last executing test programs: 7.063302729s ago: executing program 1 (id=1119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x400003}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0xe}, 0x9c) 7.06300674s ago: executing program 1 (id=1120): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0xe2100, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x89, 0x6, 0x3}) 6.992899417s ago: executing program 1 (id=1121): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r0) 6.202554139s ago: executing program 2 (id=1126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, &(0x7f0000000040)="a4972d8ce22f7f0205cc6b0ac0bef982a524a515149f3eb4050af9b1c79027e5e70300a90ab947af0ac7194a85174fa797bd49b26e", 0x35, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.202445346s ago: executing program 2 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 6.11287981s ago: executing program 2 (id=1128): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) 4.028312473s ago: executing program 1 (id=1138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)='(') 3.621423759s ago: executing program 0 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0xffe) 3.621169143s ago: executing program 0 (id=1143): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545", 0x62}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x2080, &(0x7f0000000880)=ANY=[@ANYBLOB="c000"/14, @ANYBLOB="8ec5e455ff015160a7aa064057c269f594bf0c13fe80d1c5def8d5f64814af3c8d67e281eb043a69", @ANYBLOB="7955c697a30930303005000800003030302c757365735f69643d", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',']) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/89, 0xffffff1a}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2, 0x0, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 5) 3.283278268s ago: executing program 0 (id=1144): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xa) 3.283125772s ago: executing program 0 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 3.223518185s ago: executing program 0 (id=1146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r6 = dup3(r1, r5, 0x80000) read$FUSE(r6, &(0x7f0000000dc0)={0x2020}, 0x2020) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x19, 0x200, &(0x7f0000000600)="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"}) 3.083319647s ago: executing program 2 (id=1147): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r0) 1.734205758s ago: executing program 1 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1.653408903s ago: executing program 1 (id=1155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) 182.377018ms ago: executing program 0 (id=1157): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="8d", 0x1, 0x80001, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xffffff7f}], 0x1, 0x1000000, 0x0) 182.194429ms ago: executing program 3 (id=1158): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x9, '\x00', @st={0x4, [{0x2, @svalue=0x5}, {0x1, @uvalue=0x8}, {0x2, @svalue=0x4}, {0xfffffffffffffffe, @uvalue=0x9}]}, 0x3}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0xa) 122.906074ms ago: executing program 3 (id=1159): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0xe2100, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) 122.552691ms ago: executing program 3 (id=1160): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x8840) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x3, 0x9, @remote, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "1313be0257463230", "53d8a4403205a5b3c088ed2a709eb8ebab3147145d051f07c94a202db573be5b", "bd86b485", '18X>egg}'}, 0x38) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xfdef) 60.717631ms ago: executing program 3 (id=1161): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x400003}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0xe}, 0x9c) 60.425659ms ago: executing program 2 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x1000000) 60.261617ms ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 371.6µs ago: executing program 2 (id=1164): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="1b0001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000004a008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getdents(r5, &(0x7f0000000140)=""/80, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r2, 0x2652b000) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 0s ago: executing program 3 (id=1165): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7, 0x2}], 0x0) r0 = fsopen(&(0x7f0000000580)='qnx4\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') prctl$PR_SET_SECCOMP(0x4f, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2b, 'hugetlb'}, {0x2d, 'devices'}, {0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0x1d) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) mkdirat(r3, &(0x7f0000000300)='./bus\x00', 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000100)={[{@nfs_export_on}, {@redirect_dir_off}, {@volatile}]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) kernel console output (not intermixed with test programs): 2.357701][ T8635] ? __asan_memset+0x23/0x50 [ 172.357719][ T8635] ? __pfx__copy_from_iter+0x10/0x10 [ 172.357733][ T8635] ? __pfx___alloc_skb+0x10/0x10 [ 172.357757][ T8635] netlink_sendmsg+0x808/0xda0 [ 172.357774][ T8635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.357787][ T8635] ? __might_fault+0x40/0x140 [ 172.357808][ T8635] ____sys_sendmsg+0x9e1/0xb70 [ 172.357821][ T8635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.357836][ T8635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.357855][ T8635] ___sys_sendmsg+0x190/0x1e0 [ 172.357870][ T8635] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.357899][ T8635] __sys_sendmsg+0x170/0x220 [ 172.357917][ T8635] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.357940][ T8635] ? rcu_is_watching+0x12/0xc0 [ 172.357959][ T8635] do_syscall_64+0x115/0x870 [ 172.357974][ T8635] ? clear_bhb_loop+0x40/0x90 [ 172.357987][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.357999][ T8635] RIP: 0033:0x7f019ed9ce59 [ 172.358009][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.358020][ T8635] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.358032][ T8635] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 172.358041][ T8635] RDX: 0000000020000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 172.358048][ T8635] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.358055][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.358064][ T8635] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 172.358078][ T8635] [ 172.358332][ T5831] usb 7-1: USB disconnect, device number 49 [ 172.420777][ T8638] binder: 8637:8638 ioctl c0306201 2000000003c0 returned -14 [ 172.439926][ T8638] binder: 8637:8638 ioctl c0306201 200000000680 returned -14 [ 172.485789][ T8648] FAULT_INJECTION: forcing a failure. [ 172.485789][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 172.490432][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.0.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.490450][ T8648] Tainted: [L]=SOFTLOCKUP [ 172.490454][ T8648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.490461][ T8648] Call Trace: [ 172.490466][ T8648] [ 172.490471][ T8648] dump_stack_lvl+0x100/0x190 [ 172.490488][ T8648] should_fail_ex.cold+0x5/0xa [ 172.490505][ T8648] ? tomoyo_encode2+0xfb/0x3c0 [ 172.490522][ T8648] should_failslab+0xc2/0x120 [ 172.490535][ T8648] __kmalloc_noprof+0xe0/0x850 [ 172.490551][ T8648] ? d_absolute_path+0x136/0x1b0 [ 172.490567][ T8648] tomoyo_encode2+0xfb/0x3c0 [ 172.490587][ T8648] tomoyo_encode+0x29/0x50 [ 172.490603][ T8648] tomoyo_realpath_from_path+0x18c/0x690 [ 172.490625][ T8648] tomoyo_path_number_perm+0x23c/0x580 [ 172.490639][ T8648] ? tomoyo_path_number_perm+0x22e/0x580 [ 172.490656][ T8648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.490677][ T8648] ? __lock_acquire+0x4a5/0x2630 [ 172.490699][ T8648] ? __pfx___might_resched+0x10/0x10 [ 172.490716][ T8648] ? find_held_lock+0x2b/0x80 [ 172.490725][ T8648] ? mnt_get_write_access+0x52/0x2f0 [ 172.490739][ T8648] ? down_write_killable+0x152/0x250 [ 172.490756][ T8648] ? __pfx_down_write_killable+0x10/0x10 [ 172.490775][ T8648] security_path_chmod+0x121/0x2c0 [ 172.490792][ T8648] chmod_common+0x19a/0x4d0 [ 172.490809][ T8648] ? __pfx_chmod_common+0x10/0x10 [ 172.490833][ T8648] do_fchmodat+0x10a/0x1b0 [ 172.490848][ T8648] ? __pfx_do_fchmodat+0x10/0x10 [ 172.490867][ T8648] __x64_sys_chmod+0x5e/0x80 [ 172.490882][ T8648] do_syscall_64+0x115/0x870 [ 172.490897][ T8648] ? clear_bhb_loop+0x40/0x90 [ 172.490911][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.490923][ T8648] RIP: 0033:0x7f019ed9ce59 [ 172.490933][ T8648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.490944][ T8648] RSP: 002b:00007f019fca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 172.490955][ T8648] RAX: ffffffffffffffda RBX: 00007f019f016090 RCX: 00007f019ed9ce59 [ 172.490962][ T8648] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 00002000000000c0 [ 172.490969][ T8648] RBP: 00007f019fca5090 R08: 0000000000000000 R09: 0000000000000000 [ 172.490976][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.490982][ T8648] R13: 00007f019f016128 R14: 00007f019f016090 R15: 00007ffd8348b3a8 [ 172.490997][ T8648] [ 172.491008][ T8648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.590227][ T8651] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 172.598421][ T40] audit: type=1400 audit(1780821779.084:575): avc: denied { mount } for pid=8650 comm="syz.1.964" name="/" dev="autofs" ino=24542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 173.235277][ T9] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 173.386131][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 173.389529][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.393479][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.396480][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.400388][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.403626][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.406942][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.409756][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.414002][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.417171][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.420597][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.423843][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.428174][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.431196][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.434643][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.437425][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.441432][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.445487][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.448557][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.451241][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.455286][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.458174][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.461414][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.464249][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.468328][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.471744][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.477630][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.482014][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.486319][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.492462][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.496407][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.499260][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.503782][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 173.508805][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 173.512646][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 173.516882][ T9] usb 8-1: Product: syz [ 173.518675][ T9] usb 8-1: Manufacturer: syz [ 173.520550][ T9] usb 8-1: SerialNumber: syz [ 173.530522][ T9] usb 8-1: config 0 descriptor?? [ 173.535927][ T9] yurex 8-1:0.0: Could not find endpoints [ 173.549081][ T40] audit: type=1400 audit(1780821780.034:576): avc: denied { sqpoll } for pid=8663 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.588251][ T8664] xt_CT: No such helper "pptp" [ 173.616262][ T8669] FAULT_INJECTION: forcing a failure. [ 173.616262][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 173.620181][ T8669] CPU: 2 UID: 0 PID: 8669 Comm: syz.0.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.620199][ T8669] Tainted: [L]=SOFTLOCKUP [ 173.620203][ T8669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.620210][ T8669] Call Trace: [ 173.620214][ T8669] [ 173.620220][ T8669] dump_stack_lvl+0x100/0x190 [ 173.620236][ T8669] should_fail_ex.cold+0x5/0xa [ 173.620252][ T8669] ? do_insn_ioctl+0xda/0x4e0 [ 173.620269][ T8669] should_failslab+0xc2/0x120 [ 173.620282][ T8669] __kmalloc_noprof+0xe0/0x850 [ 173.620302][ T8669] do_insn_ioctl+0xda/0x4e0 [ 173.620318][ T8669] comedi_unlocked_ioctl+0xf68/0x3310 [ 173.620333][ T8669] ? tomoyo_path_number_perm+0x188/0x580 [ 173.620352][ T8669] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 173.620370][ T8669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.620385][ T8669] ? do_vfs_ioctl+0x226/0x13e0 [ 173.620398][ T8669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.620410][ T8669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 173.620433][ T8669] ? __fget_files+0x215/0x3d0 [ 173.620446][ T8669] ? hook_file_ioctl_common+0x149/0x410 [ 173.620462][ T8669] ? selinux_file_ioctl+0x13b/0x290 [ 173.620478][ T8669] ? selinux_file_ioctl+0xb6/0x290 [ 173.620496][ T8669] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 173.620512][ T8669] __x64_sys_ioctl+0x18e/0x210 [ 173.620524][ T8669] do_syscall_64+0x115/0x870 [ 173.620539][ T8669] ? clear_bhb_loop+0x40/0x90 [ 173.620553][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.620564][ T8669] RIP: 0033:0x7f019ed9ce59 [ 173.620574][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.620585][ T8669] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.620596][ T8669] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 173.620603][ T8669] RDX: 0000200000000300 RSI: 000000008028640c RDI: 0000000000000003 [ 173.620609][ T8669] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.620616][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.620623][ T8669] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 173.620637][ T8669] [ 173.738517][ T9] usb 8-1: USB disconnect, device number 59 [ 174.015232][ T5831] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 174.175235][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 174.179299][ T5831] usb 5-1: config 0 has no interfaces? [ 174.183846][ T5831] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.187713][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.190914][ T5831] usb 5-1: Product: syz [ 174.192719][ T5831] usb 5-1: Manufacturer: syz [ 174.194914][ T5831] usb 5-1: SerialNumber: syz [ 174.200429][ T5831] usb 5-1: config 0 descriptor?? [ 174.535166][ T1046] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 174.695152][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 174.698145][ T1046] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.702126][ T1046] usb 8-1: config 0 interface 0 has no altsetting 0 [ 174.704199][ T1046] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 174.707124][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.711061][ T1046] usb 8-1: config 0 descriptor?? [ 175.117539][ T1046] usbhid 8-1:0.0: can't add hid device: -71 [ 175.119453][ T1046] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 175.123530][ T1046] usb 8-1: USB disconnect, device number 60 [ 175.482381][ T8644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.502366][ T40] audit: type=1400 audit(1780821781.984:577): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 175.521099][ T40] audit: type=1400 audit(1780821782.004:578): avc: denied { write } for pid=8675 comm="syz.1.973" path="socket:[27992]" dev="sockfs" ino=27992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.531848][ T40] audit: type=1400 audit(1780821782.014:579): avc: denied { create } for pid=8675 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.555464][ T5747] Bluetooth: hci2: command 0x0406 tx timeout [ 175.557123][ T62] Bluetooth: hci1: command 0x0406 tx timeout [ 175.557149][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 175.570197][ T8682] FAULT_INJECTION: forcing a failure. [ 175.570197][ T8682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.576213][ T8682] CPU: 1 UID: 0 PID: 8682 Comm: syz.2.975 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.576230][ T8682] Tainted: [L]=SOFTLOCKUP [ 175.576234][ T8682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.576241][ T8682] Call Trace: [ 175.576245][ T8682] [ 175.576249][ T8682] dump_stack_lvl+0x100/0x190 [ 175.576267][ T8682] should_fail_ex.cold+0x5/0xa [ 175.576283][ T8682] __kvm_read_guest_page+0x186/0x250 [ 175.576296][ T8682] kvm_fetch_guest_virt+0x128/0x1a0 [ 175.576316][ T8682] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 175.576333][ T8682] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 175.576348][ T8682] ? vmx_get_segment+0x1d0/0x770 [ 175.576362][ T8682] ? emulator_get_segment+0x38d/0x440 [ 175.576376][ T8682] x86_decode_insn+0x3ca/0x6d80 [ 175.576387][ T8682] ? __lock_acquire+0x4a5/0x2630 [ 175.576406][ T8682] ? __pfx_x86_decode_insn+0x10/0x10 [ 175.576418][ T8682] ? vmx_cache_reg+0x54f/0x7b0 [ 175.576429][ T8682] ? init_decode_cache+0xd/0x2a0 [ 175.576440][ T8682] ? init_emulate_ctxt+0x415/0x6d0 [ 175.576450][ T8682] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 175.576461][ T8682] ? __pfx_x86_decode_insn+0x10/0x10 [ 175.576473][ T8682] ? init_decode_cache+0xd/0x2a0 [ 175.576484][ T8682] ? init_emulate_ctxt+0x415/0x6d0 [ 175.576495][ T8682] x86_emulate_instruction+0x1dcc/0x1f80 [ 175.576515][ T8682] ? mmio_info_in_cache+0x17b/0x550 [ 175.576534][ T8682] kvm_mmu_page_fault+0xb6f/0x1a70 [ 175.576551][ T8682] ? __kvm_io_bus_write+0x2f6/0x3b0 [ 175.576569][ T8682] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 175.576586][ T8682] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 175.576602][ T8682] ? vmx_vcpu_enter_exit+0x136/0x1e0 [ 175.576624][ T8682] handle_ept_misconfig+0x120/0x400 [ 175.576641][ T8682] vmx_handle_exit+0x1b87/0x1f30 [ 175.576658][ T8682] vcpu_run+0x34cf/0x5ca0 [ 175.576678][ T8682] ? x86_emulate_instruction+0x27e/0x1f80 [ 175.576723][ T8682] ? __pfx_vcpu_run+0x10/0x10 [ 175.576748][ T8682] ? complete_emulated_mmio+0x102/0x710 [ 175.576766][ T8682] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 175.576782][ T8682] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 175.576803][ T8682] kvm_vcpu_ioctl+0x730/0x1720 [ 175.576815][ T8682] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.576827][ T8682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.576842][ T8682] ? do_vfs_ioctl+0x226/0x13e0 [ 175.576854][ T8682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.576866][ T8682] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.576889][ T8682] ? __fget_files+0x215/0x3d0 [ 175.576902][ T8682] ? hook_file_ioctl_common+0x149/0x410 [ 175.576918][ T8682] ? selinux_file_ioctl+0x13b/0x290 [ 175.576935][ T8682] ? selinux_file_ioctl+0xb6/0x290 [ 175.576952][ T8682] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.576965][ T8682] __x64_sys_ioctl+0x18e/0x210 [ 175.576977][ T8682] do_syscall_64+0x115/0x870 [ 175.576991][ T8682] ? clear_bhb_loop+0x40/0x90 [ 175.577005][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.577017][ T8682] RIP: 0033:0x7fb4dd99ce59 [ 175.577027][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.577038][ T8682] RSP: 002b:00007fb4de8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.577049][ T8682] RAX: ffffffffffffffda RBX: 00007fb4ddc15fa0 RCX: 00007fb4dd99ce59 [ 175.577056][ T8682] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 175.577063][ T8682] RBP: 00007fb4de8be090 R08: 0000000000000000 R09: 0000000000000000 [ 175.577069][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.577076][ T8682] R13: 00007fb4ddc16038 R14: 00007fb4ddc15fa0 R15: 00007fff4f126278 [ 175.577090][ T8682] [ 175.697392][ T40] audit: type=1400 audit(1780821782.074:580): avc: denied { mount } for pid=8675 comm="syz.1.973" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 175.751014][ T8690] lo speed is unknown, defaulting to 1000 [ 175.758263][ T8690] lo speed is unknown, defaulting to 1000 [ 175.761935][ T8690] lo speed is unknown, defaulting to 1000 [ 175.803161][ T8698] bond2: entered promiscuous mode [ 175.920826][ T5845] lo speed is unknown, defaulting to 1000 [ 175.923889][ T8690] infiniband sz1: set active [ 175.925621][ T8690] infiniband sz1: added lo [ 175.938874][ T8690] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 175.944321][ T8690] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 175.949523][ T8690] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 175.976853][ T8690] RDS/IB: sz1: added [ 175.978341][ T8690] smc: adding ib device sz1 with port count 1 [ 175.980335][ T8690] smc: ib device sz1 port 1 has no pnetid [ 175.984299][ T5845] lo speed is unknown, defaulting to 1000 [ 175.989356][ T8690] lo speed is unknown, defaulting to 1000 [ 176.036854][ T5838] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 176.115042][ T8690] lo speed is unknown, defaulting to 1000 [ 176.186047][ T5838] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 176.189672][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.193494][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.198634][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.202454][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.207659][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.210807][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.214625][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.219889][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.222830][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.227689][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.230401][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.234127][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.243729][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.247015][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.249797][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.253666][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.256800][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.259938][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.262653][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.267159][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.269954][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.271882][ T8690] lo speed is unknown, defaulting to 1000 [ 176.273106][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.280103][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.284108][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.287149][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.290460][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.293271][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.297791][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.300619][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.303708][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.306729][ T5838] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.310650][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.314135][ T5838] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.317195][ T5838] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.319767][ T5838] usb 8-1: Product: syz [ 176.321146][ T5838] usb 8-1: Manufacturer: syz [ 176.322620][ T5838] usb 8-1: SerialNumber: syz [ 176.326272][ T5838] usb 8-1: config 0 descriptor?? [ 176.329892][ T5838] yurex 8-1:0.0: Could not find endpoints [ 176.383086][ T8690] lo speed is unknown, defaulting to 1000 [ 176.506710][ T40] audit: type=1400 audit(1780821782.994:581): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.531756][ T5838] usb 8-1: USB disconnect, device number 61 [ 176.675616][ T5845] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 176.685533][ T40] audit: type=1400 audit(1780821783.174:582): avc: denied { bind } for pid=8710 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.794414][ T8717] Bluetooth: MGMT ver 1.23 [ 176.874608][ T5887] usb 5-1: USB disconnect, device number 50 [ 176.979470][ T8727] FAULT_INJECTION: forcing a failure. [ 176.979470][ T8727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.983441][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz.0.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.983460][ T8727] Tainted: [L]=SOFTLOCKUP [ 176.983464][ T8727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.983470][ T8727] Call Trace: [ 176.983475][ T8727] [ 176.983480][ T8727] dump_stack_lvl+0x100/0x190 [ 176.983497][ T8727] should_fail_ex.cold+0x5/0xa [ 176.983513][ T8727] _copy_from_user+0x2e/0xd0 [ 176.983529][ T8727] binder_thread_write+0x12af/0x4db0 [ 176.983544][ T8727] ? __kasan_slab_free+0x5f/0x80 [ 176.983555][ T8727] ? kfree+0x223/0x6c0 [ 176.983572][ T8727] ? __lock_acquire+0x4a5/0x2630 [ 176.983586][ T8727] ? __pfx_binder_thread_write+0x10/0x10 [ 176.983599][ T8727] ? binder_debug+0xe0/0x190 [ 176.983615][ T8727] ? __pfx_binder_debug+0x10/0x10 [ 176.983633][ T8727] ? binder_debug+0xe0/0x190 [ 176.983649][ T8727] ? __pfx_binder_debug+0x10/0x10 [ 176.983674][ T8727] binder_ioctl+0x28f8/0x7550 [ 176.983691][ T8727] ? tomoyo_path_number_perm+0x188/0x580 [ 176.983711][ T8727] ? __pfx_binder_ioctl+0x10/0x10 [ 176.983724][ T8727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.983738][ T8727] ? do_vfs_ioctl+0x226/0x13e0 [ 176.983750][ T8727] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.983762][ T8727] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.983785][ T8727] ? hook_file_ioctl_common+0x149/0x410 [ 176.983800][ T8727] ? selinux_file_ioctl+0x13b/0x290 [ 176.983817][ T8727] ? selinux_file_ioctl+0xb6/0x290 [ 176.983834][ T8727] ? __pfx_binder_ioctl+0x10/0x10 [ 176.983847][ T8727] __x64_sys_ioctl+0x18e/0x210 [ 176.983860][ T8727] do_syscall_64+0x115/0x870 [ 176.983874][ T8727] ? clear_bhb_loop+0x40/0x90 [ 176.983887][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.983899][ T8727] RIP: 0033:0x7f019ed9ce59 [ 176.983909][ T8727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.983920][ T8727] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.983931][ T8727] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 176.983938][ T8727] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 176.983945][ T8727] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.983951][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.983958][ T8727] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 176.983972][ T8727] [ 176.983977][ T8727] binder: 8726:8727 ioctl c0306201 2000000001c0 returned -14 [ 177.010826][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.105229][ T9] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 177.236511][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.353034][ T5845] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.372314][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.405220][ T1046] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 177.407745][ T5887] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 177.432763][ T5845] usb 7-1: config 0 descriptor?? [ 177.485280][ T9] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 177.565283][ T1046] usb 5-1: Using ep0 maxpacket: 32 [ 177.567795][ T5887] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 177.571354][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.574670][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.577875][ T1046] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.581641][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.585785][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.588821][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.592093][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.595067][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.599086][ T1046] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.601891][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.603897][ T1046] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.606499][ T1046] usb 5-1: Product: syz [ 177.607842][ T1046] usb 5-1: Manufacturer: syz [ 177.609375][ T1046] usb 5-1: SerialNumber: syz [ 177.611125][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.615437][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.615485][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.620815][ T1046] usb 5-1: config 0 descriptor?? [ 177.622424][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.626399][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.626658][ T8738] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 177.634421][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.640092][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.643679][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.647698][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.650817][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.654027][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.656881][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.660695][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.663460][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.666814][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.669597][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.673600][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.676971][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.680230][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.683218][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.687252][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.690155][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.693434][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.696307][ T5887] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.700258][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.704754][ T5887] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 177.707625][ T5887] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 177.710311][ T5887] usb 8-1: Product: syz [ 177.712018][ T5887] usb 8-1: Manufacturer: syz [ 177.712508][ T5845] usbhid 7-1:0.0: can't add hid device: -71 [ 177.713791][ T5887] usb 8-1: SerialNumber: syz [ 177.719942][ T5887] usb 8-1: config 0 descriptor?? [ 177.724640][ T5887] yurex 8-1:0.0: Could not find endpoints [ 177.733167][ T5845] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 177.735432][ T9] usb usb6-port1: attempt power cycle [ 177.831448][ T5845] usb 7-1: USB disconnect, device number 50 [ 177.836316][ T10] usb 5-1: USB disconnect, device number 51 [ 177.927707][ T1491] usb 8-1: USB disconnect, device number 62 [ 178.097371][ T9] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 178.116926][ T9] usb 6-1: device descriptor read/8, error -71 [ 178.118262][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 178.355329][ T9] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 178.375605][ T9] usb 6-1: device descriptor read/8, error -71 [ 178.408108][ T5845] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 178.487986][ T9] usb usb6-port1: unable to enumerate USB device [ 178.593180][ T5845] usb 7-1: device descriptor read/64, error -71 [ 178.781326][ T8751] syzkaller1: entered promiscuous mode [ 178.783168][ T8751] syzkaller1: entered allmulticast mode [ 178.933956][ T5845] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 179.147555][ T5845] usb 7-1: device descriptor read/64, error -71 [ 179.270223][ T5845] usb usb7-port1: attempt power cycle [ 179.634878][ T8761] Device name not specified. [ 179.634878][ T8761] [ 179.638201][ T8761] syzkaller1: entered promiscuous mode [ 179.640291][ T8761] syzkaller1: entered allmulticast mode [ 179.914081][ T8763] syzkaller1: entered promiscuous mode [ 179.915832][ T8763] syzkaller1: entered allmulticast mode [ 180.091810][ T8765] /dev/sg0: Can't lookup blockdev [ 180.151854][ T8768] bond3: ARP target 9.0.0.0 is already present [ 180.154300][ T8768] bond3: option arp_ip_target: invalid value (9) [ 180.179414][ T8768] bond3 (unregistering): Released all slaves [ 180.207729][ T8767] bond3: ARP target 9.0.0.0 is already present [ 180.210147][ T8767] bond3: option arp_ip_target: invalid value (9) [ 180.231588][ T8767] bond3 (unregistering): Released all slaves [ 180.735166][ T1046] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 180.865185][ T1046] usb 5-1: device descriptor read/64, error -71 [ 181.125467][ T1046] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 181.265184][ T1046] usb 5-1: device descriptor read/64, error -71 [ 181.376056][ T1046] usb usb5-port1: attempt power cycle [ 181.392314][ T8777] FAULT_INJECTION: forcing a failure. [ 181.392314][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 181.397075][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.3.