last executing test programs: 2.400090928s ago: executing program 3 (id=1018): setrlimit(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r4, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r4, 0x0) sendto$inet(r4, &(0x7f0000002000)="c17449a0780b00c051dd3df4a9b6e85ba4a44caf3374f0e0671aa256ed853a23b3ec2a4621e85e2791146fc43d494d8c2bff825250a19b9a309ca7cd287e23026b423911184859fbb9610a9ca345701f4e60fe74a55bc67c5d15f545900c91db587cc196c43f667ccb84158da2a718be2744c2d01eeaf7ee62c2e26650b2b6aa163e3d96baffd60ac523855305affb964ba931d7fec59584ddd28db1abed8d69d5749b0742fc194db718494cb04ade2b2476cf47b4596670b3e7f8aea3b1d8b5f58b7524f47c5c5aeae24d470ced9d22ca4af727585de417502ec6ae9f9418cb66a2a75056ee0b7f97", 0xe9, 0x800, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000002100)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000021c0)=0x84) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001002dbd7000ff18fd2500000000", @ANYRES32=0x0, @ANYBLOB="98dd0300ed9e8353140003006272696467655f736c6176655f3000000a000100aaaaaaaaaa1c0000"], 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) 2.329929217s ago: executing program 3 (id=1020): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00000200000000c7"], 0x0, 0x1a}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="719b0000419a04002000128008000100736974001400028008000300ffffffff0800010032a1b79b4a66f0667909d999dde3f00b300792d6e94f60a1bf1c11540fdccfbe35a5915f0547d61111eee8cf508e78fa385507e51ed4fc9b4d9134f410fb50ee733132709a1c9fdb89e6d80b43099b9e5dbfcdfb", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0xffffffffffffffff, &(0x7f0000000040)) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80801, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xfff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=@can={{0x3, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x900, 0x4004880}, 0x20044850) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r12, 0x80189439, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x20000000) r13 = openat$cgroup_int(r11, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0xf) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}, 0x1c) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000100)={0x8, 0x80000, r14}) write$vga_arbiter(r5, &(0x7f0000000080), 0xf) 2.099863581s ago: executing program 3 (id=1022): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001"], 0xc4}}, 0x20050890) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x2d) syz_emit_vhci(0x0, 0x7) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x8000, 0x1000000}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x5}) 2.09962855s ago: executing program 1 (id=1023): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe402}, 0x0) 2.029276246s ago: executing program 1 (id=1024): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x700, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 1.959865025s ago: executing program 1 (id=1026): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) (fail_nth: 7) 1.900154057s ago: executing program 0 (id=1028): r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000009c0)={"09ad090610f6854de8538e1d49cb78977c8d2c948bec5421d01564e2005dbda249cca0324380f908a25455dc0111f4c256ae08cc10c053c912ac317bc529fa60e8daaa85d9802f770ea3f93282b44742b7674a69560a83b74a7e8a919fa49e5f38a139c5c2536f76e61f826d44851b98d52750c33dc32873152255000000000000afc1e420a0768defde1233b83bddd042f2e5a2a1495d1597824443ca0d8aa778199be67ef77b10c82310df2179df00cc5ff60aab9bcbc4356dc0ee561c0a035e4b07ed403eaa0e81159a0499c5ab7aa23926d2eaa3826f185952129efb17ddd75c3112bdd5d345ffffe9e8a791f145e9d95a85288e0f9bf7c580684587d2f1286f55c74e7b19ff7916e2ab72101c7a2268bd4e94939f59a91ad574b4557b361c6246060544d19c33f31e8c43a587bc208f70830d4bdaa41628441c318a5fdaab199ed960efea7a0690dfa2d2c5064efc4b434a977a27e9eebe043fdd10cb718714faf7a71902cde0f624d85fd2b40015f50afa381072cd7f6335b19023324694bc7f754e9a58f608ccfaa2be843ce97eb2c44d85ad64e18d4a5831bf030000000553f28c65c243a2dead1db4b7ab2dfad30c2949834281cc692135f1ae46e756f4d2c27e6d7e99a0ce4780128776defbca1959c3518f2cca8f3b3c9e3e1ceea8c4590169c46189c63955850f2824c83b894ce40f71d32e5a58a8dcf16815617261577a7f15ce7dcdf26bf7a4165193c68c6bbecf05fbe07733bfca1c579be044fe1f442239f086c191e5ffebff20021887025bcca727fe36dc2c953c95ef6b1864283c93b416a8876af6fbf18cdec7f560e2501974e2bfd7c30fb2d643dfd455410132cf45b644c4ab96b3e5384e5e1cb04c9a6db5284e7a31181421d53f36c284e688f49d889035a2646ba23a47c0ccb8e524c328379dcdb434102dde610cefb76e9f2b9f17bbec1002a2b04a36902f1c648b94c62bc31a1254943d3724f0b3156be25199478044f4dc429e79b318bdba723f519f39175a365f24ba2e1ad89b5c4ba8f3317527a5d300e381e6fb336cd21a04aadf8041491ea91f0845421bb31943067c7fc9261cde4ab1566c7d7c65b5c586020ebb7801ec0c3f1bea5872060df8f6d7e584faa3d7236e6939db5cdbf7a1534bad5c95d658a8d4e7c89309cdeb35262d508d4578235bbcfd34f2eb5551abe97b6423a0696fefd33751d812db05b8d7c27753771cb8cdabb8942ad0781d94154bbb899507caa604c59204a46c6c29de39369a55d62e3d66f171c1215e91a19376e97f209d6bfc81dc1985d207e16f0673cf18f49e23ce321e3e1dba29f6b32697bed4eedee299d4239563c7bb79809fc063d38ddfd4f772e8b413e55b009ed00f951a9deb010000805dfdf0023b6c368cd70000000000000000000000000000000000000000000500"}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e8fad507b2c422b6ffa9"], 0x1a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(0x0) r5 = open(&(0x7f0000000180)='./mnt\x00', 0x14927e, 0x134) fallocate(r5, 0x0, 0x0, 0x1001f0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) close(0x3) readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) socket$inet(0x2, 0x1, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.538683386s ago: executing program 3 (id=1033): socket$inet6_sctp(0xa, 0x1, 0x84) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02031b0030001400060063328000000029ff"], 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)="1ba71ddb7a093580a1d6cd3540e17df5072388c59877eaaac4de456ccbcc879107167847aef442bab1b85cd6462f80a4322bc6ae414c611d3718e2f25dd14ef6289c0c9892997a0a", 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000080)={0xa, 0x45f, 0x7, 0x9, 0x7}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.355240288s ago: executing program 1 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x402, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x4, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x9, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3, @ANYBLOB="070001"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x9, 0x6, 0xb, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x24}, 0x94) 1.265872107s ago: executing program 0 (id=1039): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x67f65bca04350ec0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x4, 0x9e, 0x3, 0xcf3, 0x9, 0x8, 0xd4, 0x6, 0x200, 0x8001, 0x10, 0x3, 0x7f, 0x7fff}, 0x10, [0x0, 0x0]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000400)="110000001000ffffff97000000000000000097000000", 0x16) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2900) write$binfmt_misc(r2, &(0x7f0000000040)="84cebe4cc446804e01e613be38c72c1f9fd03ac8d0a1ac8403387563438ba80219a81f9e5182da020d3f467aff8f910d8246940121617d393bddd704b1370611ff82", 0x42) 1.264184643s ago: executing program 0 (id=1040): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00000200000000c7"], 0x0, 0x1a}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="719b0000419a04002000128008000100736974001400028008000300ffffffff0800010032a1b79b4a66f0667909d999dde3f00b300792d6e94f60a1bf1c11540fdccfbe35a5915f0547d61111eee8cf508e78fa385507e51ed4fc9b4d9134f410fb50ee733132709a1c9fdb89e6d80b43099b9e5dbfcdfb", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0xffffffffffffffff, &(0x7f0000000040)) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80801, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xfff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=@can={{0x3, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x900, 0x4004880}, 0x20044850) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r12, 0x80189439, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x20000000) r13 = openat$cgroup_int(r11, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0xf) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}, 0x1c) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000100)={0x8, 0x80000, r14}) write$vga_arbiter(r5, &(0x7f0000000080), 0xf) 1.264085062s ago: executing program 2 (id=1041): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e8fad507b2c422b6ffa9"], 0x1a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e00050015fa0a00010107006c050003000b"], 0x17) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) ioctl(0xffffffffffffffff, 0x400452c8, 0x0) 1.15797624s ago: executing program 3 (id=1042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001"], 0xc4}}, 0x20050890) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x2d) syz_emit_vhci(0x0, 0x7) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x8000, 0x1000000}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x5}) 1.157693337s ago: executing program 1 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000300)='casefold,strict_encoding\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ad) mount$overlay(0x0, &(0x7f0000001140)='./mnt/dir\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './mnt'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/dir\x00', &(0x7f0000000140), 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x1ad2c0, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r8) link(&(0x7f0000000240)='./mnt/dir\x00', &(0x7f0000000280)='./mnt/dir\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 1.051337473s ago: executing program 1 (id=1044): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) 1.041572874s ago: executing program 0 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) (fail_nth: 8) 910.041864ms ago: executing program 0 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='8', 0x1) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000001000, 0x4, 0x1b3f, 0x5, 0x42000000000001a, 0x6, 0x6, 0xb, 0x8}) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xe80b, 0x0, 0x0, 0x0) (async, rerun: 32) unshare(0x40400) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x40, 0xffffff15, 0x8, {{0x26, 0x4, 0x2, 0x2, 0x98, 0x68, 0x0, 0x81, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x1d, 0x0, 0x1, [0xc58, 0xa39, 0x4, 0x5, 0x80000000]}, @generic={0x89, 0xf, "965811c86fb58b098b365bb136"}, @ssrr={0x89, 0xf, 0x6b, [@loopback, @loopback, @multicast2]}, @lsrr={0x83, 0x7, 0x7, [@broadcast]}, @generic={0x94, 0x5, "8fcbef"}, @ssrr={0x89, 0x17, 0x33, [@dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast, @broadcast, @broadcast]}, @generic={0x94, 0x6, "b021a7b9"}, @timestamp={0x44, 0x8, 0x42, 0x0, 0x4, [0x79]}, @ssrr={0x89, 0x1b, 0xcc, [@broadcast, @loopback, @empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xb7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x37a52d65ac84bd41, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x72, &(0x7f00000001c0)=""/114, 0x41000, 0x0, '\x00', r4, @fallback=0x15, r3, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x2, 0x7}, 0x10, r5, r3, 0x2, &(0x7f0000000700)=[r3, r3, r3], &(0x7f0000000740)=[{0x0, 0x4, 0xf, 0x8}, {0x4, 0x2, 0x6, 0xc}], 0x10, 0x101}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 639.082318ms ago: executing program 2 (id=1047): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) (fail_nth: 8) 638.884439ms ago: executing program 0 (id=1048): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x801, 0x0) llistxattr(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @remote, @random="03220f167338", @dev={0xac, 0x14, 0x14, 0x44}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x100000000000000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x2, {0x100, 0x5, 0x7, 0xc}}) 587.633305ms ago: executing program 3 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000100)='grpquota') (async) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x802}, 0xe) (async) listen(r1, 0x1) (async) r2 = inotify_init() close_range(r2, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x800, 0x5a) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffee4, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003027866726d30000000000000000000000024001a8020000a800500080002000000000008005c000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x23, 0xe0, {0xe0, 0x24, "1893b80a2cd717520d86f9041d62d1dd2e4256065ab62964842692331aaeb002e0823b2e5ff7751e3434fb28809ce8e1e8bba3665ada97208303ee37f0122179927ce1c19c2daeecf494c919322d0655266d69aee2eba7add01256469266f01588694e96bd8ea14d68560f9370dfbf2efd3e502f529cd843eb4baea41dc9b739edf184294a8167aadf6d6173f82d60e1ae4245b56fcc3d3177dcf788f7bcd3f9dc6e4aaaf6fcba73ab5aebcba5ec49b50b8cc810146e83ce7c09dc9241f295184ca81b99bfe507e6a592e908a8e2ee0d424fab970721f1f6f33b8360b9ed"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000380)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xf0, 0x2}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf0, 0x18, 0xfc, 0x6, "0ee5895b", "1b362220"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x9, 0x9, 0x1, 0x10, 0x6}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x40, 0x17, 0x4a, "b4cfa1bf520a512f125f59c9998c32146fb25e61103aa8111be1cea4e12147c7150155d6d0f36f441d8b65a6253e3e597fb150fa97060cca664e28b2c8ef4300eea0b81ca48305baa064"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, 'a;'}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="f3a2385a4ac1"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "b4a5"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') 587.453076ms ago: executing program 2 (id=1050): socket$inet6_sctp(0xa, 0x1, 0x84) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02031b0030001400060063328000000029ff"], 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)="1ba71ddb7a093580a1d6cd3540e17df5072388c59877eaaac4de456ccbcc879107167847aef442bab1b85cd6462f80a4322bc6ae414c611d3718e2f25dd14ef6289c0c9892997a0a", 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000080)={0xa, 0x45f, 0x7, 0x9, 0x7}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 96.122176ms ago: executing program 2 (id=1051): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x7, 0x1, &(0x7f0000000040)='9', 0xe, 0x4, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (fail_nth: 5) 254.115µs ago: executing program 2 (id=1052): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x7, 0x1, &(0x7f0000000040)='9', 0xe, 0x4, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5c00}) 0s ago: executing program 2 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@deltclass={0x70, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {0x9, 0xfff2}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xbff}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x39}}, @TCA_RATE={0x6, 0x5, {0x7, 0xd3}}, @TCA_RATE={0x6, 0x5, {0xc, 0x16}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xfc}}]}, 0x70}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r4, 0x914, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) (async) r6 = socket(0x11, 0x3, 0x0) setsockopt(r6, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600054800000c00030008000c0004"]}, 0x58}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r8, 0x1, 0xe4, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001540)="020195ff002d3922ff653d355e953d23d254f000000000006fc373729840f3d5f03002b59b9dc38c686b0e", 0x2b}, {&(0x7f0000000480)="2cf2565b0e508224b706a643e98dc932f5fc6dca2be0dfa8f2a777f680c590257a0641579652b9479dd884f13a9633cbe781bf372d4a00000000000000000000000000fa666a37877dd03703f48904a500", 0x51}], 0x2}, 0x0) kernel console output (not intermixed with test programs): valid interface number: 57 but max is 1 [ 100.468928][ T5811] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 100.468942][ T5811] usb 8-1: config 14 has no interface number 0 [ 100.468955][ T5811] usb 8-1: config 14 has no interface number 1 [ 100.468995][ T5811] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 100.469007][ T5811] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 100.469020][ T5811] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 100.469032][ T5811] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 100.469045][ T5811] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 100.469058][ T5811] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.469076][ T5811] usb 8-1: config 14 interface 57 has no altsetting 0 [ 100.469085][ T5811] usb 8-1: config 14 interface 228 has no altsetting 0 [ 100.471383][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.471401][ T5811] usb 8-1: Product: syz [ 100.471412][ T5811] usb 8-1: Manufacturer: syz [ 100.471423][ T5811] usb 8-1: SerialNumber: syz [ 100.609022][ T7867] bond0: entered promiscuous mode [ 100.609061][ T7867] bond_slave_1: entered promiscuous mode [ 100.612662][ T7867] batadv0: entered promiscuous mode [ 100.614961][ T7867] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.617006][ T7867] bond0: left promiscuous mode [ 100.617018][ T7867] bond_slave_1: left promiscuous mode [ 100.619216][ T7867] batadv0: left promiscuous mode [ 100.697339][ T7871] FAULT_INJECTION: forcing a failure. [ 100.697339][ T7871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.697407][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.0.