath_from_path+0x44/0x1d4 [ 3526.412363][T25351] tomoyo_path_number_perm+0xe0/0x21c [ 3526.412450][T25351] tomoyo_file_ioctl+0x1c/0x30 [ 3526.412534][T25351] security_file_ioctl+0x8c/0x19c [ 3526.412622][T25351] __arm64_sys_ioctl+0x48/0x104 [ 3526.412712][T25351] invoke_syscall+0x54/0x10c [ 3526.412789][T25351] el0_svc_common.constprop.0+0x40/0xe0 [ 3526.412908][T25351] do_el0_svc+0x1c/0x34 [ 3526.413020][T25351] el0_svc+0x38/0x15c [ 3526.413151][T25351] el0t_64_sync_handler+0xa0/0xf0 [ 3526.413235][T25351] el0t_64_sync+0x1a4/0x1a8 [ 3526.489096][T25351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3526.491215][T25351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3526.509763][T25351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3528.237225][T25370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7647'. [ 3529.531338][T25381] FAULT_INJECTION: forcing a failure. [ 3529.531338][T25381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3529.531740][T25381] CPU: 1 UID: 0 PID: 25381 Comm: syz.0.7652 Tainted: G L syzkaller #0 PREEMPT [ 3529.531854][T25381] Tainted: [L]=SOFTLOCKUP [ 3529.531892][T25381] Hardware name: linux,dummy-virt (DT) [ 3529.531934][T25381] Call trace: [ 3529.532109][T25381] show_stack+0x18/0x24 (C) [ 3529.532337][T25381] dump_stack_lvl+0x60/0x80 [ 3529.532504][T25381] dump_stack+0x18/0x24 [ 3529.532629][T25381] should_fail_ex+0x1e0/0x238 [ 3529.532717][T25381] should_fail+0x14/0x40 [ 3529.532868][T25381] should_fail_usercopy+0x1c/0x40 [ 3529.532996][T25381] _inline_copy_from_user+0x24/0xa8 [ 3529.533168][T25381] move_addr_to_kernel+0x44/0xbc [ 3529.533336][T25381] copy_msghdr_from_user+0x128/0x160 [ 3529.533416][T25381] ___sys_sendmsg+0x90/0x108 [ 3529.533592][T25381] __sys_sendmsg+0x9c/0x100 [ 3529.533694][T25381] __arm64_sys_sendmsg+0x24/0x38 [ 3529.533853][T25381] invoke_syscall+0x54/0x10c [ 3529.533933][T25381] el0_svc_common.constprop.0+0x40/0xe0 [ 3529.534008][T25381] do_el0_svc+0x1c/0x34 [ 3529.534076][T25381] el0_svc+0x38/0x15c [ 3529.534217][T25381] el0t_64_sync_handler+0xa0/0xf0 [ 3529.534294][T25381] el0t_64_sync+0x1a4/0x1a8 [ 3531.940353][T25405] FAULT_INJECTION: forcing a failure. [ 3531.940353][T25405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3531.940874][T25405] CPU: 1 UID: 0 PID: 25405 Comm: syz.0.7661 Tainted: G L syzkaller #0 PREEMPT [ 3531.941061][T25405] Tainted: [L]=SOFTLOCKUP [ 3531.941108][T25405] Hardware name: linux,dummy-virt (DT) [ 3531.941156][T25405] Call trace: [ 3531.941206][T25405] show_stack+0x18/0x24 (C) [ 3531.941336][T25405] dump_stack_lvl+0x60/0x80 [ 3531.941479][T25405] dump_stack+0x18/0x24 [ 3531.941560][T25405] should_fail_ex+0x1e0/0x238 [ 3531.941656][T25405] should_fail+0x14/0x40 [ 3531.941735][T25405] should_fail_usercopy+0x1c/0x40 [ 3531.941819][T25405] simple_read_from_buffer+0x5c/0x134 [ 3531.941906][T25405] proc_fail_nth_read+0xb4/0x140 [ 3531.942130][T25405] vfs_read+0xc4/0x31c [ 3531.942227][T25405] ksys_read+0x70/0x110 [ 3531.942316][T25405] __arm64_sys_read+0x1c/0x28 [ 3531.942497][T25405] invoke_syscall+0x54/0x10c [ 3531.942584][T25405] el0_svc_common.constprop.0+0x40/0xe0 [ 3531.942664][T25405] do_el0_svc+0x1c/0x34 [ 3531.942805][T25405] el0_svc+0x38/0x15c [ 3531.942945][T25405] el0t_64_sync_handler+0xa0/0xf0 [ 3531.943230][T25405] el0t_64_sync+0x1a4/0x1a8 [ 3535.607057][T25449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3535.607952][T25449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3540.081297][T25471] input: syz0 as /devices/virtual/input/input52 [ 3540.648448][T25477] FAULT_INJECTION: forcing a failure. [ 3540.648448][T25477] name failslab, interval 1, probability 0, space 0, times 0 [ 3540.650217][T25477] CPU: 0 UID: 0 PID: 25477 Comm: syz.0.7687 Tainted: G L syzkaller #0 PREEMPT [ 3540.650359][T25477] Tainted: [L]=SOFTLOCKUP [ 3540.650406][T25477] Hardware name: linux,dummy-virt (DT) [ 3540.650451][T25477] Call trace: [ 3540.650488][T25477] show_stack+0x18/0x24 (C) [ 3540.650608][T25477] dump_stack_lvl+0x60/0x80 [ 3540.650685][T25477] dump_stack+0x18/0x24 [ 3540.650757][T25477] should_fail_ex+0x1e0/0x238 [ 3540.650844][T25477] should_failslab+0x54/0x80 [ 3540.650923][T25477] __kmalloc_noprof+0xac/0x560 [ 3540.650992][T25477] tomoyo_encode2+0x7c/0x13c [ 3540.651072][T25477] tomoyo_encode+0x28/0x40 [ 3540.651145][T25477] tomoyo_realpath_from_path+0x100/0x1d4 [ 3540.651212][T25477] tomoyo_path_number_perm+0xe0/0x21c [ 3540.651280][T25477] tomoyo_file_ioctl+0x1c/0x30 [ 3540.651349][T25477] security_file_ioctl+0x8c/0x19c [ 3540.651436][T25477] __arm64_sys_ioctl+0x48/0x104 [ 3540.651516][T25477] invoke_syscall+0x54/0x10c [ 3540.651584][T25477] el0_svc_common.constprop.0+0x40/0xe0 [ 3540.651658][T25477] do_el0_svc+0x1c/0x34 [ 3540.651724][T25477] el0_svc+0x38/0x15c [ 3540.651802][T25477] el0t_64_sync_handler+0xa0/0xf0 [ 3540.651873][T25477] el0t_64_sync+0x1a4/0x1a8 [ 3540.669218][T25477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3540.930398][T13772] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 3541.138621][T13772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3541.146550][T13772] usb 1-1: not running at top speed; connect to a high speed hub [ 3541.168714][T13772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3541.172986][T13772] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 3541.208898][T13772] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3541.210700][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3541.213319][T13772] usb 1-1: Product: syz [ 3541.214091][T13772] usb 1-1: Manufacturer: syz [ 3541.215111][T13772] usb 1-1: SerialNumber: syz [ 3541.562277][T13772] usb 1-1: USB disconnect, device number 55 [ 3542.458478][T25489] FAULT_INJECTION: forcing a failure. [ 3542.458478][T25489] name failslab, interval 1, probability 0, space 0, times 0 [ 3542.465694][T25489] CPU: 1 UID: 0 PID: 25489 Comm: syz.0.7692 Tainted: G L syzkaller #0 PREEMPT [ 3542.465882][T25489] Tainted: [L]=SOFTLOCKUP [ 3542.465921][T25489] Hardware name: linux,dummy-virt (DT) [ 3542.465964][T25489] Call trace: [ 3542.466000][T25489] show_stack+0x18/0x24 (C) [ 3542.466130][T25489] dump_stack_lvl+0x60/0x80 [ 3542.466233][T25489] dump_stack+0x18/0x24 [ 3542.466315][T25489] should_fail_ex+0x1e0/0x238 [ 3542.466406][T25489] should_failslab+0x54/0x80 [ 3542.466486][T25489] __kmalloc_noprof+0xac/0x560 [ 3542.466560][T25489] tomoyo_encode2+0x7c/0x13c [ 3542.466636][T25489] tomoyo_encode+0x28/0x40 [ 3542.466710][T25489] tomoyo_realpath_from_path+0x100/0x1d4 [ 3542.466788][T25489] tomoyo_path_number_perm+0xe0/0x21c [ 3542.466866][T25489] tomoyo_file_ioctl+0x1c/0x30 [ 3542.466940][T25489] security_file_ioctl+0x8c/0x19c [ 3542.467022][T25489] __arm64_sys_ioctl+0x48/0x104 [ 3542.467105][T25489] invoke_syscall+0x54/0x10c [ 3542.467176][T25489] el0_svc_common.constprop.0+0x40/0xe0 [ 3542.467251][T25489] do_el0_svc+0x1c/0x34 [ 3542.467323][T25489] el0_svc+0x38/0x15c [ 3542.467411][T25489] el0t_64_sync_handler+0xa0/0xf0 [ 3542.467486][T25489] el0t_64_sync+0x1a4/0x1a8 [ 3542.517411][T25489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3542.786933][ T7980] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 3543.022124][ T7980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3543.033975][ T7980] usb 1-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 3543.034376][ T7980] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3543.096407][ T7980] usb 1-1: string descriptor 0 read error: -22 [ 3543.097304][ T7980] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 3543.097388][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3543.116232][T25489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3543.352863][ T7980] usbhid 1-1:1.0: can't add hid device: -71 [ 3543.353872][ T7980] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 3543.360288][ T7980] usb 1-1: USB disconnect, device number 56 [ 3546.440726][T25500] FAULT_INJECTION: forcing a failure. [ 3546.440726][T25500] name failslab, interval 1, probability 0, space 0, times 0 [ 3546.444832][T25500] CPU: 1 UID: 0 PID: 25500 Comm: syz.0.7697 Tainted: G L syzkaller #0 PREEMPT [ 3546.445054][T25500] Tainted: [L]=SOFTLOCKUP [ 3546.445098][T25500] Hardware name: linux,dummy-virt (DT) [ 3546.445144][T25500] Call trace: [ 3546.445180][T25500] show_stack+0x18/0x24 (C) [ 3546.445312][T25500] dump_stack_lvl+0x60/0x80 [ 3546.445401][T25500] dump_stack+0x18/0x24 [ 3546.445473][T25500] should_fail_ex+0x1e0/0x238 [ 3546.445555][T25500] should_failslab+0x54/0x80 [ 3546.445638][T25500] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3546.445720][T25500] skb_clone+0x60/0xc4 [ 3546.445801][T25500] __netlink_deliver_tap+0x1cc/0x294 [ 3546.445886][T25500] netlink_unicast+0x380/0x3b8 [ 3546.445967][T25500] netlink_sendmsg+0x194/0x410 [ 3546.446046][T25500] __sock_sendmsg+0x54/0x60 [ 3546.446121][T25500] ____sys_sendmsg+0x24c/0x2a4 [ 3546.446190][T25500] ___sys_sendmsg+0xb0/0x108 [ 3546.446256][T25500] __sys_sendmsg+0x9c/0x100 [ 3546.446323][T25500] __arm64_sys_sendmsg+0x24/0x38 [ 3546.446414][T25500] invoke_syscall+0x54/0x10c [ 3546.446486][T25500] el0_svc_common.constprop.0+0x40/0xe0 [ 3546.446558][T25500] do_el0_svc+0x1c/0x34 [ 3546.446624][T25500] el0_svc+0x38/0x15c [ 3546.446699][T25500] el0t_64_sync_handler+0xa0/0xf0 [ 3546.446768][T25500] el0t_64_sync+0x1a4/0x1a8 [ 3560.130380][T25546] FAULT_INJECTION: forcing a failure. [ 3560.130380][T25546] name failslab, interval 1, probability 0, space 0, times 0 [ 3560.132832][T25546] CPU: 1 UID: 0 PID: 25546 Comm: syz.0.7717 Tainted: G L syzkaller #0 PREEMPT [ 3560.133026][T25546] Tainted: [L]=SOFTLOCKUP [ 3560.133065][T25546] Hardware name: linux,dummy-virt (DT) [ 3560.133191][T25546] Call trace: [ 3560.133271][T25546] show_stack+0x18/0x24 (C) [ 3560.133455][T25546] dump_stack_lvl+0x60/0x80 [ 3560.133526][T25546] dump_stack+0x18/0x24 [ 3560.133591][T25546] should_fail_ex+0x1e0/0x238 [ 3560.133676][T25546] should_failslab+0x54/0x80 [ 3560.133750][T25546] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3560.133823][T25546] skb_clone+0x60/0xc4 [ 3560.133895][T25546] __netlink_deliver_tap+0x1cc/0x294 [ 3560.133976][T25546] netlink_unicast+0x380/0x3b8 [ 3560.134048][T25546] netlink_sendmsg+0x194/0x410 [ 3560.134117][T25546] __sock_sendmsg+0x54/0x60 [ 3560.134179][T25546] ____sys_sendmsg+0x24c/0x2a4 [ 3560.134242][T25546] ___sys_sendmsg+0xb0/0x108 [ 3560.134356][T25546] __sys_sendmsg+0x9c/0x100 [ 3560.134437][T25546] __arm64_sys_sendmsg+0x24/0x38 [ 3560.134513][T25546] invoke_syscall+0x54/0x10c [ 3560.134583][T25546] el0_svc_common.constprop.0+0x40/0xe0 [ 3560.134663][T25546] do_el0_svc+0x1c/0x34 [ 3560.134734][T25546] el0_svc+0x38/0x15c [ 3560.134807][T25546] el0t_64_sync_handler+0xa0/0xf0 [ 3560.134878][T25546] el0t_64_sync+0x1a4/0x1a8 [ 3562.523300][T25566] fuse: fd is not a fuse device [ 3563.596132][T25577] fuse: fd is not a fuse device [ 3563.924010][T25583] FAULT_INJECTION: forcing a failure. [ 3563.924010][T25583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3563.924416][T25583] CPU: 0 UID: 0 PID: 25583 Comm: syz.1.7731 Tainted: G L syzkaller #0 PREEMPT [ 3563.924537][T25583] Tainted: [L]=SOFTLOCKUP [ 3563.924580][T25583] Hardware name: linux,dummy-virt (DT) [ 3563.924625][T25583] Call trace: [ 3563.924663][T25583] show_stack+0x18/0x24 (C) [ 3563.924784][T25583] dump_stack_lvl+0x60/0x80 [ 3563.924859][T25583] dump_stack+0x18/0x24 [ 3563.924965][T25583] should_fail_ex+0x1e0/0x238 [ 3563.925053][T25583] should_fail+0x14/0x40 [ 3563.925124][T25583] should_fail_usercopy+0x1c/0x40 [ 3563.925198][T25583] _inline_copy_from_user+0x24/0xa8 [ 3563.925285][T25583] sk_getsockopt+0x144/0xc98 [ 3563.925353][T25583] do_sock_getsockopt+0x1e4/0x360 [ 3563.925441][T25583] __sys_getsockopt+0x7c/0xec [ 3563.925517][T25583] __arm64_sys_getsockopt+0x24/0x34 [ 3563.925593][T25583] invoke_syscall+0x54/0x10c [ 3563.925668][T25583] el0_svc_common.constprop.0+0x40/0xe0 [ 3563.925742][T25583] do_el0_svc+0x1c/0x34 [ 3563.925936][T25583] el0_svc+0x38/0x15c [ 3563.926014][T25583] el0t_64_sync_handler+0xa0/0xf0 [ 3563.926080][T25583] el0t_64_sync+0x1a4/0x1a8 [ 3565.487298][T21236] hid_parser_main: 215 callbacks suppressed [ 3565.494967][T21236] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 3565.509804][T21236] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3567.702223][T25603] FAULT_INJECTION: forcing a failure. [ 3567.702223][T25603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3567.702828][T25603] CPU: 0 UID: 0 PID: 25603 Comm: syz.0.7739 Tainted: G L syzkaller #0 PREEMPT [ 3567.702954][T25603] Tainted: [L]=SOFTLOCKUP [ 3567.703023][T25603] Hardware name: linux,dummy-virt (DT) [ 3567.703167][T25603] Call trace: [ 3567.703263][T25603] show_stack+0x18/0x24 (C) [ 3567.703419][T25603] dump_stack_lvl+0x60/0x80 [ 3567.703498][T25603] dump_stack+0x18/0x24 [ 3567.703573][T25603] should_fail_ex+0x1e0/0x238 [ 3567.703683][T25603] should_fail+0x14/0x40 [ 3567.703790][T25603] should_fail_usercopy+0x1c/0x40 [ 3567.703893][T25603] _copy_from_iter+0x60/0x6a0 [ 3567.703976][T25603] netlink_sendmsg+0x15c/0x410 [ 3567.704065][T25603] __sock_sendmsg+0x54/0x60 [ 3567.704145][T25603] ____sys_sendmsg+0x24c/0x2a4 [ 3567.704290][T25603] ___sys_sendmsg+0xb0/0x108 [ 3567.704367][T25603] __sys_sendmsg+0x9c/0x100 [ 3567.704474][T25603] __arm64_sys_sendmsg+0x24/0x38 [ 3567.704581][T25603] invoke_syscall+0x54/0x10c [ 3567.704690][T25603] el0_svc_common.constprop.0+0x40/0xe0 [ 3567.704772][T25603] do_el0_svc+0x1c/0x34 [ 3567.704844][T25603] el0_svc+0x38/0x15c [ 3567.704951][T25603] el0t_64_sync_handler+0xa0/0xf0 [ 3567.705031][T25603] el0t_64_sync+0x1a4/0x1a8 [ 3569.916232][T25635] FAULT_INJECTION: forcing a failure. [ 3569.916232][T25635] name failslab, interval 1, probability 0, space 0, times 0 [ 3569.916711][T25635] CPU: 1 UID: 0 PID: 25635 Comm: syz.0.7753 Tainted: G L syzkaller #0 PREEMPT [ 3569.916814][T25635] Tainted: [L]=SOFTLOCKUP [ 3569.916847][T25635] Hardware name: linux,dummy-virt (DT) [ 3569.916884][T25635] Call trace: [ 3569.916914][T25635] show_stack+0x18/0x24 (C) [ 3569.917061][T25635] dump_stack_lvl+0x60/0x80 [ 3569.917132][T25635] dump_stack+0x18/0x24 [ 3569.917233][T25635] should_fail_ex+0x1e0/0x238 [ 3569.917303][T25635] should_failslab+0x54/0x80 [ 3569.917368][T25635] __kmalloc_cache_noprof+0x54/0x4c8 [ 3569.917441][T25635] io_wq_create+0x34/0x2c8 [ 3569.917506][T25635] io_uring_alloc_task_context+0x10c/0x1b4 [ 3569.917573][T25635] __io_uring_add_tctx_node+0x180/0x1c0 [ 3569.917637][T25635] io_uring_setup+0x76c/0x800 [ 3569.917695][T25635] __arm64_sys_io_uring_setup+0x5c/0xc0 [ 3569.917754][T25635] invoke_syscall+0x54/0x10c [ 3569.917813][T25635] el0_svc_common.constprop.0+0x40/0xe0 [ 3569.917872][T25635] do_el0_svc+0x1c/0x34 [ 3569.917927][T25635] el0_svc+0x38/0x15c [ 3569.917988][T25635] el0t_64_sync_handler+0xa0/0xf0 [ 3569.918045][T25635] el0t_64_sync+0x1a4/0x1a8 [ 3570.408725][T25646] fuse: fd is not a fuse device [ 3571.217937][T25656] fuse: fd is not a fuse device [ 3572.200900][T25667] fuse: fd is not a fuse device [ 3572.666700][T21236] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 3572.826170][T25679] fuse: fd is not a fuse device [ 3572.892138][T21236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3572.912289][T21236] usb 1-1: not running at top speed; connect to a high speed hub [ 3572.930147][T21236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3572.956463][T21236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3572.958805][T21236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3572.961554][T21236] usb 1-1: Product: syz [ 3572.962734][T21236] usb 1-1: Manufacturer: syz [ 3572.963534][T21236] usb 1-1: SerialNumber: syz [ 3573.233058][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7767'. [ 3573.249190][T21236] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3573.262548][T21236] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3573.445771][T21236] usb 1-1: USB disconnect, device number 57 [ 3573.498143][T25687] FAULT_INJECTION: forcing a failure. [ 3573.498143][T25687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3573.498631][T25687] CPU: 0 UID: 0 PID: 25687 Comm: syz.1.7775 Tainted: G L syzkaller #0 PREEMPT [ 3573.498767][T25687] Tainted: [L]=SOFTLOCKUP [ 3573.498814][T25687] Hardware name: linux,dummy-virt (DT) [ 3573.498860][T25687] Call trace: [ 3573.498897][T25687] show_stack+0x18/0x24 (C) [ 3573.499026][T25687] dump_stack_lvl+0x60/0x80 [ 3573.499107][T25687] dump_stack+0x18/0x24 [ 3573.499183][T25687] should_fail_ex+0x1e0/0x238 [ 3573.499309][T25687] should_fail+0x14/0x40 [ 3573.499396][T25687] should_fail_usercopy+0x1c/0x40 [ 3573.499493][T25687] _copy_from_iter+0x60/0x6a0 [ 3573.499580][T25687] netlink_sendmsg+0x15c/0x410 [ 3573.499669][T25687] __sock_sendmsg+0x54/0x60 [ 3573.499748][T25687] ____sys_sendmsg+0x24c/0x2a4 [ 3573.499820][T25687] ___sys_sendmsg+0xb0/0x108 [ 3573.499893][T25687] __sys_sendmsg+0x9c/0x100 [ 3573.499967][T25687] __arm64_sys_sendmsg+0x24/0x38 [ 3573.500040][T25687] invoke_syscall+0x54/0x10c [ 3573.500111][T25687] el0_svc_common.constprop.0+0x40/0xe0 [ 3573.500183][T25687] do_el0_svc+0x1c/0x34 [ 3573.500254][T25687] el0_svc+0x38/0x15c [ 3573.500332][T25687] el0t_64_sync_handler+0xa0/0xf0 [ 3573.500418][T25687] el0t_64_sync+0x1a4/0x1a8 [ 3573.652342][T25689] fuse: fd is not a fuse device [ 3573.848794][T21236] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3574.008916][T21236] usb 