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.397093][ T8777] Tainted: [L]=SOFTLOCKUP [ 181.397097][ T8777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.397105][ T8777] Call Trace: [ 181.397109][ T8777] [ 181.397113][ T8777] dump_stack_lvl+0x100/0x190 [ 181.397130][ T8777] should_fail_ex.cold+0x5/0xa [ 181.397146][ T8777] should_failslab+0xc2/0x120 [ 181.397160][ T8777] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 181.397176][ T8777] ? sctp_chunkify+0x51/0x2f0 [ 181.397192][ T8777] ? __pfx___alloc_skb+0x10/0x10 [ 181.397211][ T8777] sctp_chunkify+0x51/0x2f0 [ 181.397227][ T8777] _sctp_make_chunk+0x148/0x270 [ 181.397243][ T8777] sctp_make_control+0x2f/0x2d0 [ 181.397259][ T8777] sctp_make_heartbeat+0xad/0x2f0 [ 181.397276][ T8777] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 181.397292][ T8777] ? is_bpf_text_address+0x94/0x1a0 [ 181.397309][ T8777] ? sctp_sm_lookup_event+0x10e/0x520 [ 181.397325][ T8777] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 181.397342][ T8777] ? __pfx_sctp_pname+0x10/0x10 [ 181.397358][ T8777] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 181.397373][ T8777] ? __pfx_sctp_pname+0x10/0x10 [ 181.397388][ T8777] sctp_do_sm+0x17a/0x5be0 [ 181.397402][ T8777] ? __pfx_stack_trace_save+0x10/0x10 [ 181.397414][ T8777] ? stack_depot_save_flags+0x27/0x9d0 [ 181.397430][ T8777] ? _parse_integer_limit+0x17f/0x1d0 [ 181.397449][ T8777] ? __pfx_sctp_do_sm+0x10/0x10 [ 181.397462][ T8777] ? kasan_save_stack+0x30/0x50 [ 181.397473][ T8777] ? kasan_save_track+0x14/0x30 [ 181.397482][ T8777] ? __kasan_kmalloc+0xaa/0xb0 [ 181.397492][ T8777] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 181.397510][ T8777] ? sctp_setsockopt+0x511/0xb370 [ 181.397542][ T8777] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 181.397559][ T8777] sctp_apply_peer_addr_params+0x110/0x3690 [ 181.397581][ T8777] sctp_setsockopt+0x28d6/0xb370 [ 181.397598][ T8777] ? __pfx_sctp_setsockopt+0x10/0x10 [ 181.397611][ T8777] ? __fget_files+0x215/0x3d0 [ 181.397627][ T8777] ? selinux_socket_setsockopt+0x6a/0x80 [ 181.397642][ T8777] ? sock_common_setsockopt+0x2e/0xf0 [ 181.397654][ T8777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.397668][ T8777] do_sock_setsockopt+0xf3/0x1d0 [ 181.397686][ T8777] __sys_setsockopt+0x195/0x220 [ 181.397705][ T8777] __x64_sys_setsockopt+0xbd/0x160 [ 181.397721][ T8777] ? do_syscall_64+0x90/0x870 [ 181.397736][ T8777] ? lockdep_hardirqs_on+0x78/0x100 [ 181.397750][ T8777] do_syscall_64+0x115/0x870 [ 181.397764][ T8777] ? clear_bhb_loop+0x40/0x90 [ 181.397778][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.397789][ T8777] RIP: 0033:0x7f419db9ce59 [ 181.397800][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.397810][ T8777] RSP: 002b:00007f419ea12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.397822][ T8777] RAX: ffffffffffffffda RBX: 00007f419de15fa0 RCX: 00007f419db9ce59 [ 181.397829][ T8777] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 181.397835][ T8777] RBP: 00007f419ea12090 R08: 000000000000009c R09: 0000000000000000 [ 181.397842][ T8777] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 181.397849][ T8777] R13: 00007f419de16038 R14: 00007f419de15fa0 R15: 00007ffc5d354cf8 [ 181.397863][ T8777] [ 181.404563][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 181.404572][ T40] audit: type=1400 audit(1780821787.884:584): avc: denied { map } for pid=8778 comm="syz.2.1010" path="socket:[27111]" dev="sockfs" ino=27111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 181.455880][ T8786] overlayfs: failed lookup in lower (newroot/248, name='bus', err=-40): overlapping layers [ 181.514980][ T40] audit: type=1400 audit(1780821787.994:585): avc: denied { ioctl } for pid=8784 comm="syz.3.1011" path="socket:[27112]" dev="sockfs" ino=27112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.526772][ T8786] overlayfs: failed lookup in lower (newroot/248, name='file0', err=-40): overlapping layers [ 181.536484][ T8786] overlayfs: failed lookup in lower (newroot/248, name='file0', err=-40): overlapping layers [ 181.540561][ T8786] overlayfs: failed lookup in lower (newroot/248, name='file0', err=-40): overlapping layers [ 181.569484][ T8792] syzkaller0: entered promiscuous mode [ 181.571150][ T8792] syzkaller0: entered allmulticast mode [ 181.597973][ T8795] netlink: 'syz.2.1012': attribute type 1 has an invalid length. [ 181.618588][ T40] audit: type=1400 audit(1780821788.104:586): avc: denied { watch watch_reads } for pid=8793 comm="syz.1.1014" path="pipe:[28141]" dev="pipefs" ino=28141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 181.695389][ T8794] kvm: kvm [8793]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 181.698416][ T8794] kvm: kvm [8793]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 181.714729][ T8794] kvm: kvm [8793]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 181.733023][ T8794] kvm: kvm [8793]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 181.735853][ T1046] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 181.738462][ T8794] kvm: kvm [8793]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 181.755715][ T1046] usb 5-1: device descriptor read/8, error -71 [ 181.995175][ T1046] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 182.017616][ T1046] usb 5-1: device descriptor read/8, error -71 [ 182.135703][ T1046] usb usb5-port1: unable to enumerate USB device [ 182.557176][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 182.597645][ T8805] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 182.600005][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.602135][ T8805] IPv6: NLM_F_CREATE should be set when creating new route [ 182.607825][ T8805] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 182.610232][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.632099][ T40] audit: type=1400 audit(1780821789.114:587): avc: denied { bind } for pid=8804 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.638164][ T40] audit: type=1400 audit(1780821789.124:588): avc: denied { listen } for pid=8804 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.645325][ T40] audit: type=1400 audit(1780821789.134:589): avc: denied { accept } for pid=8804 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.455023][ T8808] FAULT_INJECTION: forcing a failure. [ 183.455023][ T8808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.459246][ T8808] CPU: 1 UID: 0 PID: 8808 Comm: syz.3.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.459263][ T8808] Tainted: [L]=SOFTLOCKUP [ 183.459267][ T8808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.459274][ T8808] Call Trace: [ 183.459279][ T8808] [ 183.459283][ T8808] dump_stack_lvl+0x100/0x190 [ 183.459300][ T8808] should_fail_ex.cold+0x5/0xa [ 183.459316][ T8808] _copy_to_user+0x32/0xd0 [ 183.459331][ T8808] simple_read_from_buffer+0xcb/0x170 [ 183.459347][ T8808] proc_fail_nth_read+0x1af/0x230 [ 183.459360][ T8808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.459374][ T8808] ? rw_verify_area+0xce/0x6d0 [ 183.459384][ T8808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.459396][ T8808] vfs_read+0x1e4/0xb30 [ 183.459410][ T8808] ? __pfx_vfs_read+0x10/0x10 [ 183.459422][ T8808] ? __fget_files+0x215/0x3d0 [ 183.459439][ T8808] ? __fget_files+0x21f/0x3d0 [ 183.459457][ T8808] ksys_read+0x12a/0x250 [ 183.459470][ T8808] ? __pfx_ksys_read+0x10/0x10 [ 183.459483][ T8808] ? rcu_is_watching+0x12/0xc0 [ 183.459502][ T8808] do_syscall_64+0x115/0x870 [ 183.459517][ T8808] ? clear_bhb_loop+0x40/0x90 [ 183.459530][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.459542][ T8808] RIP: 0033:0x7f419db5d68e [ 183.459552][ T8808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.459563][ T8808] RSP: 002b:00007f419ea11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.459574][ T8808] RAX: ffffffffffffffda RBX: 00007f419ea126c0 RCX: 00007f419db5d68e [ 183.459581][ T8808] RDX: 000000000000000f RSI: 00007f419ea120a0 RDI: 0000000000000005 [ 183.459587][ T8808] RBP: 00007f419ea12090 R08: 0000000000000000 R09: 0000000000000000 [ 183.459594][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.459600][ T8808] R13: 00007f419de16038 R14: 00007f419de15fa0 R15: 00007ffc5d354cf8 [ 183.459615][ T8808] [ 183.553217][ T40] audit: type=1400 audit(1780821790.034:590): avc: denied { watch } for pid=8809 comm="syz.0.1019" path="/279/bus" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.560241][ T40] audit: type=1400 audit(1780821790.034:591): avc: denied { watch_sb watch_reads } for pid=8809 comm="syz.0.1019" path="/279/bus" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.630884][ T8816] lo speed is unknown, defaulting to 1000 [ 183.811711][ T8821] binder: 8820:8821 ioctl c0306201 200000000080 returned -14 [ 183.818654][ T8821] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 183.868688][ T40] audit: type=1400 audit(1780821790.354:592): avc: denied { write } for pid=8822 comm="syz.1.1023" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 183.871848][ T8823] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1023'. [ 184.139995][ T8833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8833 comm=syz.1.1024 [ 184.183043][ T8836] FAULT_INJECTION: forcing a failure. [ 184.183043][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 184.188243][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: syz.1.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.188261][ T8836] Tainted: [L]=SOFTLOCKUP [ 184.188265][ T8836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.188272][ T8836] Call Trace: [ 184.188275][ T8836] [ 184.188280][ T8836] dump_stack_lvl+0x100/0x190 [ 184.188297][ T8836] should_fail_ex.cold+0x5/0xa [ 184.188312][ T8836] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 184.188330][ T8836] should_failslab+0xc2/0x120 [ 184.188343][ T8836] __kmalloc_noprof+0xe0/0x850 [ 184.188363][ T8836] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 184.188383][ T8836] genl_family_rcv_msg_doit+0xc7/0x300 [ 184.188400][ T8836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.188420][ T8836] ? bpf_lsm_capable+0x9/0x10 [ 184.188431][ T8836] ? security_capable+0x80/0x260 [ 184.188446][ T8836] ? ns_capable+0xd2/0xf0 [ 184.188463][ T8836] genl_rcv_msg+0x560/0x800 [ 184.188480][ T8836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.188495][ T8836] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 184.188511][ T8836] ? __pfx_nl80211_del_station+0x10/0x10 [ 184.188525][ T8836] ? __pfx_nl80211_post_doit+0x10/0x10 [ 184.188546][ T8836] netlink_rcv_skb+0x159/0x420 [ 184.188578][ T8836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.188596][ T8836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.188615][ T8836] ? netlink_deliver_tap+0x1ae/0xcc0 [ 184.188631][ T8836] genl_rcv+0x28/0x40 [ 184.188644][ T8836] netlink_unicast+0x585/0x850 [ 184.188660][ T8836] ? __pfx_netlink_unicast+0x10/0x10 [ 184.188678][ T8836] netlink_sendmsg+0x8b0/0xda0 [ 184.188694][ T8836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.188707][ T8836] ? __might_fault+0x40/0x140 [ 184.188803][ T8836] ____sys_sendmsg+0x9e1/0xb70 [ 184.188816][ T8836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.188831][ T8836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.188850][ T8836] ___sys_sendmsg+0x190/0x1e0 [ 184.188865][ T8836] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.188896][ T8836] __sys_sendmsg+0x170/0x220 [ 184.188913][ T8836] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.188936][ T8836] ? rcu_is_watching+0x12/0xc0 [ 184.188955][ T8836] do_syscall_64+0x115/0x870 [ 184.188970][ T8836] ? clear_bhb_loop+0x40/0x90 [ 184.188983][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.188995][ T8836] RIP: 0033:0x7fc6cf79ce59 [ 184.189018][ T8836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.189028][ T8836] RSP: 002b:00007fc6d05a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.189040][ T8836] RAX: ffffffffffffffda RBX: 00007fc6cfa15fa0 RCX: 00007fc6cf79ce59 [ 184.189047][ T8836] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 184.189053][ T8836] RBP: 00007fc6d05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.189060][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.189067][ T8836] R13: 00007fc6cfa16038 R14: 00007fc6cfa15fa0 R15: 00007ffd5b314ff8 [ 184.189082][ T8836] [ 184.510148][ T8844] FAULT_INJECTION: forcing a failure. [ 184.510148][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 184.514037][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.0.