last executing test programs: 9.995157715s ago: executing program 2 (id=336): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005e00)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = fsmount(r0, 0x1, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000001c0)={r4, r4, 0x3e4c, 0x1, &(0x7f0000000280)="c3", 0x21, 0x84, 0x15c2, 0x8001, 0xf001, 0x2, 0x2, 'syz0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6024960300000886ef", @ANYRES16=r3, @ANYBLOB="02002bbd7000fedbdf2503000000050003007000000005000300010000000500030007000000050003000400000005000200080000000c000180080003000200000005000200ff0000000500050002000000"], 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x1) 9.424572884s ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x76}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x10) r3 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x0, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f00000001c0)) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000200)={0xe, 0x8, 0x6, 0x6, 0x7}, 0x14) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004081}, 0x140408d9) (async) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x1, 0x6, 0xdb2afb237fc69be8, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000080) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000480)=[@wr_crn={0x67, 0x20}, @uexit={0x0, 0x18, 0x7}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x820, 0x5}}, @uexit={0x0, 0x18, 0x4}, @nested_load_code={0x12e, 0x75, {0x3, "360f2045420f22dc360fc71a48b801000000000000000f23c00f21f83501000e000f23f82666430f38829baa1a0000c744240011000000c744240200100000ff1c24c4a2d1a9450b0f20c035000000200f22c0450f005e0066ba4200ec"}}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x68, {"430f06410f2213c481fb2c4b6048b803000000000000000f23d00f21f8353000000e0f23f80fc75b7b441139b9990a0000b80d000000ba000000000f30c4a275ab8a05000000c48319699100600000d266b82f000f00d0"}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x14, @unmapped=0xdddd0000}}, @in_dx={0x69, 0x20, {0xd9e8, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x39, 0x7, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x2a}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x28, @gpa=0xeeee0000}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x59, {"f364430f0092c9fffffff3460fc77500460f01c42e660fc7737ac4a22d36990000000066baf80cb8cc877786ef66bafc0c66ed66ba4000ed3e0faea23b7862d93665660fee02e34f"}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xee, 0x7, 0x3f, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xba, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x8001, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xb7}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x3, 0x24f2}}], 0x3f6}) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000008c0)={0x5, 0x0, [{0x991, 0x0, 0x8}, {0x11a, 0x0, 0x100000001}, {0x8b3, 0x0, 0x92c}, {0x8a8, 0x0, 0x7e72}, {0xb0e, 0x0, 0x6}]}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000940)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000980)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f00000009c0)={r7, 0x3}) (async, rerun: 32) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) (async, rerun: 32) r8 = syz_open_dev$sg(&(0x7f0000000a00), 0x0, 0x900) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000a40)=0x9) (async) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000a80)={0xb6, 0x0, 0xb}) (async) bind$x25(0xffffffffffffffff, &(0x7f0000000b00)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_netdev_private(r10, 0x89f1, &(0x7f0000000b40)="9d9eab62abef1ff19e470b95af19c5368c28b8bd39354e11103dd994a5016912e2a0024de82a6037a9d2e16ab1ee117a0010234e2da83585e3602a7a30f60eb5d1feb506") ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$CDROMEJECT_SW(r11, 0x530f, 0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) (async, rerun: 64) getsockname$netlink(r11, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) (async, rerun: 32) ioctl$KVM_RUN(r11, 0xae80, 0x0) (rerun: 32) accept4$bt_l2cap(r12, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, &(0x7f0000000d00)=0xe, 0x80000) (async) ioctl$BTRFS_IOC_DEV_INFO(r12, 0xd000941e, &(0x7f0000001140)={0x0, "fde3f9362161ddb9e8971ec5a8aefb5a"}) 9.305356158s ago: executing program 2 (id=348): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, &(0x7f0000001540)=[{&(0x7f0000001ec0)="e14f", 0x2}, {&(0x7f0000001bc0)='\x00*', 0x2}, {&(0x7f0000000540)="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", 0x1000}], 0x3, 0xffffffff, 0x8) 9.165366676s ago: executing program 2 (id=349): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000005c0), 0xa00, 0x0) ioctl$DVD_AUTH(r0, 0x5392, 0x0) 9.109074694s ago: executing program 2 (id=350): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='pagemap\x00') lseek(r1, 0x8000000000000000, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000640)='7', 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000680)={0x27, 0x0, 0x1, 0x0, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x19}, 0x60) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000440)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendto(r5, &(0x7f00000002c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000380)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r7 = landlock_create_ruleset(&(0x7f0000000400)={0x2, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r7, 0xa) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000022c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./mnt\x00', 0x1ff) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x6) ptrace(0x10, r8) capget(&(0x7f0000000080)={0x19980330, r8}, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x8, 0x8, 0x8}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x88002, 0x0) 8.22166673s ago: executing program 2 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14fff5001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) 2.646636492s ago: executing program 0 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) (fail_nth: 14) 2.58893585s ago: executing program 0 (id=403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x3261e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010002000fdfffffffdffffff000000007df59ce3371e9a2f1d89db790d5665d47cce0af06cb032a7459db9e86f9e21153c62953c22c818377d05d35b3ff2fec15742caf6f88111e02a3944ab3540b75412244104f8823d30bbab7ce14c93915127ea786183c3eebb", @ANYRES32=0x0, @ANYBLOB="eb44090002800000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x56, 0x0, 0xff, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0xfffc, 0x6, 0x4, 0x7ff}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x822b01) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000006c0)={0x1, 0x6f7, 0x809d, 0xfff9}) write$char_usb(r3, &(0x7f0000000300)="e2", 0xff0f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x3c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r8, &(0x7f00000007c0)={&(0x7f0000000800)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) sendmsg$inet_sctp(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) personality(0x8) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000340)={0xfff, 0x5, 0x7fffffff, 0x5, 0x8, 0x2, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x74) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.809896637s ago: executing program 3 (id=404): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000440)=@multiplanar_fd={0x1, 0x2, 0x4, 0x80, 0x5, {0x0, 0x2710}, {0x1, 0x8, 0x4, 0x7, 0x3, 0x9e, "8e73a7b0"}, 0xf, 0x4, {0x0}, 0x4cc}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x96066ccddc7e458b, 0x5}}}}]}, 0x40}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r9, 0x0, 0xcd, &(0x7f0000000240)={@multicast2, @local, 0xffffffffffffffff, "471c34298f244577c6ca4f9221a4730601334560beb85235d7084f83fb7ecf08", 0x6, 0x4, 0x6, 0x3}, 0x3c) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000200)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00a3bbc567f666f295a3ebec147ed6cd000000003f20001280e90001056272696467650000"], 0x40}}, 0x0) 1.760702868s ago: executing program 3 (id=406): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x200, &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000f40)='GPL\x00', 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.713469145s ago: executing program 3 (id=407): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0xc203400) pwritev(r1, &(0x7f0000001540), 0x0, 0xffffffff, 0x8) 1.663827747s ago: executing program 1 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) write(r0, &(0x7f0000000200)='37', 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 1.626493328s ago: executing program 1 (id=409): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000003c0)={0xf0f024}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000002500)="2478546ca4fa3b0bfe4ddf30cc", 0xd, 0x4000050, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002340)={{r5, &(0x7f0000000340)='\xff\xff\xff\xff\xff\xff', 0x80, 0x0, 0x6, &(0x7f00000012c0), &(0x7f0000001300)=0x40}, {[0xffff, 0x3, 0x9, 0xf]}, 0x8000, 0x0, 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.567756098s ago: executing program 3 (id=410): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r3) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sec/tomoyo/domain_policy\x00', 0x2, 0x28) write(r4, 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='100', 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f00000008c0)={'syz0\x00', {0x0, 0x4, 0x0, 0x1000}, 0x1c, [0x101, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xac, 0xff, 0xeb93, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x80000001, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1], [0x0, 0x717d, 0x0, 0x9, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xf3d9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x80, 0x0, 0x48, 'snapshot-merge\x00', {@rnull={'/dev/syzrnull', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '64'}}]}) getpgid(0xffffffffffffffff) 1.486142505s ago: executing program 1 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0xfff5, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) 1.408862521s ago: executing program 1 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0xff, 0x3, 0x8, 0x8}, 0x1, 0x1, 0x2, 0x9, 0x5, 0x16, 0x9, 0x1d, 0x1, 0xd87, {0x3, 0x0, 0xffffff7f, 0x0, 0x3c00000, 0x400000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) 1.117926s ago: executing program 0 (id=413): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x581041, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000040)) 1.106211561s ago: executing program 1 (id=414): syz_emit_ethernet(0x5e, &(0x7f0000000dc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty=0xf5ff}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) 1.026254757s ago: executing program 1 (id=415): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev_mnt\x00', 0x1ff) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040), 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x801, 0x0, 0x20000000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000180)=0x6) mount(0x0, &(0x7f0000000000)='./dev_mnt/roccatsavu0\x00', &(0x7f0000000680)='devtmpfs\x00', 0x821000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) ioctl$EVIOCRMFF(r2, 0x800448f1, 0x0) 989.489653ms ago: executing program 0 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000007c0), 0x40100, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000840)=@add_del={0x2, &(0x7f0000000800)='veth0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f00000001c0)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x2e, &(0x7f0000000780)=0xb1e0, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r7], 0x2c}}, 0x20008000) sendmsg$inet_sctp(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0xe0}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002001d000ab6b69700040028011c9ef6", @ANYRES32=r6], 0x20, 0x2400e044}, 0x20001080) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}, r10}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r10, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000600)=0xa, r10, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000880), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000640)={0x4, 0x8, 0xfa00, {r10, 0x8}}, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x2066, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 207.997495ms ago: executing program 3 (id=417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x240080d0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2902, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340), 0x4) fsopen(&(0x7f0000000000)='vfat\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r4, 0x8182) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1520) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000082, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0xc0c0128e, &(0x7f0000000f00)={0x2000, 0x1000000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000000000000017000fed3df2502000000", @ANYRES8=r5, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x80c0) sched_setscheduler(0x0, 0x1, 0x0) 142.243867ms ago: executing program 3 (id=418): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0xc203400) pwritev(r1, &(0x7f0000001540), 0x0, 0xffffffff, 0x8) 23.612286ms ago: executing program 0 (id=419): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x106, 0x48845}, 0xc000) 0s ago: executing program 0 (id=420): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x47a0, &(0x7f0000000400)={0x0, 0x8f8, 0x8, 0x2, 0x2d9, 0x0, r0}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000080)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x25e7, 0x80}, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x124) mknodat$null(r2, &(0x7f0000000140)='./file1\x00', 0x1000, 0x103) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='./file1\x00', 0x8ae) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x836d9fb164f927b3) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)="ce", 0x1}], 0x1, 0x8) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)="8c", 0x1) kernel console output (not intermixed with test programs): dump_stack_lvl+0x100/0x190 [ 58.057759][ T6278] should_fail_ex.cold+0x5/0xa [ 58.057778][ T6278] should_failslab+0xc2/0x120 [ 58.057791][ T6278] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.057807][ T6278] ? sysfs_init_fs_context+0xb4/0x780 [ 58.057828][ T6278] sysfs_init_fs_context+0xb4/0x780 [ 58.057847][ T6278] alloc_fs_context+0x607/0xf40 [ 58.057869][ T6278] path_mount+0xf59/0x2850 [ 58.057888][ T6278] ? __pfx_path_mount+0x10/0x10 [ 58.057905][ T6278] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.057918][ T6278] ? putname+0xb1/0x110 [ 58.057932][ T6278] ? kmem_cache_free+0x127/0x6c0 [ 58.057952][ T6278] ? __x64_sys_mount+0x293/0x310 [ 58.057969][ T6278] __x64_sys_mount+0x293/0x310 [ 58.057986][ T6278] ? __pfx___x64_sys_mount+0x10/0x10 [ 58.058007][ T6278] do_syscall_64+0x123/0x790 [ 58.058029][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.058041][ T6278] RIP: 0033:0x7f7d1d99fb19 [ 58.058051][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.058062][ T6278] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.058074][ T6278] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 58.058081][ T6278] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 58.058088][ T6278] RBP: 00007f7d1e948090 R08: 0000000000000000 R09: 0000000000000000 [ 58.058094][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.058101][ T6278] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 58.058116][ T6278] [ 58.109570][ T6284] [U]  [ 58.176934][ T6292] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 58.176969][ T6292] device-mapper: raid: Choosing default region size of 4MiB [ 58.177561][ T6292] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 58.177570][ T6292] device-mapper: raid: Superblocks created for new raid set [ 58.493135][ T6292] device-mapper: table: 248:3: raid: Insufficient redundancy to activate array (-EINVAL) [ 58.493164][ T6292] device-mapper: ioctl: error adding target to table [ 58.530095][ T6304] FAULT_INJECTION: forcing a failure. [ 58.530095][ T6304] name failslab, interval 1, probability 5, space 0, times 0 [ 58.530125][ T6304] CPU: 2 UID: 0 PID: 6304 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 58.530151][ T6304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.530162][ T6304] Call Trace: [ 58.530169][ T6304] [ 58.530176][ T6304] dump_stack_lvl+0x100/0x190 [ 58.530213][ T6304] should_fail_ex.cold+0x5/0xa [ 58.530242][ T6304] should_failslab+0xc2/0x120 [ 58.530263][ T6304] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.530290][ T6304] ? nsim_fib_event_nb+0x1b4/0xe50 [ 58.530332][ T6304] nsim_fib_event_nb+0x1b4/0xe50 [ 58.530358][ T6304] ? lock_acquire+0x1d1/0x380 [ 58.530384][ T6304] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 58.530407][ T6304] notifier_call_chain+0x99/0x3f0 [ 58.530431][ T6304] atomic_notifier_call_chain+0x71/0x1c0 [ 58.530452][ T6304] call_fib_notifiers+0x33/0x70 [ 58.530482][ T6304] fib6_add_rt2node+0x1456/0x3ab0 [ 58.530512][ T6304] ? rcu_is_watching+0x13/0xc0 [ 58.530535][ T6304] ? trace_kmem_cache_alloc+0xdd/0x100 [ 58.530558][ T6304] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 58.530589][ T6304] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 58.530631][ T6304] ? fib6_add+0x60e/0x1eb0 [ 58.530665][ T6304] fib6_add+0x60e/0x1eb0 [ 58.530697][ T6304] ? do_raw_spin_lock+0x128/0x260 [ 58.530715][ T6304] ? __pfx_fib6_add+0x10/0x10 [ 58.530740][ T6304] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.530764][ T6304] ip6_ins_rt+0xb5/0x110 [ 58.530784][ T6304] ? __pfx_ip6_ins_rt+0x10/0x10 [ 58.530807][ T6304] ? nlmsg_notify+0xbf/0x290 [ 58.530827][ T6304] ? nlmsg_notify+0xdc/0x290 [ 58.530848][ T6304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.530881][ T6304] __ipv6_ifa_notify+0xbf1/0xf90 [ 58.530904][ T6304] ? __pfx_fib6_clean_node+0x10/0x10 [ 58.530933][ T6304] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 58.530961][ T6304] ? __local_bh_enable_ip+0xa5/0x120 [ 58.530987][ T6304] ? __fib6_clean_all+0x18c/0x2d0 [ 58.531016][ T6304] ? add_addr+0x253/0x360 [ 58.531041][ T6304] add_addr+0x253/0x360 [ 58.531069][ T6304] ? __pfx_add_addr+0x10/0x10 [ 58.531110][ T6304] addrconf_init_auto_addrs+0x430/0x780 [ 58.531140][ T6304] addrconf_notify+0xa10/0x1ba0 [ 58.531161][ T6304] ? igmp_netdev_event+0x7b/0x880 [ 58.531190][ T6304] ? __pfx_addrconf_notify+0x10/0x10 [ 58.531211][ T6304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.531239][ T6304] ? ip6mr_device_event+0x1c4/0x230 [ 58.531263][ T6304] notifier_call_chain+0x99/0x3f0 [ 58.531286][ T6304] call_netdevice_notifiers_info+0xbe/0x110 [ 58.531318][ T6304] __dev_notify_flags+0x397/0x4b0 [ 58.531338][ T6304] ? __local_bh_enable_ip+0xa5/0x120 [ 58.531361][ T6304] ? __pfx___dev_notify_flags+0x10/0x10 [ 58.531381][ T6304] ? __dev_change_flags+0x548/0x850 [ 58.531404][ T6304] ? is_bpf_text_address+0x94/0x1a0 [ 58.531425][ T6304] ? validate_linkmsg+0x5ff/0xcd0 [ 58.531447][ T6304] ? kernel_text_address+0x8d/0x100 [ 58.531469][ T6304] ? __pfx_validate_linkmsg+0x10/0x10 [ 58.531495][ T6304] netif_change_flags+0x108/0x160 [ 58.531519][ T6304] do_setlink.isra.0+0x1b9f/0x3f50 [ 58.531549][ T6304] ? __lock_acquire+0x5c0/0x1f40 [ 58.531575][ T6304] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 58.531602][ T6304] ? __lock_acquire+0x5c0/0x1f40 [ 58.531630][ T6304] ? lock_acquire+0x1d1/0x380 [ 58.531662][ T6304] ? avc_has_perm_noaudit+0x56/0x470 [ 58.531690][ T6304] ? lock_acquire+0x1d1/0x380 [ 58.531714][ T6304] ? rtnl_newlink+0xac3/0x2620 [ 58.531744][ T6304] ? rcu_is_watching+0x13/0xc0 [ 58.531763][ T6304] ? trace_contention_end+0x126/0x160 [ 58.531790][ T6304] ? __mutex_lock+0x267/0x1c10 [ 58.531810][ T6304] ? rtnl_newlink+0xac3/0x2620 [ 58.531835][ T6304] ? hook_capable+0x1bc/0x500 [ 58.531862][ T6304] ? __pfx___mutex_lock+0x10/0x10 [ 58.531880][ T6304] ? rcu_is_watching+0x13/0xc0 [ 58.531900][ T6304] ? cap_capable+0x107/0x430 [ 58.531932][ T6304] ? netlink_ns_capable+0xfa/0x130 [ 58.531956][ T6304] rtnl_newlink+0x1dc4/0x2620 [ 58.532011][ T6304] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.532039][ T6304] ? avc_has_perm_noaudit+0x56/0x470 [ 58.532061][ T6304] ? find_held_lock+0x2b/0x80 [ 58.532080][ T6304] ? avc_has_perm_noaudit+0x11e/0x470 [ 58.532101][ T6304] ? avc_has_perm_noaudit+0x11e/0x470 [ 58.532134][ T6304] ? __lock_acquire+0x5c0/0x1f40 [ 58.532160][ T6304] ? hook_capable+0x1bc/0x500 [ 58.532192][ T6304] ? lock_acquire+0x1d1/0x380 [ 58.532216][ T6304] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 58.532240][ T6304] ? find_held_lock+0x2b/0x80 [ 58.532258][ T6304] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 58.532283][ T6304] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 58.532309][ T6304] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.532333][ T6304] rtnetlink_rcv_msg+0x95e/0xe90 [ 58.532360][ T6304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.532396][ T6304] netlink_rcv_skb+0x159/0x420 [ 58.532417][ T6304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.532441][ T6304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.532461][ T6304] ? __asan_memcpy+0x3c/0x60 [ 58.532494][ T6304] ? netlink_deliver_tap+0x1ae/0xb50 [ 58.532519][ T6304] netlink_unicast+0x668/0x950 [ 58.532543][ T6304] ? __pfx_netlink_unicast+0x10/0x10 [ 58.532570][ T6304] netlink_sendmsg+0x9ac/0x10c0 [ 58.532597][ T6304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.532624][ T6304] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.532657][ T6304] ? ____sys_sendmsg+0xa99/0xc30 [ 58.532681][ T6304] ____sys_sendmsg+0xa99/0xc30 [ 58.532704][ T6304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.532729][ T6304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.532765][ T6304] ___sys_sendmsg+0x190/0x1e0 [ 58.532791][ T6304] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.532817][ T6304] ? futex_wait+0x11e/0x370 [ 58.532850][ T6304] ? find_held_lock+0x2b/0x80 [ 58.532885][ T6304] __sys_sendmsg+0x160/0x210 [ 58.532906][ T6304] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.532937][ T6304] do_syscall_64+0x123/0x790 [ 58.532984][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.533004][ T6304] RIP: 0033:0x7f7d1d99fb19 [ 58.533020][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.533038][ T6304] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.533057][ T6304] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 58.533069][ T6304] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 58.533080][ T6304] RBP: 00007f7d1da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 58.533090][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.533102][ T6304] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 58.533128][ T6304] [ 58.686941][ T6309] batman_adv: batadv0: Adding interface: syzkaller0 [ 58.686958][ T6309] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.686983][ T6309] batman_adv: batadv0: Interface activated: syzkaller0 [ 58.693591][ T6307] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 58.702887][ T6307] batman_adv: batadv0: Removing interface: syzkaller0 [ 58.733232][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 58.733251][ T42] audit: type=1326 audit(1793737888.973:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.2.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d99fb19 code=0x7fc00000 [ 58.750230][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 58.841498][ T42] audit: type=1400 audit(1793737889.073:393): avc: denied { read } for pid=6316 comm="syz.0.134" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.842588][ T42] audit: type=1400 audit(1793737889.073:394): avc: denied { open } for pid=6316 comm="syz.0.134" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.843210][ T42] audit: type=1400 audit(1793737889.083:395): avc: denied { ioctl } for pid=6316 comm="syz.0.134" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x80287010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.999248][ T42] audit: type=1400 audit(1793737889.233:396): avc: denied { load_policy } for pid=6325 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.000858][ T6326] SELinux: policydb string length 1936269427 does not match expected length 8 [ 59.001587][ T6326] SELinux: failed to load policy [ 59.015499][ T42] audit: type=1400 audit(1793737889.253:397): avc: denied { read } for pid=6329 comm="syz.1.139" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.015704][ T42] audit: type=1400 audit(1793737889.253:398): avc: denied { open } for pid=6329 comm="syz.1.139" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.018678][ T42] audit: type=1400 audit(1793737889.253:399): avc: denied { ioctl } for pid=6329 comm="syz.1.139" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.058833][ T42] audit: type=1400 audit(1793737889.293:400): avc: denied { allowed } for pid=6334 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.089565][ T42] audit: type=1400 audit(1793737889.323:401): avc: denied { accept } for pid=6331 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.122139][ T5876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.282920][ T5876] usb 8-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 59.283885][ T5876] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 59.283914][ T5876] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 59.283935][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.283974][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.289872][ T6319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.290043][ T6319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.294719][ T5876] pl2303 8-1:1.0: pl2303 converter detected [ 59.300535][ T5876] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 59.368274][ T6355] ======================================================= [ 59.368274][ T6355] WARNING: The mand mount option has been deprecated and [ 59.368274][ T6355] and is ignored by this kernel. Remove the mand [ 59.368274][ T6355] option from the mount to silence this warning. [ 59.368274][ T6355] ======================================================= [ 59.370451][ T6355] FAULT_INJECTION: forcing a failure. [ 59.370451][ T6355] name failslab, interval 1, probability 5, space 0, times 0 [ 59.370469][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.0.143 Not tainted syzkaller #0 PREEMPT(full) [ 59.370483][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.370513][ T6355] Call Trace: [ 59.370517][ T6355] [ 59.370522][ T6355] dump_stack_lvl+0x100/0x190 [ 59.370547][ T6355] should_fail_ex.cold+0x5/0xa [ 59.370567][ T6355] should_failslab+0xc2/0x120 [ 59.370582][ T6355] __kmalloc_noprof+0xfc/0x840 [ 59.370600][ T6355] ? __vb2_queue_alloc+0x23e/0x1160 [ 59.370624][ T6355] __vb2_queue_alloc+0x23e/0x1160 [ 59.370651][ T6355] vb2_core_reqbufs+0x899/0xf30 [ 59.370672][ T6355] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 59.370701][ T6355] ? trace_contention_end+0x126/0x160 [ 59.370762][ T6355] ? __mutex_lock+0x267/0x1c10 [ 59.370786][ T6355] ? __video_do_ioctl+0x50f/0xdf0 [ 59.370815][ T6355] vb2_ioctl_reqbufs+0x291/0x450 [ 59.370837][ T6355] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 59.370858][ T6355] vidioc_reqbufs+0x86/0x100 [ 59.370873][ T6355] v4l_reqbufs+0x175/0x1d0 [ 59.370886][ T6355] __video_do_ioctl+0xb2a/0xdf0 [ 59.370921][ T6355] ? __might_fault+0xc5/0x140 [ 59.370937][ T6355] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.370957][ T6355] video_usercopy+0x47a/0x1730 [ 59.370974][ T6355] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.370991][ T6355] ? __pfx_video_usercopy+0x10/0x10 [ 59.371017][ T6355] v4l2_ioctl+0x1bd/0x250 [ 59.371034][ T6355] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.371052][ T6355] __x64_sys_ioctl+0x18e/0x210 [ 59.371065][ T6355] do_syscall_64+0x123/0x790 [ 59.371079][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.371092][ T6355] RIP: 0033:0x7f9b9cd9fb19 [ 59.371102][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.371114][ T6355] RSP: 002b:00007f9b9dbaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.371131][ T6355] RAX: ffffffffffffffda RBX: 00007f9b9d026090 RCX: 00007f9b9cd9fb19 [ 59.371139][ T6355] RDX: 00002000000002c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 59.371146][ T6355] RBP: 00007f9b9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 59.371153][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.371159][ T6355] R13: 00007f9b9d026128 R14: 00007f9b9d026090 R15: 00007ffedcb325f8 [ 59.371176][ T6355] [ 59.444909][ T5891] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 59.603164][ T6319] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 59.603749][ T6319] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 59.604067][ T6319] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 59.604609][ T6319] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 59.606253][ T6319] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 59.664297][ T5891] usb 2-1: New USB device found: idVendor=0627, idProduct=0001, bcdDevice=0.00 [ 59.679600][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 59.679619][ T5891] usb 2-1: Product: QEMU USB Tablet [ 59.679628][ T5891] usb 2-1: Manufacturer: QEMU [ 59.679637][ T5891] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 59.716501][ T5891] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input12 [ 59.724738][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.790323][ T5891] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 59.884935][ T6319] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 59.887084][ T6319] pl2303 ttyUSB0: error sending break = -32 [ 59.890529][ T63] usb 8-1: USB disconnect, device number 2 [ 59.909102][ T63] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 59.909749][ T63] pl2303 8-1:1.0: device disconnected [ 60.232139][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 60.339192][ T6356] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 60.431574][ T6378] geneve2: entered allmulticast mode [ 60.549882][ T6389] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 60.575048][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.585365][ T6392] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 60.598818][ T6389] bond1: (slave geneve2): making interface the new active one [ 60.600481][ T6389] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.999250][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 61.222797][ T6418] batman_adv: batadv0: Adding interface: syz_tun [ 61.222852][ T6418] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.222869][ T6418] batman_adv: batadv0: Interface activated: syz_tun [ 61.271951][ T6421] loop5: detected capacity change from 0 to 7 [ 61.279305][ T6421] Dev loop5: unable to read RDB block 7 [ 61.279339][ T6421] loop5: unable to read partition table [ 61.279517][ T6421] loop5: partition table beyond EOD, truncated [ 61.279546][ T6421] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.577716][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 61.633947][ T6428] input: syz0 as /devices/virtual/input/input13 [ 61.634426][ T6428] FAULT_INJECTION: forcing a failure. [ 61.634426][ T6428] name failslab, interval 1, probability 5, space 0, times 0 [ 61.634451][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.2.165 Not tainted syzkaller #0 PREEMPT(full) [ 61.634466][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.634473][ T6428] Call Trace: [ 61.634488][ T6428] [ 61.634493][ T6428] dump_stack_lvl+0x100/0x190 [ 61.634525][ T6428] should_fail_ex.cold+0x5/0xa [ 61.634545][ T6428] should_failslab+0xc2/0x120 [ 61.634569][ T6428] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.634590][ T6428] ? __kernfs_new_node+0xd2/0xa10 [ 61.634604][ T6428] __kernfs_new_node+0xd2/0xa10 [ 61.634618][ T6428] ? __pfx___kernfs_new_node+0x10/0x10 [ 61.634632][ T6428] ? lock_acquire+0x1d1/0x380 [ 61.634649][ T6428] ? kernfs_root+0x23/0x2a0 [ 61.634666][ T6428] ? find_held_lock+0x2b/0x80 [ 61.634678][ T6428] ? kernfs_root+0xee/0x2a0 [ 61.634695][ T6428] ? kernfs_root+0xee/0x2a0 [ 61.634715][ T6428] kernfs_new_node+0x194/0x200 [ 61.634729][ T6428] ? __pfx_kernfs_new_node+0x10/0x10 [ 61.634742][ T6428] ? kernfs_add_one+0x213/0xb40 [ 61.634756][ T6428] __kernfs_create_file+0x53/0x350 [ 61.634772][ T6428] sysfs_add_file_mode_ns+0x207/0x3c0 [ 61.634792][ T6428] sysfs_merge_group+0x194/0x340 [ 61.634811][ T6428] ? __pfx_sysfs_merge_group+0x10/0x10 [ 61.634829][ T6428] ? bus_add_device+0x2e2/0x6c0 [ 61.634846][ T6428] ? __pfx_bus_add_device+0x10/0x10 [ 61.634857][ T6428] ? __pfx_dev_add_physical_location+0x10/0x10 [ 61.634878][ T6428] dpm_sysfs_add+0x237/0x280 [ 61.634896][ T6428] device_add+0x9f4/0x1970 [ 61.634914][ T6428] ? __pfx_device_add+0x10/0x10 [ 61.634933][ T6428] ? kobject_get+0xbb/0x150 [ 61.634963][ T6428] cdev_device_add+0x12b/0x270 [ 61.634978][ T6428] evdev_connect+0x3a8/0x4b0 [ 61.634997][ T6428] input_attach_handler.isra.0+0x177/0x1e0 [ 61.635016][ T6428] input_register_device.cold+0x1ce/0x386 [ 61.635035][ T6428] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 61.635055][ T6428] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.635066][ T6428] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 61.635086][ T6428] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 61.635105][ T6428] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.635127][ T6428] ? __fget_files+0x34/0x3d0 [ 61.635148][ T6428] ? selinux_file_ioctl+0x1e0/0x290 [ 61.635166][ T6428] ? selinux_file_ioctl+0x1e7/0x290 [ 61.635184][ T6428] ? __pfx_uinput_ioctl+0x10/0x10 [ 61.635196][ T6428] __x64_sys_ioctl+0x18e/0x210 [ 61.635209][ T6428] do_syscall_64+0x123/0x790 [ 61.635223][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.635235][ T6428] RIP: 0033:0x7f7d1d99fb19 [ 61.635254][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.635266][ T6428] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.635285][ T6428] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 61.635293][ T6428] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 61.635300][ T6428] RBP: 00007f7d1da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.635306][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.635314][ T6428] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 61.635330][ T6428] [ 61.649836][ T6428] input: failed to attach handler evdev to device input13, error: -12 [ 61.713520][ T6431] xt_cgroup: no path or classid specified [ 61.824063][ T6431] Bluetooth: MGMT ver 1.23 [ 61.873331][ T6436] overlay: Bad value for 'uuid' [ 62.059516][ T6449] capability: warning: `syz.1.173' uses deprecated v2 capabilities in a way that may be insecure [ 62.383574][ T5796] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.383614][ T5796] Bluetooth: hci2: Injecting HCI hardware error event [ 62.387548][ T5796] Bluetooth: hci2: hardware error 0x00 [ 62.818681][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 62.841007][ T6448] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 63.189971][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 63.214870][ T6472] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 63.276345][ T6428] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 63.287576][ T6487] netlink: 'syz.0.186': attribute type 4 has an invalid length. [ 63.318170][ T6491] netlink: 80 bytes leftover after parsing attributes in process `syz.3.188'. [ 63.411424][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 63.411441][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.411453][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.412148][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 63.413022][ T6497] FAULT_INJECTION: forcing a failure. [ 63.413022][ T6497] name failslab, interval 1, probability 5, space 0, times 0 [ 63.413046][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.1.191 Not tainted syzkaller #0 PREEMPT(full) [ 63.413059][ T6497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.413067][ T6497] Call Trace: [ 63.413074][ T6497] [ 63.413079][ T6497] dump_stack_lvl+0x100/0x190 [ 63.413109][ T6497] should_fail_ex.cold+0x5/0xa [ 63.413128][ T6497] should_failslab+0xc2/0x120 [ 63.413144][ T6497] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.413161][ T6497] ? netdevice_event+0x308/0x9a0 [ 63.413183][ T6497] netdevice_event+0x308/0x9a0 [ 63.413200][ T6497] ? __pfx_netdevice_event+0x10/0x10 [ 63.413215][ T6497] ? __pfx_del_netdev_upper_ips+0x10/0x10 [ 63.413231][ T6497] ? __pfx_upper_device_filter+0x10/0x10 [ 63.413247][ T6497] ? __pfx_add_netdev_ips+0x10/0x10 [ 63.413277][ T6497] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 63.413296][ T6497] ? wext_netdev_notifier_call+0xe/0x20 [ 63.413321][ T6497] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 63.413342][ T6497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.413363][ T6497] notifier_call_chain+0x99/0x3f0 [ 63.413378][ T6497] call_netdevice_notifiers_info+0xbe/0x110 [ 63.413397][ T6497] __netdev_upper_dev_unlink+0x210/0x510 [ 63.413417][ T6497] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 63.413437][ T6497] ? kfree+0x22b/0x6d0 [ 63.413455][ T6497] netdev_upper_dev_unlink+0x83/0xb0 [ 63.413472][ T6497] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 63.413498][ T6497] batadv_hardif_disable_interface.cold+0x5b3/0x72a [ 63.413515][ T6497] ? __pfx_batadv_hardif_disable_interface+0x10/0x10 [ 63.413541][ T6497] batadv_meshif_destroy_netlink+0x6c/0xb0 [ 63.413556][ T6497] rtnl_dellink+0x460/0xb30 [ 63.413570][ T6497] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 63.413583][ T6497] ? kasan_save_free_info+0x3b/0x70 [ 63.413599][ T6497] ? __kasan_slab_free+0x5f/0x80 [ 63.413610][ T6497] ? kmem_cache_free+0x127/0x6c0 [ 63.413625][ T6497] ? __pfx_rtnl_dellink+0x10/0x10 [ 63.413638][ T6497] ? dev_hard_start_xmit+0x121/0x760 [ 63.413656][ T6497] ? netlink_unicast+0x708/0x950 [ 63.413670][ T6497] ? netlink_sendmsg+0x9ac/0x10c0 [ 63.413709][ T6497] ? __lock_acquire+0x5c0/0x1f40 [ 63.413726][ T6497] ? hook_capable+0x1bc/0x500 [ 63.413746][ T6497] ? lock_acquire+0x1d1/0x380 [ 63.413761][ T6497] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 63.413777][ T6497] ? find_held_lock+0x2b/0x80 [ 63.413789][ T6497] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 63.413804][ T6497] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 63.413820][ T6497] ? __pfx_rtnl_dellink+0x10/0x10 [ 63.413835][ T6497] rtnetlink_rcv_msg+0x95e/0xe90 [ 63.413852][ T6497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.413874][ T6497] netlink_rcv_skb+0x159/0x420 [ 63.413888][ T6497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.413905][ T6497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.413925][ T6497] ? netlink_deliver_tap+0x1ae/0xb50 [ 63.413941][ T6497] netlink_unicast+0x668/0x950 [ 63.413960][ T6497] ? __pfx_netlink_unicast+0x10/0x10 [ 63.413978][ T6497] netlink_sendmsg+0x9ac/0x10c0 [ 63.413995][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.414013][ T6497] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.414031][ T6497] ? ____sys_sendmsg+0xa99/0xc30 [ 63.414145][ T6497] ____sys_sendmsg+0xa99/0xc30 [ 63.414163][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.414179][ T6497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.414199][ T6497] ? lock_acquire+0x1d1/0x380 [ 63.414214][ T6497] ? get_pid_task+0x2a/0x250 [ 63.414227][ T6497] ___sys_sendmsg+0x190/0x1e0 [ 63.414244][ T6497] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.414262][ T6497] ? get_pid_task+0x106/0x250 [ 63.414278][ T6497] ? find_held_lock+0x2b/0x80 [ 63.414299][ T6497] __sys_sendmsg+0x160/0x210 [ 63.414313][ T6497] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.414334][ T6497] do_syscall_64+0x123/0x790 [ 63.414357][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.414369][ T6497] RIP: 0033:0x7f9016b9fb19 [ 63.414379][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.414390][ T6497] RSP: 002b:00007f9017a8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.414409][ T6497] RAX: ffffffffffffffda RBX: 00007f9016e25fa0 RCX: 00007f9016b9fb19 [ 63.414417][ T6497] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000006 [ 63.414423][ T6497] RBP: 00007f9017a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 63.414430][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.414436][ T6497] R13: 00007f9016e26038 R14: 00007f9016e25fa0 R15: 00007ffefc793b38 [ 63.414452][ T6497] [ 63.414522][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.414533][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.416041][ T6497] batman_adv: batadv0: Interface deactivated: syz_tun [ 63.416052][ T6497] batman_adv: batadv0: Removing interface: syz_tun [ 63.506137][ T6506] process 'syz.3.195' launched '/dev/fd/4' with NULL argv: empty string added [ 63.590109][ T6511] ima: Unable to open file: /e (-2) [ 63.592503][ T6509] ima: policy update failed [ 63.684269][ T6518] input: syz0 as /devices/virtual/input/input14 [ 64.134893][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 64.134912][ T42] audit: type=1400 audit(1793737894.373:450): avc: denied { bind } for pid=6522 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.137443][ T42] audit: type=1400 audit(1793737894.373:451): avc: denied { listen } for pid=6522 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.140351][ T42] audit: type=1400 audit(1793737894.373:452): avc: denied { accept } for pid=6522 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.231053][ T6523] Unknown cursor 8 [ 64.462870][ T5796] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 64.476184][ T6537] trusted_key: encrypted_key: insufficient parameters specified [ 64.481819][ T42] audit: type=1400 audit(1793737894.723:453): avc: denied { create } for pid=6536 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.486741][ T42] audit: type=1400 audit(1793737894.723:454): avc: denied { getopt } for pid=6536 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.498077][ T42] audit: type=1400 audit(1793737894.733:455): avc: denied { bind } for pid=6532 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.556275][ T42] audit: type=1400 audit(1793737894.793:456): avc: denied { connect } for pid=6540 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.560398][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 64.562449][ T42] audit: type=1400 audit(1793737894.803:457): avc: denied { read } for pid=6540 comm="syz.2.205" name="md0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.580977][ T6541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.581042][ T6541] block device autoloading is deprecated and will be removed. [ 64.684342][ T42] audit: type=1400 audit(1793737894.923:458): avc: denied { getopt } for pid=6548 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 64.685003][ T6550] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 64.819234][ T6560] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 64.820121][ T42] audit: type=1400 audit(1793737895.053:459): avc: denied { write } for pid=6558 comm="syz.1.212" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.834999][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835202][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835441][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835584][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835699][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835802][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.835961][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.836229][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.836955][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.837556][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.837732][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.838157][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839293][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839457][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839567][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839677][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839794][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.839951][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840122][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840231][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840330][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840474][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840605][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840767][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.840942][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.841120][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.841315][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.841496][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.841706][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.841955][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.854201][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.884198][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.889871][ T6561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.918511][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.922443][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.922732][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.922942][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.923136][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.923346][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.923534][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.923914][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.924114][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.924332][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.924536][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.924729][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.925037][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.925238][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.925421][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.925606][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.925803][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.926124][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.926317][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.926501][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.926695][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.926918][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.927197][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.927392][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.927576][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.927894][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.928084][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.928385][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.928630][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.928838][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.929081][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.929268][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.929530][ T6560] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.235755][ T6518] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 65.275498][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 65.276454][ T6576] FAULT_INJECTION: forcing a failure. [ 65.276454][ T6576] name failslab, interval 1, probability 5, space 0, times 0 [ 65.276480][ T6576] CPU: 2 UID: 0 PID: 6576 Comm: syz.2.218 Not tainted syzkaller #0 PREEMPT(full) [ 65.276501][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.276512][ T6576] Call Trace: [ 65.276519][ T6576] [ 65.276527][ T6576] dump_stack_lvl+0x100/0x190 [ 65.276563][ T6576] should_fail_ex.cold+0x5/0xa [ 65.276593][ T6576] should_failslab+0xc2/0x120 [ 65.276615][ T6576] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.276641][ T6576] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 65.276673][ T6576] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 65.276703][ T6576] ? __pfx_device_cmp+0x10/0x10 [ 65.276727][ T6576] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 65.276761][ T6576] masq_device_event+0xfd/0x120 [ 65.276785][ T6576] notifier_call_chain+0x99/0x3f0 [ 65.276811][ T6576] call_netdevice_notifiers_info+0xbe/0x110 [ 65.276842][ T6576] netif_close_many+0x3e7/0x810 [ 65.276871][ T6576] ? find_held_lock+0x2b/0x80 [ 65.276894][ T6576] ? __pfx_netif_close_many+0x10/0x10 [ 65.276950][ T6576] ? netif_close_many_and_unlock+0x1af/0x270 [ 65.276990][ T6576] unregister_netdevice_many_notify+0x563/0x1e00 [ 65.277017][ T6576] ? __pfx_ref_tracker_free+0x10/0x10 [ 65.277047][ T6576] ? vxcan_dellink+0xf8/0x160 [ 65.277074][ T6576] ? netlink_unicast+0x668/0x950 [ 65.277095][ T6576] ? netlink_sendmsg+0x9ac/0x10c0 [ 65.277116][ T6576] ? ____sys_sendmsg+0xa99/0xc30 [ 65.277142][ T6576] ? ___sys_sendmsg+0x190/0x1e0 [ 65.277167][ T6576] ? __sys_sendmsg+0x160/0x210 [ 65.277188][ T6576] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 65.277228][ T6576] rtnl_dellink+0x46f/0xb30 [ 65.277252][ T6576] ? __pfx_vxcan_dellink+0x10/0x10 [ 65.277276][ T6576] ? kasan_save_free_info+0x3b/0x70 [ 65.277301][ T6576] ? __kasan_slab_free+0x5f/0x80 [ 65.277319][ T6576] ? kmem_cache_free+0x127/0x6c0 [ 65.277344][ T6576] ? __pfx_rtnl_dellink+0x10/0x10 [ 65.277383][ T6576] ? dev_hard_start_xmit+0x121/0x760 [ 65.277413][ T6576] ? netlink_unicast+0x708/0x950 [ 65.277434][ T6576] ? netlink_sendmsg+0x9ac/0x10c0 [ 65.277503][ T6576] ? __lock_acquire+0x5c0/0x1f40 [ 65.277531][ T6576] ? hook_capable+0x1bc/0x500 [ 65.277565][ T6576] ? lock_acquire+0x1d1/0x380 [ 65.277589][ T6576] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 65.277615][ T6576] ? find_held_lock+0x2b/0x80 [ 65.277635][ T6576] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 65.277660][ T6576] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 65.277686][ T6576] ? __pfx_rtnl_dellink+0x10/0x10 [ 65.277711][ T6576] rtnetlink_rcv_msg+0x95e/0xe90 [ 65.277739][ T6576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.277790][ T6576] netlink_rcv_skb+0x159/0x420 [ 65.277814][ T6576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.277841][ T6576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.277874][ T6576] ? netlink_deliver_tap+0x1ae/0xb50 [ 65.277902][ T6576] netlink_unicast+0x668/0x950 [ 65.277929][ T6576] ? __pfx_netlink_unicast+0x10/0x10 [ 65.277964][ T6576] netlink_sendmsg+0x9ac/0x10c0 [ 65.277993][ T6576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.278023][ T6576] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.278051][ T6576] ? ____sys_sendmsg+0xa99/0xc30 [ 65.278075][ T6576] ____sys_sendmsg+0xa99/0xc30 [ 65.278099][ T6576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.278125][ T6576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.278157][ T6576] ? lock_acquire+0x1d1/0x380 [ 65.278180][ T6576] ? get_pid_task+0x2a/0x250 [ 65.278200][ T6576] ___sys_sendmsg+0x190/0x1e0 [ 65.278228][ T6576] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.278255][ T6576] ? get_pid_task+0x106/0x250 [ 65.278283][ T6576] ? find_held_lock+0x2b/0x80 [ 65.278321][ T6576] __sys_sendmsg+0x160/0x210 [ 65.278343][ T6576] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.278379][ T6576] do_syscall_64+0x123/0x790 [ 65.278404][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.278424][ T6576] RIP: 0033:0x7f7d1d99fb19 [ 65.278441][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.278458][ T6576] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.278479][ T6576] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 65.278491][ T6576] RDX: 0000000000000000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 65.278503][ T6576] RBP: 00007f7d1e948090 R08: 0000000000000000 R09: 0000000000000000 [ 65.278514][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.278525][ T6576] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 65.278552][ T6576] [ 65.427601][ T6582] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 65.451185][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 65.529088][ C2] Unknown status report in ack skb [ 65.585093][ T6596] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 65.585112][ T6596] device-mapper: raid: Choosing default region size of 4MiB [ 65.585409][ T6596] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 65.585420][ T6596] device-mapper: raid: Superblocks created for new raid set [ 65.587401][ T6596] device-mapper: table: 248:5: raid: Insufficient redundancy to activate array (-EINVAL) [ 65.587419][ T6596] device-mapper: ioctl: error adding target to table [ 65.612572][ T6599] ip_tables: iptables: counters copy to user failed while replacing table [ 65.680205][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 65.683844][ T6606] FAULT_INJECTION: forcing a failure. [ 65.683844][ T6606] name failslab, interval 1, probability 5, space 0, times 0 [ 65.683915][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(full) [ 65.683937][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.683950][ T6606] Call Trace: [ 65.683956][ T6606] [ 65.683963][ T6606] dump_stack_lvl+0x100/0x190 [ 65.684005][ T6606] should_fail_ex.cold+0x5/0xa [ 65.684035][ T6606] should_failslab+0xc2/0x120 [ 65.684056][ T6606] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.684084][ T6606] ? sr_read_tocentry.isra.0+0xad/0x540 [ 65.684112][ T6606] sr_read_tocentry.isra.0+0xad/0x540 [ 65.684133][ T6606] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 65.684167][ T6606] sr_audio_ioctl+0x113/0x2f0 [ 65.684187][ T6606] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 65.684211][ T6606] ? security_file_ioctl+0xd3/0x230 [ 65.684237][ T6606] ? __x64_sys_ioctl+0xb7/0x210 [ 65.684255][ T6606] ? do_syscall_64+0x123/0x790 [ 65.684273][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.684298][ T6606] cdrom_get_last_written+0x1f6/0x790 [ 65.684321][ T6606] ? __pfx_cdrom_get_last_written+0x10/0x10 [ 65.684340][ T6606] ? find_held_lock+0x2b/0x80 [ 65.684359][ T6606] ? avc_has_extended_perms+0x33a/0x10b0 [ 65.684394][ T6606] ? __lock_acquire+0x5c0/0x1f40 [ 65.684425][ T6606] mmc_ioctl_cdrom_last_written+0x9d/0x250 [ 65.684456][ T6606] ? __pfx_mmc_ioctl_cdrom_last_written+0x10/0x10 [ 65.684479][ T6606] ? lock_acquire+0x1d1/0x380 [ 65.684500][ T6606] ? sr_block_ioctl+0x118/0x250 [ 65.684518][ T6606] cdrom_ioctl+0x3126/0x3880 [ 65.684536][ T6606] ? __pfx_cdrom_ioctl+0x10/0x10 [ 65.684554][ T6606] ? rcu_is_watching+0x13/0xc0 [ 65.684573][ T6606] ? trace_rpm_return_int+0x78/0x220 [ 65.684597][ T6606] ? rpm_resume+0x7eb/0x1320 [ 65.684625][ T6606] ? __pfx_rpm_resume+0x10/0x10 [ 65.684647][ T6606] ? do_raw_spin_lock+0x128/0x260 [ 65.684672][ T6606] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.684693][ T6606] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 65.684722][ T6606] ? __pm_runtime_resume+0xc3/0x170 [ 65.684749][ T6606] sr_block_ioctl+0x1ae/0x250 [ 65.684767][ T6606] ? __pfx_sr_block_ioctl+0x10/0x10 [ 65.684786][ T6606] blkdev_ioctl+0x5ad/0x6f0 [ 65.684809][ T6606] ? __pfx_blkdev_ioctl+0x10/0x10 [ 65.684828][ T6606] ? selinux_file_ioctl+0x1e0/0x290 [ 65.684857][ T6606] ? selinux_file_ioctl+0x1e7/0x290 [ 65.684887][ T6606] ? __pfx_blkdev_ioctl+0x10/0x10 [ 65.684907][ T6606] __x64_sys_ioctl+0x18e/0x210 [ 65.684953][ T6606] do_syscall_64+0x123/0x790 [ 65.684972][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.684993][ T6606] RIP: 0033:0x7fcc9339fb19 [ 65.685009][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.685026][ T6606] RSP: 002b:00007fcc9432e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.685046][ T6606] RAX: ffffffffffffffda RBX: 00007fcc93625fa0 RCX: 00007fcc9339fb19 [ 65.685058][ T6606] RDX: 0000200000000040 RSI: 0000000000005395 RDI: 0000000000000003 [ 65.685069][ T6606] RBP: 00007fcc9432e090 R08: 0000000000000000 R09: 0000000000000000 [ 65.685078][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.685088][ T6606] R13: 00007fcc93626038 R14: 00007fcc93625fa0 R15: 00007fffba3b9308 [ 65.685112][ T6606] [ 65.713243][ T6615] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 65.887763][ T6629] netlink: 200 bytes leftover after parsing attributes in process `syz.3.238'. [ 66.113860][ T6643] ./dev: Can't lookup blockdev [ 66.194027][ T6649] FAULT_INJECTION: forcing a failure. [ 66.194027][ T6649] name failslab, interval 1, probability 5, space 0, times 0 [ 66.194088][ T6649] CPU: 2 UID: 0 PID: 6649 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 66.194109][ T6649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.194119][ T6649] Call Trace: [ 66.194139][ T6649] [ 66.194148][ T6649] dump_stack_lvl+0x100/0x190 [ 66.194205][ T6649] should_fail_ex.cold+0x5/0xa [ 66.194247][ T6649] should_failslab+0xc2/0x120 [ 66.194273][ T6649] __kmalloc_noprof+0xfc/0x840 [ 66.194298][ T6649] ? __kasan_kmalloc+0xaa/0xb0 [ 66.194314][ T6649] ? nla_strdup+0xc3/0x150 [ 66.194335][ T6649] nla_strdup+0xc3/0x150 [ 66.194352][ T6649] nf_tables_addchain.constprop.0+0x83b/0x1ca0 [ 66.194394][ T6649] ? nft_chain_lookup+0x59c/0xa60 [ 66.194423][ T6649] ? __kasan_kmalloc+0xaa/0xb0 [ 66.194440][ T6649] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 66.194465][ T6649] ? __lock_acquire+0x5c0/0x1f40 [ 66.194508][ T6649] ? nla_strcmp+0xff/0x130 [ 66.194532][ T6649] ? nft_table_lookup.part.0+0x1e3/0x230 [ 66.194563][ T6649] nf_tables_newchain+0x1824/0x2a50 [ 66.194584][ T6649] ? net_generic+0x67/0x2a0 [ 66.194620][ T6649] ? __pfx_nf_tables_newchain+0x10/0x10 [ 66.194644][ T6649] ? __pfx___nla_validate_parse+0x10/0x10 [ 66.194666][ T6649] ? lock_acquire+0x1d1/0x380 [ 66.194693][ T6649] ? net_generic+0x25/0x2a0 [ 66.194725][ T6649] ? __nla_parse+0x40/0x60 [ 66.194746][ T6649] nfnetlink_rcv_batch+0x1410/0x2880 [ 66.194787][ T6649] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 66.194819][ T6649] ? lock_acquire+0x1d1/0x380 [ 66.194847][ T6649] ? avc_has_perm_noaudit+0x56/0x470 [ 66.194878][ T6649] ? avc_has_perm_noaudit+0x145/0x470 [ 66.194921][ T6649] ? __nla_parse+0x40/0x60 [ 66.194943][ T6649] nfnetlink_rcv+0x3bd/0x440 [ 66.194971][ T6649] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 66.195011][ T6649] netlink_unicast+0x668/0x950 [ 66.195037][ T6649] ? __pfx_netlink_unicast+0x10/0x10 [ 66.195069][ T6649] netlink_sendmsg+0x9ac/0x10c0 [ 66.195095][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.195124][ T6649] ? selinux_socket_sendmsg+0x198/0x2f0 [ 66.195155][ T6649] ? ____sys_sendmsg+0xa99/0xc30 [ 66.195177][ T6649] ____sys_sendmsg+0xa99/0xc30 [ 66.195200][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.195223][ T6649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.195257][ T6649] ? lock_acquire+0x1d1/0x380 [ 66.195284][ T6649] ? get_pid_task+0x2a/0x250 [ 66.195308][ T6649] ___sys_sendmsg+0x190/0x1e0 [ 66.195338][ T6649] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.195366][ T6649] ? get_pid_task+0x106/0x250 [ 66.195392][ T6649] ? find_held_lock+0x2b/0x80 [ 66.195426][ T6649] __sys_sendmsg+0x160/0x210 [ 66.195449][ T6649] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.195488][ T6649] do_syscall_64+0x123/0x790 [ 66.195534][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.195553][ T6649] RIP: 0033:0x7f7d1d99fb19 [ 66.195576][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.195595][ T6649] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.195627][ T6649] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 66.195638][ T6649] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 66.195649][ T6649] RBP: 00007f7d1e948090 R08: 0000000000000000 R09: 0000000000000000 [ 66.195659][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.195669][ T6649] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 66.195694][ T6649] [ 66.262767][ T5163] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.265188][ T6653] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 66.392167][ T5163] usb 8-1: device descriptor read/64, error -71 [ 66.633392][ T5163] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.681045][ T6669] evm: overlay not supported [ 66.762160][ T5163] usb 8-1: device descriptor read/64, error -71 [ 66.872460][ T5163] usb usb8-port1: attempt power cycle [ 67.034531][ T6692] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.069928][ T6695] FAULT_INJECTION: forcing a failure. [ 67.069928][ T6695] name fail_futex, interval 1, probability 0, space 0, times 1 [ 67.069950][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 67.069964][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.069972][ T6695] Call Trace: [ 67.069977][ T6695] [ 67.069982][ T6695] dump_stack_lvl+0x100/0x190 [ 67.070009][ T6695] should_fail_ex.cold+0x5/0xa [ 67.070029][ T6695] get_futex_key+0x1c9/0x13e0 [ 67.070045][ T6695] ? __pfx_get_futex_key+0x10/0x10 [ 67.070059][ T6695] ? __pfx___smp_call_single_queue+0x10/0x10 [ 67.070073][ T6695] futex_wait_setup+0x91/0x540 [ 67.070094][ T6695] __futex_wait+0x19f/0x360 [ 67.070114][ T6695] ? __pfx___futex_wait+0x10/0x10 [ 67.070130][ T6695] ? __pfx_try_to_wake_up+0x10/0x10 [ 67.070147][ T6695] ? futex_hash+0x311/0x400 [ 67.070161][ T6695] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.070181][ T6695] ? find_held_lock+0x2b/0x80 [ 67.070194][ T6695] ? futex_wake+0x4ea/0x5e0 [ 67.070214][ T6695] futex_wait+0xe6/0x370 [ 67.070231][ T6695] ? __pfx_futex_wait+0x10/0x10 [ 67.070251][ T6695] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.070269][ T6695] do_futex+0x265/0x440 [ 67.070284][ T6695] ? __pfx_do_futex+0x10/0x10 [ 67.070302][ T6695] __x64_sys_futex+0x34f/0x4d0 [ 67.070317][ T6695] ? fdget_pos+0x2c0/0x380 [ 67.070332][ T6695] ? __pfx___x64_sys_futex+0x10/0x10 [ 67.070360][ T6695] ? ksys_write+0x1ac/0x250 [ 67.070378][ T6695] do_syscall_64+0x123/0x790 [ 67.070393][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.070408][ T6695] RIP: 0033:0x7f9016b9fb19 [ 67.070418][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.070431][ T6695] RSP: 002b:00007f9017a8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 67.070444][ T6695] RAX: ffffffffffffffda RBX: 00007f9016e25fa8 RCX: 00007f9016b9fb19 [ 67.070453][ T6695] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9016e25fa8 [ 67.070461][ T6695] RBP: 00007f9016e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 67.070468][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.070475][ T6695] R13: 00007f9016e26038 R14: 00007ffefc793a50 R15: 00007ffefc793b38 [ 67.070495][ T6695] [ 67.212207][ T5163] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.232962][ T5163] usb 8-1: device descriptor read/8, error -71 [ 67.312188][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.462911][ T29] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 67.464020][ T29] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 67.464040][ T29] usb 6-1: config 1 has no interface number 0 [ 67.466215][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.466235][ T29] usb 6-1: Product: syz [ 67.466247][ T29] usb 6-1: Manufacturer: syz [ 67.466259][ T29] usb 6-1: SerialNumber: syz [ 67.474730][ T29] usb 6-1: 3:0 : does not exist [ 67.474749][ T29] usb 6-1: 3:0 : does not exist [ 67.482202][ T5163] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.503041][ T5163] usb 8-1: device descriptor read/8, error -71 [ 67.613038][ T5163] usb usb8-port1: unable to enumerate USB device [ 67.673451][ T6695] FAULT_INJECTION: forcing a failure. [ 67.673451][ T6695] name failslab, interval 1, probability 5, space 0, times 0 [ 67.673482][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 67.673506][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.673519][ T6695] Call Trace: [ 67.673526][ T6695] [ 67.673535][ T6695] dump_stack_lvl+0x100/0x190 [ 67.673580][ T6695] should_fail_ex.cold+0x5/0xa [ 67.673613][ T6695] should_failslab+0xc2/0x120 [ 67.673654][ T6695] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 67.673687][ T6695] ? __d_alloc+0x34/0xad0 [ 67.673718][ T6695] __d_alloc+0x34/0xad0 [ 67.673749][ T6695] d_alloc_pseudo+0x1c/0xc0 [ 67.673769][ T6695] alloc_file_pseudo+0x118/0x290 [ 67.673800][ T6695] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 67.673826][ T6695] ? bpf_lsm_socket_post_create+0x9/0x10 [ 67.673862][ T6695] sock_alloc_file+0x50/0x210 [ 67.673889][ T6695] __sys_socketpair+0x2a7/0x580 [ 67.673921][ T6695] ? __pfx___sys_socketpair+0x10/0x10 [ 67.673952][ T6695] ? xfd_validate_state+0x129/0x190 [ 67.673987][ T6695] __x64_sys_socketpair+0x96/0x100 [ 67.674018][ T6695] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.674040][ T6695] do_syscall_64+0x123/0x790 [ 67.674064][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.674086][ T6695] RIP: 0033:0x7f9016b9fb19 [ 67.674104][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.674123][ T6695] RSP: 002b:00007f9017a8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 67.674145][ T6695] RAX: ffffffffffffffda RBX: 00007f9016e25fa0 RCX: 00007f9016b9fb19 [ 67.674159][ T6695] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 67.674173][ T6695] RBP: 00007f9016c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.674186][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.674199][ T6695] R13: 00007f9016e26038 R14: 00007f9016e25fa0 R15: 00007ffefc793b38 [ 67.674227][ T6695] [ 67.679587][ T5892] usb 6-1: USB disconnect, device number 2 [ 68.426357][ T6711] bond1: entered promiscuous mode [ 68.426620][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.440634][ T6713] bond2: entered promiscuous mode [ 68.441011][ T6713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.849205][ T6732] device-mapper: table: 248:0: integrity: Invalid internal hash (-ENOENT) [ 68.849241][ T6732] device-mapper: ioctl: error adding target to table [ 69.063509][ T6747] __nla_validate_parse: 1 callbacks suppressed [ 69.063531][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 69.121008][ T6754] FAULT_INJECTION: forcing a failure. [ 69.121008][ T6754] name failslab, interval 1, probability 5, space 0, times 0 [ 69.121032][ T6754] CPU: 2 UID: 0 PID: 6754 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(full) [ 