1-1: Using ep0 maxpacket: 16 [ 3574.027942][T21236] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3574.031924][T21236] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3574.033664][T21236] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3574.055355][T21236] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3574.057103][T21236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3574.058887][T21236] usb 1-1: Product: syz [ 3574.059830][T21236] usb 1-1: Manufacturer: syz [ 3574.060868][T21236] usb 1-1: SerialNumber: syz [ 3574.093076][T25672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3574.096116][T25672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3574.394429][T21236] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3574.447736][T21236] usb 1-1: USB disconnect, device number 58 [ 3574.708009][T25700] fuse: fd is not a fuse device [ 3575.259099][ T35] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 3575.392544][T25710] fuse: fd is not a fuse device [ 3575.455016][ T35] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3575.459090][ T35] usb 1-1: not running at top speed; connect to a high speed hub [ 3575.482508][ T35] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3575.517546][ T35] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3575.519689][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3575.521247][ T35] usb 1-1: Product: syz [ 3575.522418][ T35] usb 1-1: Manufacturer: syz [ 3575.523464][ T35] usb 1-1: SerialNumber: syz [ 3575.773092][T25706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7784'. [ 3575.791269][ T35] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3575.807487][ T35] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3575.913626][ T35] usb 1-1: USB disconnect, device number 59 [ 3576.253265][ T35] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3576.426852][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 3576.452070][ T35] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3576.454606][ T35] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3576.458099][ T35] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3576.478825][ T35] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3576.486446][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3576.487658][ T35] usb 1-1: Product: syz [ 3576.488125][ T35] usb 1-1: Manufacturer: syz [ 3576.488536][ T35] usb 1-1: SerialNumber: syz [ 3576.512814][T25706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3576.517293][T25706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3576.767762][ T35] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3576.802762][ T35] usb 1-1: USB disconnect, device number 60 [ 3577.160164][T25720] fuse: fd is not a fuse device [ 3577.546900][T25727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3577.548510][T25727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3577.778726][T25731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3577.783625][T25731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3577.954905][T25733] loop6: detected capacity change from 0 to 7 [ 3577.958529][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3577.958926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 3577.964728][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3577.965049][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 3577.969181][T25733] loop6: unable to read partition table [ 3577.969770][T25733] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3577.973656][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3577.973959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 3578.416912][T25739] netlink: 'syz.0.7800': attribute type 83 has an invalid length. [ 3578.602680][T25741] fuse: fd is not a fuse device [ 3579.877324][T25755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3579.888438][T25755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3580.606665][T25761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3580.608498][T25761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3581.696881][T25771] syzkaller0: entered promiscuous mode [ 3581.697849][T25771] syzkaller0: entered allmulticast mode [ 3582.347041][T25781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3582.348511][T25781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3582.564415][T25787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3582.582173][T25787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3582.724552][T25790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3582.740436][T25790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3582.816706][T25794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3582.818800][T25794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3583.042148][T25799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3583.043129][T25799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3583.282205][T25805] binder: 25804:25805 tried to acquire reference to desc 0, got 1 instead [ 3583.314054][T25805] binder: 25804:25805 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 3583.314643][T25805] binder: 25805 RLIMIT_NICE not set [ 3583.337789][ T7980] binder: undelivered TRANSACTION_COMPLETE [ 3583.471598][T25807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3583.492996][T25807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3583.943331][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7832'. [ 3584.160685][ T7980] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3584.363996][ T7980] usb 1-1: Using ep0 maxpacket: 8 [ 3584.389594][ T7980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3584.389993][ T7980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3584.390256][ T7980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3584.390367][ T7980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3584.390564][ T7980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3584.390648][ T7980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3584.657220][ T7980] usb 1-1: GET_CAPABILITIES returned 0 [ 3584.657685][ T7980] usbtmc 1-1:16.0: can't read capabilities [ 3584.897775][ T7599] usb 1-1: USB disconnect, device number 61 [ 3585.503627][T25833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3585.505344][T25833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3585.542822][ T7599] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3585.652089][T25835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3585.660107][T25835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3585.750865][ T7599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3585.751299][ T7599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3585.751836][ T7599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3585.751994][ T7599] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3585.752792][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3585.765468][ T7599] usb 1-1: config 0 descriptor?? [ 3586.281776][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.282422][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.300396][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.300915][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301104][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301273][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301351][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301421][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301492][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.301558][ T7599] hid-generic 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 3586.316920][ T7599] hid-generic 0003:047F:FFFF.0008: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3587.318493][T25848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3587.319802][T25848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3587.416681][T25850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3587.418215][T25850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3587.520713][T25852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3587.524340][T25852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3587.908345][T25856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3587.912735][T25856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3595.643983][T25887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3595.650290][T25887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3595.775429][T25889] fuse: fd is not a fuse device [ 3596.658889][T25898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3596.662259][T25898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3596.750846][T25900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3596.754150][T25900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3597.025695][T25904] syzkaller1: entered promiscuous mode [ 3597.027772][T25904] syzkaller1: entered allmulticast mode [ 3597.194723][T25906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3597.200353][T25906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3597.220537][T25133] usb 1-1: USB disconnect, device number 62 [ 3597.437459][T25912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3597.441235][T25912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3597.711830][T25133] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3597.881839][T25133] usb 1-1: Using ep0 maxpacket: 16 [ 3597.954767][T25133] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3597.955276][T25133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3597.956056][T25133] usb 1-1: Product: syz [ 3597.956139][T25133] usb 1-1: Manufacturer: syz [ 3597.956197][T25133] usb 1-1: SerialNumber: syz [ 3597.969565][T25133] usb 1-1: config 0 descriptor?? [ 3597.985020][T25133] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 3598.244717][T25924] fuse: fd is not a fuse device [ 3598.442893][T25133] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 3598.651948][ T35] usb 1-1: USB disconnect, device number 63 [ 3598.680836][ T35] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 3598.688790][ T35] visor 1-1:0.0: device disconnected [ 3598.868202][T25935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3598.869657][T25935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3599.054539][T25940] dvmrp0: entered allmulticast mode [ 3599.741340][ T7599] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3599.797991][T25958] fuse: fd is not a fuse device [ 3599.912235][ T7599] usb 1-1: Using ep0 maxpacket: 8 [ 3599.961429][ T7599] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3599.961829][ T7599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3599.962080][ T7599] usb 1-1: Product: syz [ 3599.962145][ T7599] usb 1-1: Manufacturer: syz [ 3599.962203][ T7599] usb 1-1: SerialNumber: syz [ 3599.989900][ T7599] usb 1-1: config 0 descriptor?? [ 3600.113099][T25962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3600.118468][T25962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3603.420347][T25972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3603.424413][T25972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3603.851446][T25978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3603.852897][T25978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3610.927958][ T7980] usb 1-1: USB disconnect, device number 64 [ 3611.446050][ T7980] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 3611.450910][T26002] random: crng reseeded on system resumption [ 3611.660495][ T7980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3611.660983][ T7980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3611.661067][ T7980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 3611.661141][ T7980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3611.661200][ T7980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3611.720498][ T7980] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3611.720825][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3611.720895][ T7980] usb 1-1: Product: syz [ 3611.721035][ T7980] usb 1-1: Manufacturer: syz [ 3611.721099][ T7980] usb 1-1: SerialNumber: syz [ 3611.744704][ T7980] usb 1-1: config 0 descriptor?? [ 3612.074656][T26016] loop6: detected capacity change from 0 to 7 [ 3612.077424][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3612.077670][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 3612.079374][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3612.079552][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 3612.081324][T26016] loop6: unable to read partition table [ 3612.086452][T26016] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3616.858249][T26028] loop6: detected capacity change from 0 to 7 [ 3616.884742][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3616.885116][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 3616.888350][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3616.888729][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 3616.889424][T26028] loop6: unable to read partition table [ 3616.890834][T26028] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3617.804880][T26049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3617.806343][T26049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3621.651158][T26062] FAULT_INJECTION: forcing a failure. [ 3621.651158][T26062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3621.651543][T26062] CPU: 0 UID: 0 PID: 26062 Comm: syz.1.7940 Tainted: G L syzkaller #0 PREEMPT [ 3621.651663][T26062] Tainted: [L]=SOFTLOCKUP [ 3621.651703][T26062] Hardware name: linux,dummy-virt (DT) [ 3621.651744][T26062] Call trace: [ 3621.651777][T26062] show_stack+0x18/0x24 (C) [ 3621.651890][T26062] dump_stack_lvl+0x60/0x80 [ 3621.652143][T26062] dump_stack+0x18/0x24 [ 3621.652263][T26062] should_fail_ex+0x1e0/0x238 [ 3621.652384][T26062] should_fail_alloc_page+0x60/0x80 [ 3621.652462][T26062] __alloc_frozen_pages_noprof+0xe4/0x1144 [ 3621.652552][T26062] alloc_pages_mpol+0x70/0x1a4 [ 3621.652639][T26062] alloc_frozen_pages_noprof+0x48/0xd4 [ 3621.652773][T26062] alloc_pages_noprof+0x10/0x28 [ 3621.652895][T26062] __pte_alloc+0x3c/0x120 [ 3621.653017][T26062] do_anonymous_page+0x59c/0x9f8 [ 3621.653224][T26062] __handle_mm_fault+0x88c/0xc3c [ 3621.653336][T26062] handle_mm_fault+0x98/0x340 [ 3621.653422][T26062] do_page_fault+0x23c/0x77c [ 3621.653494][T26062] do_translation_fault+0x5c/0x6c [ 3621.653600][T26062] do_mem_abort+0x40/0x90 [ 3621.653671][T26062] el1_abort+0x44/0x64 [ 3621.653745][T26062] el1h_64_sync_handler+0x50/0xac [ 3621.653814][T26062] el1h_64_sync+0x6c/0x70 [ 3621.653881][T26062] __arch_copy_from_user+0x14/0x23c (P) [ 3621.653956][T26062] copy_msghdr_from_user+0x58/0x160 [ 3621.654034][T26062] ___sys_sendmsg+0x90/0x108 [ 3621.654106][T26062] __sys_sendmsg+0x9c/0x100 [ 3621.654177][T26062] __arm64_sys_sendmsg+0x24/0x38 [ 3621.654249][T26062] invoke_syscall+0x54/0x10c [ 3621.654319][T26062] el0_svc_common.constprop.0+0x40/0xe0 [ 3621.654398][T26062] do_el0_svc+0x1c/0x34 [ 3621.654500][T26062] el0_svc+0x38/0x15c [ 3621.654569][T26062] el0t_64_sync_handler+0xa0/0xf0 [ 3621.654635][T26062] el0t_64_sync+0x1a4/0x1a8 [ 3622.728346][ T7980] usb 1-1: USB disconnect, device number 65 [ 3623.328022][T26074] fuse: fd is not a fuse device [ 3625.463920][T26099] FAULT_INJECTION: forcing a failure. [ 3625.463920][T26099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3625.464138][T26099] CPU: 0 UID: 0 PID: 26099 Comm: syz.0.7955 Tainted: G L syzkaller #0 PREEMPT [ 3625.464203][T26099] Tainted: [L]=SOFTLOCKUP [ 3625.464222][T26099] Hardware name: linux,dummy-virt (DT) [ 3625.464244][T26099] Call trace: [ 3625.464260][T26099] show_stack+0x18/0x24 (C) [ 3625.464318][T26099] dump_stack_lvl+0x60/0x80 [ 3625.464353][T26099] dump_stack+0x18/0x24 [ 3625.464397][T26099] should_fail_ex+0x1e0/0x238 [ 3625.464435][T26099] should_fail+0x14/0x40 [ 3625.464468][T26099] should_fail_usercopy+0x1c/0x40 [ 3625.464500][T26099] setup_rt_frame+0x34c/0x1120 [ 3625.464533][T26099] arch_do_signal_or_restart+0x220/0x3e0 [ 3625.464627][T26099] exit_to_user_mode_loop+0x118/0x19c [ 3625.464711][T26099] el0_svc+0x158/0x15c [ 3625.464752][T26099] el0t_64_sync_handler+0xa0/0xf0 [ 3625.464798][T26099] el0t_64_sync+0x1a4/0x1a8 [ 3625.830351][T26103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3625.837521][T26103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3625.841713][T26103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7956'. [ 3625.863640][T26103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3625.864506][T26103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3627.407097][ T35] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 3627.631885][ T35] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3627.637188][ T35] usb 1-1: not running at top speed; connect to a high speed hub [ 3627.655985][ T35] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3627.671049][ T35] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3627.671795][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3627.672449][ T35] usb 1-1: Product: syz [ 3627.672901][ T35] usb 1-1: Manufacturer: syz [ 3627.673919][ T35] usb 1-1: SerialNumber: syz [ 3627.921013][T26114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7961'. [ 3627.947416][ T35] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3627.949027][ T35] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3628.024056][ T35] usb 1-1: USB disconnect, device number 66 [ 3628.358254][ T35] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3628.520761][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 3628.537803][ T35] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3628.538030][ T35] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3628.538301][ T35] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3628.559954][ T35] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3628.560411][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3628.560511][ T35] usb 1-1: Product: syz [ 3628.560572][ T35] usb 1-1: Manufacturer: syz [ 3628.560631][ T35] usb 1-1: SerialNumber: syz [ 3628.578919][T26114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3628.579498][T26114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3628.872731][ T35] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3628.901904][ T35] usb 1-1: USB disconnect, device number 67 [ 3629.442682][T26129] FAULT_INJECTION: forcing a failure. [ 3629.442682][T26129] name failslab, interval 1, probability 0, space 0, times 0 [ 3629.444105][T26129] CPU: 0 UID: 0 PID: 26129 Comm: syz.0.7967 Tainted: G L syzkaller #0 PREEMPT [ 3629.444215][T26129] Tainted: [L]=SOFTLOCKUP [ 3629.444236][T26129] Hardware name: linux,dummy-virt (DT) [ 3629.444258][T26129] Call trace: [ 3629.444275][T26129] show_stack+0x18/0x24 (C) [ 3629.444338][T26129] dump_stack_lvl+0x60/0x80 [ 3629.444376][T26129] dump_stack+0x18/0x24 [ 3629.444415][T26129] should_fail_ex+0x1e0/0x238 [ 3629.444456][T26129] should_failslab+0x54/0x80 [ 3629.444496][T26129] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3629.444534][T26129] __kernfs_new_node+0x70/0x240 [ 3629.444577][T26129] kernfs_new_node+0x88/0xc0 [ 3629.444611][T26129] kernfs_create_link+0xc0/0xf4 [ 3629.444646][T26129] sysfs_do_create_link_sd+0x6c/0x100 [ 3629.444690][T26129] sysfs_create_link+0x20/0x40 [ 3629.444725][T26129] driver_sysfs_add+0x6c/0xec [ 3629.444763][T26129] really_probe+0x80/0x2c0 [ 3629.444797][T26129] __driver_probe_device+0x80/0x14c [ 3629.444832][T26129] driver_probe_device+0x3c/0x120 [ 3629.444866][T26129] __driver_attach+0x90/0x160 [ 3629.444902][T26129] bus_for_each_dev+0x7c/0xdc [ 3629.444984][T26129] driver_attach+0x24/0x30 [ 3629.445029][T26129] bus_add_driver+0xe4/0x208 [ 3629.445065][T26129] driver_register+0x68/0x130 [ 3629.445101][T26129] usb_gadget_register_driver_owner+0x54/0xfc [ 3629.445143][T26129] raw_ioctl+0x728/0xd38 [ 3629.445182][T26129] __arm64_sys_ioctl+0xac/0x104 [ 3629.445221][T26129] invoke_syscall+0x54/0x10c [ 3629.445255][T26129] el0_svc_common.constprop.0+0x40/0xe0 [ 3629.445290][T26129] do_el0_svc+0x1c/0x34 [ 3629.445323][T26129] el0_svc+0x38/0x15c [ 3629.445397][T26129] el0t_64_sync_handler+0xa0/0xf0 [ 3629.445449][T26129] el0t_64_sync+0x1a4/0x1a8 [ 3629.449388][T26129] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 3629.451611][T26129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3629.452876][T26129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3629.790358][ T7980] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 3629.970181][ T7980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3629.984991][ T7980] usb 1-1: not running at top speed; connect to a high speed hub [ 3629.998280][ T7980] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3630.022011][ T7980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3630.025224][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3630.027906][ T7980] usb 1-1: Product: syz [ 3630.029779][ T7980] usb 1-1: Manufacturer: syz [ 3630.033473][ T7980] usb 1-1: SerialNumber: syz [ 3630.304201][T26131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7968'. [ 3630.321925][ T7980] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3630.325503][ T7980] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3630.432040][ T7980] usb 1-1: USB disconnect, device number 68 [ 3630.784194][ T7980] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3630.976190][ T7980] usb 1-1: Using ep0 maxpacket: 16 [ 3631.004099][ T7980] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3631.005960][ T7980] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3631.008518][ T7980] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3631.025743][ T7980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3631.026025][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3631.026268][ T7980] usb 1-1: Product: syz [ 3631.026429][ T7980] usb 1-1: Manufacturer: syz [ 3631.026556][ T7980] usb 1-1: SerialNumber: syz [ 3631.053320][T26131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3631.063550][T26131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3631.278013][T26148] FAULT_INJECTION: forcing a failure. [ 3631.278013][T26148] name failslab, interval 1, probability 0, space 0, times 0 [ 3631.279606][T26148] CPU: 0 UID: 0 PID: 26148 Comm: syz.1.7974 Tainted: G L syzkaller #0 PREEMPT [ 3631.279711][T26148] Tainted: [L]=SOFTLOCKUP [ 3631.279733][T26148] Hardware name: linux,dummy-virt (DT) [ 3631.279756][T26148] Call trace: [ 3631.279773][T26148] show_stack+0x18/0x24 (C) [ 3631.279867][T26148] dump_stack_lvl+0x60/0x80 [ 3631.279911][T26148] dump_stack+0x18/0x24 [ 3631.279946][T26148] should_fail_ex+0x1e0/0x238 [ 3631.279984][T26148] should_failslab+0x54/0x80 [ 3631.280024][T26148] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3631.280086][T26148] skb_clone+0x60/0xc4 [ 3631.280156][T26148] __netlink_deliver_tap+0x1cc/0x294 [ 3631.280262][T26148] netlink_unicast+0x380/0x3b8 [ 3631.280347][T26148] netlink_sendmsg+0x194/0x410 [ 3631.280387][T26148] __sock_sendmsg+0x54/0x60 [ 3631.280465][T26148] ____sys_sendmsg+0x24c/0x2a4 [ 3631.280513][T26148] ___sys_sendmsg+0xb0/0x108 [ 3631.280549][T26148] __sys_sendmsg+0x9c/0x100 [ 3631.280584][T26148] __arm64_sys_sendmsg+0x24/0x38 [ 3631.280620][T26148] invoke_syscall+0x54/0x10c [ 3631.280658][T26148] el0_svc_common.constprop.0+0x40/0xe0 [ 3631.280715][T26148] do_el0_svc+0x1c/0x34 [ 3631.280751][T26148] el0_svc+0x38/0x15c [ 3631.280820][T26148] el0t_64_sync_handler+0xa0/0xf0 [ 3631.280857][T26148] el0t_64_sync+0x1a4/0x1a8 [ 3631.322270][ T7980] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3631.336227][ T7980] usb 1-1: USB disconnect, device number 69 [ 3632.195669][T26164] FAULT_INJECTION: forcing a failure. [ 3632.195669][T26164] name failslab, interval 1, probability 0, space 0, times 0 [ 3632.195849][T26164] CPU: 0 UID: 0 PID: 26164 Comm: syz.0.7979 Tainted: G L syzkaller #0 PREEMPT [ 3632.195953][T26164] Tainted: [L]=SOFTLOCKUP [ 3632.195992][T26164] Hardware name: linux,dummy-virt (DT) [ 3632.196032][T26164] Call trace: [ 3632.196066][T26164] show_stack+0x18/0x24 (C) [ 3632.196176][T26164] dump_stack_lvl+0x60/0x80 [ 3632.196246][T26164] dump_stack+0x18/0x24 [ 3632.196346][T26164] should_fail_ex+0x1e0/0x238 [ 3632.196424][T26164] should_failslab+0x54/0x80 [ 3632.196497][T26164] __kmalloc_noprof+0xac/0x560 [ 3632.196615][T26164] raw_event_queue_add+0x48/0xc0 [ 3632.196695][T26164] gadget_bind+0x11c/0x218 [ 3632.196793][T26164] gadget_bind_driver+0x90/0x284 [ 3632.196868][T26164] really_probe+0xbc/0x2c0 [ 3632.196953][T26164] __driver_probe_device+0x80/0x14c [ 3632.197030][T26164] driver_probe_device+0x3c/0x120 [ 3632.197096][T26164] __driver_attach+0x90/0x160 [ 3632.197185][T26164] bus_for_each_dev+0x7c/0xdc [ 3632.197299][T26164] driver_attach+0x24/0x30 [ 3632.197374][T26164] bus_add_driver+0xe4/0x208 [ 3632.197438][T26164] driver_register+0x68/0x130 [ 3632.197511][T26164] usb_gadget_register_driver_owner+0x54/0xfc [ 3632.197580][T26164] raw_ioctl+0x728/0xd38 [ 3632.197653][T26164] __arm64_sys_ioctl+0xac/0x104 [ 3632.197738][T26164] invoke_syscall+0x54/0x10c [ 3632.197804][T26164] el0_svc_common.constprop.0+0x40/0xe0 [ 3632.197894][T26164] do_el0_svc+0x1c/0x34 [ 3632.197967][T26164] el0_svc+0x38/0x15c [ 3632.198037][T26164] el0t_64_sync_handler+0xa0/0xf0 [ 3632.198130][T26164] el0t_64_sync+0x1a4/0x1a8 [ 3632.248632][T26164] raw-gadget.0 gadget.0: failed to queue connect event [ 3632.249017][T26164] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 3632.249261][T26164] raw-gadget.0 gadget.0: probe with driver raw-gadget.0 failed with error -12 [ 3632.251745][T26164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3632.252992][T26164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3633.113250][ T7980] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 3633.299733][ T7980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3633.304428][ T7980] usb 1-1: not running at top speed; connect to a high speed hub [ 3633.314837][ T7980] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3633.339158][ T7980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3633.339991][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3633.340664][ T7980] usb 1-1: Product: syz [ 3633.341129][ T7980] usb 1-1: Manufacturer: syz [ 3633.341577][ T7980] usb 1-1: SerialNumber: syz [ 3633.611507][T26177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7981'. [ 3633.655912][ T7980] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3633.670799][ T7980] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3633.819882][ T7980] usb 1-1: USB disconnect, device number 70 [ 3634.225412][ T7980] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3634.406584][ T7980] usb 1-1: Using ep0 maxpacket: 16 [ 3634.434613][ T7980] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3634.436537][ T7980] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 32 [ 3634.440293][ T7980] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3634.472696][ T7980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3634.474849][ T7980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3634.481340][ T7980] usb 1-1: Product: syz [ 3634.482585][ T7980] usb 1-1: Manufacturer: syz [ 3634.483457][ T7980] usb 1-1: SerialNumber: syz [ 3634.518331][T26177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3634.522454][T26177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3634.840577][ T7980] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 3634.869618][ T7980] usb 1-1: USB disconnect, device number 71 [ 3635.052567][T26198] fuse: fd is not a fuse device [ 3636.097708][T26215] FAULT_INJECTION: forcing a failure. [ 3636.097708][T26215] name failslab, interval 1, probability 0, space 0, times 0 [ 3636.098120][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.0.7991 Tainted: G L syzkaller #0 PREEMPT [ 3636.098240][T26215] Tainted: [L]=SOFTLOCKUP [ 3636.098282][T26215] Hardware name: linux,dummy-virt (DT) [ 3636.098334][T26215] Call trace: [ 3636.098370][T26215] show_stack+0x18/0x24 (C) [ 3636.098523][T26215] dump_stack_lvl+0x60/0x80 [ 3636.098635][T26215] dump_stack+0x18/0x24 [ 3636.098980][T26215] should_fail_ex+0x1e0/0x238 [ 3636.099067][T26215] should_failslab+0x54/0x80 [ 3636.099149][T26215] __kmalloc_noprof+0xac/0x560 [ 3636.099231][T26215] tomoyo_encode2+0x7c/0x13c [ 3636.099383][T26215] tomoyo_encode+0x28/0x40 [ 3636.099524][T26215] tomoyo_realpath_from_path+0x100/0x1d4 [ 3636.099741][T26215] tomoyo_check_open_permission+0x128/0x190 [ 3636.099961][T26215] tomoyo_file_open+0x30/0x3c [ 3636.100064][T26215] security_file_open+0x74/0x148 [ 3636.100142][T26215] do_dentry_open+0xe0/0x53c [ 3636.100259][T26215] vfs_open+0x2c/0xe8 [ 3636.100350][T26215] path_openat+0x7a8/0x1074 [ 3636.100427][T26215] do_file_open+0xb0/0x168 [ 3636.100550][T26215] do_sys_openat2+0x84/0x104 [ 3636.100667][T26215] __arm64_sys_openat+0x64/0xc0 [ 3636.100761][T26215] invoke_syscall+0x54/0x10c [ 3636.100837][T26215] el0_svc_common.constprop.0+0x40/0xe0 [ 3636.101002][T26215] do_el0_svc+0x1c/0x34 [ 3636.101159][T26215] el0_svc+0x38/0x15c [ 3636.101250][T26215] el0t_64_sync_handler+0xa0/0xf0 [ 3636.101364][T26215] el0t_64_sync+0x1a4/0x1a8 [ 3636.121652][T26215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3636.393995][T21236] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3636.576718][T21236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3636.591083][T21236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 3636.613645][T21236] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 3636.613973][T21236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3636.614188][T21236] usb 1-1: Product: syz [ 3636.614299][T21236] usb 1-1: Manufacturer: syz [ 3636.614412][T21236] usb 1-1: SerialNumber: syz [ 3636.657014][T21236] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 3636.746508][T21236] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3636.861795][ T788] usb 1-1: USB disconnect, device number 72 [ 3637.398767][ T788] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 3637.588239][ T788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 236, changing to 4 [ 3637.595986][ T788] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 3637.644011][ T788] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 3637.646098][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3637.650184][ T788] usb 1-1: Product: syz [ 3637.652509][ T788] usb 1-1: Manufacturer: Я [ 3637.658273][ T788] usb 1-1: SerialNumber: syz [ 3638.133073][ T788] usb 1-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 3638.137602][ T788] usb 1-1: found format II with max.bitrate = 12, frame size=3 [ 3638.141304][ T788] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 3638.148772][ T788] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3638.469828][ T788] usb 1-1: USB disconnect, device number 73 [ 3640.608669][T26223] FAULT_INJECTION: forcing a failure. [ 3640.608669][T26223] name failslab, interval 1, probability 0, space 0, times 0 [ 3640.609100][T26223] CPU: 1 UID: 0 PID: 26223 Comm: syz.0.7993 Tainted: G L syzkaller #0 PREEMPT [ 3640.609214][T26223] Tainted: [L]=SOFTLOCKUP [ 3640.609258][T26223] Hardware name: linux,dummy-virt (DT) [ 3640.609298][T26223] Call trace: [ 3640.609333][T26223] show_stack+0x18/0x24 (C) [ 3640.609450][T26223] dump_stack_lvl+0x60/0x80 [ 3640.609573][T26223] dump_stack+0x18/0x24 [ 3640.609788][T26223] should_fail_ex+0x1e0/0x238 [ 3640.609987][T26223] should_failslab+0x54/0x80 [ 3640.610220][T26223] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3640.610300][T26223] security_file_alloc+0x30/0x1a0 [ 3640.610386][T26223] init_file+0x3c/0x10c [ 3640.610541][T26223] alloc_empty_file+0x74/0x130 [ 3640.610653][T26223] alloc_file_pseudo+0xa4/0x120 [ 3640.610816][T26223] create_pipe_files+0xd4/0x244 [ 3640.610964][T26223] do_pipe2+0x50/0x158 [ 3640.611029][T26223] __arm64_sys_pipe2+0x1c/0x38 [ 3640.611102][T26223] invoke_syscall+0x54/0x10c [ 3640.611160][T26223] el0_svc_common.constprop.0+0x40/0xe0 [ 3640.611229][T26223] do_el0_svc+0x1c/0x34 [ 3640.611296][T26223] el0_svc+0x38/0x15c [ 3640.611503][T26223] el0t_64_sync_handler+0xa0/0xf0 [ 3640.611706][T26223] el0t_64_sync+0x1a4/0x1a8 [ 3645.218931][T26253] FAULT_INJECTION: forcing a failure. [ 3645.218931][T26253] name failslab, interval 1, probability 0, space 0, times 0 [ 3645.231046][T26253] CPU: 0 UID: 0 PID: 26253 Comm: syz.1.8003 Tainted: G L syzkaller #0 PREEMPT [ 3645.231218][T26253] Tainted: [L]=SOFTLOCKUP [ 3645.231259][T26253] Hardware name: linux,dummy-virt (DT) [ 3645.231302][T26253] Call trace: [ 3645.231335][T26253] show_stack+0x18/0x24 (C) [ 3645.231466][T26253] dump_stack_lvl+0x60/0x80 [ 3645.231539][T26253] dump_stack+0x18/0x24 [ 3645.231610][T26253] should_fail_ex+0x1e0/0x238 [ 3645.231692][T26253] should_failslab+0x54/0x80 [ 3645.231776][T26253] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3645.231857][T26253] __kernfs_new_node+0x70/0x240 [ 3645.231940][T26253] kernfs_new_node+0x88/0xc0 [ 3645.232006][T26253] kernfs_create_dir_ns+0x34/0x98 [ 3645.232079][T26253] internal_create_group+0x10c/0x470 [ 3645.232161][T26253] sysfs_create_group+0x18/0x30 [ 3645.232236][T26253] dpm_sysfs_add+0x48/0x124 [ 3645.232321][T26253] device_add+0x32c/0x7f0 [ 3645.232413][T26253] device_register+0x20/0x30 [ 3645.232490][T26253] tty_register_device_attr+0x108/0x240 [ 3645.232566][T26253] tty_register_device+0x18/0x24 [ 3645.232640][T26253] gsm_activate_mux+0x94/0x144 [ 3645.232720][T26253] gsmld_ioctl+0x3a8/0x5e8 [ 3645.232797][T26253] tty_ioctl+0x108/0x99c [ 3645.232871][T26253] __arm64_sys_ioctl+0xac/0x104 [ 3645.232977][T26253] invoke_syscall+0x54/0x10c [ 3645.233055][T26253] el0_svc_common.constprop.0+0x40/0xe0 [ 3645.233129][T26253] do_el0_svc+0x1c/0x34 [ 3645.233201][T26253] el0_svc+0x38/0x15c [ 3645.233278][T26253] el0t_64_sync_handler+0xa0/0xf0 [ 3645.233351][T26253] el0t_64_sync+0x1a4/0x1a8 [ 3645.631725][T26259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3645.660357][T26259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3645.676540][T26259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8006'. [ 3645.710349][T26259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3645.713776][T26259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3645.863939][T26261] FAULT_INJECTION: forcing a failure. [ 3645.863939][T26261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3645.864288][T26261] CPU: 1 UID: 0 PID: 26261 Comm: syz.1.8007 Tainted: G L syzkaller #0 PREEMPT [ 3645.864404][T26261] Tainted: [L]=SOFTLOCKUP [ 3645.864445][T26261] Hardware name: linux,dummy-virt (DT) [ 3645.864484][T26261] Call trace: [ 3645.864517][T26261] show_stack+0x18/0x24 (C) [ 3645.864677][T26261] dump_stack_lvl+0x60/0x80 [ 