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.514055][ T8844] Tainted: [L]=SOFTLOCKUP [ 184.514059][ T8844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.514066][ T8844] Call Trace: [ 184.514070][ T8844] [ 184.514075][ T8844] dump_stack_lvl+0x100/0x190 [ 184.514091][ T8844] should_fail_ex.cold+0x5/0xa [ 184.514107][ T8844] ? lsm_blob_alloc+0x68/0x90 [ 184.514119][ T8844] should_failslab+0xc2/0x120 [ 184.514132][ T8844] __kmalloc_noprof+0xe0/0x850 [ 184.514149][ T8844] ? audit_alloc+0xa2/0x7b0 [ 184.514165][ T8844] lsm_blob_alloc+0x68/0x90 [ 184.514182][ T8844] security_task_alloc+0x2a/0x260 [ 184.514194][ T8844] copy_process+0x2865/0x7ed0 [ 184.514220][ T8844] ? __pfx_copy_process+0x10/0x10 [ 184.514239][ T8844] ? lockdep_init_map_type+0x5c/0x250 [ 184.514255][ T8844] ? lockdep_init_map_type+0x5c/0x250 [ 184.514270][ T8844] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 184.514283][ T8844] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 184.514302][ T8844] vhost_task_create+0x1db/0x370 [ 184.514317][ T8844] ? __pfx_vhost_task_create+0x10/0x10 [ 184.514331][ T8844] ? register_lock_class+0x40/0x560 [ 184.514349][ T8844] ? __pfx_vhost_task_fn+0x10/0x10 [ 184.514365][ T8844] ? __pfx___mutex_lock+0x10/0x10 [ 184.514380][ T8844] ? kasan_quarantine_put+0x104/0x240 [ 184.514402][ T8844] kvm_mmu_post_init_vm+0x1b3/0x370 [ 184.514419][ T8844] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 184.514436][ T8844] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 184.514451][ T8844] kvm_vcpu_ioctl+0x730/0x1720 [ 184.514464][ T8844] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.514476][ T8844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.514490][ T8844] ? do_vfs_ioctl+0x226/0x13e0 [ 184.514502][ T8844] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.514514][ T8844] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.514536][ T8844] ? __fget_files+0x215/0x3d0 [ 184.514550][ T8844] ? hook_file_ioctl_common+0x149/0x410 [ 184.514566][ T8844] ? selinux_file_ioctl+0x13b/0x290 [ 184.514582][ T8844] ? selinux_file_ioctl+0xb6/0x290 [ 184.514600][ T8844] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.514612][ T8844] __x64_sys_ioctl+0x18e/0x210 [ 184.514625][ T8844] do_syscall_64+0x115/0x870 [ 184.514639][ T8844] ? clear_bhb_loop+0x40/0x90 [ 184.514653][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.514665][ T8844] RIP: 0033:0x7f019ed9ce59 [ 184.514677][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.514688][ T8844] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.514699][ T8844] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 184.514706][ T8844] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 184.514713][ T8844] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.514720][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.514726][ T8844] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 184.514741][ T8844] [ 184.796326][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 184.799132][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 184.815252][ T1046] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 184.976679][ T1046] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 184.979889][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.982539][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.985828][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 184.988711][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 184.991490][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.994155][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.997417][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.000315][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.003083][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.006161][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.009383][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.013169][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.017013][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.020765][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.024593][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.027462][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.030224][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.033773][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.037513][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.041240][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.044628][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.048330][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.052628][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.056521][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.060140][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.063495][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.068115][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.072014][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.075660][ T1046] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.079317][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.083557][ T1046] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.087471][ T1046] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.092065][ T1046] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.095834][ T1046] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.099010][ T1046] usb 6-1: Product: syz [ 185.100487][ T1046] usb 6-1: Manufacturer: syz [ 185.102014][ T1046] usb 6-1: SerialNumber: syz [ 185.105422][ T1046] usb 6-1: config 0 descriptor?? [ 185.109012][ T1046] yurex 6-1:0.0: Could not submitting URB [ 185.111157][ T1046] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 185.201553][ T40] audit: type=1400 audit(1780821791.684:593): avc: denied { execute } for pid=8850 comm="syz.3.1032" path="/proc/tty/drivers" dev="proc" ino=4026531852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 185.313903][ T1046] usb 6-1: USB disconnect, device number 39 [ 185.535802][ T8859] binder: 8857:8859 ioctl c0306201 200000000140 returned -22 [ 185.717576][ T8862] lo speed is unknown, defaulting to 1000 [ 185.880004][ T8868] Cannot find add_set index 0 as target [ 186.095193][ T5838] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 186.246327][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.252476][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 186.262014][ T5838] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.271842][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.282358][ T5838] usb 6-1: config 0 descriptor?? [ 186.287347][ T5838] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 186.315316][ T8879] FAULT_INJECTION: forcing a failure. [ 186.315316][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 186.319096][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.0.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.319113][ T8879] Tainted: [L]=SOFTLOCKUP [ 186.319117][ T8879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.319124][ T8879] Call Trace: [ 186.319128][ T8879] [ 186.319132][ T8879] dump_stack_lvl+0x100/0x190 [ 186.319148][ T8879] should_fail_ex.cold+0x5/0xa [ 186.319165][ T8879] ? lsm_blob_alloc+0x68/0x90 [ 186.319177][ T8879] should_failslab+0xc2/0x120 [ 186.319189][ T8879] __kmalloc_noprof+0xe0/0x850 [ 186.319206][ T8879] ? audit_alloc+0xa2/0x7b0 [ 186.319223][ T8879] lsm_blob_alloc+0x68/0x90 [ 186.319235][ T8879] security_task_alloc+0x2a/0x260 [ 186.319247][ T8879] copy_process+0x2865/0x7ed0 [ 186.319273][ T8879] ? __pfx_copy_process+0x10/0x10 [ 186.319292][ T8879] ? lockdep_init_map_type+0x5c/0x250 [ 186.319308][ T8879] ? lockdep_init_map_type+0x5c/0x250 [ 186.319322][ T8879] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 186.319336][ T8879] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 186.319356][ T8879] vhost_task_create+0x1db/0x370 [ 186.319371][ T8879] ? __pfx_vhost_task_create+0x10/0x10 [ 186.319385][ T8879] ? register_lock_class+0x40/0x560 [ 186.319402][ T8879] ? __pfx_vhost_task_fn+0x10/0x10 [ 186.319419][ T8879] ? __pfx___mutex_lock+0x10/0x10 [ 186.319434][ T8879] ? kasan_quarantine_put+0x104/0x240 [ 186.319456][ T8879] kvm_mmu_post_init_vm+0x1b3/0x370 [ 186.319473][ T8879] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 186.319489][ T8879] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 186.319504][ T8879] kvm_vcpu_ioctl+0x730/0x1720 [ 186.319517][ T8879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.319529][ T8879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.319542][ T8879] ? do_vfs_ioctl+0x226/0x13e0 [ 186.319555][ T8879] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.319566][ T8879] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 186.319589][ T8879] ? __fget_files+0x215/0x3d0 [ 186.319602][ T8879] ? hook_file_ioctl_common+0x149/0x410 [ 186.319618][ T8879] ? selinux_file_ioctl+0x13b/0x290 [ 186.319635][ T8879] ? selinux_file_ioctl+0xb6/0x290 [ 186.319652][ T8879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.319664][ T8879] __x64_sys_ioctl+0x18e/0x210 [ 186.319677][ T8879] do_syscall_64+0x115/0x870 [ 186.319692][ T8879] ? clear_bhb_loop+0x40/0x90 [ 186.319706][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.319717][ T8879] RIP: 0033:0x7f019ed9ce59 [ 186.319727][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.319738][ T8879] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.319749][ T8879] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 186.319756][ T8879] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 186.319763][ T8879] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.319770][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.319776][ T8879] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 186.319791][ T8879] [ 187.976585][ T1046] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 188.126003][ T1046] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 188.130404][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.134073][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.138460][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.142414][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.146297][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.149889][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.154228][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.158312][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.161962][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.165725][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.170110][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.174027][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.177732][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.181542][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.185975][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.189981][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.195545][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.199219][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.204054][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.207345][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.210337][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.213191][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.216727][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.219762][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.222618][ T40] audit: type=1400 audit(1780821794.704:594): avc: denied { getopt } for pid=8888 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.222816][ T8889] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1045'. [ 188.228642][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.231598][ T8889] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1045'. [ 188.234279][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.241266][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.244439][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.247455][ T1046] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.251354][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.254871][ T1046] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.258508][ T1046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.262551][ T1046] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 188.265425][ T1046] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 188.268063][ T1046] usb 7-1: Product: syz [ 188.269416][ T1046] usb 7-1: Manufacturer: syz [ 188.270957][ T1046] usb 7-1: SerialNumber: syz [ 188.274246][ T1046] usb 7-1: config 0 descriptor?? [ 188.278005][ T1046] yurex 7-1:0.0: Could not submitting URB [ 188.280093][ T1046] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 188.482336][ T1046] usb 7-1: USB disconnect, device number 54 [ 188.533707][ T8893] MTD: Couldn't look up '/dev/sg0': -15 [ 188.536268][ T8893] /dev/sg0: Can't lookup blockdev [ 188.875389][ T9] usb 6-1: USB disconnect, device number 40 [ 188.897964][ T5742] cgroup: fork rejected by pids controller in /syz1 [ 189.405167][ T1046] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 189.555203][ T1046] usb 7-1: Using ep0 maxpacket: 8 [ 189.558287][ T1046] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 189.560967][ T1046] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.564008][ T1046] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.567211][ T1046] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.570401][ T1046] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.574356][ T1046] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.577187][ T1046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.787045][ T1046] usb 7-1: GET_CAPABILITIES returned 0 [ 189.788761][ T1046] usbtmc 7-1:16.0: can't read capabilities [ 189.994556][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.997384][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.000107][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.002825][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.005538][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.008278][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.010991][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.013720][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.016472][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.022114][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.025374][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.028091][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.030899][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.033614][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.036364][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.039109][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.043451][ T1046] usb 7-1: USB disconnect, device number 55 [ 190.875556][ T1491] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 191.035682][ T1491] usb 8-1: Using ep0 maxpacket: 8 [ 191.040988][ T1491] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 191.044553][ T1491] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.049853][ T1491] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.054850][ T1491] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.059247][ T1491] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.064543][ T1491] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.068104][ T1491] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.079706][ T40] audit: type=1400 audit(1780821797.564:595): avc: denied { execute } for pid=8916 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 191.087205][ T40] audit: type=1400 audit(1780821797.574:596): avc: denied { execute_no_trans } for pid=8916 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 191.101842][ T8916] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 191.111130][ T8916] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 191.135800][ T8917] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 191.193552][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.197093][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.199801][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.203287][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.209646][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.279671][ T1491] usb 8-1: GET_CAPABILITIES returned 0 [ 191.281394][ T1491] usbtmc 8-1:16.0: can't read capabilities [ 191.343560][ T8928] FAULT_INJECTION: forcing a failure. [ 191.343560][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 191.347520][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.0.1058 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.347538][ T8928] Tainted: [L]=SOFTLOCKUP [ 191.347542][ T8928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.347548][ T8928] Call Trace: [ 191.347553][ T8928] [ 191.347557][ T8928] dump_stack_lvl+0x100/0x190 [ 191.347574][ T8928] should_fail_ex.cold+0x5/0xa [ 191.347590][ T8928] should_failslab+0xc2/0x120 [ 191.347603][ T8928] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 191.347620][ T8928] ? skb_clone+0x190/0x400 [ 191.347640][ T8928] skb_clone+0x190/0x400 [ 191.347658][ T8928] netlink_deliver_tap+0xaed/0xcc0 [ 191.347675][ T8928] netlink_unicast+0x62b/0x850 [ 191.347691][ T8928] ? __pfx_netlink_unicast+0x10/0x10 [ 191.347709][ T8928] netlink_sendmsg+0x8b0/0xda0 [ 191.347725][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.347738][ T8928] ? __might_fault+0x40/0x140 [ 191.347760][ T8928] ____sys_sendmsg+0x9e1/0xb70 [ 191.347772][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.347787][ T8928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.347806][ T8928] ___sys_sendmsg+0x190/0x1e0 [ 191.347821][ T8928] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.347851][ T8928] __sys_sendmsg+0x170/0x220 [ 191.347869][ T8928] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.347892][ T8928] ? rcu_is_watching+0x12/0xc0 [ 191.347911][ T8928] do_syscall_64+0x115/0x870 [ 191.347926][ T8928] ? clear_bhb_loop+0x40/0x90 [ 191.347940][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.347952][ T8928] RIP: 0033:0x7f019ed9ce59 [ 191.347962][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.347973][ T8928] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.347984][ T8928] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 191.347991][ T8928] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 191.347998][ T8928] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.348005][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.348011][ T8928] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 191.348025][ T8928] [ 191.350861][ T6317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.459694][ T8918] lo speed is unknown, defaulting to 1000 [ 191.480621][ T8913] FAULT_INJECTION: forcing a failure. [ 191.480621][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 191.491859][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.3.