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.697423][ T7871] Tainted: [L]=SOFTLOCKUP [ 100.697427][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.697434][ T7871] Call Trace: [ 100.697438][ T7871] [ 100.697443][ T7871] dump_stack_lvl+0x100/0x190 [ 100.697463][ T7871] should_fail_ex.cold+0x5/0xa [ 100.697479][ T7871] _copy_from_iter+0x1f4/0x1690 [ 100.697494][ T7871] ? __asan_memset+0x23/0x50 [ 100.697507][ T7871] ? __pfx__copy_from_iter+0x10/0x10 [ 100.697534][ T7871] ? __pfx___alloc_skb+0x10/0x10 [ 100.697549][ T7871] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 100.697563][ T7871] ? sock_has_perm+0x25a/0x2f0 [ 100.697575][ T7871] ? __pfx_sock_has_perm+0x10/0x10 [ 100.697590][ T7871] netlink_sendmsg+0x808/0xda0 [ 100.697608][ T7871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.697624][ T7871] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.697640][ T7871] ____sys_sendmsg+0xa4d/0xbe0 [ 100.697650][ T7871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.697667][ T7871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.697681][ T7871] ? lock_acquire+0x1d1/0x380 [ 100.697694][ T7871] ? get_pid_task+0x2a/0x250 [ 100.697710][ T7871] ___sys_sendmsg+0x190/0x1e0 [ 100.697723][ T7871] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.697736][ T7871] ? get_pid_task+0x106/0x250 [ 100.697756][ T7871] ? find_held_lock+0x2b/0x80 [ 100.697780][ T7871] __sys_sendmsg+0x160/0x210 [ 100.697797][ T7871] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.697820][ T7871] do_syscall_64+0x123/0x790 [ 100.697833][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.697845][ T7871] RIP: 0033:0x7f398279e199 [ 100.697854][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.697865][ T7871] RSP: 002b:00007f3983609028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.697876][ T7871] RAX: ffffffffffffffda RBX: 00007f3982a25fa0 RCX: 00007f398279e199 [ 100.697883][ T7871] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 100.697889][ T7871] RBP: 00007f3983609090 R08: 0000000000000000 R09: 0000000000000000 [ 100.697895][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.697902][ T7871] R13: 00007f3982a26038 R14: 00007f3982a25fa0 R15: 00007ffd4f626058 [ 100.697915][ T7871] [ 100.882322][ T5811] legousbtower 8-1:14.57: interrupt endpoints not found [ 101.282253][ T5811] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 101.285480][ T5811] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 101.512160][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.516268][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 101.534714][ T7899] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 101.539680][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 101.744908][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 101.793990][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 101.794060][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.803910][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.895246][ T10] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 101.896201][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.896238][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 101.896261][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.896295][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.309632][ T10] cxacru_cm: 15 callbacks suppressed [ 102.309654][ T10] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 102.309672][ T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 102.309683][ T10] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 102.316252][ T10] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 102.321303][ T10] usb 6-1: USB disconnect, device number 8 [ 102.485775][ T7929] netlink: 'syz.0.729': attribute type 21 has an invalid length. [ 102.485789][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 102.491103][ T7929] netlink: 'syz.0.729': attribute type 21 has an invalid length. [ 102.491114][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 102.514720][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.514748][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.514765][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.514782][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.552193][ T7935] FAULT_INJECTION: forcing a failure. [ 102.552193][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.552225][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.0.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.552251][ T7935] Tainted: [L]=SOFTLOCKUP [ 102.552258][ T7935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.552268][ T7935] Call Trace: [ 102.552274][ T7935] [ 102.552282][ T7935] dump_stack_lvl+0x100/0x190 [ 102.552325][ T7935] should_fail_ex.cold+0x5/0xa [ 102.552352][ T7935] _copy_to_user+0x32/0xd0 [ 102.552383][ T7935] simple_read_from_buffer+0xcb/0x170 [ 102.552419][ T7935] proc_fail_nth_read+0x1af/0x230 [ 102.552445][ T7935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.552473][ T7935] ? rw_verify_area+0xce/0x6d0 [ 102.552492][ T7935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.552517][ T7935] vfs_read+0x1e4/0xb40 [ 102.552537][ T7935] ? lock_acquire+0x1d1/0x380 [ 102.552558][ T7935] ? __fget_files+0x34/0x3d0 [ 102.552582][ T7935] ? __pfx_vfs_read+0x10/0x10 [ 102.552602][ T7935] ? find_held_lock+0x2b/0x80 [ 102.552628][ T7935] ? __fget_files+0x215/0x3d0 [ 102.552657][ T7935] ? __fget_files+0x21f/0x3d0 [ 102.552688][ T7935] ksys_read+0x12a/0x250 [ 102.552708][ T7935] ? __pfx_ksys_read+0x10/0x10 [ 102.552736][ T7935] do_syscall_64+0x123/0x790 [ 102.552767][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.552786][ T7935] RIP: 0033:0x7f398275e9ce [ 102.552801][ T7935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.552818][ T7935] RSP: 002b:00007f3983608fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.552836][ T7935] RAX: ffffffffffffffda RBX: 00007f39836096c0 RCX: 00007f398275e9ce [ 102.552849][ T7935] RDX: 000000000000000f RSI: 00007f39836090a0 RDI: 0000000000000007 [ 102.552859][ T7935] RBP: 00007f3983609090 R08: 0000000000000000 R09: 0000000000000000 [ 102.552870][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.552881][ T7935] R13: 00007f3982a26038 R14: 00007f3982a25fa0 R15: 00007ffd4f626058 [ 102.552905][ T7935] [ 102.587346][ T7937] netlink: 'syz.0.732': attribute type 5 has an invalid length. [ 102.620941][ T7939] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 102.745858][ T5811] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 102.838806][ T7952] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 102.838806][ T7952] Please contact the netfilter-devel mailing list or update your nftables rules. [ 102.870051][ T43] audit: type=1400 audit(1791318442.332:613): avc: denied { create } for pid=7954 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.870619][ T43] audit: type=1400 audit(1791318442.332:614): avc: denied { bind } for pid=7954 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.870905][ T43] audit: type=1400 audit(1791318442.332:615): avc: denied { listen } for pid=7954 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.872262][ T43] audit: type=1400 audit(1791318442.332:616): avc: denied { write } for pid=7954 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.872521][ T43] audit: type=1400 audit(1791318442.332:617): avc: denied { accept } for pid=7954 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.924146][ T43] audit: type=1400 audit(1791318442.382:618): avc: denied { module_request } for pid=7954 comm="syz.1.739" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 103.073342][ T76] usb 8-1: USB disconnect, device number 6 [ 103.082888][ T76] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 103.096851][ T43] audit: type=1400 audit(1791318442.562:619): avc: denied { create } for pid=7961 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 103.097054][ T43] audit: type=1400 audit(1791318442.562:620): avc: denied { write } for pid=7961 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 103.771116][ T7976] syzkaller0: entered promiscuous mode [ 103.771131][ T7976] syzkaller0: entered allmulticast mode [ 103.961163][ T43] audit: type=1400 audit(1791318443.422:621): avc: denied { perfmon } for pid=7985 comm="syz.3.748" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.995698][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 103.995715][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 104.041242][ T7987] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 104.721752][ T8015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8015 comm=syz.0.759 [ 104.872271][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 105.075325][ T8040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 105.084535][ T8040] bond2: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 105.094440][ T8042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.506334][ T8065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.927320][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 107.721320][ T8015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.780283][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 107.780294][ T43] audit: type=1400 audit(1791318447.242:631): avc: denied { write } for pid=8089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.782209][ T64] IPVS: starting estimator thread 0... [ 107.815827][ T8103] FAULT_INJECTION: forcing a failure. [ 107.815827][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 107.815848][ T8103] CPU: 2 UID: 0 PID: 8103 Comm: syz.0.785 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.815863][ T8103] Tainted: [L]=SOFTLOCKUP [ 107.815868][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.815876][ T8103] Call Trace: [ 107.815881][ T8103] [ 107.815885][ T8103] dump_stack_lvl+0x100/0x190 [ 107.815913][ T8103] should_fail_ex.cold+0x5/0xa [ 107.815929][ T8103] ? __pfx_update_scan_sync+0x10/0x10 [ 107.815946][ T8103] should_failslab+0xc2/0x120 [ 107.815964][ T8103] ? __pfx_update_scan_sync+0x10/0x10 [ 107.815977][ T8103] __kmalloc_cache_noprof+0x91/0x6d0 [ 107.815989][ T8103] ? hci_cmd_sync_submit+0xbc/0x330 [ 107.816003][ T8103] ? __pfx_update_scan_sync+0x10/0x10 [ 107.816016][ T8103] hci_cmd_sync_submit+0xbc/0x330 [ 107.816030][ T8103] hci_update_scan+0x6c/0x90 [ 107.816043][ T8103] remove_device+0x465/0xbf0 [ 107.816053][ T8103] ? __hci_dev_get+0x47/0x2b0 [ 107.816070][ T8103] ? find_held_lock+0x2b/0x80 [ 107.816087][ T8103] ? __pfx_remove_device+0x10/0x10 [ 107.816100][ T8103] ? do_raw_read_unlock+0x3f/0x70 [ 107.816115][ T8103] ? _raw_read_unlock+0x28/0x50 [ 107.816129][ T8103] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 107.816141][ T8103] hci_sock_sendmsg+0x1574/0x26a0 [ 107.816161][ T8103] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 107.816179][ T8103] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.816196][ T8103] sock_write_iter+0x53a/0x5b0 [ 107.816208][ T8103] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 107.816225][ T8103] ? __pfx_sock_write_iter+0x10/0x10 [ 107.816241][ T8103] ? bpf_lsm_file_permission+0x9/0x10 [ 107.816257][ T8103] ? security_file_permission+0x76/0x210 [ 107.816273][ T8103] ? rw_verify_area+0xce/0x6d0 [ 107.816286][ T8103] vfs_write+0x6af/0x1050 [ 107.816299][ T8103] ? __pfx_sock_write_iter+0x10/0x10 [ 107.816312][ T8103] ? __pfx_vfs_write+0x10/0x10 [ 107.816324][ T8103] ? find_held_lock+0x2b/0x80 [ 107.816349][ T8103] ksys_write+0x1f8/0x250 [ 107.816361][ T8103] ? __pfx_ksys_write+0x10/0x10 [ 107.816383][ T8103] do_syscall_64+0x123/0x790 [ 107.816396][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.816408][ T8103] RIP: 0033:0x7f398279e199 [ 107.816418][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.816428][ T8103] RSP: 002b:00007f3983609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.816439][ T8103] RAX: ffffffffffffffda RBX: 00007f3982a25fa0 RCX: 00007f398279e199 [ 107.816446][ T8103] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 107.816453][ T8103] RBP: 00007f3983609090 R08: 0000000000000000 R09: 0000000000000000 [ 107.816459][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.816466][ T8103] R13: 00007f3982a26038 R14: 00007f3982a25fa0 R15: 00007ffd4f626058 [ 107.816480][ T8103] [ 107.821378][ T43] audit: type=1400 audit(1791318447.282:632): avc: denied { write } for pid=8101 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.874992][ T8100] IPVS: using max 43 ests per chain, 103200 per kthread [ 107.902632][ T43] audit: type=1400 audit(1791318447.362:633): avc: denied { write } for pid=8111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.922773][ T8118] capability: warning: `syz.0.787' uses 32-bit capabilities (legacy support in use) [ 107.957127][ T43] audit: type=1400 audit(1791318447.422:634): avc: denied { write } for pid=8120 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.978437][ T43] audit: type=1400 audit(1791318447.442:635): avc: denied { bind } for pid=8117 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.981521][ T43] audit: type=1400 audit(1791318447.442:636): avc: denied { connect } for pid=8117 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.017320][ T8125] netlink: 'syz.2.789': attribute type 2 has an invalid length. [ 108.062811][ T43] audit: type=1400 audit(1791318447.522:637): avc: denied { write } for pid=8129 comm="syz.0.790" name="/" dev="9p" ino=71827849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.420921][ T8145] netlink: 128 bytes leftover after parsing attributes in process `syz.0.794'. [ 108.420963][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 108.483324][ T8148] 9p: Could not find request transport: [ 108.762645][ T5733] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 108.944795][ T43] audit: type=1400 audit(1791318448.402:638): avc: denied { execute } for pid=8177 comm="syz.1.806" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.044208][ T8180] 0: reclassify loop, rule prio 0, protocol 03 [ 109.056524][ T8182] FAULT_INJECTION: forcing a failure. [ 109.056524][ T8182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.056545][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.2.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.056559][ T8182] Tainted: [L]=SOFTLOCKUP [ 109.056564][ T8182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.056570][ T8182] Call Trace: [ 109.056573][ T8182] [ 109.056578][ T8182] dump_stack_lvl+0x100/0x190 [ 109.056607][ T8182] should_fail_ex.cold+0x5/0xa [ 109.056623][ T8182] _copy_to_user+0x32/0xd0 [ 109.056642][ T8182] simple_read_from_buffer+0xcb/0x170 [ 109.056660][ T8182] proc_fail_nth_read+0x1af/0x230 [ 109.056676][ T8182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.056693][ T8182] ? rw_verify_area+0xce/0x6d0 [ 109.056704][ T8182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.056719][ T8182] vfs_read+0x1e4/0xb40 [ 109.056732][ T8182] ? lock_acquire+0x1d1/0x380 [ 109.056744][ T8182] ? __fget_files+0x34/0x3d0 [ 109.056759][ T8182] ? __pfx_vfs_read+0x10/0x10 [ 109.056771][ T8182] ? find_held_lock+0x2b/0x80 [ 109.056787][ T8182] ? __fget_files+0x215/0x3d0 [ 109.056804][ T8182] ? __fget_files+0x21f/0x3d0 [ 109.056822][ T8182] ksys_read+0x12a/0x250 [ 109.056835][ T8182] ? __pfx_ksys_read+0x10/0x10 [ 109.056851][ T8182] do_syscall_64+0x123/0x790 [ 109.056868][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.056880][ T8182] RIP: 0033:0x7f4a77f5e9ce [ 109.056889][ T8182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.056900][ T8182] RSP: 002b:00007f4a78e31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.056911][ T8182] RAX: ffffffffffffffda RBX: 00007f4a78e326c0 RCX: 00007f4a77f5e9ce [ 109.056918][ T8182] RDX: 000000000000000f RSI: 00007f4a78e320a0 RDI: 0000000000000003 [ 109.056925][ T8182] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 109.056931][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.056937][ T8182] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 109.056951][ T8182] [ 109.069062][ T43] audit: type=1400 audit(1791318448.532:639): avc: denied { create } for pid=8183 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.069555][ T43] audit: type=1400 audit(1791318448.532:640): avc: denied { bind } for pid=8183 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.070376][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 109.070394][ T8184] netlink: 'syz.0.809': attribute type 20 has an invalid length. [ 109.070401][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 109.082799][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 109.082819][ T8184] netlink: 'syz.0.809': attribute type 20 has an invalid length. [ 109.082826][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 109.125008][ T8190] FAULT_INJECTION: forcing a failure. [ 109.125008][ T8190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.125028][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.1.