3645.864784][T26261] dump_stack+0x18/0x24 [ 3645.864860][T26261] should_fail_ex+0x1e0/0x238 [ 3645.864959][T26261] should_fail+0x14/0x40 [ 3645.865092][T26261] should_fail_usercopy+0x1c/0x40 [ 3645.865283][T26261] _inline_copy_from_user+0x24/0xa8 [ 3645.865371][T26261] copy_msghdr_from_user+0x58/0x160 [ 3645.865816][T26261] ___sys_sendmsg+0x90/0x108 [ 3645.866003][T26261] __sys_sendmsg+0x9c/0x100 [ 3645.866225][T26261] __arm64_sys_sendmsg+0x24/0x38 [ 3645.866328][T26261] invoke_syscall+0x54/0x10c [ 3645.866426][T26261] el0_svc_common.constprop.0+0x40/0xe0 [ 3645.866508][T26261] do_el0_svc+0x1c/0x34 [ 3645.866605][T26261] el0_svc+0x38/0x15c [ 3645.866708][T26261] el0t_64_sync_handler+0xa0/0xf0 [ 3645.867052][T26261] el0t_64_sync+0x1a4/0x1a8 [ 3648.032783][T26243] FAULT_INJECTION: forcing a failure. [ 3648.032783][T26243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3648.033037][T26243] CPU: 1 UID: 0 PID: 26243 Comm: syz.0.7995 Tainted: G L syzkaller #0 PREEMPT [ 3648.033108][T26243] Tainted: [L]=SOFTLOCKUP [ 3648.033129][T26243] Hardware name: linux,dummy-virt (DT) [ 3648.033149][T26243] Call trace: [ 3648.033166][T26243] show_stack+0x18/0x24 (C) [ 3648.033227][T26243] dump_stack_lvl+0x60/0x80 [ 3648.033262][T26243] dump_stack+0x18/0x24 [ 3648.033366][T26243] should_fail_ex+0x1e0/0x238 [ 3648.033512][T26243] should_fail+0x14/0x40 [ 3648.033593][T26243] should_fail_usercopy+0x1c/0x40 [ 3648.033665][T26243] _inline_copy_from_user+0x24/0xa8 [ 3648.033731][T26243] kstrtouint_from_user+0x68/0xd0 [ 3648.033792][T26243] proc_fail_nth_write+0x44/0x11c [ 3648.033845][T26243] vfs_write+0xd4/0x36c [ 3648.033958][T26243] ksys_write+0x70/0x108 [ 3648.034038][T26243] __arm64_sys_write+0x1c/0x30 [ 3648.034076][T26243] invoke_syscall+0x54/0x10c [ 3648.034124][T26243] el0_svc_common.constprop.0+0x40/0xe0 [ 3648.034168][T26243] do_el0_svc+0x1c/0x34 [ 3648.034217][T26243] el0_svc+0x38/0x15c [ 3648.034270][T26243] el0t_64_sync_handler+0xa0/0xf0 [ 3648.034386][T26243] el0t_64_sync+0x1a4/0x1a8 [ 3649.014235][T13772] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 3649.194210][T13772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3649.197509][T13772] usb 1-1: not running at top speed; connect to a high speed hub [ 3649.203786][T13772] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 4 [ 3649.221451][T13772] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3649.221867][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3649.222127][T13772] usb 1-1: Product: syz [ 3649.222196][T13772] usb 1-1: Manufacturer: syz [ 3649.222251][T13772] usb 1-1: SerialNumber: syz [ 3649.476671][T26287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8019'. [ 3649.501948][T26287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3649.522668][T26287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3649.627278][T13772] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3649.637522][T13772] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3649.681928][T26291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3649.684981][T26291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3649.746194][T26291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3649.747765][T26291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3649.787221][T26291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3649.788821][T26291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3649.859061][T13772] usb 1-1: USB disconnect, device number 74 [ 3649.886068][T26291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3649.887641][T26291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3659.757212][T26377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3659.768066][T26377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3659.953844][T26381] FAULT_INJECTION: forcing a failure. [ 3659.953844][T26381] name failslab, interval 1, probability 0, space 0, times 0 [ 3659.954246][T26381] CPU: 1 UID: 0 PID: 26381 Comm: syz.1.8051 Tainted: G L syzkaller #0 PREEMPT [ 3659.954362][T26381] Tainted: [L]=SOFTLOCKUP [ 3659.954407][T26381] Hardware name: linux,dummy-virt (DT) [ 3659.954449][T26381] Call trace: [ 3659.954533][T26381] show_stack+0x18/0x24 (C) [ 3659.954789][T26381] dump_stack_lvl+0x60/0x80 [ 3659.955070][T26381] dump_stack+0x18/0x24 [ 3659.955304][T26381] should_fail_ex+0x1e0/0x238 [ 3659.955682][T26381] should_failslab+0x54/0x80 [ 3659.955787][T26381] __kmalloc_cache_noprof+0x54/0x4c8 [ 3659.956108][T26381] bus_add_driver+0x3c/0x208 [ 3659.956331][T26381] driver_register+0x68/0x130 [ 3659.956454][T26381] usb_gadget_register_driver_owner+0x54/0xfc [ 3659.956540][T26381] raw_ioctl+0x728/0xd38 [ 3659.956655][T26381] __arm64_sys_ioctl+0xac/0x104 [ 3659.956735][T26381] invoke_syscall+0x54/0x10c [ 3659.956893][T26381] el0_svc_common.constprop.0+0x40/0xe0 [ 3659.957005][T26381] do_el0_svc+0x1c/0x34 [ 3659.957077][T26381] el0_svc+0x38/0x15c [ 3659.957152][T26381] el0t_64_sync_handler+0xa0/0xf0 [ 3659.957252][T26381] el0t_64_sync+0x1a4/0x1a8 [ 3659.980382][T26381] UDC core: USB Raw Gadget: driver registration failed: -12 [ 3659.982094][T26381] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 3660.258779][T26386] fuse: fd is not a fuse device [ 3660.715439][T13772] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3660.875879][T13772] usb 1-1: Using ep0 maxpacket: 16 [ 3660.925399][T13772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3660.925745][T13772] usb 1-1: config 0 has no interfaces? [ 3660.949306][T13772] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3660.949614][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3660.950213][T13772] usb 1-1: Product: syz [ 3660.950321][T13772] usb 1-1: Manufacturer: syz [ 3660.950437][T13772] usb 1-1: SerialNumber: syz [ 3660.964316][T13772] usb 1-1: config 0 descriptor?? [ 3663.851230][T26396] FAULT_INJECTION: forcing a failure. [ 3663.851230][T26396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3663.853349][T26396] CPU: 0 UID: 0 PID: 26396 Comm: syz.1.8057 Tainted: G L syzkaller #0 PREEMPT [ 3663.853532][T26396] Tainted: [L]=SOFTLOCKUP [ 3663.853627][T26396] Hardware name: linux,dummy-virt (DT) [ 3663.853687][T26396] Call trace: [ 3663.853724][T26396] show_stack+0x18/0x24 (C) [ 3663.853837][T26396] dump_stack_lvl+0x60/0x80 [ 3663.853909][T26396] dump_stack+0x18/0x24 [ 3663.853975][T26396] should_fail_ex+0x1e0/0x238 [ 3663.854078][T26396] should_fail+0x14/0x40 [ 3663.854210][T26396] should_fail_usercopy+0x1c/0x40 [ 3663.854283][T26396] _inline_copy_from_user+0x24/0xa8 [ 3663.854373][T26396] copy_msghdr_from_user+0x58/0x160 [ 3663.854442][T26396] ___sys_sendmsg+0x90/0x108 [ 3663.854512][T26396] __sys_sendmsg+0x9c/0x100 [ 3663.854583][T26396] __arm64_sys_sendmsg+0x24/0x38 [ 3663.854655][T26396] invoke_syscall+0x54/0x10c [ 3663.854723][T26396] el0_svc_common.constprop.0+0x40/0xe0 [ 3663.854789][T26396] do_el0_svc+0x1c/0x34 [ 3663.854855][T26396] el0_svc+0x38/0x15c [ 3663.854926][T26396] el0t_64_sync_handler+0xa0/0xf0 [ 3663.854997][T26396] el0t_64_sync+0x1a4/0x1a8 [ 3666.708150][T26411] fuse: fd is not a fuse device [ 3667.963983][T26413] FAULT_INJECTION: forcing a failure. [ 3667.963983][T26413] name failslab, interval 1, probability 0, space 0, times 0 [ 3667.966757][T26413] CPU: 0 UID: 0 PID: 26413 Comm: syz.1.8062 Tainted: G L syzkaller #0 PREEMPT [ 3667.966927][T26413] Tainted: [L]=SOFTLOCKUP [ 3667.966969][T26413] Hardware name: linux,dummy-virt (DT) [ 3667.967009][T26413] Call trace: [ 3667.967044][T26413] show_stack+0x18/0x24 (C) [ 3667.967174][T26413] dump_stack_lvl+0x60/0x80 [ 3667.967254][T26413] dump_stack+0x18/0x24 [ 3667.967331][T26413] should_fail_ex+0x1e0/0x238 [ 3667.967420][T26413] should_failslab+0x54/0x80 [ 3667.967507][T26413] kmem_cache_alloc_noprof+0x54/0x4a0 [ 3667.967588][T26413] skb_clone+0x60/0xc4 [ 3667.967682][T26413] __netlink_deliver_tap+0x1cc/0x294 [ 3667.967774][T26413] netlink_unicast+0x380/0x3b8 [ 3667.967858][T26413] netlink_sendmsg+0x194/0x410 [ 3667.967933][T26413] __sock_sendmsg+0x54/0x60 [ 3667.968004][T26413] ____sys_sendmsg+0x24c/0x2a4 [ 3667.968074][T26413] ___sys_sendmsg+0xb0/0x108 [ 3667.968142][T26413] __sys_sendmsg+0x9c/0x100 [ 3667.968212][T26413] __arm64_sys_sendmsg+0x24/0x38 [ 3667.968280][T26413] invoke_syscall+0x54/0x10c [ 3667.968348][T26413] el0_svc_common.constprop.0+0x40/0xe0 [ 3667.968423][T26413] do_el0_svc+0x1c/0x34 [ 3667.968491][T26413] el0_svc+0x38/0x15c [ 3667.968563][T26413] el0t_64_sync_handler+0xa0/0xf0 [ 3667.968633][T26413] el0t_64_sync+0x1a4/0x1a8 [ 3669.275167][T26429] FAULT_INJECTION: forcing a failure. [ 3669.275167][T26429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3669.275460][T26429] CPU: 1 UID: 0 PID: 26429 Comm: syz.1.8067 Tainted: G L