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.491878][ T8913] Tainted: [L]=SOFTLOCKUP [ 191.491883][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.491889][ T8913] Call Trace: [ 191.491894][ T8913] [ 191.491899][ T8913] dump_stack_lvl+0x100/0x190 [ 191.491917][ T8913] should_fail_ex.cold+0x5/0xa [ 191.491933][ T8913] should_failslab+0xc2/0x120 [ 191.491947][ T8913] __kmalloc_cache_noprof+0x7a/0x6f0 [ 191.491969][ T8913] ? usbtmc_create_urb+0x59/0x150 [ 191.491989][ T8913] ? __asan_memset+0x23/0x50 [ 191.492010][ T8913] usbtmc_create_urb+0x59/0x150 [ 191.492026][ T8913] usbtmc_generic_read+0x3dc/0x1810 [ 191.492047][ T8913] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 191.492063][ T8913] ? __might_fault+0xc5/0x140 [ 191.492079][ T8913] ? __might_fault+0xc5/0x140 [ 191.492102][ T8913] usbtmc_ioctl+0x12c9/0x2930 [ 191.492118][ T8913] ? do_vfs_ioctl+0x226/0x13e0 [ 191.492131][ T8913] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.492142][ T8913] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 191.492157][ T8913] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.492180][ T8913] ? __fget_files+0x215/0x3d0 [ 191.492198][ T8913] ? selinux_file_ioctl+0x13b/0x290 [ 191.492214][ T8913] ? selinux_file_ioctl+0xb6/0x290 [ 191.492232][ T8913] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 191.492249][ T8913] __x64_sys_ioctl+0x18e/0x210 [ 191.492261][ T8913] do_syscall_64+0x115/0x870 [ 191.492276][ T8913] ? clear_bhb_loop+0x40/0x90 [ 191.492290][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.492302][ T8913] RIP: 0033:0x7f419db9ce59 [ 191.492312][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.492323][ T8913] RSP: 002b:00007f419ea12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.492335][ T8913] RAX: ffffffffffffffda RBX: 00007f419de15fa0 RCX: 00007f419db9ce59 [ 191.492342][ T8913] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 191.492349][ T8913] RBP: 00007f419ea12090 R08: 0000000000000000 R09: 0000000000000000 [ 191.492355][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.492361][ T8913] R13: 00007f419de16038 R14: 00007f419de15fa0 R15: 00007ffc5d354cf8 [ 191.492376][ T8913] [ 191.494128][ T1046] usb 8-1: USB disconnect, device number 63 [ 191.612420][ T6317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.751286][ T6317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.861380][ T6317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.878189][ T8958] nbd: must specify a size in bytes for the device [ 191.914475][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.916911][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.919169][ T8918] bridge_slave_0: entered allmulticast mode [ 191.922351][ T8918] bridge_slave_0: entered promiscuous mode [ 191.925010][ T8964] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 191.926766][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.930978][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.933363][ T8918] bridge_slave_1: entered allmulticast mode [ 191.938934][ T8918] bridge_slave_1: entered promiscuous mode [ 191.959942][ T8918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.966256][ T8918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.987441][ T8918] team0: Port device team_slave_0 added [ 192.007886][ T8918] team0: Port device team_slave_1 added [ 192.038608][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.042105][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.050486][ T8918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.054727][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.057048][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.064854][ T8918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.084285][ T8970] FAULT_INJECTION: forcing a failure. [ 192.084285][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 192.088266][ T8970] CPU: 2 UID: 0 PID: 8970 Comm: syz.2.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.088284][ T8970] Tainted: [L]=SOFTLOCKUP [ 192.088288][ T8970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.088294][ T8970] Call Trace: [ 192.088298][ T8970] [ 192.088302][ T8970] dump_stack_lvl+0x100/0x190 [ 192.088326][ T8970] should_fail_ex.cold+0x5/0xa [ 192.088342][ T8970] should_failslab+0xc2/0x120 [ 192.088356][ T8970] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 192.088377][ T8970] ? skb_clone+0x190/0x400 [ 192.088401][ T8970] skb_clone+0x190/0x400 [ 192.088419][ T8970] netlink_deliver_tap+0xaed/0xcc0 [ 192.088435][ T8970] netlink_unicast+0x62b/0x850 [ 192.088479][ T8970] ? __pfx_netlink_unicast+0x10/0x10 [ 192.088498][ T8970] netlink_sendmsg+0x8b0/0xda0 [ 192.088514][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.088527][ T8970] ? __might_fault+0x40/0x140 [ 192.088549][ T8970] ____sys_sendmsg+0x9e1/0xb70 [ 192.088561][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.088576][ T8970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.088596][ T8970] ___sys_sendmsg+0x190/0x1e0 [ 192.088611][ T8970] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.088642][ T8970] __sys_sendmsg+0x170/0x220 [ 192.088659][ T8970] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.088682][ T8970] ? rcu_is_watching+0x12/0xc0 [ 192.088701][ T8970] do_syscall_64+0x115/0x870 [ 192.088721][ T8970] ? clear_bhb_loop+0x40/0x90 [ 192.088735][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.088747][ T8970] RIP: 0033:0x7fb4dd99ce59 [ 192.088756][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.088767][ T8970] RSP: 002b:00007fb4de89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.088778][ T8970] RAX: ffffffffffffffda RBX: 00007fb4ddc16090 RCX: 00007fb4dd99ce59 [ 192.088785][ T8970] RDX: 0000000000044010 RSI: 0000200000000240 RDI: 0000000000000004 [ 192.088792][ T8970] RBP: 00007fb4de89d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.088798][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.088804][ T8970] R13: 00007fb4ddc16128 R14: 00007fb4ddc16090 R15: 00007fff4f126278 [ 192.088819][ T8970] [ 192.106514][ T8918] hsr_slave_0: entered promiscuous mode [ 192.165776][ T8918] hsr_slave_1: entered promiscuous mode [ 192.167830][ T8918] debugfs: 'hsr0' already exists in 'hsr' [ 192.169598][ T8918] Cannot create hsr debugfs directory [ 192.176710][ T6317] bridge_slave_1: left allmulticast mode [ 192.178612][ T6317] bridge_slave_1: left promiscuous mode [ 192.182037][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.188720][ T6317] bridge_slave_0: left allmulticast mode [ 192.190446][ T6317] bridge_slave_0: left promiscuous mode [ 192.192664][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.343067][ T6317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.348428][ T6317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.351960][ T6317] bond0 (unregistering): Released all slaves [ 192.356597][ T6317] bond1 (unregistering): Released all slaves [ 192.364821][ T6317] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 192.368408][ T6317] bond2 (unregistering): Released all slaves [ 192.969337][ T6317] hsr_slave_0: left promiscuous mode [ 192.972030][ T6317] hsr_slave_1: left promiscuous mode [ 192.974030][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.985150][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.997389][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.999719][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.006278][ T6317] veth1_macvtap: left promiscuous mode [ 193.008289][ T6317] veth0_macvtap: left promiscuous mode [ 193.010125][ T6317] veth1_vlan: left promiscuous mode [ 193.011756][ T6317] veth0_vlan: left promiscuous mode [ 193.129309][ T6317] team0 (unregistering): Port device team_slave_1 removed [ 193.142221][ T6317] team0 (unregistering): Port device team_slave_0 removed [ 193.210655][ T6312] smc: removing ib device sz1 [ 193.227224][ T5845] lo speed is unknown, defaulting to 1000 [ 193.229691][ T5845] sz1: Port: 1 Link DOWN [ 193.236416][ T5754] Bluetooth: hci3: command tx timeout [ 193.256879][ T6312] smbdirect: ib_dev[sz1] removed [ 193.768001][ T6317] IPVS: stop unused estimator thread 0... [ 194.872207][ T8958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.881749][ T8918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.909676][ T8918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.912363][ T8918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.918914][ T8918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.921842][ T8918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.930318][ T8918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.936821][ T8918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.947140][ T8918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.018935][ T40] audit: type=1400 audit(1780821801.504:597): avc: denied { read } for pid=8992 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.022889][ T8918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.028661][ T40] audit: type=1400 audit(1780821801.504:598): avc: denied { read open } for pid=8992 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.043565][ T8976] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 195.049142][ T40] audit: type=1400 audit(1780821801.504:599): avc: denied { getattr } for pid=8992 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.054152][ T8918] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.059182][ T40] audit: type=1400 audit(1780821801.524:600): avc: denied { write } for pid=8987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.059217][ T40] audit: type=1400 audit(1780821801.524:601): avc: denied { add_name } for pid=8987 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.083060][ T40] audit: type=1400 audit(1780821801.564:602): avc: denied { append } for pid=8998 comm="syz.3.1079" path="socket:[30854]" dev="sockfs" ino=30854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.093222][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.094581][ T9000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.100353][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.109598][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.112113][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.121368][ T40] audit: type=1400 audit(1780821801.604:603): avc: denied { write } for pid=9001 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.131243][ T40] audit: type=1400 audit(1780821801.604:604): avc: denied { remove_name } for pid=9001 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=7358 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.150586][ T40] audit: type=1400 audit(1780821801.634:605): avc: denied { module_request } for pid=8918 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 195.171614][ T9006] fuse: Unknown parameter 'user_i00000000000000000000' [ 195.202798][ T40] audit: type=1400 audit(1780821801.684:606): avc: denied { write } for pid=9007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.315210][ T5754] Bluetooth: hci3: command tx timeout [ 195.342779][ T8918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.367329][ T8918] veth0_vlan: entered promiscuous mode [ 195.372267][ T8918] veth1_vlan: entered promiscuous mode [ 195.386907][ T8918] veth0_macvtap: entered promiscuous mode [ 195.390522][ T8918] veth1_macvtap: entered promiscuous mode [ 195.399147][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.405969][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.411095][ T6316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.414183][ T6316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.417632][ T6316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.420465][ T6316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.488878][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.491378][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.505499][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.507953][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.737663][ T9032] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1084'. [ 195.775302][ T5888] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 195.925997][ T5888] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 195.929956][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.933100][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.936751][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 195.939749][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.942610][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.945681][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.948970][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 195.951922][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.954739][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.957688][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.961019][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 195.963980][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.966935][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.969694][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.973095][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 195.976344][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.979185][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.981957][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.985681][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 195.988674][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.991492][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.994278][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.997580][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 196.000479][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.003271][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.006452][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.009733][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 196.012619][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.015696][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.025172][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.029328][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 196.032233][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.036089][ T5888] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 196.038973][ T5888] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 196.041551][ T5888] usb 6-1: Product: syz [ 196.042845][ T5888] usb 6-1: Manufacturer: syz [ 196.044267][ T5888] usb 6-1: SerialNumber: syz [ 196.049057][ T5888] usb 6-1: config 0 descriptor?? [ 196.051823][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.057023][ T5888] yurex 6-1:0.0: Could not submitting URB [ 196.059118][ T5888] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 196.085334][ T9044] FAULT_INJECTION: forcing a failure. [ 196.085334][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 196.091762][ T9044] CPU: 3 UID: 60928 PID: 9044 Comm: syz.2.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.091789][ T9044] Tainted: [L]=SOFTLOCKUP [ 196.091796][ T9044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.091805][ T9044] Call Trace: [ 196.091812][ T9044] [ 196.091819][ T9044] dump_stack_lvl+0x100/0x190 [ 196.091844][ T9044] should_fail_ex.cold+0x5/0xa [ 196.091868][ T9044] should_failslab+0xc2/0x120 [ 196.091888][ T9044] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 196.091915][ T9044] ? __d_alloc+0x34/0xa40 [ 196.091945][ T9044] __d_alloc+0x34/0xa40 [ 196.091975][ T9044] d_alloc_parallel+0x111/0x14e0 [ 196.092001][ T9044] ? find_held_lock+0x2b/0x80 [ 196.092016][ T9044] ? __d_lookup+0x25c/0x4a0 [ 196.092035][ T9044] ? __pfx_d_alloc_parallel+0x10/0x10 [ 196.092056][ T9044] ? __d_lookup+0x266/0x4a0 [ 196.092082][ T9044] lookup_open.isra.0+0x57c/0x11b0 [ 196.092108][ T9044] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 196.092130][ T9044] ? __pfx___might_resched+0x10/0x10 [ 196.092155][ T9044] ? mnt_get_write_access+0x52/0x2f0 [ 196.092178][ T9044] ? __pfx_down_write+0x10/0x10 [ 196.092201][ T9044] ? mnt_get_write_access+0x1e9/0x2f0 [ 196.092222][ T9044] path_openat+0x2291/0x31a0 [ 196.092251][ T9044] ? __pfx_path_openat+0x10/0x10 [ 196.092284][ T9044] do_file_open+0x20e/0x430 [ 196.092309][ T9044] ? __pfx_do_file_open+0x10/0x10 [ 196.092347][ T9044] ? alloc_fd+0x476/0x790 [ 196.092374][ T9044] ? do_getname+0x191/0x390 [ 196.092426][ T9044] do_sys_openat2+0x10d/0x1e0 [ 196.092453][ T9044] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.092477][ T9044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.092506][ T9044] ? __fget_files+0x21f/0x3d0 [ 196.092533][ T9044] __x64_sys_openat+0x12d/0x210 [ 196.092557][ T9044] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.092582][ T9044] ? ksys_write+0x1ac/0x250 [ 196.092605][ T9044] ? rcu_is_watching+0x12/0xc0 [ 196.092636][ T9044] do_syscall_64+0x115/0x870 [ 196.092659][ T9044] ? clear_bhb_loop+0x40/0x90 [ 196.092682][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.092701][ T9044] RIP: 0033:0x7fb4dd99ce59 [ 196.092715][ T9044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.092731][ T9044] RSP: 002b:00007fb4de8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.092748][ T9044] RAX: ffffffffffffffda RBX: 00007fb4ddc15fa0 RCX: 00007fb4dd99ce59 [ 196.092775][ T9044] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 196.092787][ T9044] RBP: 00007fb4de8be090 R08: 0000000000000000 R09: 0000000000000000 [ 196.092798][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.092808][ T9044] R13: 00007fb4ddc16038 R14: 00007fb4ddc15fa0 R15: 00007fff4f126278 [ 196.092834][ T9044] [ 196.211778][ T9048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.261832][ T5838] usb 6-1: USB disconnect, device number 41 [ 196.345156][ T1046] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 196.505179][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 196.508057][ T1046] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.511999][ T1046] usb 8-1: config 0 interface 0 has no altsetting 0 [ 196.514031][ T1046] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 196.516993][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.521575][ T1046] usb 8-1: config 0 descriptor?? [ 196.810114][ T9054] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1095'. [ 196.938516][ T1046] usbhid 8-1:0.0: can't add hid device: -71 [ 196.943482][ T1046] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 196.948527][ T1046] usb 8-1: USB disconnect, device number 64 [ 196.979895][ T9069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.335296][ T5888] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 197.395315][ T5754] Bluetooth: hci3: command tx timeout [ 197.495208][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 197.501628][ T5888] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.515249][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.517980][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 197.521178][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.526604][ T9077] FAULT_INJECTION: forcing a failure. [ 197.526604][ T9077] name failslab, interval 1, probability 0, space 0, times 0 [ 197.530284][ T9077] CPU: 1 UID: 0 PID: 9077 Comm: syz.1.1104 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.530301][ T9077] Tainted: [L]=SOFTLOCKUP [ 197.530305][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.530312][ T9077] Call Trace: [ 197.530316][ T9077] [ 197.530325][ T9077] dump_stack_lvl+0x100/0x190 [ 197.530342][ T9077] should_fail_ex.cold+0x5/0xa [ 197.530358][ T9077] should_failslab+0xc2/0x120 [ 197.530371][ T9077] __kmalloc_cache_noprof+0x7a/0x6f0 [ 197.530387][ T9077] ? binder_transaction+0x748/0x9c10 [ 197.530402][ T9077] binder_transaction+0x748/0x9c10 [ 197.530416][ T9077] ? find_held_lock+0x2b/0x80 [ 197.530430][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530448][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530463][ T9077] ? __pfx_binder_transaction+0x10/0x10 [ 197.530479][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530495][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530515][ T9077] ? find_held_lock+0x2b/0x80 [ 197.530527][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530541][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530554][ T9077] ? kernel_text_address+0x8d/0x100 [ 197.530569][ T9077] ? __pfx_widen_string+0x10/0x10 [ 197.530579][ T9077] ? __kernel_text_address+0xd/0x30 [ 197.530597][ T9077] ? find_held_lock+0x2b/0x80 [ 197.530607][ T9077] ? __might_fault+0xc5/0x140 [ 197.530623][ T9077] ? __might_fault+0xc5/0x140 [ 197.530644][ T9077] binder_thread_write+0x1303/0x4db0 [ 197.530659][ T9077] ? __kasan_slab_free+0x5f/0x80 [ 197.530670][ T9077] ? kfree+0x223/0x6c0 [ 197.530687][ T9077] ? __lock_acquire+0x4a5/0x2630 [ 197.530700][ T9077] ? __pfx_binder_thread_write+0x10/0x10 [ 197.530713][ T9077] ? binder_debug+0xe0/0x190 [ 197.530730][ T9077] ? __pfx_binder_debug+0x10/0x10 [ 197.530747][ T9077] ? binder_debug+0xe0/0x190 [ 197.530763][ T9077] ? __pfx_binder_debug+0x10/0x10 [ 197.530788][ T9077] binder_ioctl+0x28f8/0x7550 [ 197.530805][ T9077] ? tomoyo_path_number_perm+0x188/0x580 [ 197.530832][ T9077] ? __pfx_binder_ioctl+0x10/0x10 [ 197.530845][ T9077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.530859][ T9077] ? do_vfs_ioctl+0x226/0x13e0 [ 197.530871][ T9077] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 197.530883][ T9077] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 197.530905][ T9077] ? hook_file_ioctl_common+0x149/0x410 [ 197.530921][ T9077] ? selinux_file_ioctl+0x13b/0x290 [ 197.530937][ T9077] ? selinux_file_ioctl+0xb6/0x290 [ 197.530954][ T9077] ? __pfx_binder_ioctl+0x10/0x10 [ 197.530967][ T9077] __x64_sys_ioctl+0x18e/0x210 [ 197.530979][ T9077] do_syscall_64+0x115/0x870 [ 197.530994][ T9077] ? clear_bhb_loop+0x40/0x90 [ 197.531008][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.531019][ T9077] RIP: 0033:0x7f28a7d9ce59 [ 197.531029][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.531040][ T9077] RSP: 002b:00007f28a8b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.531051][ T9077] RAX: ffffffffffffffda RBX: 00007f28a8015fa0 RCX: 00007f28a7d9ce59 [ 197.531057][ T9077] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 197.531064][ T9077] RBP: 00007f28a8b93090 R08: 0000000000000000 R09: 0000000000000000 [ 197.531070][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.531077][ T9077] R13: 00007f28a8016038 R14: 00007f28a8015fa0 R15: 00007ffe7e1b8aa8 [ 197.531091][ T9077] [ 197.533590][ T5888] usb 5-1: config 0 descriptor?? [ 197.756692][ T9097] FAULT_INJECTION: forcing a failure. [ 197.756692][ T9097] name failslab, interval 1, probability 0, space 0, times 0 [ 197.760615][ T9097] CPU: 2 UID: 0 PID: 9097 Comm: syz.1.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.760632][ T9097] Tainted: [L]=SOFTLOCKUP [ 197.760636][ T9097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.760643][ T9097] Call Trace: [ 197.760647][ T9097] [ 197.760652][ T9097] dump_stack_lvl+0x100/0x190 [ 197.760668][ T9097] should_fail_ex.cold+0x5/0xa [ 197.760684][ T9097] should_failslab+0xc2/0x120 [ 197.760697][ T9097] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.760713][ T9097] ? do_getname+0x35/0x390 [ 197.760733][ T9097] do_getname+0x35/0x390 [ 197.760765][ T9097] user_path_at+0x26/0x60 [ 197.760783][ T9097] __x64_sys_mount+0x1fb/0x310 [ 197.760801][ T9097] ? __pfx___x64_sys_mount+0x10/0x10 [ 197.760819][ T9097] ? rcu_is_watching+0x12/0xc0 [ 197.760838][ T9097] do_syscall_64+0x115/0x870 [ 197.760852][ T9097] ? clear_bhb_loop+0x40/0x90 [ 197.760866][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.760878][ T9097] RIP: 0033:0x7f28a7d9ce59 [ 197.760888][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.760899][ T9097] RSP: 002b:00007f28a8b93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.760910][ T9097] RAX: ffffffffffffffda RBX: 00007f28a8015fa0 RCX: 00007f28a7d9ce59 [ 197.760918][ T9097] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 197.760924][ T9097] RBP: 00007f28a8b93090 R08: 0000200000000140 R09: 0000000000000000 [ 197.760931][ T9097] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 197.760938][ T9097] R13: 00007f28a8016038 R14: 00007f28a8015fa0 R15: 00007ffe7e1b8aa8 [ 197.760952][ T9097] [ 197.842091][ T9101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9101 comm=syz.1.1115 [ 197.915466][ T9109] FAULT_INJECTION: forcing a failure. [ 197.915466][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 197.919299][ T9109] CPU: 3 UID: 0 PID: 9109 Comm: syz.1.1118 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.919316][ T9109] Tainted: [L]=SOFTLOCKUP [ 197.919320][ T9109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.919327][ T9109] Call Trace: [ 197.919331][ T9109] [ 197.919336][ T9109] dump_stack_lvl+0x100/0x190 [ 197.919353][ T9109] should_fail_ex.cold+0x5/0xa [ 197.919369][ T9109] should_failslab+0xc2/0x120 [ 197.919382][ T9109] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.919399][ T9109] ? sctp_chunkify+0x51/0x2f0 [ 197.919414][ T9109] ? __pfx___alloc_skb+0x10/0x10 [ 197.919433][ T9109] sctp_chunkify+0x51/0x2f0 [ 197.919449][ T9109] _sctp_make_chunk+0x148/0x270 [ 197.919465][ T9109] sctp_make_control+0x2f/0x2d0 [ 197.919481][ T9109] sctp_make_heartbeat+0xad/0x2f0 [ 197.919498][ T9109] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 197.919515][ T9109] ? is_bpf_text_address+0x94/0x1a0 [ 197.919532][ T9109] ? sctp_sm_lookup_event+0x10e/0x520 [ 197.919548][ T9109] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 197.919565][ T9109] ? __pfx_sctp_pname+0x10/0x10 [ 197.919581][ T9109] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 197.919596][ T9109] ? __pfx_sctp_pname+0x10/0x10 [ 197.919611][ T9109] sctp_do_sm+0x17a/0x5be0 [ 197.919626][ T9109] ? __pfx_stack_trace_save+0x10/0x10 [ 197.919637][ T9109] ? stack_depot_save_flags+0x27/0x9d0 [ 197.919653][ T9109] ? _parse_integer_limit+0x17f/0x1d0 [ 197.919671][ T9109] ? __pfx_sctp_do_sm+0x10/0x10 [ 197.919685][ T9109] ? kasan_save_stack+0x30/0x50 [ 197.919696][ T9109] ? kasan_save_track+0x14/0x30 [ 197.919705][ T9109] ? __kasan_kmalloc+0xaa/0xb0 [ 197.919714][ T9109] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 197.919733][ T9109] ? sctp_setsockopt+0x511/0xb370 [ 197.919764][ T9109] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 197.919781][ T9109] sctp_apply_peer_addr_params+0x110/0x3690 [ 197.919807][ T9109] sctp_setsockopt+0x28d6/0xb370 [ 197.919824][ T9109] ? __pfx_sctp_setsockopt+0x10/0x10 [ 197.919837][ T9109] ? __fget_files+0x215/0x3d0 [ 197.919853][ T9109] ? selinux_socket_setsockopt+0x6a/0x80 [ 197.919869][ T9109] ? sock_common_setsockopt+0x2e/0xf0 [ 197.919881][ T9109] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 197.919895][ T9109] do_sock_setsockopt+0xf3/0x1d0 [ 197.919909][ T9109] __sys_setsockopt+0x195/0x220 [ 197.919928][ T9109] __x64_sys_setsockopt+0xbd/0x160 [ 197.919944][ T9109] ? do_syscall_64+0x90/0x870 [ 197.919959][ T9109] ? lockdep_hardirqs_on+0x78/0x100 [ 197.919974][ T9109] do_syscall_64+0x115/0x870 [ 197.919988][ T9109] ? clear_bhb_loop+0x40/0x90 [ 197.920002][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.920013][ T9109] RIP: 0033:0x7f28a7d9ce59 [ 197.920023][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.920034][ T9109] RSP: 002b:00007f28a8b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.920045][ T9109] RAX: ffffffffffffffda RBX: 00007f28a8015fa0 RCX: 00007f28a7d9ce59 [ 197.920052][ T9109] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 197.920059][ T9109] RBP: 00007f28a8b93090 R08: 000000000000009c R09: 0000000000000000 [ 197.920066][ T9109] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 197.920072][ T9109] R13: 00007f28a8016038 R14: 00007f28a8015fa0 R15: 00007ffe7e1b8aa8 [ 197.920087][ T9109] [ 197.955474][ T5838] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 198.052003][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 198.054509][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.060571][ T5888] usb 5-1: USB disconnect, device number 56 [ 198.200707][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.204573][ T5838] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.208129][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.212077][ T5838] usb 8-1: config 0 descriptor?? [ 198.265218][ T5928] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 198.416700][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 198.419110][ T5928] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.422517][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 198.423425][ T5838] usbhid 8-1:0.0: can't add hid device: -71 [ 198.426031][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.427821][ T5838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 198.431649][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.435845][ T5838] usb 8-1: USB disconnect, device number 65 [ 198.437488][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 198.442572][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.446630][ T5928] usb 6-1: config 168 interface 0 has no altsetting 0 [ 198.450238][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 198.453280][ T5928] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.456707][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 198.459939][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.463851][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.467544][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 198.470931][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.474925][ T5928] usb 6-1: config 168 interface 0 has no altsetting 0 [ 198.477896][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 198.480214][ T5928] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.483543][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 198.486851][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.490399][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.493743][ T5928] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 198.497099][ T5928] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.501003][ T5928] usb 6-1: config 168 interface 0 has no altsetting 0 [ 198.855245][ T5831] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 198.855304][ T5888] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 199.006513][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.009968][ T5888] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.012804][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.017232][ T5888] usb 8-1: config 0 descriptor?? [ 199.026687][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.030370][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.033777][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.036913][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.041350][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.044056][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.047908][ T5831] usb 5-1: config 0 descriptor?? [ 199.078184][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.080176][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.165244][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 199.317605][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.321581][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.324358][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.328817][ T10] usb 7-1: config 0 descriptor?? [ 199.333281][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 199.428055][ T5888] usbhid 8-1:0.0: can't add hid device: -71 [ 199.430004][ T5888] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 199.434143][ T5888] usb 8-1: USB disconnect, device number 66 [ 199.456972][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 199.458852][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 199.464118][ T5831] usb 5-1: USB disconnect, device number 57 [ 199.478434][ T5754] Bluetooth: hci3: command tx timeout [ 200.026129][ T9144] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 200.029056][ T9144] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 200.089546][ T9152] FAULT_INJECTION: forcing a failure. [ 200.089546][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 200.099400][ T9152] CPU: 0 UID: 0 PID: 9152 Comm: syz.3.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.099418][ T9152] Tainted: [L]=SOFTLOCKUP [ 200.099422][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.099429][ T9152] Call Trace: [ 200.099434][ T9152] [ 200.099438][ T9152] dump_stack_lvl+0x100/0x190 [ 200.099455][ T9152] should_fail_ex.cold+0x5/0xa [ 200.099484][ T9152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 200.099503][ T9152] should_failslab+0xc2/0x120 [ 200.099516][ T9152] __kmalloc_noprof+0xe0/0x850 [ 200.099532][ T9152] ? kfree+0x1dd/0x6c0 [ 200.099549][ T9152] tomoyo_realpath_from_path+0xb6/0x690 [ 200.099571][ T9152] tomoyo_path_number_perm+0x23c/0x580 [ 200.099585][ T9152] ? tomoyo_path_number_perm+0x22e/0x580 [ 200.099601][ T9152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.099631][ T9152] ? find_held_lock+0x2b/0x80 [ 200.099641][ T9152] ? __fget_files+0x215/0x3d0 [ 200.099655][ T9152] ? hook_file_ioctl_common+0x149/0x410 [ 200.099667][ T9152] ? __fget_files+0x215/0x3d0 [ 200.099683][ T9152] ? __fget_files+0x21f/0x3d0 [ 200.099700][ T9152] security_file_ioctl+0xd3/0x230 [ 200.099717][ T9152] __x64_sys_ioctl+0xb7/0x210 [ 200.099730][ T9152] do_syscall_64+0x115/0x870 [ 200.099745][ T9152] ? clear_bhb_loop+0x40/0x90 [ 200.099759][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.099770][ T9152] RIP: 0033:0x7f419db9ce59 [ 200.099780][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.099791][ T9152] RSP: 002b:00007f419ea12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.099802][ T9152] RAX: ffffffffffffffda RBX: 00007f419de15fa0 RCX: 00007f419db9ce59 [ 200.099809][ T9152] RDX: 0000200000000080 RSI: 0000000000008905 RDI: 0000000000000003 [ 200.099816][ T9152] RBP: 00007f419ea12090 R08: 0000000000000000 R09: 0000000000000000 [ 200.099822][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.099829][ T9152] R13: 00007f419de16038 R14: 00007f419de15fa0 R15: 00007ffc5d354cf8 [ 200.099844][ T9152] [ 200.099883][ T9152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.245226][ T5831] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 200.397045][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.401269][ T5831] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.404761][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.409120][ T5831] usb 5-1: config 0 descriptor?? [ 200.619035][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 200.621282][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.624813][ T5831] usb 5-1: USB disconnect, device number 58 [ 201.041713][ T5928] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 201.045671][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.050238][ T5928] usb 6-1: can't set config #168, error -71 [ 201.053013][ T5928] usb 6-1: USB disconnect, device number 42 [ 201.285212][ T5831] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 201.355324][ T5928] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 201.446867][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.450631][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.454001][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.457060][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.461029][ T5831] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.463795][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.468667][ T5831] usb 8-1: config 0 descriptor?? [ 201.471015][ T9170] FAULT_INJECTION: forcing a failure. [ 201.471015][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 201.474837][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.0.1143 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.474858][ T9170] Tainted: [L]=SOFTLOCKUP [ 201.474862][ T9170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.474869][ T9170] Call Trace: [ 201.474874][ T9170] [ 201.474878][ T9170] dump_stack_lvl+0x100/0x190 [ 201.474895][ T9170] should_fail_ex.cold+0x5/0xa [ 201.474911][ T9170] ? lsm_blob_alloc+0x68/0x90 [ 201.474923][ T9170] should_failslab+0xc2/0x120 [ 201.474936][ T9170] __kmalloc_noprof+0xe0/0x850 [ 201.474952][ T9170] ? audit_alloc+0xa2/0x7b0 [ 201.474969][ T9170] lsm_blob_alloc+0x68/0x90 [ 201.474981][ T9170] security_task_alloc+0x2a/0x260 [ 201.474993][ T9170] copy_process+0x2865/0x7ed0 [ 201.475018][ T9170] ? __pfx_copy_process+0x10/0x10 [ 201.475038][ T9170] ? lockdep_init_map_type+0x5c/0x250 [ 201.475053][ T9170] ? lockdep_init_map_type+0x5c/0x250 [ 201.475068][ T9170] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 201.475082][ T9170] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 201.475114][ T9170] vhost_task_create+0x1db/0x370 [ 201.475130][ T9170] ? __pfx_vhost_task_create+0x10/0x10 [ 201.475144][ T9170] ? register_lock_class+0x40/0x560 [ 201.475162][ T9170] ? __pfx_vhost_task_fn+0x10/0x10 [ 201.475178][ T9170] ? __pfx___mutex_lock+0x10/0x10 [ 201.475193][ T9170] ? kasan_quarantine_put+0x104/0x240 [ 201.475215][ T9170] kvm_mmu_post_init_vm+0x1b3/0x370 [ 201.475232][ T9170] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 201.475248][ T9170] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 201.475263][ T9170] kvm_vcpu_ioctl+0x730/0x1720 [ 201.475276][ T9170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.475288][ T9170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.475302][ T9170] ? do_vfs_ioctl+0x226/0x13e0 [ 201.475314][ T9170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.475326][ T9170] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 201.475349][ T9170] ? __fget_files+0x215/0x3d0 [ 201.475363][ T9170] ? hook_file_ioctl_common+0x149/0x410 [ 201.475379][ T9170] ? selinux_file_ioctl+0x13b/0x290 [ 201.475395][ T9170] ? selinux_file_ioctl+0xb6/0x290 [ 201.475413][ T9170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.475425][ T9170] __x64_sys_ioctl+0x18e/0x210 [ 201.475438][ T9170] do_syscall_64+0x115/0x870 [ 201.475452][ T9170] ? clear_bhb_loop+0x40/0x90 [ 201.475466][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.475478][ T9170] RIP: 0033:0x7f019ed9ce59 [ 201.475488][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.475499][ T9170] RSP: 002b:00007f019fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.475510][ T9170] RAX: ffffffffffffffda RBX: 00007f019f015fa0 RCX: 00007f019ed9ce59 [ 201.475518][ T9170] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 201.475525][ T9170] RBP: 00007f019fcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.475531][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.475538][ T9170] R13: 00007f019f016038 R14: 00007f019f015fa0 R15: 00007ffd8348b3a8 [ 201.475553][ T9170] [ 201.577651][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.581488][ T5928] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.584442][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.589307][ T5928] usb 6-1: config 0 descriptor?? [ 201.800035][ T5928] usbhid 6-1:0.0: can't add hid device: -71 [ 201.801900][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.805944][ T5928] usb 6-1: USB disconnect, device number 43 [ 201.881384][ T5831] usbhid 8-1:0.0: can't add hid device: -71 [ 201.883777][ T5831] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 201.884211][ T9180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1146'. [ 201.889783][ T5831] usb 8-1: USB disconnect, device number 67 [ 201.942307][ T5838] usb 7-1: USB disconnect, device number 56 [ 202.245160][ T5845] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 202.275208][ T5838] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 202.406369][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.409889][ T5845] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.412724][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.416607][ T5845] usb 6-1: config 0 descriptor?? [ 202.426808][ T5838] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 202.430026][ T5838] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 202.434623][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.439357][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.444200][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.448767][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.453350][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 202.459259][ T5838] usb 7-1: config 168 interface 0 has no altsetting 0 [ 202.463130][ T5838] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 202.466772][ T5838] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 202.471294][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.475884][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.480651][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.485279][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.489753][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 202.495076][ T5838] usb 7-1: config 168 interface 0 has no altsetting 0 [ 202.498281][ T5838] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 202.500674][ T5838] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 202.504020][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.507382][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.510971][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.514296][ T5838] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.518165][ T5838] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 202.523677][ T5838] usb 7-1: config 168 interface 0 has no altsetting 0 [ 202.549171][ T9187] dummy0: entered allmulticast mode [ 202.552348][ T9186] dummy0: left allmulticast mode [ 202.822998][ T5845] usbhid 6-1:0.0: can't add hid device: -71 [ 202.824898][ T5845] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 202.828807][ T5845] usb 6-1: USB disconnect, device number 44 [ 202.879467][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 202.879480][ T40] audit: type=1400 audit(1780821809.364:617): avc: denied { read write } for pid=9194 comm="syz.3.1153" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 202.879728][ T9197] random: crng reseeded on system resumption [ 202.881382][ T40] audit: type=1400 audit(1780821809.364:618): avc: denied { ioctl open } for pid=9194 comm="syz.3.1153" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 202.904734][ T9197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1153'. [ 202.908193][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 203.625187][ T5823] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 203.786896][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 203.791188][ T5823] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.793994][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.798425][ T5823] usb 6-1: config 0 descriptor?? [ 203.804874][ T5823] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 204.823262][ T9176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.988903][ T5838] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 204.994951][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.004713][ T5838] usb 7-1: can't set config #168, error -71 [ 205.013198][ T5838] usb 7-1: USB disconnect, device number 57 [ 205.046503][ T40] audit: type=1400 audit(1780821811.534:619): avc: denied { map } for pid=9224 comm="syz.2.1164" path="socket:[31964]" dev="sockfs" ino=31964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.053517][ T40] audit: type=1400 audit(1780821811.534:620): avc: denied { read } for pid=9224 comm="syz.2.1164" path="socket:[31964]" dev="sockfs" ino=31964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.092191][ T9227] loop5: detected capacity change from 0 to 2640 [ 205.097064][ T8306] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.097312][ T9223] [ 205.099649][ T8306] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.100198][ T9223] ====================================================== [ 205.102562][ T8306] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.104518][ T9223] WARNING: possible circular locking dependency detected [ 205.104527][ T9223] syzkaller #0 Tainted: G L [ 205.104533][ T9223] ------------------------------------------------------ [ 205.104537][ T9223] syz.3.1165/9223 is trying to acquire lock: [ 205.104544][ T9223] ffff88801ce85210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.107204][ T8306] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.108788][ T9223] (&root->kernfs_iattr_rwsem [ 205.111312][ T8306] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.113078][ T9223] ){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 205.113105][ T9223] [ 205.113105][ T9223] but task is already holding lock: [ 205.113109][ T9223] ffff888028bd5430 (&q->q_usage_counter(io) [ 205.114824][ T9227] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.115970][ T9223] #25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 205.116011][ T9223] [ 205.116011][ T9223] which lock already depends on the new lock. [ 205.116011][ T9223] [ 205.116016][ T9223] [ 205.116016][ T9223] the existing dependency chain (in reverse order) is: [ 205.116020][ T9223] [ 205.116020][ T9223] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 205.118793][ T9227] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.120030][ T9223] blk_alloc_queue+0x610/0x790 [ 205.120049][ T9223] blk_mq_alloc_queue+0x174/0x290 [ 205.120065][ T9223] __blk_mq_alloc_disk+0x29/0x120 [ 205.120081][ T9223] loop_add+0x498/0xb60 [ 205.120092][ T9223] loop_init+0x1d3/0x200 [ 205.120116][ T9223] do_one_initcall+0x121/0x750 [ 205.120132][ T9223] kernel_init_freeable+0x6ea/0x7b0 [ 205.120142][ T9223] kernel_init+0x1f/0x1e0 [ 205.120152][ T9223] ret_from_fork+0x72b/0xd50 [ 205.120164][ T9223] ret_from_fork_asm+0x1a/0x30 [ 205.120179][ T9223] [ 205.120179][ T9223] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 205.120195][ T9223] fs_reclaim_acquire+0xc4/0x100 [ 205.120208][ T9223] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 205.120225][ T9223] __kernfs_iattrs+0x124/0x3e0 [ 205.120236][ T9223] __kernfs_setattr+0x4d/0x3c0 [ 205.120248][ T9223] kernfs_iop_setattr+0xda/0x130 [ 205.120285][ T9223] notify_change+0xb25/0x1330 [ 205.120297][ T9223] do_truncate+0x1df/0x240 [ 205.120309][ T9223] path_openat+0x2a55/0x31a0 [ 205.122612][ T9227] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.124559][ T9223] do_file_open+0x20e/0x430 [ 205.126958][ T9227] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.128752][ T9223] do_sys_openat2+0x10d/0x1e0 [ 205.131145][ T9227] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.133502][ T9223] __x64_sys_openat+0x12d/0x210 [ 205.136678][ T9227] ldm_validate_partition_table(): Disk read failed. [ 205.139244][ T9223] do_syscall_64+0x115/0x870 [ 205.139265][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.139277][ T9223] [ 205.139277][ T9223] -> #0 [ 205.142207][ T9227] Dev loop5: unable to read RDB block 0 [ 205.144377][ T9223] (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 205.144394][ T9223] __lock_acquire+0x14b8/0x2630 [ 205.146237][ T9227] loop5: unable to read partition table [ 205.147607][ T9223] lock_acquire+0x1b1/0x370 [ 205.151417][ T9227] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 205.152111][ T9223] down_read+0x99/0x450 [ 205.207842][ T9223] kernfs_iop_getattr+0x9c/0xf0 [ 205.209547][ T9223] vfs_getattr_nosec+0x2d4/0x430 [ 205.211226][ T9223] vfs_getattr+0x4a/0x60 [ 205.212758][ T9223] loop_query_min_dio_size.isra.0+0x117/0x250 [ 205.214777][ T9223] lo_ioctl+0x13aa/0x1bc0 [ 205.216379][ T9223] blkdev_ioctl+0x5ad/0x6f0 [ 205.218052][ T9223] __x64_sys_ioctl+0x18e/0x210 [ 205.219717][ T9223] do_syscall_64+0x115/0x870 [ 205.221323][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.223317][ T9223] [ 205.223317][ T9223] other info that might help us debug this: [ 205.223317][ T9223] [ 205.226463][ T9223] Chain exists of: [ 205.226463][ T9223] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 205.226463][ T9223] [ 205.230898][ T9223] Possible unsafe locking scenario: [ 205.230898][ T9223] [ 205.233358][ T9223] CPU0 CPU1 [ 205.235159][ T9223] ---- ---- [ 205.236870][ T9223] lock(&q->q_usage_counter(io)#25); [ 205.238726][ T9223] lock(fs_reclaim); [ 205.240865][ T9223] lock(&q->q_usage_counter(io)#25); [ 205.243346][ T9223] rlock(&root->kernfs_iattr_rwsem); [ 205.245079][ T9223] [ 205.245079][ T9223] *** DEADLOCK *** [ 205.245079][ T9223] [ 205.247805][ T9223] 3 locks held by syz.3.1165/9223: [ 205.249815][ T9223] #0: ffff888028bcb430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 205.253790][ T9223] #1: ffff888028bd5430 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 205.258308][ T9223] #2: ffff888028bd5468 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 205.262882][ T9223] [ 205.262882][ T9223] stack backtrace: [ 205.265245][ T9223] CPU: 3 UID: 0 PID: 9223 Comm: syz.3.1165 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.265273][ T9223] Tainted: [L]=SOFTLOCKUP [ 205.265279][ T9223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.265288][ T9223] Call Trace: [ 205.265294][ T9223] [ 205.265301][ T9223] dump_stack_lvl+0x100/0x190 [ 205.265322][ T9223] print_circular_bug.cold+0x178/0x1c7 [ 205.265352][ T9223] check_noncircular+0x146/0x160 [ 205.265376][ T9223] __lock_acquire+0x14b8/0x2630 [ 205.265396][ T9223] lock_acquire+0x1b1/0x370 [ 205.265417][ T9223] ? kernfs_iop_getattr+0x9c/0xf0 [ 205.265434][ T9223] ? __pfx___might_resched+0x10/0x10 [ 205.265458][ T9223] down_read+0x99/0x450 [ 205.265484][ T9223] ? kernfs_iop_getattr+0x9c/0xf0 [ 205.265504][ T9223] ? find_held_lock+0x2b/0x80 [ 205.265519][ T9223] ? __pfx_down_read+0x10/0x10 [ 205.265544][ T9223] ? kernfs_root+0xee/0x2a0 [ 205.265566][ T9223] kernfs_iop_getattr+0x9c/0xf0 [ 205.265588][ T9223] vfs_getattr_nosec+0x2d4/0x430 [ 205.265612][ T9223] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 205.265634][ T9223] vfs_getattr+0x4a/0x60 [ 205.265657][ T9223] loop_query_min_dio_size.isra.0+0x117/0x250 [ 205.265680][ T9223] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 205.265711][ T9223] lo_ioctl+0x13aa/0x1bc0 [ 205.265734][ T9223] ? __pfx_lo_ioctl+0x10/0x10 [ 205.265754][ T9223] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 205.265776][ T9223] ? kasan_quarantine_put+0x104/0x240 [ 205.265805][ T9223] ? blk_get_meta_cap+0xd4/0x6c0 [ 205.265828][ T9223] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 205.265854][ T9223] ? blkdev_common_ioctl+0x515/0x2b80 [ 205.265880][ T9223] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 205.265906][ T9223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.265927][ T9223] ? do_vfs_ioctl+0x226/0x13e0 [ 205.265945][ T9223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.265963][ T9223] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 205.265995][ T9223] ? __fget_files+0x215/0x3d0 [ 205.266017][ T9223] ? __pfx_lo_ioctl+0x10/0x10 [ 205.266038][ T9223] blkdev_ioctl+0x5ad/0x6f0 [ 205.266061][ T9223] ? __pfx_blkdev_ioctl+0x10/0x10 [ 205.266084][ T9223] ? selinux_file_ioctl+0x13b/0x290 [ 205.266109][ T9223] ? selinux_file_ioctl+0xb6/0x290 [ 205.266136][ T9223] ? __pfx_blkdev_ioctl+0x10/0x10 [ 205.266160][ T9223] __x64_sys_ioctl+0x18e/0x210 [ 205.266179][ T9223] do_syscall_64+0x115/0x870 [ 205.266201][ T9223] ? clear_bhb_loop+0x40/0x90 [ 205.266222][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.266241][ T9223] RIP: 0033:0x7f419db9ce59 [ 205.266255][ T9223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.266278][ T9223] RSP: 002b:00007f419ea12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.266295][ T9223] RAX: ffffffffffffffda RBX: 00007f419de15fa0 RCX: 00007f419db9ce59 [ 205.266306][ T9223] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000004 [ 205.266317][ T9223] RBP: 00007f419dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 205.266328][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.266339][ T9223] R13: 00007f419de16038 R14: 00007f419de15fa0 R15: 00007ffc5d354cf8 [ 205.266357][ T9223] [ 205.783404][ T9223] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.791443][ T9223] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.808488][ T6312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.820428][ T9216] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.826476][ T10] usb 6-1: USB disconnect, device number 45 [ 205.828773][ T9216] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.849388][ T9201] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.857399][ T9201] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.928116][ T6312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.946686][ T9227] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.951803][ T9227] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 205.998012][ T6312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.022745][ T9227] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 206.108491][ T6312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.240628][ T6312] bridge_slave_1: left allmulticast mode [ 206.242965][ T6312] bridge_slave_1: left promiscuous mode [ 206.245770][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.249722][ T6312] bridge_slave_0: left allmulticast mode [ 206.252020][ T6312] bridge_slave_0: left promiscuous mode [ 206.254454][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.437491][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.441891][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.446118][ T6312] bond0 (unregistering): Released all slaves [ 206.488367][ T40] audit: type=1400 audit(1780821812.974:621): avc: denied { write } for pid=9232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.513046][ T40] audit: type=1400 audit(1780821812.994:622): avc: denied { write } for pid=9235 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.523390][ T6312] tipc: Left network mode [ 206.536971][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 206.585266][ T40] audit: type=1400 audit(1780821813.064:623): avc: denied { write } for pid=9238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.607156][ T6312] IPVS: stopping master sync thread 7092 ... [ 206.618011][ T40] audit: type=1400 audit(1780821813.104:624): avc: denied { write } for pid=9241 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.639742][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.689160][ T40] audit: type=1400 audit(1780821813.174:625): avc: denied { write } for pid=9244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.719194][ T40] audit: type=1400 audit(1780821813.204:626): avc: denied { write } for pid=9247 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.741239][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 206.812110][ T6312] hsr_slave_0: left promiscuous mode [ 206.814056][ T6312] hsr_slave_1: left promiscuous mode [ 206.819341][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.822346][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.826630][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.829603][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.836823][ T6312] veth1_macvtap: left promiscuous mode [ 206.839150][ T6312] veth0_macvtap: left promiscuous mode [ 206.841473][ T6312] veth1_vlan: left promiscuous mode [ 206.843729][ T6312] veth0_vlan: left promiscuous mode [ 206.932210][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 207.198298][ T6312] IPVS: stop unused estimator thread 0... [ 207.299015][ T6312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.302407][ T6312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.368564][ T6312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.372057][ T6312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.439501][ T6312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.442674][ T6312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.507946][ T6312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.511020][ T6312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.578549][ T6312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.640336][ T6312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.672282][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 207.701612][ T6312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.759863][ T6312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.781538][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 207.860300][ T6312] bridge_slave_1: left allmulticast mode [ 207.863066][ T6312] bridge_slave_1: left promiscuous mode [ 207.866933][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.870917][ T6312] bridge_slave_0: left allmulticast mode [ 207.873183][ T6312] bridge_slave_0: left promiscuous mode [ 207.875766][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.881434][ T6312] bridge_slave_1: left allmulticast mode [ 207.883747][ T6312] bridge_slave_1: left promiscuous mode [ 207.886110][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.890200][ T6312] bridge_slave_0: left allmulticast mode [ 207.892439][ T6312] bridge_slave_0: left promiscuous mode [ 207.894691][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.938823][ T6312] bond0 (unregistering): (slave gretap1): Releasing active interface [ 207.989686][ T6312] bond1 (unregistering): (slave .`): Releasing active interface [ 207.993581][ T6312] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.997454][ T6312] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.000708][ T6312] .` (unregistering): Released all slaves [ 208.003541][ T6312] bond1 (unregistering): Released all slaves [ 208.007435][ T6312] bond0 (unregistering): Released all slaves [ 208.011102][ T6312] bond2 (unregistering): Released all slaves [ 208.014664][ T6312] bond3 (unregistering): Released all slaves [ 208.091175][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.094580][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.097785][ T6312] bond0 (unregistering): Released all slaves [ 208.102257][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 208.143292][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 208.143308][ T40] audit: type=1400 audit(1780821814.624:635): avc: denied { write } for pid=9278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.183762][ T40] audit: type=1400 audit(1780821814.664:636): avc: denied { write } for pid=9281 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.207854][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 208.262295][ T40] audit: type=1400 audit(1780821814.744:637): avc: denied { write } for pid=9285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.286548][ T40] audit: type=1400 audit(1780821814.774:638): avc: denied { write } for pid=9288 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.305884][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 208.355872][ T40] audit: type=1400 audit(1780821814.844:639): avc: denied { write } for pid=9292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.381040][ T40] audit: type=1400 audit(1780821814.864:640): avc: denied { write } for pid=9295 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.410488][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 208.465157][ T40] audit: type=1400 audit(1780821814.944:641): avc: denied { write } for pid=9299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.496249][ T40] audit: type=1400 audit(1780821814.984:642): avc: denied { write } for pid=9302 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.509088][ T6312] hsr_slave_0: left promiscuous mode [ 208.510988][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.513237][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.516296][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.518507][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.522449][ T6312] hsr_slave_0: left promiscuous mode [ 208.524380][ T6312] hsr_slave_1: left promiscuous mode [ 208.526278][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.528536][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.530926][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.533143][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.538494][ T6312] veth1_macvtap: left promiscuous mode [ 208.540634][ T6312] veth0_macvtap: left promiscuous mode [ 208.542733][ T6312] veth1_vlan: left promiscuous mode [ 208.544755][ T6312] veth0_vlan: left promiscuous mode [ 208.547467][ T6312] veth1_macvtap: left promiscuous mode [ 208.549609][ T6312] veth0_macvtap: left promiscuous mode [ 208.551698][ T6312] veth1_vlan: left promiscuous mode [ 208.553708][ T6312] veth0_vlan: left promiscuous mode [ 208.619592][ T6312] team0 (unregistering): Port device team_slave_1 removed [ 208.624144][ T6312] team0 (unregistering): Port device team_slave_0 removed [ 208.688073][ T6312] team0 (unregistering): Port device team_slave_1 removed [ 208.692509][ T6312] team0 (unregistering): Port device team_slave_0 removed [ 208.714371][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 208.778865][ T40] audit: type=1400 audit(1780821815.264:643): avc: denied { write } for pid=9306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.806885][ T40] audit: type=1400 audit(1780821815.294:644): avc: denied { write } for pid=9309 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.825529][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 209.441693][ T6312] IPVS: stop unused estimator thread 0...