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.125044][ T8190] Tainted: [L]=SOFTLOCKUP [ 109.125048][ T8190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.125054][ T8190] Call Trace: [ 109.125058][ T8190] [ 109.125063][ T8190] dump_stack_lvl+0x100/0x190 [ 109.125082][ T8190] should_fail_ex.cold+0x5/0xa [ 109.125099][ T8190] _copy_to_user+0x32/0xd0 [ 109.125114][ T8190] simple_read_from_buffer+0xcb/0x170 [ 109.125131][ T8190] proc_fail_nth_read+0x1af/0x230 [ 109.125148][ T8190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.125170][ T8190] ? rw_verify_area+0xce/0x6d0 [ 109.125186][ T8190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.125208][ T8190] vfs_read+0x1e4/0xb40 [ 109.125226][ T8190] ? lock_acquire+0x1d1/0x380 [ 109.125244][ T8190] ? __fget_files+0x34/0x3d0 [ 109.125265][ T8190] ? __pfx_vfs_read+0x10/0x10 [ 109.125280][ T8190] ? find_held_lock+0x2b/0x80 [ 109.125296][ T8190] ? __fget_files+0x215/0x3d0 [ 109.125314][ T8190] ? __fget_files+0x21f/0x3d0 [ 109.125332][ T8190] ksys_read+0x12a/0x250 [ 109.125345][ T8190] ? __pfx_ksys_read+0x10/0x10 [ 109.125361][ T8190] do_syscall_64+0x123/0x790 [ 109.125375][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.125387][ T8190] RIP: 0033:0x7f38d655e9ce [ 109.125397][ T8190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.125407][ T8190] RSP: 002b:00007f38d7505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.125418][ T8190] RAX: ffffffffffffffda RBX: 00007f38d75066c0 RCX: 00007f38d655e9ce [ 109.125425][ T8190] RDX: 000000000000000f RSI: 00007f38d75060a0 RDI: 0000000000000004 [ 109.125431][ T8190] RBP: 00007f38d7506090 R08: 0000000000000000 R09: 0000000000000000 [ 109.125437][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.125444][ T8190] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 109.125457][ T8190] [ 109.146247][ T8186] xt_MASQUERADE: bad MAP_IPS. [ 109.271643][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 109.311722][ T8210] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 109.311753][ T8210] ipvlan0: entered allmulticast mode [ 109.311763][ T8210] veth0_vlan: entered allmulticast mode [ 109.317008][ T8210] team0: Device ipvlan0 failed to register rx_handler [ 109.415915][ T5733] Bluetooth: hci3: unexpected event for opcode 0x080c [ 109.512297][ T8234] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2558430984 (81869791488 ns) > initial count (19335048768 ns). Using initial count to start timer. [ 109.584069][ T8237] kvm [8233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 109.584970][ T8237] kvm [8233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 109.685064][ T8243] netlink: 'syz.2.826': attribute type 30 has an invalid length. [ 109.981157][ T8258] random: crng reseeded on system resumption [ 110.677785][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 111.465058][ T8329] FAULT_INJECTION: forcing a failure. [ 111.465058][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 111.465089][ T8329] CPU: 0 UID: 0 PID: 8329 Comm: syz.3.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.465112][ T8329] Tainted: [L]=SOFTLOCKUP [ 111.465118][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.465128][ T8329] Call Trace: [ 111.465135][ T8329] [ 111.465142][ T8329] dump_stack_lvl+0x100/0x190 [ 111.465183][ T8329] should_fail_ex.cold+0x5/0xa [ 111.465207][ T8329] should_failslab+0xc2/0x120 [ 111.465236][ T8329] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 111.465260][ T8329] ? proc_alloc_inode+0x25/0x200 [ 111.465279][ T8329] ? __pfx_proc_alloc_inode+0x10/0x10 [ 111.465297][ T8329] proc_alloc_inode+0x25/0x200 [ 111.465312][ T8329] alloc_inode+0x68/0x250 [ 111.465330][ T8329] new_inode+0x22/0x1c0 [ 111.465351][ T8329] proc_pid_make_inode+0x22/0x160 [ 111.465378][ T8329] proc_pident_instantiate+0x85/0x310 [ 111.465406][ T8329] proc_pident_lookup+0x1e3/0x270 [ 111.465458][ T8329] ? __pfx_down_read+0x10/0x10 [ 111.465489][ T8329] __lookup_slow+0x155/0x320 [ 111.465510][ T8329] lookup_slow+0x50/0x70 [ 111.465529][ T8329] link_path_walk+0x1377/0x1cc0 [ 111.465559][ T8329] path_openat+0x1ac/0x2440 [ 111.465584][ T8329] ? __pfx_path_openat+0x10/0x10 [ 111.465615][ T8329] do_file_open+0x20e/0x430 [ 111.465641][ T8329] ? __pfx_do_file_open+0x10/0x10 [ 111.465674][ T8329] ? __pfx_kfree_link+0x10/0x10 [ 111.465700][ T8329] ? _raw_spin_unlock+0x28/0x50 [ 111.465715][ T8329] ? alloc_fd+0x471/0x7a0 [ 111.465746][ T8329] do_sys_openat2+0x10f/0x1e0 [ 111.465773][ T8329] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.465799][ T8329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.465818][ T8329] ? __fget_files+0x21f/0x3d0 [ 111.465845][ T8329] __x64_sys_openat+0x12d/0x210 [ 111.465872][ T8329] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.465896][ T8329] ? ksys_write+0x1ac/0x250 [ 111.465929][ T8329] do_syscall_64+0x123/0x790 [ 111.465950][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.465968][ T8329] RIP: 0033:0x7f6122d5e9ce [ 111.465984][ T8329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.466000][ T8329] RSP: 002b:00007f6120ff5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.466018][ T8329] RAX: ffffffffffffffda RBX: 00007f6120ff66c0 RCX: 00007f6122d5e9ce [ 111.466028][ T8329] RDX: 0000000000000000 RSI: 00007f6122e3500e RDI: ffffffffffffff9c [ 111.466038][ T8329] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.466048][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.466058][ T8329] R13: 00007f6123026038 R14: 00007f6123025fa0 R15: 00007ffedf996d78 [ 111.466083][ T8329] [ 111.593376][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 111.914738][ T76] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.940112][ T8385] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.945206][ T8385] bond3: (slave lo): Enslaving as an active interface with an up link [ 111.947879][ T8385] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 112.054430][ T8411] FAULT_INJECTION: forcing a failure. [ 112.054430][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 112.054453][ T8411] CPU: 2 UID: 0 PID: 8411 Comm: syz.1.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.054469][ T8411] Tainted: [L]=SOFTLOCKUP [ 112.054473][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.054480][ T8411] Call Trace: [ 112.054484][ T8411] [ 112.054489][ T8411] dump_stack_lvl+0x100/0x190 [ 112.054518][ T8411] should_fail_ex.cold+0x5/0xa [ 112.054535][ T8411] should_failslab+0xc2/0x120 [ 112.054554][ T8411] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.054566][ T8411] ? __xa_alloc_cyclic+0x1f2/0x330 [ 112.054597][ T8411] ? __xdp_reg_mem_model+0x134/0x6a0 [ 112.054618][ T8411] __xdp_reg_mem_model+0x134/0x6a0 [ 112.054632][ T8411] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 112.054644][ T8411] ? page_pool_list+0x223/0x2a0 [ 112.054663][ T8411] xdp_reg_mem_model+0x22/0x70 [ 112.054676][ T8411] bpf_test_run_xdp_live+0x1cb/0x760 [ 112.054693][ T8411] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 112.054712][ T8411] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 112.054726][ T8411] ? find_held_lock+0x2b/0x80 [ 112.054742][ T8411] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 112.054768][ T8411] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 112.054788][ T8411] ? 0xffffffffa0406140 [ 112.054802][ T8411] ? 0xffffffffa0406140 [ 112.054816][ T8411] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 112.054838][ T8411] bpf_prog_test_run_xdp+0xd86/0x1670 [ 112.054869][ T8411] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.054892][ T8411] ? fput+0x7c/0x100 [ 112.054908][ T8411] ? __bpf_prog_get+0x97/0x290 [ 112.054925][ T8411] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.054945][ T8411] __sys_bpf+0x2265/0x4a30 [ 112.054956][ T8411] ? plist_check_list+0x1b8/0x280 [ 112.054982][ T8411] ? plist_check_list+0x190/0x280 [ 112.055004][ T8411] ? __pfx___sys_bpf+0x10/0x10 [ 112.055020][ T8411] ? find_held_lock+0x2b/0x80 [ 112.055043][ T8411] ? futex_wake+0x4ea/0x5e0 [ 112.055063][ T8411] ? futex_private_hash_put.part.0+0xdc/0x180 [ 112.055086][ T8411] ? futex_private_hash_put+0x24/0x30 [ 112.055112][ T8411] ? __pfx_futex_wake+0x10/0x10 [ 112.055132][ T8411] ? find_held_lock+0x2b/0x80 [ 112.055173][ T8411] ? __x64_sys_futex+0x34f/0x4d0 [ 112.055194][ T8411] ? __x64_sys_futex+0x358/0x4d0 [ 112.055220][ T8411] ? xfd_validate_state+0x129/0x190 [ 112.055242][ T8411] ? __x64_sys_bpf+0xce/0x140 [ 112.055258][ T8411] __x64_sys_bpf+0xce/0x140 [ 112.055306][ T8411] ? do_syscall_64+0xae/0x790 [ 112.055327][ T8411] do_syscall_64+0x123/0x790 [ 112.055349][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.055365][ T8411] RIP: 0033:0x7f38d659e199 [ 112.055379][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.055394][ T8411] RSP: 002b:00007f38d7506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.055411][ T8411] RAX: ffffffffffffffda RBX: 00007f38d6825fa0 RCX: 00007f38d659e199 [ 112.055422][ T8411] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 112.055433][ T8411] RBP: 00007f38d66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 112.055443][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.055452][ T8411] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 112.055475][ T8411] [ 112.125205][ T76] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.126184][ T76] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.126208][ T76] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 112.126227][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.128733][ T76] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.128754][ T76] usb 5-1: Product: syz [ 112.128766][ T76] usb 5-1: Manufacturer: syz [ 112.128779][ T76] usb 5-1: SerialNumber: syz [ 112.130606][ T76] usb 5-1: config 0 descriptor?? [ 112.131170][ T8377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.141052][ T76] usb 5-1: selecting invalid altsetting 0 [ 112.338556][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.338933][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.339204][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.339505][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.339756][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.340023][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.340266][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.340549][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.340793][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.341035][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.341301][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.341558][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.341801][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.342078][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.342319][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.342574][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.342834][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.343075][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.343377][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.343600][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.343799][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.344010][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.344210][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.344408][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.344886][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.345089][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.345290][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.345502][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.345718][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.345956][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.346186][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.346416][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.346662][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.346892][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.347121][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.347386][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.347626][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.347857][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.348097][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.348327][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.348563][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.348801][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.349031][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.349268][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.349502][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.349732][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.349970][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.350199][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.350470][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.350711][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.350942][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.351170][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.351429][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.351667][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.351912][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.352150][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.352387][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.352637][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.352875][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.353111][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.353369][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.353611][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.353849][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.354096][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.354335][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.354688][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.354929][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.355165][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.355434][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.355678][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.355915][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.356229][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.356504][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.356740][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.356986][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.357222][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.357471][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.357708][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.357943][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.358187][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.358425][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.358668][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.358927][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.359164][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.359428][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.359685][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.359923][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.360168][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.360404][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.360644][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.360888][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.361122][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.361357][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.361606][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.361841][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.362079][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.362324][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.362565][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.362811][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.363049][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.363312][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.363570][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.363810][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.364048][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.364294][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.364535][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.364857][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.365104][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.365341][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.365591][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.365828][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.366065][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.366310][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.366554][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.366789][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.367034][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.367295][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.367540][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.367785][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.368021][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.368268][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.368508][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.368745][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.368990][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.369226][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.369468][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.369712][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.369948][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.370183][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.370428][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.370670][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.370914][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.371151][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.371413][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.371664][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.371907][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.372143][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.372387][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.372627][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.372864][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.373108][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.373346][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.373595][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.373833][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.374067][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.374313][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.374554][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.374879][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.375526][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.375767][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.376004][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.376250][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.376494][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.376730][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.376974][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.377211][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.377463][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.377700][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.377936][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.378180][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.378417][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.378658][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.378916][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.379155][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.379420][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.379676][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.379913][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.380158][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.380395][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.380636][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.380881][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.381117][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.381352][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.381602][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.381840][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.382082][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.382327][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.382569][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.382814][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.383050][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.383314][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.383567][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.383805][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.384041][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.384285][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.384527][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.386657][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.386912][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.387150][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.387425][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.387669][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.387907][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.388190][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.389267][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.389601][ T8377] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 112.751095][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 112.751116][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 112.799951][ T8428] xt_MASQUERADE: bad rangesize 10242 [ 112.988771][ T8415] ceph: No mds server is up or the cluster is laggy [ 113.896980][ T8453] vxcan0: tx address claim with dlc 0 [ 114.053124][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 114.053142][ T43] audit: type=1400 audit(1791318453.512:655): avc: denied { write } for pid=8458 comm="syz.2.886" name="/" dev="9p" ino=71827849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.081637][ T8375] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 114.665925][ T43] audit: type=1400 audit(1791318454.132:656): avc: denied { append } for pid=8471 comm="syz.3.892" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.722202][ T8476] netlink: 12 bytes leftover after parsing attributes in process ` [ 114.722202][ T8476]  !'. [ 114.757730][ T43] audit: type=1400 audit(1791318454.222:657): avc: denied { execmod } for pid=8475 comm=C007B0FDA31C0A171BFA8120DD21D9 path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.930993][ T8491] FAULT_INJECTION: forcing a failure. [ 114.930993][ T8491] name failslab, interval 1, probability 0, space 0, times 0 [ 114.931024][ T8491] CPU: 0 UID: 0 PID: 8491 Comm: syz.2.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.931048][ T8491] Tainted: [L]=SOFTLOCKUP [ 114.931054][ T8491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.931065][ T8491] Call Trace: [ 114.931071][ T8491] [ 114.931078][ T8491] dump_stack_lvl+0x100/0x190 [ 114.931120][ T8491] should_fail_ex.cold+0x5/0xa [ 114.931145][ T8491] should_failslab+0xc2/0x120 [ 114.931173][ T8491] __kmalloc_noprof+0xfc/0x840 [ 114.931193][ T8491] ? tomoyo_encode2+0xfb/0x3c0 [ 114.931222][ T8491] tomoyo_encode2+0xfb/0x3c0 [ 114.931250][ T8491] tomoyo_encode+0x29/0x50 [ 114.931304][ T8491] tomoyo_mount_acl+0x14c/0x8b0 [ 114.931326][ T8491] ? is_bpf_text_address+0x8a/0x1a0 [ 114.931352][ T8491] ? is_bpf_text_address+0x8a/0x1a0 [ 114.931379][ T8491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.931401][ T8491] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 114.931438][ T8491] ? kernel_text_address+0x8d/0x100 [ 114.931469][ T8491] ? unwind_get_return_address+0x59/0xa0 [ 114.931495][ T8491] ? arch_stack_walk+0xa6/0xf0 [ 114.931522][ T8491] ? __lock_acquire+0x5c0/0x1f40 [ 114.931556][ T8491] ? tomoyo_mount_permission+0x1f6/0x460 [ 114.931583][ T8491] ? tomoyo_domain+0xb2/0x150 [ 114.931600][ T8491] ? tomoyo_profile+0x47/0x60 [ 114.931619][ T8491] tomoyo_mount_permission+0x214/0x460 [ 114.931641][ T8491] ? tomoyo_mount_permission+0x1f6/0x460 [ 114.931667][ T8491] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 114.931704][ T8491] security_sb_mount+0xdd/0x270 [ 114.931724][ T8491] path_mount+0x158/0x24c0 [ 114.931744][ T8491] ? __pfx_path_mount+0x10/0x10 [ 114.931760][ T8491] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.931787][ T8491] ? putname+0xb1/0x110 [ 114.931808][ T8491] ? kmem_cache_free+0x127/0x6c0 [ 114.931833][ T8491] ? __x64_sys_mount+0x293/0x310 [ 114.931847][ T8491] __x64_sys_mount+0x293/0x310 [ 114.931865][ T8491] ? __pfx___x64_sys_mount+0x10/0x10 [ 114.931889][ T8491] do_syscall_64+0x123/0x790 [ 114.931911][ T8491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.931929][ T8491] RIP: 0033:0x7f4a77f9e199 [ 114.931945][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.931962][ T8491] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.931980][ T8491] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 114.931992][ T8491] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 114.932003][ T8491] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 114.932014][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.932025][ T8491] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 114.932050][ T8491] [ 115.077026][ T43] audit: type=1400 audit(1791318454.542:658): avc: denied { map } for pid=8499 comm="syz.3.903" path="/261" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.094973][ T76] usb 5-1: USB disconnect, device number 10 [ 115.125978][ T8507] FAULT_INJECTION: forcing a failure. [ 115.125978][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 115.125998][ T8507] CPU: 2 UID: 0 PID: 8507 Comm: syz.2.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.126014][ T8507] Tainted: [L]=SOFTLOCKUP [ 115.126018][ T8507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.126024][ T8507] Call Trace: [ 115.126028][ T8507] [ 115.126039][ T8507] dump_stack_lvl+0x100/0x190 [ 115.126077][ T8507] should_fail_ex.cold+0x5/0xa [ 115.126094][ T8507] should_failslab+0xc2/0x120 [ 115.126110][ T8507] __kmalloc_cache_noprof+0x91/0x6d0 [ 115.126122][ T8507] ? do_proc_control+0x334/0xe50 [ 115.126144][ T8507] do_proc_control+0x334/0xe50 [ 115.126159][ T8507] ? psi_cgroup_restart+0x390/0x6f0 [ 115.126170][ T8507] ? __pfx_do_proc_control+0x10/0x10 [ 115.126188][ T8507] usbdev_ioctl+0x1480/0x3a90 [ 115.126204][ T8507] ? __pfx_usbdev_ioctl+0x10/0x10 [ 115.126221][ T8507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.126238][ T8507] ? do_vfs_ioctl+0x226/0x13e0 [ 115.126253][ T8507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.126271][ T8507] ? __fget_files+0x34/0x3d0 [ 115.126292][ T8507] ? selinux_file_ioctl+0x13b/0x290 [ 115.126306][ T8507] ? selinux_file_ioctl+0xb6/0x290 [ 115.126321][ T8507] ? __pfx_usbdev_ioctl+0x10/0x10 [ 115.126336][ T8507] __x64_sys_ioctl+0x18e/0x210 [ 115.126349][ T8507] do_syscall_64+0x123/0x790 [ 115.126364][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.126375][ T8507] RIP: 0033:0x7f4a77f9e199 [ 115.126385][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.126395][ T8507] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.126420][ T8507] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 115.126427][ T8507] RDX: 0000200000000080 RSI: 00000000c0105500 RDI: 0000000000000003 [ 115.126433][ T8507] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 115.126440][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.126446][ T8507] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 115.126460][ T8507] [ 115.148873][ T43] audit: type=1400 audit(1791318454.612:659): avc: denied { write } for pid=8503 comm="syz.1.905" name="/" dev="9p" ino=71827849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.160991][ T43] audit: type=1400 audit(1791318454.622:660): avc: denied { write } for pid=8503 comm="syz.1.905" name="/" dev="9p" ino=71827849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.161024][ T43] audit: type=1400 audit(1791318454.622:661): avc: denied { link } for pid=8503 comm="syz.1.905" name="file1" dev="9p" ino=71827881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.192612][ T8517] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 115.339679][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'. [ 115.340789][ T8519] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 115.387169][ T43] audit: type=1400 audit(1791318454.852:662): avc: denied { write } for pid=8524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.444873][ T43] audit: type=1400 audit(1791318454.902:663): avc: denied { write } for pid=8532 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.487889][ T5447] veth0_vlan: left promiscuous mode [ 115.508455][ T971] veth0_vlan: entered promiscuous mode [ 115.614923][ T43] audit: type=1400 audit(1791318455.082:664): avc: denied { write } for pid=8541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.644159][ T8545] FAULT_INJECTION: forcing a failure. [ 115.644159][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 115.644180][ T8545] CPU: 3 UID: 0 PID: 8545 Comm: syz.2.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.644195][ T8545] Tainted: [L]=SOFTLOCKUP [ 115.644199][ T8545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.644205][ T8545] Call Trace: [ 115.644209][ T8545] [ 115.644214][ T8545] dump_stack_lvl+0x100/0x190 [ 115.644234][ T8545] should_fail_ex.cold+0x5/0xa [ 115.644250][ T8545] should_failslab+0xc2/0x120 [ 115.644266][ T8545] kmem_cache_alloc_noprof+0x92/0x6a0 [ 115.644280][ T8545] ? skb_clone+0x190/0x400 [ 115.644299][ T8545] skb_clone+0x190/0x400 [ 115.644316][ T8545] netlink_broadcast_filtered+0xb22/0xf20 [ 115.644338][ T8545] netlink_broadcast+0x39/0x50 [ 115.644353][ T8545] kobject_uevent_env+0xcdd/0x18b0 [ 115.644373][ T8545] ? lockdep_init_map_type+0x5c/0x250 [ 115.644389][ T8545] swnode_register+0x55d/0x750 [ 115.644405][ T8545] fwnode_create_software_node+0x1c8/0x3f0 [ 115.644421][ T8545] device_create_managed_software_node+0x103/0x270 [ 115.644438][ T8545] iommufd_test+0x3007/0x6600 [ 115.644454][ T8545] ? __lock_acquire+0x5c0/0x1f40 [ 115.644471][ T8545] ? __lock_acquire+0x5c0/0x1f40 [ 115.644487][ T8545] ? __pfx_iommufd_test+0x10/0x10 [ 115.644516][ T8545] ? tomoyo_path_number_perm+0x188/0x580 [ 115.644541][ T8545] ? lock_acquire+0x1d1/0x380 [ 115.644563][ T8545] ? __might_fault+0xc5/0x140 [ 115.644599][ T8545] ? find_held_lock+0x2b/0x80 [ 115.644626][ T8545] ? __might_fault+0xc5/0x140 [ 115.644654][ T8545] iommufd_fops_ioctl+0x358/0x520 [ 115.644680][ T8545] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 115.644703][ T8545] ? __fget_files+0x34/0x3d0 [ 115.644738][ T8545] ? selinux_file_ioctl+0x13b/0x290 [ 115.644760][ T8545] ? selinux_file_ioctl+0xb6/0x290 [ 115.644784][ T8545] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 115.644811][ T8545] __x64_sys_ioctl+0x18e/0x210 [ 115.644833][ T8545] do_syscall_64+0x123/0x790 [ 115.644852][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.644870][ T8545] RIP: 0033:0x7f4a77f9e199 [ 115.644886][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.644902][ T8545] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.644922][ T8545] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 115.644935][ T8545] RDX: 0000200000000740 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 115.644944][ T8545] RBP: 00007f4a780358e0 R08: 0000000000000000 R09: 0000000000000000 [ 115.644954][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.644964][ T8545] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 115.644989][ T8545] [ 115.650679][ T8545] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.753223][ T8549] FAULT_INJECTION: forcing a failure. [ 115.753223][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 115.753244][ T8549] CPU: 3 UID: 0 PID: 8549 Comm: syz.0.