69.121047][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.121055][ T6754] Call Trace: [ 69.121060][ T6754] [ 69.121065][ T6754] dump_stack_lvl+0x100/0x190 [ 69.121089][ T6754] should_fail_ex.cold+0x5/0xa [ 69.121109][ T6754] should_failslab+0xc2/0x120 [ 69.121125][ T6754] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.121148][ T6754] ? __kernfs_new_node+0xd2/0xa10 [ 69.121170][ T6754] __kernfs_new_node+0xd2/0xa10 [ 69.121189][ T6754] ? __pfx___kernfs_new_node+0x10/0x10 [ 69.121209][ T6754] ? lock_acquire+0x1d1/0x380 [ 69.121227][ T6754] ? kernfs_root+0x23/0x2a0 [ 69.121244][ T6754] ? find_held_lock+0x2b/0x80 [ 69.121257][ T6754] ? kernfs_root+0xee/0x2a0 [ 69.121273][ T6754] ? kernfs_root+0xee/0x2a0 [ 69.121294][ T6754] kernfs_new_node+0x194/0x200 [ 69.121307][ T6754] ? __pfx_kernfs_new_node+0x10/0x10 [ 69.121320][ T6754] ? kernfs_add_one+0x213/0xb40 [ 69.121334][ T6754] __kernfs_create_file+0x53/0x350 [ 69.121351][ T6754] sysfs_add_file_mode_ns+0x207/0x3c0 [ 69.121371][ T6754] internal_create_group+0x593/0xfb0 [ 69.121394][ T6754] ? __pfx_internal_create_group+0x10/0x10 [ 69.121416][ T6754] ? kernfs_create_link+0x1f1/0x280 [ 69.121438][ T6754] internal_create_groups+0x9d/0x150 [ 69.121458][ T6754] device_add+0xf60/0x1970 [ 69.121477][ T6754] ? __pfx_device_add+0x10/0x10 [ 69.121494][ T6754] ? lockdep_init_map_type+0x5c/0x250 [ 69.121513][ T6754] ? __init_waitqueue_head+0xca/0x150 [ 69.121537][ T6754] netdev_register_kobject+0x1df/0x410 [ 69.121552][ T6754] register_netdevice+0x1313/0x26b0 [ 69.121572][ T6754] ? __pfx_register_netdevice+0x10/0x10 [ 69.121595][ T6754] vif_add+0xbb5/0x1180 [ 69.121617][ T6754] ? __pfx_vif_add+0x10/0x10 [ 69.121636][ T6754] ? lock_acquire+0x1d1/0x380 [ 69.121651][ T6754] ? __might_fault+0xc5/0x140 [ 69.121667][ T6754] ? pti_set_user_pgtbl+0x50/0x50 [ 69.121688][ T6754] ip_mroute_setsockopt+0x108f/0x12b0 [ 69.121705][ T6754] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 69.121719][ T6754] ? avc_has_perm_noaudit+0x145/0x470 [ 69.121738][ T6754] ? __pfx_avc_has_perm+0x10/0x10 [ 69.121755][ T6754] do_ip_setsockopt+0x382/0x3310 [ 69.121773][ T6754] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 69.121787][ T6754] ? __pfx_sock_has_perm+0x10/0x10 [ 69.121804][ T6754] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 69.121825][ T6754] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 69.121850][ T6754] ip_setsockopt+0x5a/0xf0 [ 69.121866][ T6754] raw_setsockopt+0x60/0x1b0 [ 69.121883][ T6754] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 69.121901][ T6754] do_sock_setsockopt+0xf3/0x1d0 [ 69.121940][ T6754] __sys_setsockopt+0x195/0x220 [ 69.121960][ T6754] __x64_sys_setsockopt+0xbd/0x160 [ 69.121973][ T6754] ? do_syscall_64+0xae/0x790 [ 69.121986][ T6754] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.122000][ T6754] do_syscall_64+0x123/0x790 [ 69.122015][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.122029][ T6754] RIP: 0033:0x7fcc9339fb19 [ 69.122040][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.122051][ T6754] RSP: 002b:00007fcc9432e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.122065][ T6754] RAX: ffffffffffffffda RBX: 00007fcc93625fa0 RCX: 00007fcc9339fb19 [ 69.122075][ T6754] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 69.122083][ T6754] RBP: 00007fcc93437b70 R08: 0000000000000010 R09: 0000000000000000 [ 69.122090][ T6754] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 69.122098][ T6754] R13: 00007fcc93626038 R14: 00007fcc93625fa0 R15: 00007fffba3b9308 [ 69.122114][ T6754] [ 69.132458][ T6751] program syz.1.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.175535][ T6751] overlayfs: missing 'lowerdir' [ 69.370931][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 69.370949][ T42] audit: type=1400 audit(1793737899.603:495): avc: denied { ioctl } for pid=6760 comm="syz.1.283" path="socket:[17260]" dev="sockfs" ino=17260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.374611][ T6761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.283'. [ 69.505820][ T6767] FAULT_INJECTION: forcing a failure. [ 69.505820][ T6767] name failslab, interval 1, probability 5, space 0, times 0 [ 69.505841][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 69.505855][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.505863][ T6767] Call Trace: [ 69.505867][ T6767] [ 69.505872][ T6767] dump_stack_lvl+0x100/0x190 [ 69.505895][ T6767] should_fail_ex.cold+0x5/0xa [ 69.505934][ T6767] should_failslab+0xc2/0x120 [ 69.505949][ T6767] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.505968][ T6767] ? __pfx_map_id_range_down+0x10/0x10 [ 69.505988][ T6767] ? security_inode_alloc+0x3b/0x2c0 [ 69.506008][ T6767] security_inode_alloc+0x3b/0x2c0 [ 69.506026][ T6767] inode_init_always_gfp+0xc75/0xfb0 [ 69.506044][ T6767] alloc_inode+0x8e/0x250 [ 69.506056][ T6767] new_inode+0x22/0x1c0 [ 69.506069][ T6767] __debugfs_create_file+0xfb/0x500 [ 69.506085][ T6767] debugfs_create_file_full+0x41/0x60 [ 69.506104][ T6767] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 69.506124][ T6767] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 69.506157][ T6767] ? lockdep_init_map_type+0x5c/0x250 [ 69.506177][ T6767] ? __pfx_macsec_setup+0x10/0x10 [ 69.506190][ T6767] alloc_netdev_mqs+0x314/0x1540 [ 69.506209][ T6767] rtnl_create_link+0xc13/0xf80 [ 69.506227][ T6767] rtnl_newlink+0x15bc/0x2620 [ 69.506249][ T6767] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.506264][ T6767] ? avc_has_perm_noaudit+0x56/0x470 [ 69.506278][ T6767] ? find_held_lock+0x2b/0x80 [ 69.506290][ T6767] ? avc_has_perm_noaudit+0x11e/0x470 [ 69.506304][ T6767] ? avc_has_perm_noaudit+0x11e/0x470 [ 69.506333][ T6767] ? lock_acquire+0x1d1/0x380 [ 69.506349][ T6767] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 69.506365][ T6767] ? find_held_lock+0x2b/0x80 [ 69.506378][ T6767] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.506394][ T6767] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.506411][ T6767] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.506437][ T6767] rtnetlink_rcv_msg+0x95e/0xe90 [ 69.506455][ T6767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.506481][ T6767] netlink_rcv_skb+0x159/0x420 [ 69.506498][ T6767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.506515][ T6767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.506538][ T6767] ? netlink_deliver_tap+0x1ae/0xb50 [ 69.506556][ T6767] netlink_unicast+0x668/0x950 [ 69.506574][ T6767] ? __pfx_netlink_unicast+0x10/0x10 [ 69.506599][ T6767] netlink_sendmsg+0x9ac/0x10c0 [ 69.506617][ T6767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.506636][ T6767] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.506656][ T6767] ? ____sys_sendmsg+0xa99/0xc30 [ 69.506673][ T6767] ____sys_sendmsg+0xa99/0xc30 [ 69.506691][ T6767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.506708][ T6767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.506734][ T6767] ___sys_sendmsg+0x190/0x1e0 [ 69.506754][ T6767] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.506772][ T6767] ? futex_wait+0x11e/0x370 [ 69.506795][ T6767] ? find_held_lock+0x2b/0x80 [ 69.506818][ T6767] __sys_sendmsg+0x160/0x210 [ 69.506833][ T6767] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.506855][ T6767] do_syscall_64+0x123/0x790 [ 69.506871][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.506883][ T6767] RIP: 0033:0x7f9016b9fb19 [ 69.506895][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.506907][ T6767] RSP: 002b:00007f9017a8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.506920][ T6767] RAX: ffffffffffffffda RBX: 00007f9016e25fa0 RCX: 00007f9016b9fb19 [ 69.506928][ T6767] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 69.506935][ T6767] RBP: 00007f9016c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 69.506943][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.506950][ T6767] R13: 00007f9016e26038 R14: 00007f9016e25fa0 R15: 00007ffefc793b38 [ 69.506968][ T6767] [ 69.507017][ T6767] debugfs: out of free dentries, can not create file 'netdev@ffff888036e00720' [ 69.571267][ T6768] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 69.583333][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.685272][ T42] audit: type=1400 audit(1793737899.923:496): avc: denied { remount } for pid=6772 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.753317][ T6775] sctp: [Deprecated]: syz.0.289 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.753317][ T6775] Use struct sctp_sack_info instead [ 69.780681][ T42] audit: type=1400 audit(1793737900.013:497): avc: denied { ioctl } for pid=6777 comm="syz.3.290" path="socket:[15788]" dev="sockfs" ino=15788 ioctlcmd=0x80189439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.832820][ T6784] tipc: Started in network mode [ 69.832838][ T6784] tipc: Node identity , cluster identity 4711 [ 69.832851][ T6784] tipc: Failed to obtain node identity [ 69.832881][ T6784] tipc: Enabling of bearer rejected, failed to enable media [ 69.857383][ T6787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6787 comm=syz.3.293 [ 69.860149][ T6787] FAULT_INJECTION: forcing a failure. [ 69.860149][ T6787] name failslab, interval 1, probability 5, space 0, times 0 [ 69.860176][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT(full) [ 69.860200][ T6787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.860212][ T6787] Call Trace: [ 69.860220][ T6787] [ 69.860228][ T6787] dump_stack_lvl+0x100/0x190 [ 69.860266][ T6787] should_fail_ex.cold+0x5/0xa [ 69.860299][ T6787] should_failslab+0xc2/0x120 [ 69.860323][ T6787] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.860357][ T6787] ? __alloc_skb+0x140/0x710 [ 69.860384][ T6787] __alloc_skb+0x140/0x710 [ 69.860404][ T6787] ? __alloc_skb+0x5b7/0x710 [ 69.860425][ T6787] ? __pfx___alloc_skb+0x10/0x10 [ 69.860448][ T6787] ? if_nlmsg_size+0x4b/0xdc0 [ 69.860480][ T6787] rtmsg_ifinfo_build_skb+0x81/0x260 [ 69.860517][ T6787] rtmsg_ifinfo+0xa4/0x1b0 [ 69.860550][ T6787] __dev_notify_flags+0x362/0x4b0 [ 69.860572][ T6787] ? __local_bh_enable_ip+0xa5/0x120 [ 69.860600][ T6787] ? __pfx___dev_notify_flags+0x10/0x10 [ 69.860623][ T6787] ? __dev_change_flags+0x548/0x850 [ 69.860647][ T6787] ? __pfx___dev_change_flags+0x10/0x10 [ 69.860671][ T6787] ? validate_linkmsg+0x5ff/0xcd0 [ 69.860698][ T6787] ? __pfx_validate_linkmsg+0x10/0x10 [ 69.860728][ T6787] netif_change_flags+0x108/0x160 [ 69.860754][ T6787] do_setlink.isra.0+0x1b9f/0x3f50 [ 69.860788][ T6787] ? __lock_acquire+0x5c0/0x1f40 [ 69.860816][ T6787] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 69.860847][ T6787] ? __lock_acquire+0x5c0/0x1f40 [ 69.860879][ T6787] ? lock_acquire+0x1d1/0x380 [ 69.860938][ T6787] ? avc_has_perm_noaudit+0x56/0x470 [ 69.860969][ T6787] ? lock_acquire+0x1d1/0x380 [ 69.860996][ T6787] ? rtnl_newlink+0xac3/0x2620 [ 69.861034][ T6787] ? rcu_is_watching+0x13/0xc0 [ 69.861059][ T6787] ? trace_contention_end+0x126/0x160 [ 69.861091][ T6787] ? __mutex_lock+0x267/0x1c10 [ 69.861115][ T6787] ? rtnl_newlink+0xac3/0x2620 [ 69.861144][ T6787] ? hook_capable+0x1bc/0x500 [ 69.861173][ T6787] ? __pfx___mutex_lock+0x10/0x10 [ 69.861194][ T6787] ? rcu_is_watching+0x13/0xc0 [ 69.861216][ T6787] ? cap_capable+0x107/0x430 [ 69.861250][ T6787] ? netlink_ns_capable+0xfa/0x130 [ 69.861278][ T6787] rtnl_newlink+0x1dc4/0x2620 [ 69.861316][ T6787] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.861342][ T6787] ? avc_has_perm_noaudit+0x56/0x470 [ 69.861366][ T6787] ? find_held_lock+0x2b/0x80 [ 69.861386][ T6787] ? avc_has_perm_noaudit+0x11e/0x470 [ 69.861409][ T6787] ? avc_has_perm_noaudit+0x11e/0x470 [ 69.861446][ T6787] ? __lock_acquire+0x5c0/0x1f40 [ 69.861476][ T6787] ? hook_capable+0x1bc/0x500 [ 69.861511][ T6787] ? lock_acquire+0x1d1/0x380 [ 69.861560][ T6787] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 69.861590][ T6787] ? find_held_lock+0x2b/0x80 [ 69.861612][ T6787] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.861638][ T6787] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.861667][ T6787] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.861695][ T6787] rtnetlink_rcv_msg+0x95e/0xe90 [ 69.861726][ T6787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.861768][ T6787] netlink_rcv_skb+0x159/0x420 [ 69.861794][ T6787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.861824][ T6787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.861858][ T6787] ? netlink_deliver_tap+0x1ae/0xb50 [ 69.861889][ T6787] netlink_unicast+0x668/0x950 [ 69.861918][ T6787] ? __pfx_netlink_unicast+0x10/0x10 [ 69.861952][ T6787] netlink_sendmsg+0x9ac/0x10c0 [ 69.861982][ T6787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.862015][ T6787] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.862054][ T6787] ? ____sys_sendmsg+0xa99/0xc30 [ 69.862083][ T6787] ____sys_sendmsg+0xa99/0xc30 [ 69.862110][ T6787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.862138][ T6787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.862181][ T6787] ___sys_sendmsg+0x190/0x1e0 [ 69.862212][ T6787] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.862243][ T6787] ? futex_wait+0x11e/0x370 [ 69.862282][ T6787] ? find_held_lock+0x2b/0x80 [ 69.862323][ T6787] __sys_sendmsg+0x160/0x210 [ 69.862349][ T6787] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.862387][ T6787] do_syscall_64+0x123/0x790 [ 69.862413][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.862435][ T6787] RIP: 0033:0x7fcc9339fb19 [ 69.862454][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.862474][ T6787] RSP: 002b:00007fcc9432e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.862495][ T6787] RAX: ffffffffffffffda RBX: 00007fcc93625fa0 RCX: 00007fcc9339fb19 [ 69.862509][ T6787] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000006 [ 69.862523][ T6787] RBP: 00007fcc93437b70 R08: 0000000000000000 R09: 0000000000000000 [ 69.862534][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.862546][ T6787] R13: 00007fcc93626038 R14: 00007fcc93625fa0 R15: 00007fffba3b9308 [ 69.862575][ T6787] [ 69.998791][ T42] audit: type=1400 audit(1793737900.233:498): avc: denied { shutdown } for pid=6792 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.005541][ T6793] Bluetooth: hci0: service_discovery: too big uuid_count value 38912 [ 70.106300][ T6797] FAULT_INJECTION: forcing a failure. [ 70.106300][ T6797] name failslab, interval 1, probability 5, space 0, times 0 [ 70.106329][ T6797] CPU: 2 UID: 0 PID: 6797 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 70.106350][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.106362][ T6797] Call Trace: [ 70.106383][ T6797] [ 70.106389][ T6797] dump_stack_lvl+0x100/0x190 [ 70.106413][ T6797] should_fail_ex.cold+0x5/0xa [ 70.106434][ T6797] should_failslab+0xc2/0x120 [ 70.106449][ T6797] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.106469][ T6797] ? security_file_alloc+0x34/0x2c0 [ 70.106485][ T6797] security_file_alloc+0x34/0x2c0 [ 70.106498][ T6797] init_file+0x95/0x480 [ 70.106513][ T6797] alloc_empty_file+0x79/0x1c0 [ 70.106531][ T6797] path_openat+0xd6/0x23f0 [ 70.106548][ T6797] ? __pfx_path_openat+0x10/0x10 [ 70.106568][ T6797] do_file_open+0x20e/0x430 [ 70.106585][ T6797] ? __pfx_do_file_open+0x10/0x10 [ 70.106612][ T6797] ? _raw_spin_unlock+0x28/0x50 [ 70.106631][ T6797] ? alloc_fd+0x471/0x7a0 [ 70.106650][ T6797] do_sys_openat2+0x163/0x1d0 [ 70.106667][ T6797] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.106688][ T6797] __x64_sys_openat+0x12d/0x210 [ 70.106705][ T6797] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.106722][ T6797] ? kmem_cache_free+0x127/0x6c0 [ 70.106744][ T6797] do_syscall_64+0x123/0x790 [ 70.106759][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.106771][ T6797] RIP: 0033:0x7f7d1d99fb19 [ 70.106781][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.106793][ T6797] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.106806][ T6797] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 70.106814][ T6797] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 70.106821][ T6797] RBP: 00007f7d1da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 70.106829][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.106836][ T6797] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 70.106851][ T6797] [ 70.382192][ T5876] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 70.543629][ T5876] usb 8-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 70.544822][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.544848][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.544876][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.547476][ T5876] usb 8-1: config 0 descriptor?? [ 70.958798][ T5876] hid_parser_main: 24 callbacks suppressed [ 70.958824][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958839][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958852][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958864][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958876][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958889][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958901][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.958913][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.959021][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.959035][ T5876] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 70.960259][ T5876] savu 0003:1E7D:2D5A.