syzkaller #0 PREEMPT [ 3669.275536][T26429] Tainted: [L]=SOFTLOCKUP [ 3669.275561][T26429] Hardware name: linux,dummy-virt (DT) [ 3669.275585][T26429] Call trace: [ 3669.275652][T26429] show_stack+0x18/0x24 (C) [ 3669.275720][T26429] dump_stack_lvl+0x60/0x80 [ 3669.275761][T26429] dump_stack+0x18/0x24 [ 3669.275799][T26429] should_fail_ex+0x1e0/0x238 [ 3669.275841][T26429] should_fail+0x14/0x40 [ 3669.275905][T26429] should_fail_usercopy+0x1c/0x40 [ 3669.275965][T26429] strncpy_from_user+0x24/0x1c0 [ 3669.276012][T26429] __arm64_sys_request_key+0x50/0x1d0 [ 3669.276055][T26429] invoke_syscall+0x54/0x10c [ 3669.276094][T26429] el0_svc_common.constprop.0+0x40/0xe0 [ 3669.276133][T26429] do_el0_svc+0x1c/0x34 [ 3669.276170][T26429] el0_svc+0x38/0x15c [ 3669.276214][T26429] el0t_64_sync_handler+0xa0/0xf0 [ 3669.276253][T26429] el0t_64_sync+0x1a4/0x1a8 [ 3670.851448][T26456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3670.852456][T26456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3671.980354][T13772] usb 1-1: USB disconnect, device number 75 [ 3673.314985][T26491] FAULT_INJECTION: forcing a failure. [ 3673.314985][T26491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3673.315343][T26491] CPU: 1 UID: 0 PID: 26491 Comm: syz.1.8091 Tainted: G L syzkaller #0 PREEMPT [ 3673.315418][T26491] Tainted: [L]=SOFTLOCKUP [ 3673.315439][T26491] Hardware name: linux,dummy-virt (DT) [ 3673.315462][T26491] Call trace: [ 3673.315480][T26491] show_stack+0x18/0x24 (C) [ 3673.315560][T26491] dump_stack_lvl+0x60/0x80 [ 3673.315599][T26491] dump_stack+0x18/0x24 [ 3673.315635][T26491] should_fail_ex+0x1e0/0x238 [ 3673.315678][T26491] should_fail+0x14/0x40 [ 3673.315713][T26491] should_fail_usercopy+0x1c/0x40 [ 3673.315748][T26491] _inline_copy_from_user+0x24/0xa8 [ 3673.315788][T26491] copy_msghdr_from_user+0x58/0x160 [ 3673.315824][T26491] ___sys_sendmsg+0x90/0x108 [ 3673.315859][T26491] __sys_sendmsg+0x9c/0x100 [ 3673.315927][T26491] __arm64_sys_sendmsg+0x24/0x38 [ 3673.316007][T26491] invoke_syscall+0x54/0x10c [ 3673.316079][T26491] el0_svc_common.constprop.0+0x40/0xe0 [ 3673.316124][T26491] do_el0_svc+0x1c/0x34 [ 3673.316160][T26491] el0_svc+0x38/0x15c [ 3673.316199][T26491] el0t_64_sync_handler+0xa0/0xf0 [ 3673.316236][T26491] el0t_64_sync+0x1a4/0x1a8 [ 3674.604144][T26515] FAULT_INJECTION: forcing a failure. [ 3674.604144][T26515] name failslab, interval 1, probability 0, space 0, times 0 [ 3674.607889][T26515] CPU: 0 UID: 0 PID: 26515 Comm: syz.0.8102 Tainted: G L syzkaller #0 PREEMPT [ 3674.608040][T26515] Tainted: [L]=SOFTLOCKUP [ 3674.608079][T26515] Hardware name: linux,dummy-virt (DT) [ 3674.608119][T26515] Call trace: [ 3674.608177][T26515] show_stack+0x18/0x24 (C) [ 3674.608297][T26515] dump_stack_lvl+0x60/0x80 [ 3674.608376][T26515] dump_stack+0x18/0x24 [ 3674.608450][T26515] should_fail_ex+0x1e0/0x238 [ 3674.608530][T26515] should_failslab+0x54/0x80 [ 3674.608623][T26515] __kmalloc_noprof+0xac/0x560 [ 3674.608700][T26515] tomoyo_realpath_from_path+0x44/0x1d4 [ 3674.608783][T26515] tomoyo_path_number_perm+0xe0/0x21c [ 3674.608859][T26515] tomoyo_file_ioctl+0x1c/0x30 [ 3674.608962][T26515] security_file_ioctl+0x8c/0x19c [ 3674.609071][T26515] __arm64_sys_ioctl+0x48/0x104 [ 3674.609162][T26515] invoke_syscall+0x54/0x10c [ 3674.609236][T26515] el0_svc_common.constprop.0+0x40/0xe0 [ 3674.609312][T26515] do_el0_svc+0x1c/0x34 [ 3674.609387][T26515] el0_svc+0x38/0x15c [ 3674.609489][T26515] el0t_64_sync_handler+0xa0/0xf0 [ 3674.609583][T26515] el0t_64_sync+0x1a4/0x1a8 [ 3674.629034][T26515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3677.086620][T21236] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 3678.742949][T21236] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 3685.396749][T26644] FAULT_INJECTION: forcing a failure. [ 3685.396749][T26644] name failslab, interval 1, probability 0, space 0, times 0 [ 3685.405611][T26644] CPU: 1 UID: 0 PID: 26644 Comm: syz.1.8141 Tainted: G L syzkaller #0 PREEMPT [ 3685.405769][T26644] Tainted: [L]=SOFTLOCKUP [ 3685.405806][T26644] Hardware name: linux,dummy-virt (DT) [ 3685.405874][T26644] Call trace: [ 3685.406372][T26644] show_stack+0x18/0x24 (C) [ 3685.406498][T26644] dump_stack_lvl+0x60/0x80 [ 3685.406568][T26644] dump_stack+0x18/0x24 [ 3685.406635][T26644] should_fail_ex+0x1e0/0x238 [ 3685.406710][T26644] should_failslab+0x54/0x80 [ 3685.406785][T26644] __kmalloc_noprof+0xac/0x560 [ 3685.406854][T26644] tomoyo_encode2+0x7c/0x13c [ 3685.406926][T26644] tomoyo_encode+0x28/0x40 [ 3685.406994][T26644] tomoyo_realpath_from_path+0x100/0x1d4 [ 3685.407063][T26644] tomoyo_check_open_permission+0x128/0x190 [ 3685.407132][T26644] tomoyo_file_open+0x30/0x3c [ 3685.407201][T26644] security_file_open+0x74/0x148 [ 3685.407272][T26644] do_dentry_open+0xe0/0x53c [ 3685.407356][T26644] vfs_open+0x2c/0xe8 [ 3685.407429][T26644] path_openat+0x7a8/0x1074 [ 3685.407501][T26644] do_file_open+0xb0/0x168 [ 3685.407572][T26644] do_sys_openat2+0x84/0x104 [ 3685.407661][T26644] __arm64_sys_openat+0x64/0xc0 [ 3685.407767][T26644] invoke_syscall+0x54/0x10c [ 3685.407850][T26644] el0_svc_common.constprop.0+0x40/0xe0 [ 3685.407973][T26644] do_el0_svc+0x1c/0x34 [ 3685.408043][T26644] el0_svc+0x38/0x15c [ 3685.408116][T26644] el0t_64_sync_handler+0xa0/0xf0 [ 3685.408183][T26644] el0t_64_sync+0x1a4/0x1a8 [ 3685.421688][T26644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3685.907189][T26650] FAULT_INJECTION: forcing a failure. [ 3685.907189][T26650] name failslab, interval 1, probability 0, space 0, times 0 [ 3685.907778][T26650] CPU: 1 UID: 0 PID: 26650 Comm: syz.1.8142 Tainted: G L syzkaller #0 PREEMPT [ 3685.907912][T26650] Tainted: [L]=SOFTLOCKUP [ 3685.907950][T26650] Hardware name: linux,dummy-virt (DT) [ 3685.907990][T26650] Call trace: [ 3685.908024][T26650] show_stack+0x18/0x24 (C) [ 3685.908203][T26650] dump_stack_lvl+0x60/0x80 [ 3685.908327][T26650] dump_stack+0x18/0x24 [ 3685.908468][T26650] should_fail_ex+0x1e0/0x238 [ 3685.908577][T26650] should_failslab+0x54/0x80 [ 3685.908726][T26650] __kmalloc_cache_noprof+0x54/0x4c8 [ 3685.908833][T26650] __io_uring_add_tctx_node+0xb0/0x1c0 [ 3685.908917][T26650] io_uring_setup+0x76c/0x800 [ 3685.909082][T26650] __arm64_sys_io_uring_setup+0x5c/0xc0 [ 3685.909220][T26650] invoke_syscall+0x54/0x10c [ 3685.909318][T26650] el0_svc_common.constprop.0+0x40/0xe0 [ 3685.909430][T26650] do_el0_svc+0x1c/0x34 [ 3685.909544][T26650] el0_svc+0x38/0x15c [ 3685.909649][T26650] el0t_64_sync_handler+0xa0/0xf0 [ 3685.909724][T26650] el0t_64_sync+0x1a4/0x1a8 [ 3685.911516][T26650] ------------[ cut here ]------------ [ 3685.918066][T26650] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x2d4/0x2f0, CPU#1: syz.1.8142/26650 [ 3685.931326][T26650] Modules linked in: [ 3685.933840][T26650] CPU: 1 UID: 0 PID: 26650 Comm: syz.1.8142 Tainted: G L syzkaller #0 PREEMPT [ 3685.935103][T26650] Tainted: [L]=SOFTLOCKUP [ 3685.935347][T26650] Hardware name: linux,dummy-virt (DT) [ 3685.935935][T26650] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3685.936481][T26650] pc : io_wq_put_and_exit+0x2d4/0x2f0 [ 3685.936919][T26650] lr : __io_uring_add_tctx_node+0x150/0x1c0 [ 3685.937367][T26650] sp : ffff800084663c00 [ 3685.937726][T26650] x29: ffff800084663c30 x28: f2f0000005f62180 x27: 0000000000000000 [ 3685.938526][T26650] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [ 3685.938913][T26650] x23: fdf0000069177598 x22: 0000000000000000 x21: 00000000fffffff4 [ 3685.939338][T26650] x20: f4f0000034139000 x19: fdf0000069177000 x18: 00000000fffffffd [ 3685.940169][T26650] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800084663373 [ 3685.940771][T26650] x14: 00000000ffffffea x13: ffff8000846636d8 x12: 0000000000084318 [ 3685.941248][T26650] x11: ffff800082b9be38 x10: 00000000000240d8 x9 : ffff800082c4be38 [ 3685.941805][T26650] x8 : f2f0000005f62180 x7 : ffff800084663fe8 x6 : fffffffffffff809 [ 3685.942372][T26650] x5 : fff000007d8e6188 x4 : ffff800084664000 x3 : 0000000000000000 [ 3685.942901][T26650] x2 : 0000000000000000 x1 : f2f0000005f62180 x0 : 0000000000000000 [ 3685.943785][T26650] Call trace: [ 3685.944300][T26650] io_wq_put_and_exit+0x2d4/0x2f0 (P) [ 3685.945046][T26650] __io_uring_add_tctx_node+0x150/0x1c0 [ 3685.945578][T26650] io_uring_setup+0x76c/0x800 [ 3685.945967][T26650] __arm64_sys_io_uring_setup+0x5c/0xc0 [ 3685.946244][T26650] invoke_syscall+0x54/0x10c [ 3685.946513][T26650] el0_svc_common.constprop.0+0x40/0xe0 [ 3685.946790][T26650] do_el0_svc+0x1c/0x34 [ 3685.947202][T26650] el0_svc+0x38/0x15c [ 3685.947721][T26650] el0t_64_sync_handler+0xa0/0xf0 [ 3685.948071][T26650] el0t_64_sync+0x1a4/0x1a8 [ 3685.948659][T26650] ---[ end trace 0000000000000000 ]---