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.753259][ T8549] Tainted: [L]=SOFTLOCKUP [ 115.753262][ T8549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.753269][ T8549] Call Trace: [ 115.753277][ T8549] [ 115.753281][ T8549] dump_stack_lvl+0x100/0x190 [ 115.753307][ T8549] should_fail_ex.cold+0x5/0xa [ 115.753323][ T8549] should_failslab+0xc2/0x120 [ 115.753343][ T8549] __kmalloc_noprof+0xfc/0x840 [ 115.753356][ T8549] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 115.753369][ T8549] ? ovl_alloc_entry+0x21/0x70 [ 115.753387][ T8549] ovl_alloc_entry+0x21/0x70 [ 115.753402][ T8549] ovl_lookup_layers+0xf1c/0x2ac0 [ 115.753424][ T8549] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 115.753439][ T8549] ? rcu_is_watching+0x13/0xc0 [ 115.753460][ T8549] ? find_held_lock+0x2b/0x80 [ 115.753476][ T8549] ? d_alloc_parallel+0x46e/0x14c0 [ 115.753490][ T8549] ? d_alloc_parallel+0x46e/0x14c0 [ 115.753505][ T8549] ovl_lookup+0x4a8/0x6b0 [ 115.753519][ T8549] ? d_alloc_parallel+0x9f6/0x14c0 [ 115.753534][ T8549] ? __pfx_ovl_lookup+0x10/0x10 [ 115.753550][ T8549] ? __pfx_d_alloc_parallel+0x10/0x10 [ 115.753568][ T8549] ? down_read+0x13b/0x4c0 [ 115.753585][ T8549] ? __pfx_down_read+0x10/0x10 [ 115.753600][ T8549] __lookup_slow+0x155/0x320 [ 115.753613][ T8549] lookup_slow+0x50/0x70 [ 115.753624][ T8549] path_lookupat+0x5e8/0xc40 [ 115.753638][ T8549] ? __x64_sys_setxattr+0xc6/0x140 [ 115.753654][ T8549] ? do_syscall_64+0x123/0x790 [ 115.753668][ T8549] filename_lookup+0x202/0x590 [ 115.753684][ T8549] ? __pfx_filename_lookup+0x10/0x10 [ 115.753709][ T8549] ? find_held_lock+0x2b/0x80 [ 115.753725][ T8549] ? __might_fault+0xc5/0x140 [ 115.753735][ T8549] ? __might_fault+0xc5/0x140 [ 115.753748][ T8549] filename_setxattr+0xa1/0x1d0 [ 115.753766][ T8549] ? __pfx_filename_setxattr+0x10/0x10 [ 115.753784][ T8549] ? do_getname+0x191/0x390 [ 115.753797][ T8549] path_setxattrat+0x1ff/0x3b0 [ 115.753814][ T8549] ? __pfx_path_setxattrat+0x10/0x10 [ 115.753833][ T8549] ? ksys_write+0x190/0x250 [ 115.753846][ T8549] ? ksys_write+0x190/0x250 [ 115.753869][ T8549] ? fput+0x7c/0x100 [ 115.753888][ T8549] ? ksys_write+0x1ac/0x250 [ 115.753901][ T8549] ? __pfx_ksys_write+0x10/0x10 [ 115.753929][ T8549] __x64_sys_setxattr+0xc6/0x140 [ 115.753947][ T8549] ? do_syscall_64+0xae/0x790 [ 115.753958][ T8549] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.753970][ T8549] do_syscall_64+0x123/0x790 [ 115.753983][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.753995][ T8549] RIP: 0033:0x7f398279e199 [ 115.754004][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.754015][ T8549] RSP: 002b:00007f3983609028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 115.754029][ T8549] RAX: ffffffffffffffda RBX: 00007f3982a25fa0 RCX: 00007f398279e199 [ 115.754036][ T8549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 115.754042][ T8549] RBP: 00007f3983609090 R08: 0000000000000002 R09: 0000000000000000 [ 115.754049][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.754055][ T8549] R13: 00007f3982a26038 R14: 00007f3982a25fa0 R15: 00007ffd4f626058 [ 115.754069][ T8549] [ 115.858939][ T8552] netlink: 'syz.0.918': attribute type 29 has an invalid length. [ 115.873923][ T8500] syz.3.903 (8500): drop_caches: 2 [ 115.990617][ T8565] syzkaller0: entered promiscuous mode [ 115.990633][ T8565] syzkaller0: entered allmulticast mode [ 116.028234][ T8573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.028259][ T8573] FAULT_INJECTION: forcing a failure. [ 116.028259][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 116.028274][ T8573] CPU: 2 UID: 0 PID: 8573 Comm: syz.0.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.028288][ T8573] Tainted: [L]=SOFTLOCKUP [ 116.028292][ T8573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.028298][ T8573] Call Trace: [ 116.028302][ T8573] [ 116.028306][ T8573] dump_stack_lvl+0x100/0x190 [ 116.028326][ T8573] should_fail_ex.cold+0x5/0xa [ 116.028342][ T8573] should_failslab+0xc2/0x120 [ 116.028359][ T8573] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 116.028373][ T8573] ? __alloc_skb+0x5b7/0x710 [ 116.028393][ T8573] ? __alloc_skb+0x140/0x710 [ 116.028409][ T8573] __alloc_skb+0x140/0x710 [ 116.028423][ T8573] ? __alloc_skb+0x5b7/0x710 [ 116.028438][ T8573] ? __pfx___alloc_skb+0x10/0x10 [ 116.028463][ T8573] netlink_ack+0x117/0xb80 [ 116.028482][ T8573] netlink_rcv_skb+0x333/0x420 [ 116.028497][ T8573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.028509][ T8573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.028528][ T8573] ? netlink_deliver_tap+0x1ae/0xcc0 [ 116.028545][ T8573] netlink_unicast+0x585/0x850 [ 116.028562][ T8573] ? __pfx_netlink_unicast+0x10/0x10 [ 116.028581][ T8573] netlink_sendmsg+0x8b0/0xda0 [ 116.028598][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.028614][ T8573] ? selinux_socket_sendmsg+0x198/0x2f0 [ 116.028631][ T8573] ____sys_sendmsg+0xa4d/0xbe0 [ 116.028643][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.028659][ T8573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.028672][ T8573] ? _kstrtoull+0x144/0x200 [ 116.028688][ T8573] ? __pfx__kstrtoull+0x10/0x10 [ 116.028707][ T8573] ___sys_sendmsg+0x190/0x1e0 [ 116.028720][ T8573] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.028738][ T8573] ? __fget_files+0x34/0x3d0 [ 116.028763][ T8573] __sys_sendmmsg+0x20c/0x440 [ 116.028780][ T8573] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.028796][ T8573] ? ksys_write+0x190/0x250 [ 116.028819][ T8573] ? fput+0x7c/0x100 [ 116.028835][ T8573] ? ksys_write+0x1ac/0x250 [ 116.028847][ T8573] ? __pfx_ksys_write+0x10/0x10 [ 116.028862][ T8573] __x64_sys_sendmmsg+0x9c/0x100 [ 116.028878][ T8573] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.028891][ T8573] do_syscall_64+0x123/0x790 [ 116.028904][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.028915][ T8573] RIP: 0033:0x7f398279e199 [ 116.028924][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.028934][ T8573] RSP: 002b:00007f3983609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.028945][ T8573] RAX: ffffffffffffffda RBX: 00007f3982a25fa0 RCX: 00007f398279e199 [ 116.028952][ T8573] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 116.028958][ T8573] RBP: 00007f3983609090 R08: 0000000000000000 R09: 0000000000000000 [ 116.028969][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.028975][ T8573] R13: 00007f3982a26038 R14: 00007f3982a25fa0 R15: 00007ffd4f626058 [ 116.028988][ T8573] [ 117.205684][ T8591] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 117.216718][ T8591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.217557][ T8591] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 117.281170][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 117.299157][ T8595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.304167][ T8595] bond2: entered promiscuous mode [ 117.315930][ T8603] FAULT_INJECTION: forcing a failure. [ 117.315930][ T8603] name failslab, interval 1, probability 0, space 0, times 0 [ 117.315953][ T8603] CPU: 2 UID: 0 PID: 8603 Comm: syz.3.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.315969][ T8603] Tainted: [L]=SOFTLOCKUP [ 117.315973][ T8603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.315980][ T8603] Call Trace: [ 117.315985][ T8603] [ 117.315990][ T8603] dump_stack_lvl+0x100/0x190 [ 117.316012][ T8603] should_fail_ex.cold+0x5/0xa [ 117.316031][ T8603] should_failslab+0xc2/0x120 [ 117.316048][ T8603] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 117.316065][ T8603] ? mgmt_pending_new+0xcc/0x240 [ 117.316089][ T8603] kmemdup_noprof+0x29/0x60 [ 117.316108][ T8603] mgmt_pending_new+0xcc/0x240 [ 117.316130][ T8603] ? start_discovery_internal+0x3d8/0x830 [ 117.316157][ T8603] mgmt_pending_add+0x3a/0x1a0 [ 117.316180][ T8603] start_discovery_internal+0x4bd/0x830 [ 117.316199][ T8603] ? __pfx_start_discovery_internal+0x10/0x10 [ 117.316216][ T8603] ? do_raw_read_unlock+0x3f/0x70 [ 117.316232][ T8603] ? _raw_read_unlock+0x28/0x50 [ 117.316245][ T8603] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 117.316262][ T8603] hci_sock_sendmsg+0x1574/0x26a0 [ 117.316292][ T8603] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 117.316311][ T8603] ? selinux_socket_sendmsg+0x198/0x2f0 [ 117.316328][ T8603] sock_write_iter+0x53a/0x5b0 [ 117.316340][ T8603] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 117.316357][ T8603] ? __pfx_sock_write_iter+0x10/0x10 [ 117.316406][ T8603] ? bpf_lsm_file_permission+0x9/0x10 [ 117.316423][ T8603] ? security_file_permission+0x76/0x210 [ 117.316446][ T8603] ? rw_verify_area+0xce/0x6d0 [ 117.316466][ T8603] vfs_write+0x6af/0x1050 [ 117.316486][ T8603] ? __pfx_sock_write_iter+0x10/0x10 [ 117.316499][ T8603] ? __pfx_vfs_write+0x10/0x10 [ 117.316516][ T8603] ? find_held_lock+0x2b/0x80 [ 117.316542][ T8603] ksys_write+0x1f8/0x250 [ 117.316555][ T8603] ? __pfx_ksys_write+0x10/0x10 [ 117.316572][ T8603] do_syscall_64+0x123/0x790 [ 117.316586][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.316598][ T8603] RIP: 0033:0x7f6122d9e199 [ 117.316608][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.316619][ T8603] RSP: 002b:00007f6120ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.316630][ T8603] RAX: ffffffffffffffda RBX: 00007f6123025fa0 RCX: 00007f6122d9e199 [ 117.316637][ T8603] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 117.316643][ T8603] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.316649][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.316656][ T8603] R13: 00007f6123026038 R14: 00007f6123025fa0 R15: 00007ffedf996d78 [ 117.316670][ T8603] [ 117.579188][ T8619] affs: No valid root block on device sr0 [ 117.627644][ T8625] FAULT_INJECTION: forcing a failure. [ 117.627644][ T8625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.627665][ T8625] CPU: 3 UID: 0 PID: 8625 Comm: syz.1.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.627681][ T8625] Tainted: [L]=SOFTLOCKUP [ 117.627684][ T8625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.627691][ T8625] Call Trace: [ 117.627694][ T8625] [ 117.627699][ T8625] dump_stack_lvl+0x100/0x190 [ 117.627719][ T8625] should_fail_ex.cold+0x5/0xa [ 117.627735][ T8625] _copy_to_user+0x32/0xd0 [ 117.627751][ T8625] simple_read_from_buffer+0xcb/0x170 [ 117.627767][ T8625] proc_fail_nth_read+0x1af/0x230 [ 117.627784][ T8625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.627806][ T8625] ? rw_verify_area+0xce/0x6d0 [ 117.627818][ T8625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.627833][ T8625] vfs_read+0x1e4/0xb40 [ 117.627846][ T8625] ? lock_acquire+0x1d1/0x380 [ 117.627858][ T8625] ? __fget_files+0x34/0x3d0 [ 117.627873][ T8625] ? __pfx_vfs_read+0x10/0x10 [ 117.627885][ T8625] ? find_held_lock+0x2b/0x80 [ 117.627901][ T8625] ? __fget_files+0x215/0x3d0 [ 117.627919][ T8625] ? __fget_files+0x21f/0x3d0 [ 117.627938][ T8625] ksys_read+0x12a/0x250 [ 117.627950][ T8625] ? __pfx_ksys_read+0x10/0x10 [ 117.627967][ T8625] do_syscall_64+0x123/0x790 [ 117.627981][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.627993][ T8625] RIP: 0033:0x7f38d655e9ce [ 117.628002][ T8625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.628013][ T8625] RSP: 002b:00007f38d7505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.628024][ T8625] RAX: ffffffffffffffda RBX: 00007f38d75066c0 RCX: 00007f38d655e9ce [ 117.628031][ T8625] RDX: 000000000000000f RSI: 00007f38d75060a0 RDI: 0000000000000004 [ 117.628037][ T8625] RBP: 00007f38d7506090 R08: 0000000000000000 R09: 0000000000000000 [ 117.628044][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.628050][ T8625] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 117.628064][ T8625] [ 117.708047][ T5733] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 117.898695][ T8630] tmpfs: Using encoding : utf8-12.1.0 [ 117.900329][ T8630] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.089307][ T8636] FAULT_INJECTION: forcing a failure. [ 118.089307][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 118.089329][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.2.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.089344][ T8636] Tainted: [L]=SOFTLOCKUP [ 118.089348][ T8636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.089354][ T8636] Call Trace: [ 118.089358][ T8636] [ 118.089363][ T8636] dump_stack_lvl+0x100/0x190 [ 118.089383][ T8636] should_fail_ex.cold+0x5/0xa [ 118.089399][ T8636] should_failslab+0xc2/0x120 [ 118.089416][ T8636] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.089427][ T8636] ? get_random_u16+0xe6/0x7d0 [ 118.089439][ T8636] ? sctp_endpoint_new+0xfc/0xb20 [ 118.089456][ T8636] sctp_endpoint_new+0xfc/0xb20 [ 118.089469][ T8636] ? sctp_v6_copy_ip_options+0x19d/0x460 [ 118.089485][ T8636] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 118.089499][ T8636] ? sctp_v6_copy_ip_options+0x280/0x460 [ 118.089513][ T8636] ? sctp_v6_copy_ip_options+0x280/0x460 [ 118.089529][ T8636] ? lockdep_init_map_type+0x5c/0x250 [ 118.089545][ T8636] sctp_clone_sock+0x45a/0x1970 [ 118.089560][ T8636] ? sock_create_lite+0x48/0x120 [ 118.089572][ T8636] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 118.089589][ T8636] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 118.089610][ T8636] sctp_getsockopt+0x2fb2/0x7110 [ 118.089626][ T8636] ? avc_has_perm_noaudit+0x56/0x470 [ 118.089637][ T8636] ? find_held_lock+0x2b/0x80 [ 118.089653][ T8636] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.089663][ T8636] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.089674][ T8636] ? __pfx_sctp_getsockopt+0x10/0x10 [ 118.089695][ T8636] ? __pfx_avc_has_perm+0x10/0x10 [ 118.089708][ T8636] ? lock_acquire+0x1d1/0x380 [ 118.089719][ T8636] ? __might_fault+0xc5/0x140 [ 118.089731][ T8636] ? find_held_lock+0x2b/0x80 [ 118.089746][ T8636] ? __might_fault+0xc5/0x140 [ 118.089756][ T8636] ? __might_fault+0xc5/0x140 [ 118.089770][ T8636] ? _copy_from_user+0x59/0xd0 [ 118.089785][ T8636] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 118.089797][ T8636] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 118.089812][ T8636] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 118.089830][ T8636] do_sock_getsockopt+0x50a/0x6e0 [ 118.089844][ T8636] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 118.089858][ T8636] ? __fget_files+0x34/0x3d0 [ 118.089874][ T8636] ? find_held_lock+0x2b/0x80 [ 118.089894][ T8636] ? __fget_files+0x21f/0x3d0 [ 118.089912][ T8636] __sys_getsockopt+0x148/0x260 [ 118.089931][ T8636] ? __x64_sys_getsockopt+0xbd/0x160 [ 118.089947][ T8636] __x64_sys_getsockopt+0xbd/0x160 [ 118.089962][ T8636] ? do_syscall_64+0xae/0x790 [ 118.089990][ T8636] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.090002][ T8636] do_syscall_64+0x123/0x790 [ 118.090015][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.090027][ T8636] RIP: 0033:0x7f4a77f9e199 [ 118.090036][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.090047][ T8636] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 118.090058][ T8636] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 118.090065][ T8636] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 118.090071][ T8636] RBP: 00007f4a78e32090 R08: 0000200000000040 R09: 0000000000000000 [ 118.090078][ T8636] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 118.090084][ T8636] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 118.090098][ T8636] [ 118.503948][ T8651] netlink: 100 bytes leftover after parsing attributes in process `syz.2.954'. [ 118.791369][ T8661] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 118.795670][ T8661] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 118.989747][ T8671] syzkaller0: entered promiscuous mode [ 118.989762][ T8671] syzkaller0: entered allmulticast mode [ 119.083183][ T8681] FAULT_INJECTION: forcing a failure. [ 119.083183][ T8681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.083214][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.3.