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 71.008466][ T6806] NILFS (loop0): device size too small [ 71.038806][ T42] audit: type=1400 audit(1793737901.273:499): avc: denied { map } for pid=6805 comm="syz.0.300" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.091788][ T6813] NILFS (loop0): device size too small [ 71.125952][ T6801] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 71.163948][ T5892] usb 8-1: USB disconnect, device number 7 [ 71.193636][ T42] audit: type=1400 audit(1793737901.433:500): avc: denied { validate_trans } for pid=6815 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.195822][ T42] audit: type=1400 audit(1793737901.433:501): avc: denied { write } for pid=6815 comm="syz.0.301" name="core" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.196785][ T42] audit: type=1400 audit(1793737901.433:502): avc: denied { write } for pid=6815 comm="syz.0.301" name="core" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.198822][ T42] audit: type=1400 audit(1793737901.433:503): avc: denied { remove_name } for pid=6815 comm="syz.0.301" name="rd_mcp_0" dev="configfs" ino=17296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.198866][ T42] audit: type=1400 audit(1793737901.433:504): avc: denied { rmdir } for pid=6815 comm="syz.0.301" name="rd_mcp_0" dev="configfs" ino=17296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.346818][ T1037] cfg80211: failed to load regulatory.db [ 71.355308][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355346][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.382108][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.416454][ T6823] netlink: 420 bytes leftover after parsing attributes in process `syz.0.304'. [ 71.416765][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 71.522089][ T24] usb 7-1: device descriptor read/64, error -71 [ 71.582747][ T5146] Bluetooth: hci4: command 0x1003 tx timeout [ 71.582819][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.607637][ T6830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.306'. [ 71.721566][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 71.762751][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.837452][ T6841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6841 comm=syz.0.310 [ 71.839534][ T6841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6841 comm=syz.0.310 [ 71.902415][ T1356] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.902562][ T24] usb 7-1: device descriptor read/64, error -71 [ 71.918643][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 71.985683][ T6851] syzkaller0: entered promiscuous mode [ 71.985706][ T6851] syzkaller0: entered allmulticast mode [ 72.024141][ T24] usb usb7-port1: attempt power cycle [ 72.064230][ T1356] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.065068][ T1356] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.065088][ T1356] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.065107][ T1356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.067119][ T6835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.072168][ T1356] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.182178][ T6857] input: syz0 as /devices/virtual/input/input15 [ 72.182385][ T6857] FAULT_INJECTION: forcing a failure. [ 72.182385][ T6857] name failslab, interval 1, probability 5, space 0, times 0 [ 72.182402][ T6857] CPU: 0 UID: 0 PID: 6857 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT(full) [ 72.182416][ T6857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.182424][ T6857] Call Trace: [ 72.182428][ T6857] [ 72.182433][ T6857] dump_stack_lvl+0x100/0x190 [ 72.182467][ T6857] should_fail_ex.cold+0x5/0xa [ 72.182487][ T6857] should_failslab+0xc2/0x120 [ 72.182502][ T6857] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.182522][ T6857] ? __kernfs_new_node+0xd2/0xa10 [ 72.182536][ T6857] __kernfs_new_node+0xd2/0xa10 [ 72.182550][ T6857] ? __pfx___kernfs_new_node+0x10/0x10 [ 72.182563][ T6857] ? lock_acquire+0x1d1/0x380 [ 72.182580][ T6857] ? kernfs_root+0x23/0x2a0 [ 72.182597][ T6857] ? find_held_lock+0x2b/0x80 [ 72.182610][ T6857] ? kernfs_root+0xee/0x2a0 [ 72.182627][ T6857] ? kernfs_root+0xee/0x2a0 [ 72.182647][ T6857] kernfs_new_node+0x194/0x200 [ 72.182661][ T6857] ? __pfx_kernfs_new_node+0x10/0x10 [ 72.182673][ T6857] ? kernfs_add_one+0x213/0xb40 [ 72.182688][ T6857] __kernfs_create_file+0x53/0x350 [ 72.182705][ T6857] sysfs_add_file_mode_ns+0x207/0x3c0 [ 72.182725][ T6857] sysfs_merge_group+0x194/0x340 [ 72.182748][ T6857] ? __pfx_sysfs_merge_group+0x10/0x10 [ 72.182766][ T6857] ? bus_add_device+0x2e2/0x6c0 [ 72.182779][ T6857] ? __pfx_bus_add_device+0x10/0x10 [ 72.182790][ T6857] ? __pfx_dev_add_physical_location+0x10/0x10 [ 72.182811][ T6857] dpm_sysfs_add+0x237/0x280 [ 72.182830][ T6857] device_add+0x9f4/0x1970 [ 72.182848][ T6857] ? __pfx_device_add+0x10/0x10 [ 72.182868][ T6857] ? kobject_get+0xbb/0x150 [ 72.182887][ T6857] cdev_device_add+0x12b/0x270 [ 72.182903][ T6857] evdev_connect+0x3a8/0x4b0 [ 72.182921][ T6857] input_attach_handler.isra.0+0x177/0x1e0 [ 72.182942][ T6857] input_register_device.cold+0x1ce/0x386 [ 72.182962][ T6857] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 72.182982][ T6857] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.182993][ T6857] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 72.183014][ T6857] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 72.183033][ T6857] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.183055][ T6857] ? __fget_files+0x34/0x3d0 [ 72.183076][ T6857] ? selinux_file_ioctl+0x1e0/0x290 [ 72.183094][ T6857] ? selinux_file_ioctl+0x1e7/0x290 [ 72.183114][ T6857] ? __pfx_uinput_ioctl+0x10/0x10 [ 72.183126][ T6857] __x64_sys_ioctl+0x18e/0x210 [ 72.183139][ T6857] do_syscall_64+0x123/0x790 [ 72.183153][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.183166][ T6857] RIP: 0033:0x7f9b9cd9fb19 [ 72.183177][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.183188][ T6857] RSP: 002b:00007f9b9dbd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.183201][ T6857] RAX: ffffffffffffffda RBX: 00007f9b9d025fa0 RCX: 00007f9b9cd9fb19 [ 72.183209][ T6857] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 72.183217][ T6857] RBP: 00007f9b9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 72.183224][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.183231][ T6857] R13: 00007f9b9d026038 R14: 00007f9b9d025fa0 R15: 00007ffedcb325f8 [ 72.183248][ T6857] [ 72.185275][ T6857] input: failed to attach handler evdev to device input15, error: -12 [ 72.367429][ T1356] usb 6-1: USB disconnect, device number 3 [ 72.382757][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.415584][ T24] usb 7-1: device descriptor read/8, error -71 [ 72.477141][ C2] Unknown status report in ack skb [ 72.533346][ T6869] device-mapper: table: 248:8: striped: Invalid chunk_size (-EINVAL) [ 72.533363][ T6869] device-mapper: ioctl: error adding target to table [ 72.672120][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 72.694743][ T24] usb 7-1: device descriptor read/8, error -71 [ 72.803414][ T24] usb usb7-port1: unable to enumerate USB device [ 72.906371][ T6875] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 73.058284][ T6880] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 73.058376][ T6880] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 73.143173][ T6883] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 73.143188][ T6883] overlayfs: missing 'lowerdir' [ 73.364000][ T5890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 73.476475][ T6857] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 73.492126][ T5890] usb 7-1: device descriptor read/64, error -71 [ 73.522546][ T6896] Bluetooth: hci0: service_discovery: too big uuid_count value 38932 [ 73.540271][ T6898] warning: `syz.0.329' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.593354][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 73.593373][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 73.593383][ T6898] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 73.732095][ T5890] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 73.862090][ T5890] usb 7-1: device descriptor read/64, error -71 [ 73.972839][ T5890] usb usb7-port1: attempt power cycle [ 74.043862][ T6913] Set syz1 is full, maxelem 2 reached [ 74.063942][ T50] hid-generic 0005:15C2:8001.0006: item fetching failed at offset 0/1 [ 74.064506][ T50] hid-generic 0005:15C2:8001.0006: probe with driver hid-generic failed with error -22 [ 74.111747][ T6916] input: syz0 as /devices/virtual/input/input16 [ 74.113854][ T6916] FAULT_INJECTION: forcing a failure. [ 74.113854][ T6916] name failslab, interval 1, probability 5, space 0, times 0 [ 74.113881][ T6916] CPU: 3 UID: 0 PID: 6916 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT(full) [ 74.113903][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.113915][ T6916] Call Trace: [ 74.113922][ T6916] [ 74.113930][ T6916] dump_stack_lvl+0x100/0x190 [ 74.113970][ T6916] should_fail_ex.cold+0x5/0xa [ 74.114002][ T6916] should_failslab+0xc2/0x120 [ 74.114026][ T6916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.114058][ T6916] ? __kernfs_new_node+0xd2/0xa10 [ 74.114086][ T6916] __kernfs_new_node+0xd2/0xa10 [ 74.114112][ T6916] ? __pfx___kernfs_new_node+0x10/0x10 [ 74.114136][ T6916] ? lock_acquire+0x1d1/0x380 [ 74.114163][ T6916] ? kernfs_root+0x23/0x2a0 [ 74.114191][ T6916] ? find_held_lock+0x2b/0x80 [ 74.114211][ T6916] ? kernfs_root+0xee/0x2a0 [ 74.114237][ T6916] ? kernfs_root+0xee/0x2a0 [ 74.114272][ T6916] kernfs_new_node+0x194/0x200 [ 74.114295][ T6916] ? __pfx_kernfs_new_node+0x10/0x10 [ 74.114316][ T6916] ? kernfs_add_one+0x213/0xb40 [ 74.114341][ T6916] __kernfs_create_file+0x53/0x350 [ 74.114369][ T6916] sysfs_add_file_mode_ns+0x207/0x3c0 [ 74.114404][ T6916] sysfs_merge_group+0x194/0x340 [ 74.114435][ T6916] ? __pfx_sysfs_merge_group+0x10/0x10 [ 74.114464][ T6916] ? bus_add_device+0x2e2/0x6c0 [ 74.114486][ T6916] ? __pfx_bus_add_device+0x10/0x10 [ 74.114504][ T6916] ? __pfx_dev_add_physical_location+0x10/0x10 [ 74.114539][ T6916] dpm_sysfs_add+0x237/0x280 [ 74.114576][ T6916] device_add+0x9f4/0x1970 [ 74.114607][ T6916] ? __pfx_device_add+0x10/0x10 [ 74.114638][ T6916] ? kobject_get+0xbb/0x150 [ 74.114668][ T6916] cdev_device_add+0x12b/0x270 [ 74.114695][ T6916] evdev_connect+0x3a8/0x4b0 [ 74.114728][ T6916] input_attach_handler.isra.0+0x177/0x1e0 [ 74.114760][ T6916] input_register_device.cold+0x1ce/0x386 [ 74.114792][ T6916] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 74.114827][ T6916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.114846][ T6916] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 74.114882][ T6916] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 74.114915][ T6916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.114952][ T6916] ? __fget_files+0x34/0x3d0 [ 74.114985][ T6916] ? selinux_file_ioctl+0x1e0/0x290 [ 74.115010][ T6916] ? selinux_file_ioctl+0x1e7/0x290 [ 74.115038][ T6916] ? __pfx_uinput_ioctl+0x10/0x10 [ 74.115056][ T6916] __x64_sys_ioctl+0x18e/0x210 [ 74.115075][ T6916] do_syscall_64+0x123/0x790 [ 74.115100][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.115122][ T6916] RIP: 0033:0x7fcc9339fb19 [ 74.115140][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.115161][ T6916] RSP: 002b:00007fcc9432e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.115183][ T6916] RAX: ffffffffffffffda RBX: 00007fcc93625fa0 RCX: 00007fcc9339fb19 [ 74.115198][ T6916] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 74.115210][ T6916] RBP: 00007fcc93437b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.115222][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.115235][ T6916] R13: 00007fcc93626038 R14: 00007fcc93625fa0 R15: 00007fffba3b9308 [ 74.115265][ T6916] [ 74.125067][ T6916] input: failed to attach handler evdev to device input16, error: -12 [ 74.436996][ T6923] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 74.495373][ C0] Unknown status report in ack skb [ 74.616232][ T6935] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 74.616713][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 74.616723][ T42] audit: type=1400 audit(1793737904.853:520): avc: denied { ioctl } for pid=6936 comm="syz.2.347" path="socket:[17993]" dev="sockfs" ino=17993 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.652113][ T6935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.656506][ T6935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'. [ 74.719470][ T42] audit: type=1400 audit(1793737904.953:521): avc: denied { getopt } for pid=6934 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.720574][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 74.904732][ T6950] FAULT_INJECTION: forcing a failure. [ 74.904732][ T6950] name failslab, interval 1, probability 5, space 0, times 0 [ 74.904752][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.2.350 Not tainted syzkaller #0 PREEMPT(full) [ 74.904779][ T6950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.904787][ T6950] Call Trace: [ 74.904792][ T6950] [ 74.904797][ T6950] dump_stack_lvl+0x100/0x190 [ 74.904822][ T6950] should_fail_ex.cold+0x5/0xa [ 74.904842][ T6950] should_failslab+0xc2/0x120 [ 74.904858][ T6950] __kmalloc_noprof+0xfc/0x840 [ 74.904905][ T6950] ? kvm_io_bus_register_dev+0x1d2/0x720 [ 74.904932][ T6950] kvm_io_bus_register_dev+0x1d2/0x720 [ 74.904955][ T6950] kvm_pic_init+0x25e/0x380 [ 74.904971][ T6950] kvm_arch_vm_ioctl+0xdf2/0x1650 [ 74.904986][ T6950] ? __lock_acquire+0x5c0/0x1f40 [ 74.905003][ T6950] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 74.905021][ T6950] ? __lock_acquire+0x5c0/0x1f40 [ 74.905042][ T6950] ? __lock_acquire+0x5c0/0x1f40 [ 74.905059][ T6950] ? lock_acquire+0x1d1/0x380 [ 74.905076][ T6950] ? unwind_next_frame+0xbd/0x2090 [ 74.905091][ T6950] ? lock_acquire+0x1d1/0x380 [ 74.905106][ T6950] ? is_bpf_text_address+0x25/0x1a0 [ 74.905122][ T6950] ? find_held_lock+0x2b/0x80 [ 74.905134][ T6950] ? is_bpf_text_address+0x8a/0x1a0 [ 74.905148][ T6950] ? is_bpf_text_address+0x8a/0x1a0 [ 74.905163][ T6950] ? bpf_ksym_find+0x128/0x1c0 [ 74.905180][ T6950] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.905198][ T6950] ? is_bpf_text_address+0x94/0x1a0 [ 74.905221][ T6950] ? tomoyo_path_number_perm+0x46d/0x580 [ 74.905239][ T6950] ? stack_trace_save+0x8e/0xc0 [ 74.905255][ T6950] ? __pfx_stack_trace_save+0x10/0x10 [ 74.905272][ T6950] ? stack_depot_save_flags+0x27/0xa10 [ 74.905290][ T6950] ? __lock_acquire+0x5c0/0x1f40 [ 74.905308][ T6950] ? tomoyo_path_number_perm+0x46d/0x580 [ 74.905325][ T6950] ? kasan_save_stack+0x3f/0x50 [ 74.905336][ T6950] ? kasan_save_stack+0x30/0x50 [ 74.905347][ T6950] ? kasan_save_track+0x14/0x30 [ 74.905357][ T6950] ? kasan_save_free_info+0x3b/0x70 [ 74.905372][ T6950] ? __kasan_slab_free+0x5f/0x80 [ 74.905384][ T6950] ? kfree+0x22b/0x6d0 [ 74.905401][ T6950] ? tomoyo_path_number_perm+0x46d/0x580 [ 74.905419][ T6950] ? security_file_ioctl+0xd3/0x230 [ 74.905438][ T6950] ? __x64_sys_ioctl+0xb7/0x210 [ 74.905449][ T6950] ? do_syscall_64+0x123/0x790 [ 74.905461][ T6950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.905484][ T6950] kvm_vm_ioctl+0xdca/0x2950 [ 74.905503][ T6950] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 74.905523][ T6950] ? kasan_quarantine_put+0x104/0x240 [ 74.905542][ T6950] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.905557][ T6950] ? find_held_lock+0x2b/0x80 [ 74.905570][ T6950] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.905587][ T6950] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.905608][ T6950] ? tomoyo_path_number_perm+0x188/0x580 [ 74.905626][ T6950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.905649][ T6950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.905670][ T6950] ? do_vfs_ioctl+0x226/0x13e0 [ 74.905682][ T6950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.905692][ T6950] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 74.905714][ T6950] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.905735][ T6950] ? __fget_files+0x34/0x3d0 [ 74.905756][ T6950] ? selinux_file_ioctl+0x1e0/0x290 [ 74.905775][ T6950] ? selinux_file_ioctl+0x1e7/0x290 [ 74.905795][ T6950] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 74.905811][ T6950] __x64_sys_ioctl+0x18e/0x210 [ 74.905824][ T6950] do_syscall_64+0x123/0x790 [ 74.905838][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.905851][ T6950] RIP: 0033:0x7f7d1d99fb19 [ 74.905862][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.905873][ T6950] RSP: 002b:00007f7d1e948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.905886][ T6950] RAX: ffffffffffffffda RBX: 00007f7d1dc25fa0 RCX: 00007f7d1d99fb19 [ 74.905902][ T6950] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000006 [ 74.905910][ T6950] RBP: 00007f7d1da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.905917][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.905925][ T6950] R13: 00007f7d1dc26038 R14: 00007f7d1dc25fa0 R15: 00007ffdd181c898 [ 74.905942][ T6950] [ 75.091293][ T6950] capability: warning: `syz.2.350' uses 32-bit capabilities (legacy support in use) [ 75.177411][ T42] audit: type=1400 audit(1793737905.413:522): avc: denied { name_bind } for pid=6954 comm="syz.1.351" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.442302][ T6935] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 75.482658][ T6958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.491819][ C1] Unknown status report in ack skb [ 75.547015][ T6916] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 75.562228][ T42] audit: type=1400 audit(1793737905.793:523): avc: denied { setattr } for pid=6965 comm="syz.0.354" name="sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 75.636268][ T6970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.355'. [ 75.650760][ T42] audit: type=1400 audit(1793737905.883:524): avc: denied { remount } for pid=6971 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.656165][ T42] audit: type=1400 audit(1793737905.893:525): avc: denied { map } for pid=6971 comm="syz.1.357" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.703575][ T6968] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 75.708598][ T6970] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 75.708762][ T6970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 75.726954][ T6951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.735668][ T6968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.762432][ T6978] ip_tables: iptables: counters copy to user failed while replacing table [ 75.782068][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 75.782089][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 75.782108][ T6968] netlink: 'syz.0.356': attribute type 18 has an invalid length. [ 75.782122][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 75.822742][ T5860] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.822811][ T5860] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.822831][ T5860] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.822849][ T5860] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.843496][ T6983] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 75.949574][ T6992] ip_tables: iptables: counters copy to user failed while replacing table [ 76.091826][ T7001] input: syz0 as /devices/virtual/input/input17 [ 76.100837][ T7001] FAULT_INJECTION: forcing a failure. [ 76.100837][ T7001] name failslab, interval 1, probability 5, space 0, times 0 [ 76.100891][ T7001] CPU: 3 UID: 0 PID: 7001 Comm: syz.0.364 Not tainted syzkaller #0 PREEMPT(full) [ 76.100916][ T7001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.100931][ T7001] Call Trace: [ 76.100938][ T7001] [ 76.100947][ T7001] dump_stack_lvl+0x100/0x190 [ 76.100985][ T7001] should_fail_ex.cold+0x5/0xa [ 76.101016][ T7001] should_failslab+0xc2/0x120 [ 76.101046][ T7001] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.101079][ T7001] ? find_held_lock+0x2b/0x80 [ 76.101103][ T7001] ? __kernfs_new_node+0xd2/0xa10 [ 76.101130][ T7001] __kernfs_new_node+0xd2/0xa10 [ 76.101148][ T7001] ? __lock_acquire+0x5c0/0x1f40 [ 76.101180][ T7001] ? __pfx___kernfs_new_node+0x10/0x10 [ 76.101205][ T7001] ? lock_acquire+0x1d1/0x380 [ 76.101233][ T7001] ? kernfs_root+0x23/0x2a0 [ 76.101262][ T7001] ? find_held_lock+0x2b/0x80 [ 76.101284][ T7001] ? kernfs_root+0xee/0x2a0 [ 76.101312][ T7001] ? kernfs_root+0xee/0x2a0 [ 76.101348][ T7001] kernfs_new_node+0x194/0x200 [ 76.101370][ T7001] ? __pfx_kernfs_new_node+0x10/0x10 [ 76.101392][ T7001] ? rcu_is_watching+0x13/0xc0 [ 76.101415][ T7001] ? trace_contention_end+0x126/0x160 [ 76.101449][ T7001] __kernfs_create_file+0x53/0x350 [ 76.101478][ T7001] sysfs_add_file_mode_ns+0x207/0x3c0 [ 76.101513][ T7001] sysfs_create_file_ns+0x145/0x1e0 [ 76.101541][ T7001] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 76.101573][ T7001] ? mark_held_locks+0x40/0x70 [ 76.101604][ T7001] device_create_file+0xf2/0x1d0 [ 76.101639][ T7001] device_add+0xa79/0x1970 [ 76.101669][ T7001] ? __pfx_device_add+0x10/0x10 [ 76.101702][ T7001] ? kobject_get+0xbb/0x150 [ 76.101733][ T7001] cdev_device_add+0x12b/0x270 [ 76.101759][ T7001] evdev_connect+0x3a8/0x4b0 [ 76.101791][ T7001] input_attach_handler.isra.0+0x177/0x1e0 [ 76.101823][ T7001] input_register_device.cold+0x1ce/0x386 [ 76.101854][ T7001] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 76.101889][ T7001] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 76.101907][ T7001] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 76.101941][ T7001] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 76.101974][ T7001] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.102038][ T7001] ? __fget_files+0x34/0x3d0 [ 76.102076][ T7001] ? selinux_file_ioctl+0x1e0/0x290 [ 76.102107][ T7001] ? selinux_file_ioctl+0x1e7/0x290 [ 76.102170][ T7001] ? __pfx_uinput_ioctl+0x10/0x10 [ 76.102198][ T7001] __x64_sys_ioctl+0x18e/0x210 [ 76.102221][ T7001] do_syscall_64+0x123/0x790 [ 76.102246][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.102266][ T7001] RIP: 0033:0x7f9b9cd9fb19 [ 76.102285][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.102304][ T7001] RSP: 002b:00007f9b9dbd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.102326][ T7001] RAX: ffffffffffffffda RBX: 00007f9b9d025fa0 RCX: 00007f9b9cd9fb19 [ 76.102340][ T7001] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 76.102353][ T7001] RBP: 00007f9b9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.102366][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.102379][ T7001] R13: 00007f9b9d026038 R14: 00007f9b9d025fa0 R15: 00007ffedcb325f8 [ 76.102407][ T7001] [ 76.115488][ T7001] input: failed to attach handler evdev to device input17, error: -12 [ 76.618431][ T42] audit: type=1400 audit(1793737906.853:526): avc: denied { write } for pid=7012 comm="syz.1.368" name="cluster" dev="configfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.618871][ T42] audit: type=1400 audit(1793737906.853:527): avc: denied { write } for pid=7012 comm="syz.1.368" name="node" dev="configfs" ino=18684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.620443][ T42] audit: type=1400 audit(1793737906.853:528): avc: denied { write } for pid=7012 comm="syz.1.368" name="ipv4_address" dev="configfs" ino=18687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 76.621017][ T42] audit: type=1400 audit(1793737906.853:529): avc: denied { open } for pid=7012 comm="syz.1.368" path="/94/config/cluster/ocfs2/node/node0/ipv4_address" dev="configfs" ino=18687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 76.906666][ C2] Unknown status report in ack skb [ 77.057112][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.372'. [ 77.058787][ T7027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.372'. [ 77.371271][ T7039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ž¥&~MfF@!è³0´~…îz!7þ­A·O [ 78.845471][ T7054] device-mapper: table: 248:10: thin-pool: metadata device already in use by a pool (-EBUSY) [ 78.845490][ T7054] device-mapper: ioctl: error adding target to table [ 78.847306][ T7054] device-mapper: ioctl: The device has no table. [ 78.848499][ T7054] device-mapper: ioctl: The device has no table. [ 78.864127][ T7054] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 78.864164][ T7054] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.894009][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.170892][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 79.200794][ T1177] IPVS: starting estimator thread 0... [ 79.216932][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 79.282184][ T7073] IPVS: using max 41 ests per chain, 98400 per kthread [ 79.661538][ T7087] input: syz0 as /devices/virtual/input/input18 [ 79.661915][ T7087] FAULT_INJECTION: forcing a failure. [ 79.661915][ T7087] name failslab, interval 1, probability 5, space 0, times 0 [ 79.661940][ T7087] CPU: 3 UID: 0 PID: 7087 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT(full) [ 79.661965][ T7087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.661979][ T7087] Call Trace: [ 79.662006][ T7087] [ 79.662016][ T7087] dump_stack_lvl+0x100/0x190 [ 79.662055][ T7087] should_fail_ex.cold+0x5/0xa [ 79.662089][ T7087] should_failslab+0xc2/0x120 [ 79.662114][ T7087] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.662147][ T7087] ? __kernfs_new_node+0xd2/0xa10 [ 79.662173][ T7087] __kernfs_new_node+0xd2/0xa10 [ 79.662197][ T7087] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.662220][ T7087] ? lock_acquire+0x1d1/0x380 [ 79.662250][ T7087] ? kernfs_root+0x23/0x2a0 [ 79.662279][ T7087] ? find_held_lock+0x2b/0x80 [ 79.662301][ T7087] ? kernfs_root+0xee/0x2a0 [ 79.662328][ T7087] ? kernfs_root+0xee/0x2a0 [ 79.662365][ T7087] kernfs_new_node+0x194/0x200 [ 79.662388][ T7087] ? __pfx_kernfs_new_node+0x10/0x10 [ 79.662410][ T7087] ? kernfs_add_one+0x213/0xb40 [ 79.662435][ T7087] __kernfs_create_file+0x53/0x350 [ 79.662464][ T7087] sysfs_add_file_mode_ns+0x207/0x3c0 [ 79.662499][ T7087] sysfs_merge_group+0x194/0x340 [ 79.662532][ T7087] ? __pfx_sysfs_merge_group+0x10/0x10 [ 79.662562][ T7087] ? bus_add_device+0x2e2/0x6c0 [ 79.662585][ T7087] ? __pfx_bus_add_device+0x10/0x10 [ 79.662604][ T7087] ? __pfx_dev_add_physical_location+0x10/0x10 [ 79.662640][ T7087] dpm_sysfs_add+0x237/0x280 [ 79.662669][ T7087] device_add+0x9f4/0x1970 [ 79.662699][ T7087] ? __pfx_device_add+0x10/0x10 [ 79.662732][ T7087] ? kobject_get+0xbb/0x150 [ 79.662763][ T7087] cdev_device_add+0x12b/0x270 [ 79.662789][ T7087] evdev_connect+0x3a8/0x4b0 [ 79.662821][ T7087] input_attach_handler.isra.0+0x177/0x1e0 [ 79.662852][ T7087] input_register_device.cold+0x1ce/0x386 [ 79.662883][ T7087] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 79.662918][ T7087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 79.662936][ T7087] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 79.662970][ T7087] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 79.663008][ T7087] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.663045][ T7087] ? __fget_files+0x34/0x3d0 [ 79.663082][ T7087] ? selinux_file_ioctl+0x1e0/0x290 [ 79.663113][ T7087] ? selinux_file_ioctl+0x1e7/0x290 [ 79.663145][ T7087] ? __pfx_uinput_ioctl+0x10/0x10 [ 79.663166][ T7087] __x64_sys_ioctl+0x18e/0x210 [ 79.663190][ T7087] do_syscall_64+0x123/0x790 [ 79.663216][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.663237][ T7087] RIP: 0033:0x7f9b9cd9fb19 [ 79.663255][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.663275][ T7087] RSP: 002b:00007f9b9dbd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.663297][ T7087] RAX: ffffffffffffffda RBX: 00007f9b9d025fa0 RCX: 00007f9b9cd9fb19 [ 79.663311][ T7087] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 79.663324][ T7087] RBP: 00007f9b9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 79.663336][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.663349][ T7087] R13: 00007f9b9d026038 R14: 00007f9b9d025fa0 R15: 00007ffedcb325f8 [ 79.663379][ T7087] [ 79.684988][ T7087] input: failed to attach handler evdev to device input18, error: -12 [ 80.075491][ C1] Unknown status report in ack skb [ 80.529599][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.623124][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.623153][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.639051][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 80.639062][ T42] audit: type=1326 audit(1793737910.873:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.640406][ T42] audit: type=1326 audit(1793737910.873:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.641110][ T42] audit: type=1326 audit(1793737910.873:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.641312][ T42] audit: type=1326 audit(1793737910.873:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.641934][ T42] audit: type=1326 audit(1793737910.873:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.692122][ T42] audit: type=1326 audit(1793737910.923:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.692167][ T42] audit: type=1326 audit(1793737910.923:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.692201][ T42] audit: type=1326 audit(1793737910.923:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.692464][ T42] audit: type=1326 audit(1793737910.933:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.692709][ T42] audit: type=1326 audit(1793737910.933:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016b9fb19 code=0x7ffc0000 [ 80.942913][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.943613][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.992297][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.152824][ T29] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 81.153824][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.375073][ T29] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 81.414191][ T7128] FAULT_INJECTION: forcing a failure. [ 81.414191][ T7128] name failslab, interval 1, probability 5, space 0, times 0 [ 81.414220][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 81.414242][ T7128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.414253][ T7128] Call Trace: [ 81.414260][ T7128] [ 81.414267][ T7128] dump_stack_lvl+0x100/0x190 [ 81.414304][ T7128] should_fail_ex.cold+0x5/0xa [ 81.414334][ T7128] should_failslab+0xc2/0x120 [ 81.414356][ T7128] __kvmalloc_node_noprof+0x113/0x9b0 [ 81.414384][ T7128] ? nla_strdup+0xc3/0x150 [ 81.414404][ T7128] ? nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 81.414437][ T7128] nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 81.414471][ T7128] ? nft_chain_lookup+0x59c/0xa60 [ 81.414501][ T7128] ? __kasan_kmalloc+0xaa/0xb0 [ 81.414520][ T7128] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 81.414547][ T7128] ? __lock_acquire+0x5c0/0x1f40 [ 81.414600][ T7128] ? nla_strcmp+0xff/0x130 [ 81.414624][ T7128] ? nft_table_lookup.part.0+0x1e3/0x230 [ 81.414654][ T7128] nf_tables_newchain+0x1824/0x2a50 [ 81.414680][ T7128] ? net_generic+0x67/0x2a0 [ 81.414719][ T7128] ? __pfx_nf_tables_newchain+0x10/0x10 [ 81.414747][ T7128] ? __pfx___nla_validate_parse+0x10/0x10 [ 81.414772][ T7128] ? lock_acquire+0x1d1/0x380 [ 81.414798][ T7128] ? net_generic+0x25/0x2a0 [ 81.414832][ T7128] ? __nla_parse+0x40/0x60 [ 81.414854][ T7128] nfnetlink_rcv_batch+0x1410/0x2880 [ 81.414901][ T7128] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 81.414935][ T7128] ? lock_acquire+0x1d1/0x380 [ 81.414961][ T7128] ? avc_has_perm_noaudit+0x56/0x470 [ 81.414996][ T7128] ? avc_has_perm_noaudit+0x145/0x470 [ 81.415046][ T7128] ? __nla_parse+0x40/0x60 [ 81.415072][ T7128] nfnetlink_rcv+0x3bd/0x440 [ 81.415104][ T7128] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 81.415142][ T7128] netlink_unicast+0x668/0x950 [ 81.415172][ T7128] ? __pfx_netlink_unicast+0x10/0x10 [ 81.415205][ T7128] netlink_sendmsg+0x9ac/0x10c0 [ 81.415235][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.415266][ T7128] ? selinux_socket_sendmsg+0x198/0x2f0 [ 81.415298][ T7128] ? ____sys_sendmsg+0xa99/0xc30 [ 81.415324][ T7128] ____sys_sendmsg+0xa99/0xc30 [ 81.415350][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.415379][ T7128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.415414][ T7128] ? lock_acquire+0x1d1/0x380 [ 81.415441][ T7128] ? get_pid_task+0x2a/0x250 [ 81.415463][ T7128] ___sys_sendmsg+0x190/0x1e0 [ 81.415493][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.415520][ T7128] ? get_pid_task+0x106/0x250 [ 81.415550][ T7128] ? find_held_lock+0x2b/0x80 [ 81.415594][ T7128] __sys_sendmsg+0x160/0x210 [ 81.415619][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.415656][ T7128] do_syscall_64+0x123/0x790 [ 81.415683][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.415704][ T7128] RIP: 0033:0x7f9b9cd9fb19 [ 81.415721][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.415740][ T7128] RSP: 002b:00007f9b9dbd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.415763][ T7128] RAX: ffffffffffffffda RBX: 00007f9b9d025fa0 RCX: 00007f9b9cd9fb19 [ 81.415775][ T7128] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 81.415787][ T7128] RBP: 00007f9b9dbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 81.415799][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.415811][ T7128] R13: 00007f9b9d026038 R14: 00007f9b9d025fa0 R15: 00007ffedcb325f8 [ 81.415839][ T7128] [ 81.558349][ T5796] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 81.611927][ T7134] overlayfs: missing 'lowerdir' [ 81.627249][ T29] usb 6-1: USB disconnect, device number 4 [ 81.664398][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.260230][ T7136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.404'. [ 82.325934][ T7140] Format for adding new port is "id [perm_addr]" (uint MAC). [ 82.395142][ T7144] FAULT_INJECTION: forcing a failure. [ 82.395142][ T7144] name failslab, interval 1, probability 5, space 0, times 0 [ 82.395164][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.1.