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.083262][ T8681] Tainted: [L]=SOFTLOCKUP [ 119.083269][ T8681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.083279][ T8681] Call Trace: [ 119.083285][ T8681] [ 119.083293][ T8681] dump_stack_lvl+0x100/0x190 [ 119.083321][ T8681] should_fail_ex.cold+0x5/0xa [ 119.083345][ T8681] _copy_from_user+0x2e/0xd0 [ 119.083368][ T8681] kstrtouint_from_user+0xd6/0x1d0 [ 119.083399][ T8681] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 119.083429][ T8681] ? lock_acquire+0x1d1/0x380 [ 119.083453][ T8681] proc_fail_nth_write+0x83/0x220 [ 119.083477][ T8681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.083506][ T8681] vfs_write+0x2aa/0x1050 [ 119.083527][ T8681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.083548][ T8681] ? lock_acquire+0x1d1/0x380 [ 119.083566][ T8681] ? __fget_files+0x34/0x3d0 [ 119.083588][ T8681] ? __pfx_vfs_write+0x10/0x10 [ 119.083605][ T8681] ? find_held_lock+0x2b/0x80 [ 119.083630][ T8681] ? __fget_files+0x215/0x3d0 [ 119.083655][ T8681] ? __fget_files+0x21f/0x3d0 [ 119.083684][ T8681] ksys_write+0x12a/0x250 [ 119.083703][ T8681] ? __pfx_ksys_write+0x10/0x10 [ 119.083730][ T8681] do_syscall_64+0x123/0x790 [ 119.083751][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.083769][ T8681] RIP: 0033:0x7f6122d5e9ce [ 119.083783][ T8681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.083798][ T8681] RSP: 002b:00007f6120ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.083815][ T8681] RAX: ffffffffffffffda RBX: 00007f6120ff66c0 RCX: 00007f6122d5e9ce [ 119.083827][ T8681] RDX: 0000000000000001 RSI: 00007f6120ff60a0 RDI: 0000000000000003 [ 119.083837][ T8681] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.083846][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.083856][ T8681] R13: 00007f6123026038 R14: 00007f6123025fa0 R15: 00007ffedf996d78 [ 119.083880][ T8681] [ 119.203998][ T8690] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.206933][ T8690] IPv6: Can't replace route, no match found [ 119.209624][ T8692] IPv6: Can't replace route, no match found [ 119.374706][ T971] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 119.519266][ T971] usb 6-1: Using ep0 maxpacket: 8 [ 119.520862][ T971] usb 6-1: New USB device found, idVendor=0403, idProduct=8348, bcdDevice=55.7e [ 119.521920][ T971] usb 6-1: config 4 has an invalid interface number: 40 but max is 0 [ 119.521940][ T971] usb 6-1: config 4 has no interface number 0 [ 119.521968][ T971] usb 6-1: config 4 interface 40 altsetting 192 has a duplicate endpoint with address 0x2, skipping [ 119.521986][ T971] usb 6-1: config 4 interface 40 altsetting 192 has an invalid descriptor for endpoint zero, skipping [ 119.522001][ T971] usb 6-1: config 4 interface 40 altsetting 192 has an invalid descriptor for endpoint zero, skipping [ 119.522016][ T971] usb 6-1: config 4 interface 40 altsetting 192 endpoint 0x7 has invalid maxpacket 983, setting to 64 [ 119.522036][ T971] usb 6-1: config 4 interface 40 has no altsetting 0 [ 119.524086][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.524102][ T971] usb 6-1: Product: Й [ 119.524112][ T971] usb 6-1: Manufacturer: Щ [ 119.524122][ T971] usb 6-1: SerialNumber: 㑍鸅衺䫼헥㮲퐂꼨䕙⇃䵧跡㟧릈䜳펔䈂甏⍓ఊś⇉큂Ҫ宝癨姐戤䁣踞䱙膡ꃖ쿥ⳛ꼞㥊䕌骓엮讳倽䒙綘작꾙䊏呅渐崿Ჷꑡ﫳ꉐ驹㻋㪔鲮劳ᗰ뵱璒ᒆſ掮㏤㸐몹⃲睐ⳮ게冽⃼腦Ꝇ␊ꟸਸ．픬汘姍哌㠤떽뷁︗穉﫰⻭ཱ܂蝹Аࢫ뤜ࡳ얹묊䀰 [ 119.592648][ T8686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.820756][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 119.820768][ T43] audit: type=1400 audit(1791318459.282:679): avc: denied { setopt } for pid=8684 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.848097][ T971] ftdi_sio 6-1:4.40: FTDI USB Serial Device converter detected [ 119.855004][ T971] ftdi_sio ttyUSB0: unknown device type: 0x557e [ 119.862192][ T971] usb 6-1: USB disconnect, device number 9 [ 119.864243][ T971] ftdi_sio 6-1:4.40: device disconnected [ 120.439215][ T43] audit: type=1400 audit(1791318459.902:680): avc: denied { write } for pid=8710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.499355][ T43] audit: type=1400 audit(1791318459.962:681): avc: denied { write } for pid=8718 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.500235][ T43] audit: type=1400 audit(1791318459.962:682): avc: denied { create } for pid=8720 comm="syz.0.977" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.500623][ T43] audit: type=1400 audit(1791318459.962:683): avc: denied { map } for pid=8720 comm="syz.0.977" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.500817][ T43] audit: type=1400 audit(1791318459.962:684): avc: denied { read write } for pid=8720 comm="syz.0.977" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.649615][ T43] audit: type=1400 audit(1791318460.112:685): avc: denied { write } for pid=8732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.702500][ T43] audit: type=1400 audit(1791318460.162:686): avc: denied { write } for pid=8747 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.730078][ T8751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=8751 comm=syz.2.985 [ 120.750836][ T43] audit: type=1400 audit(1791318460.212:687): avc: denied { create } for pid=8753 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.752182][ T43] audit: type=1400 audit(1791318460.212:688): avc: denied { bind } for pid=8753 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.954728][ T8771] FAULT_INJECTION: forcing a failure. [ 120.954728][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 120.954762][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.3.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.954787][ T8771] Tainted: [L]=SOFTLOCKUP [ 120.954794][ T8771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.954805][ T8771] Call Trace: [ 120.954812][ T8771] [ 120.954820][ T8771] dump_stack_lvl+0x100/0x190 [ 120.954850][ T8771] should_fail_ex.cold+0x5/0xa [ 120.954877][ T8771] should_failslab+0xc2/0x120 [ 120.954904][ T8771] __kmalloc_noprof+0xfc/0x840 [ 120.954925][ T8771] ? rcu_is_watching+0x13/0xc0 [ 120.954952][ T8771] ? tomoyo_realpath_from_path+0xb6/0x690 [ 120.954985][ T8771] tomoyo_realpath_from_path+0xb6/0x690 [ 120.955020][ T8771] tomoyo_check_open_permission+0x2af/0x3c0 [ 120.955044][ T8771] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 120.955073][ T8771] ? hook_file_open+0x248/0x8e0 [ 120.955123][ T8771] ? path_get+0x61/0x80 [ 120.955152][ T8771] tomoyo_file_open+0x6b/0x90 [ 120.955167][ T8771] security_file_open+0xb5/0x1e0 [ 120.955187][ T8771] do_dentry_open+0x588/0x14d0 [ 120.955210][ T8771] vfs_open+0x82/0x3f0 [ 120.955253][ T8771] path_openat+0x19fa/0x2440 [ 120.955280][ T8771] ? __pfx_path_openat+0x10/0x10 [ 120.955311][ T8771] do_file_open+0x20e/0x430 [ 120.955344][ T8771] ? __pfx_do_file_open+0x10/0x10 [ 120.955403][ T8771] ? _raw_spin_unlock+0x28/0x50 [ 120.955422][ T8771] ? alloc_fd+0x471/0x7a0 [ 120.955455][ T8771] do_sys_openat2+0x10f/0x1e0 [ 120.955483][ T8771] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.955511][ T8771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.955535][ T8771] ? __fget_files+0x21f/0x3d0 [ 120.955563][ T8771] __x64_sys_openat+0x12d/0x210 [ 120.955592][ T8771] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.955618][ T8771] ? ksys_write+0x1ac/0x250 [ 120.955648][ T8771] do_syscall_64+0x123/0x790 [ 120.955671][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.955689][ T8771] RIP: 0033:0x7f6122d9e199 [ 120.955706][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.955722][ T8771] RSP: 002b:00007f6120ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.955740][ T8771] RAX: ffffffffffffffda RBX: 00007f6123025fa0 RCX: 00007f6122d9e199 [ 120.955752][ T8771] RDX: 0000000000080801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 120.955763][ T8771] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.955774][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.955785][ T8771] R13: 00007f6123026038 R14: 00007f6123025fa0 R15: 00007ffedf996d78 [ 120.955810][ T8771] [ 120.955883][ T8771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.960377][ T5733] Bluetooth: Frame is too long (len 10, expected len 8) [ 120.960392][ T5733] Bluetooth: Wrong link type (-71) [ 121.009077][ T8776] netlink: 88 bytes leftover after parsing attributes in process `syz.1.993'. [ 121.012061][ T5733] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 121.012827][ T8776] overlay: Unknown parameter ' ' [ 121.023190][ T8774] netlink: 'syz.3.992': attribute type 25 has an invalid length. [ 121.023336][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 121.047112][ T8774] netlink: 'syz.3.992': attribute type 25 has an invalid length. [ 121.047130][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 121.065907][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.065946][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.065976][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.066004][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.535653][ T8781] dns_resolver: Unsupported content type (234) [ 121.536076][ T8781] netlink: 64 bytes leftover after parsing attributes in process `syz.0.994'. [ 121.823740][ T8787] FAULT_INJECTION: forcing a failure. [ 121.823740][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 121.823771][ T8787] CPU: 2 UID: 0 PID: 8787 Comm: syz.1.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.823794][ T8787] Tainted: [L]=SOFTLOCKUP [ 121.823800][ T8787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.823809][ T8787] Call Trace: [ 121.823815][ T8787] [ 121.823822][ T8787] dump_stack_lvl+0x100/0x190 [ 121.823852][ T8787] should_fail_ex.cold+0x5/0xa [ 121.823876][ T8787] should_failslab+0xc2/0x120 [ 121.823900][ T8787] kmem_cache_alloc_noprof+0x92/0x6a0 [ 121.823921][ T8787] ? ptlock_alloc+0x1f/0x70 [ 121.823941][ T8787] ptlock_alloc+0x1f/0x70 [ 121.823956][ T8787] pte_alloc_one+0x82/0x3d0 [ 121.823987][ T8787] __pte_alloc+0x6d/0x380 [ 121.824007][ T8787] ? __pfx___pte_alloc+0x10/0x10 [ 121.824032][ T8787] do_anonymous_page+0x1307/0x2050 [ 121.824061][ T8787] ? find_held_lock+0x2b/0x80 [ 121.824085][ T8787] ? __pmd_alloc+0x3f6/0x950 [ 121.824106][ T8787] ? __pmd_alloc+0x3f6/0x950 [ 121.824129][ T8787] ? __pfx_do_anonymous_page+0x10/0x10 [ 121.824154][ T8787] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.824177][ T8787] ? _raw_spin_unlock+0x28/0x50 [ 121.824193][ T8787] ? __pmd_alloc+0x3fb/0x950 [ 121.824216][ T8787] __handle_mm_fault+0x1ff3/0x2f60 [ 121.824246][ T8787] ? __pfx___handle_mm_fault+0x10/0x10 [ 121.824270][ T8787] ? __pfx_mt_find+0x10/0x10 [ 121.824303][ T8787] ? find_vma+0xbf/0x140 [ 121.824323][ T8787] ? __pfx_find_vma+0x10/0x10 [ 121.824345][ T8787] handle_mm_fault+0x363/0xa20 [ 121.824366][ T8787] do_user_addr_fault+0x745/0x12f0 [ 121.824395][ T8787] exc_page_fault+0x6f/0xd0 [ 121.824414][ T8787] asm_exc_page_fault+0x26/0x30 [ 121.824430][ T8787] RIP: 0010:_copy_from_user+0x93/0xd0 [ 121.824451][ T8787] Code: ba e0 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 b9 3d 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 c5 b4 [ 121.824466][ T8787] RSP: 0018:ffffc90003d2fd88 EFLAGS: 00050246 [ 121.824481][ T8787] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 121.824490][ T8787] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003d2fe60 [ 121.824500][ T8787] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520007a5fcc [ 121.824510][ T8787] R10: ffffc90003d2fe67 R11: 0000000000000000 R12: 0000000000000000 [ 121.824519][ T8787] R13: ffffc90003d2fe60 R14: 0000000000000001 R15: fffffffffffffff2 [ 121.824540][ T8787] ? _copy_from_user+0x87/0xd0 [ 121.824562][ T8787] raw_alloc_io_data+0x32/0x1c0 [ 121.824604][ T8787] raw_ioctl+0x223/0x2b80 [ 121.824629][ T8787] ? __pfx_raw_ioctl+0x10/0x10 [ 121.824649][ T8787] ? selinux_file_ioctl+0x13b/0x290 [ 121.824669][ T8787] ? selinux_file_ioctl+0xb6/0x290 [ 121.824692][ T8787] ? __pfx_raw_ioctl+0x10/0x10 [ 121.824713][ T8787] __x64_sys_ioctl+0x18e/0x210 [ 121.824734][ T8787] do_syscall_64+0x123/0x790 [ 121.824755][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.824772][ T8787] RIP: 0033:0x7f38d659e199 [ 121.824785][ T8787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.824800][ T8787] RSP: 002b:00007f38d7506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.824815][ T8787] RAX: ffffffffffffffda RBX: 00007f38d6825fa0 RCX: 00007f38d659e199 [ 121.824826][ T8787] RDX: 0000000000000000 RSI: 0000000040085507 RDI: 0000000000000003 [ 121.824836][ T8787] RBP: 00007f38d7506090 R08: 0000000000000000 R09: 0000000000000000 [ 121.824845][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.824855][ T8787] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 121.824878][ T8787] [ 122.394927][ T1348] libceph: connect (1)[c::]:6789 error -101 [ 122.395096][ T1348] libceph: mon0 (1)[c::]:6789 connect error [ 122.396291][ T1348] libceph: connect (1)[c::]:6789 error -101 [ 122.396445][ T1348] libceph: mon0 (1)[c::]:6789 connect error [ 122.415773][ T8807] FAULT_INJECTION: forcing a failure. [ 122.415773][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 122.415794][ T8807] CPU: 2 UID: 0 PID: 8807 Comm: syz.3.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.415811][ T8807] Tainted: [L]=SOFTLOCKUP [ 122.415815][ T8807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.415821][ T8807] Call Trace: [ 122.415824][ T8807] [ 122.415829][ T8807] dump_stack_lvl+0x100/0x190 [ 122.415849][ T8807] should_fail_ex.cold+0x5/0xa [ 122.415865][ T8807] should_failslab+0xc2/0x120 [ 122.415882][ T8807] __kmalloc_noprof+0xfc/0x840 [ 122.415895][ T8807] ? tomoyo_encode2+0xfb/0x3c0 [ 122.415916][ T8807] tomoyo_encode2+0xfb/0x3c0 [ 122.415933][ T8807] tomoyo_encode+0x29/0x50 [ 122.415948][ T8807] tomoyo_realpath_from_path+0x18c/0x690 [ 122.415967][ T8807] tomoyo_check_open_permission+0x2af/0x3c0 [ 122.415982][ T8807] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 122.416001][ T8807] ? hook_file_open+0x248/0x8e0 [ 122.416045][ T8807] ? path_get+0x61/0x80 [ 122.416072][ T8807] tomoyo_file_open+0x6b/0x90 [ 122.416084][ T8807] security_file_open+0xb5/0x1e0 [ 122.416101][ T8807] do_dentry_open+0x588/0x14d0 [ 122.416118][ T8807] vfs_open+0x82/0x3f0 [ 122.416136][ T8807] path_openat+0x19fa/0x2440 [ 122.416154][ T8807] ? __pfx_path_openat+0x10/0x10 [ 122.416173][ T8807] do_file_open+0x20e/0x430 [ 122.416190][ T8807] ? __pfx_do_file_open+0x10/0x10 [ 122.416216][ T8807] ? _raw_spin_unlock+0x28/0x50 [ 122.416226][ T8807] ? alloc_fd+0x471/0x7a0 [ 122.416245][ T8807] do_sys_openat2+0x10f/0x1e0 [ 122.416262][ T8807] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.416278][ T8807] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 122.416297][ T8807] __x64_sys_openat+0x12d/0x210 [ 122.416315][ T8807] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.416338][ T8807] do_syscall_64+0x123/0x790 [ 122.416351][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.416363][ T8807] RIP: 0033:0x7f6122d5e9ce [ 122.416372][ T8807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.416382][ T8807] RSP: 002b:00007f6120ff3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.416394][ T8807] RAX: ffffffffffffffda RBX: 00007f6120ff66c0 RCX: 00007f6122d5e9ce [ 122.416400][ T8807] RDX: 0000000000000002 RSI: 00007f6122e34c72 RDI: ffffffffffffff9c [ 122.416407][ T8807] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.416417][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 122.416424][ T8807] R13: 0000200000000000 R14: 0000000000000005 R15: 00007ffedf996d78 [ 122.416438][ T8807] [ 122.416484][ T8807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.513458][ T8797] ceph: No mds server is up or the cluster is laggy [ 122.579477][ T8814] CUSE: unknown device info "" [ 122.579491][ T8814] CUSE: unknown device info "" [ 122.579497][ T8814] CUSE: unknown device info "" [ 122.579503][ T8814] CUSE: unknown device info "" [ 122.579510][ T8814] CUSE: zero length info key specified [ 122.655022][ T971] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 122.814914][ T971] usb 8-1: Using ep0 maxpacket: 32 [ 122.823089][ T971] usb 8-1: unable to get BOS descriptor or descriptor too short [ 122.823114][ T971] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 122.823892][ T971] usb 8-1: config 14 has an invalid interface number: 57 but max is 0 [ 122.823905][ T971] usb 8-1: config 14 has no interface number 0 [ 122.823922][ T971] usb 8-1: config 14 interface 57 has no altsetting 0 [ 122.825838][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.825852][ T971] usb 8-1: Product: syz [ 122.825860][ T971] usb 8-1: Manufacturer: syz [ 122.825867][ T971] usb 8-1: SerialNumber: syz [ 122.867080][ T8827] FAULT_INJECTION: forcing a failure. [ 122.867080][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 122.867100][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.2.1010 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.867115][ T8827] Tainted: [L]=SOFTLOCKUP [ 122.867119][ T8827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.867126][ T8827] Call Trace: [ 122.867130][ T8827] [ 122.867135][ T8827] dump_stack_lvl+0x100/0x190 [ 122.867155][ T8827] should_fail_ex.cold+0x5/0xa [ 122.867171][ T8827] should_failslab+0xc2/0x120 [ 122.867188][ T8827] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.867235][ T8827] ? __pfx_map_id_range_down+0x10/0x10 [ 122.867251][ T8827] ? security_inode_alloc+0x3b/0x2c0 [ 122.867267][ T8827] security_inode_alloc+0x3b/0x2c0 [ 122.867281][ T8827] inode_init_always_gfp+0xc6f/0xfb0 [ 122.867299][ T8827] alloc_inode+0x8e/0x250 [ 122.867311][ T8827] new_inode+0x22/0x1c0 [ 122.867324][ T8827] __debugfs_create_file+0xfb/0x500 [ 122.867338][ T8827] debugfs_create_file_full+0x41/0x60 [ 122.867352][ T8827] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 122.867370][ T8827] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 122.867400][ T8827] ? lockdep_init_map_type+0x5c/0x250 [ 122.867415][ T8827] ? __pfx_bnep_net_setup+0x10/0x10 [ 122.867432][ T8827] alloc_netdev_mqs+0x314/0x15c0 [ 122.867452][ T8827] bnep_add_connection+0x24e/0xd90 [ 122.867469][ T8827] ? __pfx_bnep_add_connection+0x10/0x10 [ 122.867485][ T8827] ? __fget_files+0x21f/0x3d0 [ 122.867505][ T8827] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 122.867521][ T8827] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 122.867537][ T8827] ? kasan_quarantine_put+0x104/0x240 [ 122.867552][ T8827] ? find_held_lock+0x2b/0x80 [ 122.867577][ T8827] sock_do_ioctl+0x118/0x280 [ 122.867590][ T8827] ? __pfx_sock_do_ioctl+0x10/0x10 [ 122.867601][ T8827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.867617][ T8827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.867629][ T8827] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 122.867646][ T8827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 122.867665][ T8827] sock_ioctl+0x599/0x6b0 [ 122.867677][ T8827] ? __pfx_sock_ioctl+0x10/0x10 [ 122.867694][ T8827] ? selinux_file_ioctl+0x13b/0x290 [ 122.867708][ T8827] ? selinux_file_ioctl+0xb6/0x290 [ 122.867723][ T8827] ? __pfx_sock_ioctl+0x10/0x10 [ 122.867736][ T8827] __x64_sys_ioctl+0x18e/0x210 [ 122.867750][ T8827] do_syscall_64+0x123/0x790 [ 122.867764][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.867775][ T8827] RIP: 0033:0x7f4a77f9e199 [ 122.867785][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.867796][ T8827] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.867807][ T8827] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 122.867814][ T8827] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000004 [ 122.867821][ T8827] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 122.867828][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.867834][ T8827] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 122.867848][ T8827] [ 122.871255][ T8827] debugfs: out of free dentries, can not create file 'netdev@ffff88805d63a700' [ 123.035795][ T971] legousbtower 8-1:14.57: interrupt endpoints not found [ 123.042311][ T971] usb 8-1: USB disconnect, device number 7 [ 123.677291][ T8847] FAULT_INJECTION: forcing a failure. [ 123.677291][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 123.677312][ T8847] CPU: 3 UID: 0 PID: 8847 Comm: syz.3.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.677327][ T8847] Tainted: [L]=SOFTLOCKUP [ 123.677331][ T8847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.677338][ T8847] Call Trace: [ 123.677342][ T8847] [ 123.677347][ T8847] dump_stack_lvl+0x100/0x190 [ 123.677366][ T8847] should_fail_ex.cold+0x5/0xa [ 123.677382][ T8847] should_failslab+0xc2/0x120 [ 123.677399][ T8847] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 123.677413][ T8847] ? __d_alloc+0x35/0xa50 [ 123.677425][ T8847] __d_alloc+0x35/0xa50 [ 123.677434][ T8847] ? __lock_acquire+0x5c0/0x1f40 [ 123.677448][ T8847] d_alloc_parallel+0x105/0x14c0 [ 123.677466][ T8847] ? lock_acquire+0x1d1/0x380 [ 123.677478][ T8847] ? lookup_slow+0x42/0x70 [ 123.677489][ T8847] ? __pfx_d_alloc_parallel+0x10/0x10 [ 123.677502][ T8847] ? __pfx___might_resched+0x10/0x10 [ 123.677514][ T8847] ? find_held_lock+0x2b/0x80 [ 123.677532][ T8847] ? down_read+0x13b/0x4c0 [ 123.677546][ T8847] ? __pfx_down_read+0x10/0x10 [ 123.677561][ T8847] __lookup_slow+0x98/0x320 [ 123.677574][ T8847] lookup_slow+0x50/0x70 [ 123.677585][ T8847] path_lookupat+0x5e8/0xc40 [ 123.677601][ T8847] filename_lookup+0x202/0x590 [ 123.677617][ T8847] ? __pfx_filename_lookup+0x10/0x10 [ 123.677641][ T8847] ? strncpy_from_user+0x19d/0x2d0 [ 123.677658][ T8847] ? do_getname+0x191/0x390 [ 123.677670][ T8847] user_path_at+0x3c/0x60 [ 123.677684][ T8847] __x64_sys_mount+0x1fb/0x310 [ 123.677696][ T8847] ? __pfx___x64_sys_mount+0x10/0x10 [ 123.677711][ T8847] do_syscall_64+0x123/0x790 [ 123.677725][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.677736][ T8847] RIP: 0033:0x7f6122d9e199 [ 123.677746][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.677756][ T8847] RSP: 002b:00007f6120ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.677767][ T8847] RAX: ffffffffffffffda RBX: 00007f6123025fa0 RCX: 00007f6122d9e199 [ 123.677774][ T8847] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00002000000000c0 [ 123.677787][ T8847] RBP: 00007f6120ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.677793][ T8847] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000001 [ 123.677800][ T8847] R13: 00007f6123026038 R14: 00007f6123025fa0 R15: 00007ffedf996d78 [ 123.677814][ T8847] [ 123.858582][ T8852] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 123.945353][ T8857] sit2: entered allmulticast mode [ 124.055865][ T8857] xt_IDLETIMER: timeout value is zero [ 124.221401][ T8868] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 124.235574][ T8868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.236623][ T8868] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 124.512291][ T8883] sit1: entered allmulticast mode [ 124.514655][ T76] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 124.556299][ T8883] xt_IDLETIMER: timeout value is zero [ 124.609969][ T8885] FAULT_INJECTION: forcing a failure. [ 124.609969][ T8885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.609991][ T8885] CPU: 2 UID: 0 PID: 8885 Comm: syz.2.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.610006][ T8885] Tainted: [L]=SOFTLOCKUP [ 124.610010][ T8885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.610016][ T8885] Call Trace: [ 124.610020][ T8885] [ 124.610024][ T8885] dump_stack_lvl+0x100/0x190 [ 124.610045][ T8885] should_fail_ex.cold+0x5/0xa [ 124.610059][ T8885] ? prepare_alloc_pages+0x16d/0x5b0 [ 124.610076][ T8885] should_fail_alloc_page+0xeb/0x140 [ 124.610093][ T8885] prepare_alloc_pages+0x1f0/0x5b0 [ 124.610109][ T8885] ? __pfx___xa_erase+0x10/0x10 [ 124.610125][ T8885] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 124.610139][ T8885] ? do_raw_spin_lock+0x128/0x260 [ 124.610154][ T8885] ? find_held_lock+0x2b/0x80 [ 124.610170][ T8885] ? move_cluster+0x1f7/0x570 [ 124.610183][ T8885] ? move_cluster+0x1f7/0x570 [ 124.610198][ T8885] ? do_raw_spin_unlock+0x145/0x1e0 [ 124.610213][ T8885] ? _raw_spin_unlock+0x28/0x50 [ 124.610223][ T8885] ? move_cluster+0x1f7/0x570 [ 124.610237][ T8885] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.610255][ T8885] ? __lock_acquire+0x5c0/0x1f40 [ 124.610268][ T8885] ? __lock_acquire+0x5c0/0x1f40 [ 124.610281][ T8885] ? __css_rstat_updated+0x1ce/0x590 [ 124.610299][ T8885] ? lock_acquire+0x1d1/0x380 [ 124.610311][ T8885] ? page_table_check_set+0x11d/0x580 [ 124.610328][ T8885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.610344][ T8885] ? policy_nodemask+0xed/0x4f0 [ 124.610361][ T8885] alloc_pages_mpol+0x201/0x550 [ 124.610383][ T8885] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 124.610400][ T8885] ? __page_table_check_ptes_set+0x1d5/0x530 [ 124.610419][ T8885] folio_alloc_mpol_noprof+0x36/0x260 [ 124.610432][ T8885] vma_alloc_folio_noprof+0xed/0x1d0 [ 124.610443][ T8885] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 124.610454][ T8885] ? rcu_read_unlock+0x2d/0xb0 [ 124.610468][ T8885] do_anonymous_page+0xac9/0x2050 [ 124.610490][ T8885] ? __pfx_do_anonymous_page+0x10/0x10 [ 124.610507][ T8885] ? rcu_read_unlock+0x2d/0xb0 [ 124.610517][ T8885] ? rcu_read_unlock+0x2d/0xb0 [ 124.610527][ T8885] ? __pte_offset_map+0x179/0x310 [ 124.610543][ T8885] __handle_mm_fault+0x1ff3/0x2f60 [ 124.610564][ T8885] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.610582][ T8885] ? pte_offset_map_lock+0x174/0x320 [ 124.610596][ T8885] ? find_held_lock+0x2b/0x80 [ 124.610612][ T8885] ? find_held_lock+0x2b/0x80 [ 124.610628][ T8885] ? follow_page_pte+0x536/0x1050 [ 124.610650][ T8885] handle_mm_fault+0x363/0xa20 [ 124.610663][ T8885] __get_user_pages+0x8ae/0x2c30 [ 124.610683][ T8885] ? __pfx___get_user_pages+0x10/0x10 [ 124.610703][ T8885] faultin_page_range+0x1f1/0x9e0 [ 124.610718][ T8885] ? lock_acquire+0x1d1/0x380 [ 124.610733][ T8885] madvise_do_behavior+0x354/0x510 [ 124.610751][ T8885] ? __pfx_madvise_do_behavior+0x10/0x10 [ 124.610769][ T8885] ? down_read+0x13b/0x4c0 [ 124.610789][ T8885] do_madvise+0x238/0x290 [ 124.610806][ T8885] ? __pfx_do_madvise+0x10/0x10 [ 124.610826][ T8885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.610844][ T8885] ? ksys_write+0x1ac/0x250 [ 124.610857][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 124.610874][ T8885] __x64_sys_madvise+0xa9/0x110 [ 124.610892][ T8885] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.610904][ T8885] do_syscall_64+0x123/0x790 [ 124.610918][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.610929][ T8885] RIP: 0033:0x7f4a77f9e199 [ 124.610939][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.610949][ T8885] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 124.610960][ T8885] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 124.610967][ T8885] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000200000000000 [ 124.610974][ T8885] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 124.610981][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.610987][ T8885] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 124.611001][ T8885] [ 124.664719][ T76] usb 6-1: Using ep0 maxpacket: 8 [ 124.665169][ T76] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.665965][ T76] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.665978][ T76] usb 6-1: config 179 has no interface number 0 [ 124.665996][ T76] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.666009][ T76] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.666022][ T76] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.666033][ T76] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.666052][ T76] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.669429][ T8872] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.870693][ T8872] FAULT_INJECTION: forcing a failure. [ 124.870693][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.870722][ T8872] CPU: 3 UID: 0 PID: 8872 Comm: syz.1.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.870742][ T8872] Tainted: [L]=SOFTLOCKUP [ 124.870748][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.870758][ T8872] Call Trace: [ 124.870764][ T8872] [ 124.870773][ T8872] dump_stack_lvl+0x100/0x190 [ 124.870803][ T8872] should_fail_ex.cold+0x5/0xa [ 124.870828][ T8872] _copy_from_user+0x2e/0xd0 [ 124.870850][ T8872] kstrtouint_from_user+0xd6/0x1d0 [ 124.870875][ T8872] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 124.870905][ T8872] ? lock_acquire+0x1d1/0x380 [ 124.870931][ T8872] proc_fail_nth_write+0x83/0x220 [ 124.870954][ T8872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.870985][ T8872] vfs_write+0x2aa/0x1050 [ 124.871005][ T8872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.871028][ T8872] ? lock_acquire+0x1d1/0x380 [ 124.871045][ T8872] ? __fget_files+0x34/0x3d0 [ 124.871088][ T8872] ? __pfx_vfs_write+0x10/0x10 [ 124.871106][ T8872] ? find_held_lock+0x2b/0x80 [ 124.871131][ T8872] ? __fget_files+0x215/0x3d0 [ 124.871158][ T8872] ? __fget_files+0x21f/0x3d0 [ 124.871187][ T8872] ksys_write+0x12a/0x250 [ 124.871206][ T8872] ? __pfx_ksys_write+0x10/0x10 [ 124.871256][ T8872] do_syscall_64+0x123/0x790 [ 124.871279][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.871297][ T8872] RIP: 0033:0x7f38d655e9ce [ 124.871311][ T8872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.871327][ T8872] RSP: 002b:00007f38d7505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.871350][ T8872] RAX: ffffffffffffffda RBX: 00007f38d75066c0 RCX: 00007f38d655e9ce [ 124.871361][ T8872] RDX: 0000000000000001 RSI: 00007f38d75060a0 RDI: 0000000000000004 [ 124.871371][ T8872] RBP: 00007f38d7506090 R08: 0000000000000000 R09: 0000000000000000 [ 124.871381][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.871391][ T8872] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 124.871416][ T8872] [ 124.887717][ T35] usb 6-1: USB disconnect, device number 10 [ 124.959750][ T8901] input: syz0 as /devices/virtual/input/input18 [ 125.036397][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 125.036408][ T43] audit: type=1400 audit(1791318464.502:698): avc: denied { write } for pid=8904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.070283][ T8910] sit1: entered allmulticast mode [ 125.106625][ T8910] xt_IDLETIMER: timeout value is zero [ 125.121708][ T8917] tmpfs: Using encoding : utf8-12.1.0 [ 125.124005][ T8917] FAULT_INJECTION: forcing a failure. [ 125.124005][ T8917] name failslab, interval 1, probability 0, space 0, times 0 [ 125.124023][ T8917] CPU: 0 UID: 0 PID: 8917 Comm: syz.1.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.124039][ T8917] Tainted: [L]=SOFTLOCKUP [ 125.124044][ T8917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.124051][ T8917] Call Trace: [ 125.124055][ T8917] [ 125.124060][ T8917] dump_stack_lvl+0x100/0x190 [ 125.124081][ T8917] should_fail_ex.cold+0x5/0xa [ 125.124099][ T8917] should_failslab+0xc2/0x120 [ 125.124117][ T8917] __kmalloc_node_noprof+0xff/0x880 [ 125.124132][ T8917] ? __pfx___up_read+0x10/0x10 [ 125.124147][ T8917] ? crypto_create_tfm_node+0x8d/0x3b0 [ 125.124168][ T8917] crypto_create_tfm_node+0x8d/0x3b0 [ 125.124185][ T8917] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 125.124203][ T8917] crypto_spawn_tfm2+0x62/0xc0 [ 125.124218][ T8917] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 125.124234][ T8917] crypto_sig_init_tfm+0xba/0xf0 [ 125.124247][ T8917] crypto_create_tfm_node+0x171/0x3b0 [ 125.124266][ T8917] crypto_alloc_tfm_node+0x102/0x260 [ 125.124279][ T8917] public_key_verify_signature+0x21b/0x910 [ 125.124295][ T8917] ? __pfx_public_key_verify_signature+0x10/0x10 [ 125.124314][ T8917] ? asymmetric_key_generate_id+0x7e/0x180 [ 125.124328][ T8917] x509_check_for_self_signed+0x325/0x510 [ 125.124344][ T8917] x509_cert_parse+0x60c/0x910 [ 125.124359][ T8917] x509_key_preparse+0x65/0x9c0 [ 125.124375][ T8917] asymmetric_key_preparse+0xce/0x1d0 [ 125.124385][ T8917] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 125.124397][ T8917] __key_create_or_update+0x413/0xe30 [ 125.124416][ T8917] ? __pfx___key_create_or_update+0x10/0x10 [ 125.124432][ T8917] ? lookup_user_key+0x3f3/0x1300 [ 125.124455][ T8917] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 125.124473][ T8917] key_create_or_update+0x42/0x60 [ 125.124490][ T8917] __do_sys_add_key+0x2e8/0x460 [ 125.124502][ T8917] ? __pfx___do_sys_add_key+0x10/0x10 [ 125.124518][ T8917] do_syscall_64+0x123/0x790 [ 125.124532][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.124544][ T8917] RIP: 0033:0x7f38d659e199 [ 125.124553][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.124563][ T8917] RSP: 002b:00007f38d7506028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 125.124595][ T8917] RAX: ffffffffffffffda RBX: 00007f38d6825fa0 RCX: 00007f38d659e199 [ 125.124604][ T8917] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 125.124612][ T8917] RBP: 00007f38d66358e0 R08: ffffffffffffffff R09: 0000000000000000 [ 125.124619][ T8917] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 125.124626][ T8917] R13: 00007f38d6826038 R14: 00007f38d6825fa0 R15: 00007ffe78b4c358 [ 125.124642][ T8917] [ 125.133465][ T43] audit: type=1400 audit(1791318464.592:699): avc: denied { write } for pid=8915 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.327935][ T43] audit: type=1400 audit(1791318464.792:700): avc: denied { write } for pid=8922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.417558][ T43] audit: type=1400 audit(1791318464.882:701): avc: denied { write } for pid=8929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.541385][ T43] audit: type=1400 audit(1791318465.002:702): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.614401][ T8938] FAULT_INJECTION: forcing a failure. [ 125.614401][ T8938] name failslab, interval 1, probability 0, space 0, times 0 [ 125.614422][ T8938] CPU: 3 UID: 0 PID: 8938 Comm: syz.2.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.614437][ T8938] Tainted: [L]=SOFTLOCKUP [ 125.614441][ T8938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.614448][ T8938] Call Trace: [ 125.614452][ T8938] [ 125.614456][ T8938] dump_stack_lvl+0x100/0x190 [ 125.614476][ T8938] should_fail_ex.cold+0x5/0xa [ 125.614493][ T8938] should_failslab+0xc2/0x120 [ 125.614509][ T8938] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.614524][ T8938] ? skb_clone+0x190/0x400 [ 125.614543][ T8938] skb_clone+0x190/0x400 [ 125.614559][ T8938] netlink_deliver_tap+0xaed/0xcc0 [ 125.614595][ T8938] netlink_unicast+0x6a5/0x850 [ 125.614613][ T8938] ? __pfx_netlink_unicast+0x10/0x10 [ 125.614632][ T8938] netlink_ack+0x655/0xb80 [ 125.614651][ T8938] netlink_rcv_skb+0x333/0x420 [ 125.614666][ T8938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.614678][ T8938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.614698][ T8938] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.614715][ T8938] netlink_unicast+0x585/0x850 [ 125.614732][ T8938] ? __pfx_netlink_unicast+0x10/0x10 [ 125.614751][ T8938] netlink_sendmsg+0x8b0/0xda0 [ 125.614769][ T8938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.614786][ T8938] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.614803][ T8938] ____sys_sendmsg+0xa4d/0xbe0 [ 125.614814][ T8938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.614830][ T8938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.614845][ T8938] ? lock_acquire+0x1d1/0x380 [ 125.614858][ T8938] ? get_pid_task+0x2a/0x250 [ 125.614874][ T8938] ___sys_sendmsg+0x190/0x1e0 [ 125.614888][ T8938] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.614900][ T8938] ? get_pid_task+0x106/0x250 [ 125.614920][ T8938] ? find_held_lock+0x2b/0x80 [ 125.614946][ T8938] __sys_sendmsg+0x160/0x210 [ 125.614962][ T8938] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.614986][ T8938] do_syscall_64+0x123/0x790 [ 125.615000][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.615012][ T8938] RIP: 0033:0x7f4a77f9e199 [ 125.615021][ T8938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.615031][ T8938] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.615042][ T8938] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 125.615049][ T8938] RDX: 0000000024000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 125.615056][ T8938] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 125.615062][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.615068][ T8938] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 125.615083][ T8938] [ 125.638034][ T43] audit: type=1400 audit(1791318465.102:703): avc: denied { write } for pid=8936 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.771444][ T7773] vhci_hcd: connection reset by peer [ 125.789988][ T12] vhci_hcd vhci_hcd.0: stop threads [ 125.790489][ T12] vhci_hcd vhci_hcd.0: release socket [ 125.799044][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 125.804516][ T43] audit: type=1400 audit(1791318465.262:704): avc: denied { write } for pid=8947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.864911][ T5833] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 125.906877][ T43] audit: type=1400 audit(1791318465.372:705): avc: denied { write } for pid=8954 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.964677][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 126.006568][ T43] audit: type=1400 audit(1791318465.472:706): avc: denied { write } for pid=8956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.076367][ T43] audit: type=1400 audit(1791318465.542:707): avc: denied { write } for pid=8959 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.114653][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 126.115139][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.115955][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.115972][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.115984][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.115995][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.116014][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.201261][ T5810] hid-generic 0005:0008:0009.0002: item fetching failed at offset 0/1 [ 126.201664][ T5810] hid-generic 0005:0008:0009.0002: probe with driver hid-generic failed with error -22 [ 126.203771][ T8963] FAULT_INJECTION: forcing a failure. [ 126.203771][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 126.203790][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.2.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.203805][ T8963] Tainted: [L]=SOFTLOCKUP [ 126.203809][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.203815][ T8963] Call Trace: [ 126.203819][ T8963] [ 126.203824][ T8963] dump_stack_lvl+0x100/0x190 [ 126.203844][ T8963] should_fail_ex.cold+0x5/0xa [ 126.203860][ T8963] should_failslab+0xc2/0x120 [ 126.203877][ T8963] __kmalloc_noprof+0xfc/0x840 [ 126.203890][ T8963] ? kobject_get_path+0xcf/0x2c0 [ 126.203907][ T8963] kobject_get_path+0xcf/0x2c0 [ 126.203925][ T8963] kobject_uevent_env+0x287/0x18b0 [ 126.203943][ T8963] ? kobject_put+0xb9/0x640 [ 126.203956][ T8963] ? _raw_spin_unlock+0x28/0x50 [ 126.203969][ T8963] device_del+0x605/0x9b0 [ 126.203986][ T8963] ? __pfx_device_del+0x10/0x10 [ 126.203999][ T8963] ? __pfx_enable_work+0x10/0x10 [ 126.204011][ T8963] ? __pfx___might_resched+0x10/0x10 [ 126.204025][ T8963] hid_destroy_device+0x19c/0x240 [ 126.204038][ T8963] hidp_session_remove+0x127/0x3e0 [ 126.204050][ T8963] l2cap_unregister_user+0x163/0x1e0 [ 126.204065][ T8963] hidp_connection_del+0x127/0x2a0 [ 126.204077][ T8963] do_hidp_sock_ioctl.isra.0+0x19a/0x520 [ 126.204088][ T8963] ? __pfx_do_hidp_sock_ioctl.isra.0+0x10/0x10 [ 126.204101][ T8963] ? avc_has_extended_perms+0x33a/0x1080 [ 126.204120][ T8963] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 126.204140][ T8963] ? tomoyo_path_number_perm+0x188/0x580 [ 126.204157][ T8963] sock_do_ioctl+0x118/0x280 [ 126.204169][ T8963] ? __pfx_sock_do_ioctl+0x10/0x10 [ 126.204181][ T8963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.204197][ T8963] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.204210][ T8963] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 126.204226][ T8963] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.204244][ T8963] sock_ioctl+0x599/0x6b0 [ 126.204257][ T8963] ? __pfx_sock_ioctl+0x10/0x10 [ 126.204273][ T8963] ? selinux_file_ioctl+0x13b/0x290 [ 126.204287][ T8963] ? selinux_file_ioctl+0xb6/0x290 [ 126.204302][ T8963] ? __pfx_sock_ioctl+0x10/0x10 [ 126.204316][ T8963] __x64_sys_ioctl+0x18e/0x210 [ 126.204329][ T8963] do_syscall_64+0x123/0x790 [ 126.204344][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.204355][ T8963] RIP: 0033:0x7f4a77f9e199 [ 126.204365][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.204376][ T8963] RSP: 002b:00007f4a78e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.204387][ T8963] RAX: ffffffffffffffda RBX: 00007f4a78225fa0 RCX: 00007f4a77f9e199 [ 126.204394][ T8963] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 126.204400][ T8963] RBP: 00007f4a78e32090 R08: 0000000000000000 R09: 0000000000000000 [ 126.204407][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.204413][ T8963] R13: 00007f4a78226038 R14: 00007f4a78225fa0 R15: 00007ffe8a512438 [ 126.204427][ T8963] [ 126.244944][ T5810] hid-generic 0005:0008:0009.0003: item fetching failed at offset 0/1 [ 126.245205][ T5810] hid-generic 0005:0008:0009.0003: probe with driver hid-generic failed with error -22 [ 126.299904][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.300062][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.300334][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.300473][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.300732][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.300871][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.301113][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.301255][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.301955][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 126.302099][ T8973] openvswitch: netlink: EtherType 548 is less than min 600 [ 127.106403][ T1348] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.106419][ T1348] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 127.114716][ C0] ------------[ cut here ]------------ [ 127.114726][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 127.114745][ C0] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#0: swapper/0/0 [ 127.125250][ C0] Modules linked in: [ 127.126686][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.129858][ C0] Tainted: [L]=SOFTLOCKUP [ 127.131130][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.134140][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 127.135722][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 79 89 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 127.141414][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010046 [ 127.143220][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006a2c14e [ 127.145544][ C0] RDX: ffff88801d3cc970 RSI: ffffffff8ac4a390 RDI: ffffffff91484520 [ 127.147915][ C0] RBP: ffff888035160a58 R08: 0000000000000007 R09: 0000000000000000 [ 127.150255][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88801d3cc800 [ 127.152656][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d0c170 [ 127.155045][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b4e000(0000) knlGS:0000000000000000 [ 127.158558][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.160624][ C0] CR2: 00007f0615cb6e9c CR3: 000000004a4d1000 CR4: 0000000000352ef0 [ 127.163382][ C0] Call Trace: [ 127.164563][ C0] [ 127.165482][ C0] ? lock_acquire+0x1d1/0x380 [ 127.167147][ C0] ? call_timer_fn+0x11d/0x5f0 [ 127.169026][ C0] ? __pfx___queue_work+0x10/0x10 [ 127.170963][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 127.173208][ C0] call_timer_fn+0x198/0x5f0 [ 127.175013][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 127.176999][ C0] ? __run_timers+0x560/0xb00 [ 127.178801][ C0] ? __run_timers+0x560/0xb00 [ 127.180627][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 127.182874][ C0] __run_timers+0x570/0xb00 [ 127.184664][ C0] ? __pfx___run_timers+0x10/0x10 [ 127.186585][ C0] ? clockevents_program_event+0x1bf/0x820 [ 127.188808][ C0] ? lock_acquire+0x1d1/0x380 [ 127.190587][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 127.192371][ C0] run_timer_base+0x114/0x190 [ 127.194178][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 127.196112][ C0] run_timer_softirq+0x1a/0x50 [ 127.197804][ C0] handle_softirqs+0x1e6/0x9d0 [ 127.199650][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 127.201455][ C0] ? _raw_spin_unlock+0x28/0x50 [ 127.202918][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 127.204566][ C0] __irq_exit_rcu+0x16a/0x210 [ 127.205977][ C0] irq_exit_rcu+0x9/0x30 [ 127.207238][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 127.208883][ C0] [ 127.209741][ C0] [ 127.210631][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.212457][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 127.214097][ C0] Code: e7 92 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 c8 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 127.219675][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000202 [ 127.221459][ C0] RAX: 000000000014c201 RBX: ffffffff8ea91580 RCX: ffffffff8bd2f235 [ 127.223811][ C0] RDX: 0000000000000001 RSI: ffffffff8e38f6a8 RDI: ffffffff8c623a80 [ 127.226155][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 127.228470][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 127.230758][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 127.233093][ C0] ? ct_kernel_exit+0x125/0x180 [ 127.234551][ C0] default_idle+0x9/0x10 [ 127.235829][ C0] default_idle_call+0x6c/0xb0 [ 127.237250][ C0] do_idle+0x3ae/0x5b0 [ 127.238467][ C0] ? __pfx_do_idle+0x10/0x10 [ 127.239852][ C0] cpu_startup_entry+0x4f/0x60 [ 127.241293][ C0] rest_init+0x2d3/0x2e0 [ 127.242561][ C0] ? __pfx_rest_init+0x10/0x10 [ 127.244003][ C0] ? __pfx_kernel_init+0x10/0x10 [ 127.245480][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 127.247064][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 127.248603][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 127.250238][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 127.251907][ C0] start_kernel+0x48e/0x490 [ 127.253246][ C0] x86_64_start_reservations+0x24/0x30 [ 127.254872][ C0] x86_64_start_kernel+0x12b/0x130 [ 127.256416][ C0] common_startup_64+0x13e/0x158 [ 127.257911][ C0] [ 127.258878][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.261018][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.264027][ C0] Tainted: [L]=SOFTLOCKUP [ 127.265309][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.268246][ C0] Call Trace: [ 127.269251][ C0] [ 127.270118][ C0] dump_stack_lvl+0x100/0x190 [ 127.271535][ C0] vpanic+0x553/0x970 [ 127.272727][ C0] ? __pfx_vpanic+0x10/0x10 [ 127.274078][ C0] panic+0xd1/0xe0 [ 127.275184][ C0] ? __pfx_panic+0x10/0x10 [ 127.276536][ C0] check_panic_on_warn.cold+0x19/0x34 [ 127.278122][ C0] ? __queue_work+0xdb7/0x1370 [ 127.279600][ C0] __warn.cold+0x191/0x318 [ 127.280927][ C0] __report_bug+0x30f/0x440 [ 127.282288][ C0] ? __queue_work+0xdb7/0x1370 [ 127.283693][ C0] ? __pfx___report_bug+0x10/0x10 [ 127.285191][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 127.286769][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 127.288378][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 127.289897][ C0] report_bug_entry+0xe2/0x290 [ 127.291317][ C0] ? __queue_work+0xdbb/0x1370 [ 127.292792][ C0] handle_bug+0x1cd/0x2a0 [ 127.294086][ C0] exc_invalid_op+0x17/0x50 [ 127.295480][ C0] asm_exc_invalid_op+0x1a/0x20 [ 127.296931][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 127.298513][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 79 89 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 127.304217][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010046 [ 127.306025][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006a2c14e [ 127.308425][ C0] RDX: ffff88801d3cc970 RSI: ffffffff8ac4a390 RDI: ffffffff91484520 [ 127.310813][ C0] RBP: ffff888035160a58 R08: 0000000000000007 R09: 0000000000000000 [ 127.313231][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88801d3cc800 [ 127.315543][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d0c170 [ 127.317872][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 127.319635][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 127.321219][ C0] ? __queue_work+0xd89/0x1370 [ 127.322692][ C0] ? lock_acquire+0x1d1/0x380 [ 127.324111][ C0] ? call_timer_fn+0x11d/0x5f0 [ 127.325536][ C0] ? __pfx___queue_work+0x10/0x10 [ 127.327030][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 127.328766][ C0] call_timer_fn+0x198/0x5f0 [ 127.330206][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 127.331759][ C0] ? __run_timers+0x560/0xb00 [ 127.333174][ C0] ? __run_timers+0x560/0xb00 [ 127.334591][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 127.336370][ C0] __run_timers+0x570/0xb00 [ 127.337723][ C0] ? __pfx___run_timers+0x10/0x10 [ 127.339240][ C0] ? clockevents_program_event+0x1bf/0x820 [ 127.340995][ C0] ? lock_acquire+0x1d1/0x380 [ 127.342434][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 127.343948][ C0] run_timer_base+0x114/0x190 [ 127.345325][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 127.346858][ C0] run_timer_softirq+0x1a/0x50 [ 127.348351][ C0] handle_softirqs+0x1e6/0x9d0 [ 127.349758][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 127.351342][ C0] ? _raw_spin_unlock+0x28/0x50 [ 127.352785][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 127.354423][ C0] __irq_exit_rcu+0x16a/0x210 [ 127.355824][ C0] irq_exit_rcu+0x9/0x30 [ 127.357091][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 127.358750][ C0] [ 127.359643][ C0] [ 127.360529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.362333][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 127.363998][ C0] Code: e7 92 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 c8 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 127.369521][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000202 [ 127.371309][ C0] RAX: 000000000014c201 RBX: ffffffff8ea91580 RCX: ffffffff8bd2f235 [ 127.373624][ C0] RDX: 0000000000000001 RSI: ffffffff8e38f6a8 RDI: ffffffff8c623a80 [ 127.375943][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 127.378217][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 127.380503][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 127.382826][ C0] ? ct_kernel_exit+0x125/0x180 [ 127.384311][ C0] default_idle+0x9/0x10 [ 127.385575][ C0] default_idle_call+0x6c/0xb0 [ 127.387000][ C0] do_idle+0x3ae/0x5b0 [ 127.388263][ C0] ? __pfx_do_idle+0x10/0x10 [ 127.389654][ C0] cpu_startup_entry+0x4f/0x60 [ 127.391095][ C0] rest_init+0x2d3/0x2e0 [ 127.392467][ C0] ? __pfx_rest_init+0x10/0x10 [ 127.393946][ C0] ? __pfx_kernel_init+0x10/0x10 [ 127.395453][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 127.397061][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 127.398649][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 127.400314][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 127.401966][ C0] start_kernel+0x48e/0x490 [ 127.403372][ C0] x86_64_start_reservations+0x24/0x30 [ 127.404992][ C0] x86_64_start_kernel+0x12b/0x130 [ 127.406502][ C0] common_startup_64+0x13e/0x158 [ 127.408027][ C0] [ 127.409698][ C0] Kernel Offset: disabled [ 127.410980][ C0] Rebooting in 86400 seconds..