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.395181][ T7144] Tainted: [L]=SOFTLOCKUP [ 82.395185][ T7144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.395193][ T7144] Call Trace: [ 82.395197][ T7144] [ 82.395202][ T7144] dump_stack_lvl+0x100/0x190 [ 82.395226][ T7144] should_fail_ex.cold+0x5/0xa [ 82.395245][ T7144] should_failslab+0xc2/0x120 [ 82.395259][ T7144] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 82.395280][ T7144] ? kasprintf+0xc7/0x100 [ 82.395297][ T7144] kvasprintf+0xbc/0x150 [ 82.395311][ T7144] ? __pfx_kvasprintf+0x10/0x10 [ 82.395332][ T7144] kasprintf+0xc7/0x100 [ 82.395346][ T7144] ? __pfx_kasprintf+0x10/0x10 [ 82.395377][ T7144] ? find_held_lock+0x2b/0x80 [ 82.395392][ T7144] ? simple_xattr_alloc+0x6c/0xd0 [ 82.395417][ T7144] shmem_initxattrs+0x1b8/0x650 [ 82.395437][ T7144] security_inode_init_security+0x242/0x370 [ 82.395454][ T7144] ? __pfx_shmem_initxattrs+0x10/0x10 [ 82.395471][ T7144] ? __pfx_security_inode_init_security+0x10/0x10 [ 82.395487][ T7144] ? selinux_determine_inode_label+0x1ab/0x400 [ 82.395512][ T7144] shmem_mknod+0x2ce/0x480 [ 82.395530][ T7144] ? __pfx_shmem_mknod+0x10/0x10 [ 82.395546][ T7144] ? inode_permission+0x377/0x630 [ 82.395568][ T7144] shmem_mkdir+0x31/0x80 [ 82.395584][ T7144] vfs_mkdir+0x36d/0x8a0 [ 82.395604][ T7144] filename_mkdirat+0x4c4/0x630 [ 82.395622][ T7144] ? __pfx_filename_mkdirat+0x10/0x10 [ 82.395637][ T7144] ? strncpy_from_user+0x19d/0x2d0 [ 82.395656][ T7144] ? do_getname+0x191/0x390 [ 82.395675][ T7144] __x64_sys_mkdirat+0x89/0xc0 [ 82.395690][ T7144] do_syscall_64+0x123/0x790 [ 82.395705][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.395718][ T7144] RIP: 0033:0x7f9016b9fb19 [ 82.395729][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.395741][ T7144] RSP: 002b:00007f9017a8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 82.395759][ T7144] RAX: ffffffffffffffda RBX: 00007f9016e25fa0 RCX: 00007f9016b9fb19 [ 82.395770][ T7144] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 82.395782][ T7144] RBP: 00007f9016c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 82.395792][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.395804][ T7144] R13: 00007f9016e26038 R14: 00007f9016e25fa0 R15: 00007ffefc793b38 [ 82.395832][ T7144] [ 82.466611][ T7148] input: syz0 as /devices/virtual/input/input19 [ 82.466806][ T7148] FAULT_INJECTION: forcing a failure. [ 82.466806][ T7148] name failslab, interval 1, probability 5, space 0, times 0 [ 82.466824][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.3.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.466856][ T7148] Tainted: [L]=SOFTLOCKUP [ 82.466860][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.466868][ T7148] Call Trace: [ 82.466873][ T7148] [ 82.466887][ T7148] dump_stack_lvl+0x100/0x190 [ 82.466913][ T7148] should_fail_ex.cold+0x5/0xa [ 82.466933][ T7148] should_failslab+0xc2/0x120 [ 82.466948][ T7148] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.466968][ T7148] ? __kernfs_new_node+0xd2/0xa10 [ 82.466983][ T7148] __kernfs_new_node+0xd2/0xa10 [ 82.467000][ T7148] ? __pfx___kernfs_new_node+0x10/0x10 [ 82.467022][ T7148] ? lock_acquire+0x1d1/0x380 [ 82.467048][ T7148] ? kernfs_root+0x23/0x2a0 [ 82.467084][ T7148] ? find_held_lock+0x2b/0x80 [ 82.467107][ T7148] ? kernfs_root+0xee/0x2a0 [ 82.467129][ T7148] ? kernfs_root+0xee/0x2a0 [ 82.467151][ T7148] kernfs_new_node+0x194/0x200 [ 82.467166][ T7148] ? __pfx_kernfs_new_node+0x10/0x10 [ 82.467179][ T7148] ? kernfs_add_one+0x213/0xb40 [ 82.467201][ T7148] __kernfs_create_file+0x53/0x350 [ 82.467226][ T7148] sysfs_add_file_mode_ns+0x207/0x3c0 [ 82.467258][ T7148] sysfs_merge_group+0x194/0x340 [ 82.467284][ T7148] ? __pfx_sysfs_merge_group+0x10/0x10 [ 82.467311][ T7148] ? bus_add_device+0x2e2/0x6c0 [ 82.467332][ T7148] ? __pfx_bus_add_device+0x10/0x10 [ 82.467349][ T7148] ? __pfx_dev_add_physical_location+0x10/0x10 [ 82.467382][ T7148] dpm_sysfs_add+0x237/0x280 [ 82.467411][ T7148] device_add+0x9f4/0x1970 [ 82.467440][ T7148] ? __pfx_device_add+0x10/0x10 [ 82.467470][ T7148] ? kobject_get+0xbb/0x150 [ 82.467499][ T7148] cdev_device_add+0x12b/0x270 [ 82.467523][ T7148] evdev_connect+0x3a8/0x4b0 [ 82.467553][ T7148] input_attach_handler.isra.0+0x177/0x1e0 [ 82.467601][ T7148] input_register_device.cold+0x1ce/0x386 [ 82.467632][ T7148] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 82.467666][ T7148] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 82.467683][ T7148] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 82.467714][ T7148] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 82.467744][ T7148] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.467776][ T7148] ? __fget_files+0x34/0x3d0 [ 82.467811][ T7148] ? selinux_file_ioctl+0x1e0/0x290 [ 82.467839][ T7148] ? selinux_file_ioctl+0x1e7/0x290 [ 82.467868][ T7148] ? __pfx_uinput_ioctl+0x10/0x10 [ 82.467888][ T7148] __x64_sys_ioctl+0x18e/0x210 [ 82.467907][ T7148] do_syscall_64+0x123/0x790 [ 82.467933][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.467954][ T7148] RIP: 0033:0x7fcc9339fb19 [ 82.467972][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.467991][ T7148] RSP: 002b:00007fcc9432e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.468009][ T7148] RAX: ffffffffffffffda RBX: 00007fcc93625fa0 RCX: 00007fcc9339fb19 [ 82.468017][ T7148] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 82.468024][ T7148] RBP: 00007fcc93437b70 R08: 0000000000000000 R09: 0000000000000000 [ 82.468032][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.468039][ T7148] R13: 00007fcc93626038 R14: 00007fcc93625fa0 R15: 00007fffba3b9308 [ 82.468060][ T7148] [ 82.473343][ T7148] input: failed to attach handler evdev to device input19, error: -12 [ 82.702983][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.332144][ T5865] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.482926][ T5865] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 83.483919][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.483939][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.483964][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.485363][ T5865] usb 6-1: config 0 descriptor?? [ 83.513057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.592146][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 83.753434][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.862743][ T7168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7168 comm=syz.3.417 [ 83.899697][ T5865] hid_parser_main: 24 callbacks suppressed [ 83.899721][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.899743][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.899763][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906740][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906767][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906787][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906808][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906829][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906850][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.906870][ T5865] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 83.913440][ T5865] savu 0003:1E7D:2D5A.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 83.983595][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.055786][ T7175] [ 84.056592][ T7175] ====================================================== [ 84.058755][ T7175] WARNING: possible circular locking dependency detected [ 84.060866][ T7175] syzkaller #0 Tainted: G L [ 84.063681][ T7175] ------------------------------------------------------ [ 84.066547][ T7175] syz.0.420/7175 is trying to acquire lock: [ 84.069148][ T7175] ffff888021888600 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 84.073907][ T7175] [ 84.073907][ T7175] but task is already holding lock: [ 84.076980][ T7175] ffffffff916b6c60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 84.080855][ T7175] [ 84.080855][ T7175] which lock already depends on the new lock. [ 84.080855][ T7175] [ 84.085194][ T7175] [ 84.085194][ T7175] the existing dependency chain (in reverse order) is: [ 84.088753][ T7175] [ 84.088753][ T7175] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 84.091339][ T7175] lock_acquire+0x1d1/0x380 [ 84.093010][ T7175] __mutex_lock+0x19f/0x1c10 [ 84.094673][ T7175] usbg_make_tpg+0x10b/0x610 [ 84.096346][ T7175] target_fabric_make_tpg+0xab/0x8c0 [ 84.098430][ T7175] configfs_mkdir+0x525/0xd40 [ 84.100110][ T7175] vfs_mkdir+0x36d/0x8a0 [ 84.101661][ T7175] filename_mkdirat+0x4c4/0x630 [ 84.103408][ T7175] __x64_sys_mkdirat+0x89/0xc0 [ 84.105176][ T7175] do_syscall_64+0x123/0x790 [ 84.106923][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.109391][ T7175] [ 84.109391][ T7175] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 84.112012][ T7175] lock_acquire+0x1d1/0x380 [ 84.113845][ T7175] __mutex_lock+0x19f/0x1c10 [ 84.115515][ T7175] configfs_rmdir+0x5ae/0x950 [ 84.117275][ T7175] vfs_rmdir+0x328/0x8e0 [ 84.118854][ T7175] filename_rmdir+0x31a/0x610 [ 84.120533][ T7175] __x64_sys_rmdir+0x46/0x70 [ 84.122211][ T7175] do_syscall_64+0x123/0x790 [ 84.123897][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.125977][ T7175] [ 84.125977][ T7175] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 84.129138][ T7175] check_prev_add+0xeb/0xe60 [ 84.131124][ T7175] __lock_acquire+0x1528/0x1f40 [ 84.132870][ T7175] lock_acquire+0x1d1/0x380 [ 84.134489][ T7175] down_write+0x86/0x1f0 [ 84.136023][ T7175] configfs_depend_item_unlocked+0xf3/0x6a0 [ 84.138450][ T7175] usbg_make_tpg+0x251/0x610 [ 84.140111][ T7175] target_fabric_make_tpg+0xab/0x8c0 [ 84.142011][ T7175] configfs_mkdir+0x525/0xd40 [ 84.143706][ T7175] vfs_mkdir+0x36d/0x8a0 [ 84.145341][ T7175] filename_mkdirat+0x4c4/0x630 [ 84.147478][ T7175] __x64_sys_mkdirat+0x89/0xc0 [ 84.149582][ T7175] do_syscall_64+0x123/0x790 [ 84.151594][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.154123][ T7175] [ 84.154123][ T7175] other info that might help us debug this: [ 84.154123][ T7175] [ 84.158065][ T7175] Chain exists of: [ 84.158065][ T7175] &sb->s_type->i_mutex_key#25 --> &subsys->su_mutex --> tpg_instances_lock [ 84.158065][ T7175] [ 84.163652][ T7175] Possible unsafe locking scenario: [ 84.163652][ T7175] [ 84.165986][ T7175] CPU0 CPU1 [ 84.167661][ T7175] ---- ---- [ 84.169343][ T7175] lock(tpg_instances_lock); [ 84.170830][ T7175] lock(&subsys->su_mutex); [ 84.173032][ T7175] lock(tpg_instances_lock); [ 84.175300][ T7175] lock(&sb->s_type->i_mutex_key#25); [ 84.177012][ T7175] [ 84.177012][ T7175] *** DEADLOCK *** [ 84.177012][ T7175] [ 84.179492][ T7175] locks held by syz.0.420/7175: 4, last CPU#1: [ 84.181418][ T7175] #0: ffff888024d28478 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 84.184394][ T7175] #1: ffff88805591e9c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 84.187727][ T7175] #2: ffffffff911e6b08 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 84.190730][ T7175] #3: ffffffff916b6c60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 84.193740][ T7175] [ 84.193740][ T7175] stack backtrace: [ 84.195596][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.0.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.199126][ T7175] Tainted: [L]=SOFTLOCKUP [ 84.200483][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.203310][ T7175] Call Trace: [ 84.204292][ T7175] [ 84.205220][ T7175] dump_stack_lvl+0x100/0x190 [ 84.206715][ T7175] print_circular_bug.cold+0x178/0x1be [ 84.208423][ T7175] check_noncircular+0x146/0x160 [ 84.209983][ T7175] check_prev_add+0xeb/0xe60 [ 84.211434][ T7175] __lock_acquire+0x1528/0x1f40 [ 84.212969][ T7175] ? rcu_is_watching+0x13/0xc0 [ 84.214502][ T7175] lock_acquire+0x1d1/0x380 [ 84.215934][ T7175] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 84.217849][ T7175] ? __pfx___might_resched+0x10/0x10 [ 84.219566][ T7175] down_write+0x86/0x1f0 [ 84.220928][ T7175] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 84.222843][ T7175] ? __pfx_down_write+0x10/0x10 [ 84.224422][ T7175] ? kstrtou16+0xde/0x130 [ 84.225792][ T7175] configfs_depend_item_unlocked+0xf3/0x6a0 [ 84.227630][ T7175] usbg_make_tpg+0x251/0x610 [ 84.229149][ T7175] ? __pfx_usbg_make_tpg+0x10/0x10 [ 84.230752][ T7175] ? find_held_lock+0x2b/0x80 [ 84.232527][ T7175] ? __pfx_usbg_make_tpg+0x10/0x10 [ 84.234303][ T7175] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 84.236162][ T7175] target_fabric_make_tpg+0xab/0x8c0 [ 84.237900][ T7175] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 84.239843][ T7175] configfs_mkdir+0x525/0xd40 [ 84.241332][ T7175] ? may_create+0x280/0x430 [ 84.242777][ T7175] ? __pfx_configfs_mkdir+0x10/0x10 [ 84.244537][ T7175] vfs_mkdir+0x36d/0x8a0 [ 84.245892][ T7175] filename_mkdirat+0x4c4/0x630 [ 84.247655][ T7175] ? __pfx_filename_mkdirat+0x10/0x10 [ 84.249371][ T7175] ? strncpy_from_user+0x19d/0x2d0 [ 84.250987][ T7175] ? do_getname+0x191/0x390 [ 84.252421][ T7175] __x64_sys_mkdirat+0x89/0xc0 [ 84.253959][ T7175] do_syscall_64+0x123/0x790 [ 84.255413][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.257291][ T7175] RIP: 0033:0x7f9b9cd9fb19 [ 84.258700][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.264767][ T7175] RSP: 002b:00007f9b9dbd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 84.267406][ T7175] RAX: ffffffffffffffda RBX: 00007f9b9d025fa0 RCX: 00007f9b9cd9fb19 [ 84.269883][ T7175] RDX: 00000000000001ff RSI: 0000200000000540 RDI: ffffffffffffff9c [ 84.272329][ T7175] RBP: 00007f9b9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.274820][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.277291][ T7175] R13: 00007f9b9d026038 R14: 00007f9b9d025fa0 R15: 00007ffedcb325f8 [ 84.279734][ T7175] [ 84.285402][ T5891] usb 6-1: USB disconnect, device number 5 [ 85.822148][ T5890] net_ratelimit: 2 callbacks suppressed [ 85.822163][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.862842][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.022320][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.902306][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.952251][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.982334][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.062687][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.792046][ C1] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 90.792120][ T29] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly [ 91.032451][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.192954][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.062148][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.112536][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.743337][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog