last executing test programs: 1m19.988567738s ago: executing program 2 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7) socket$inet6(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) gettid() getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000427bd7000fbdbdf25f39908eb1cfb01cb000000060001002a0000000800040002f3c31f901470b982f869c2000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x24000001) close(r3) 1m18.048880745s ago: executing program 2 (id=203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xae0, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1m17.081819804s ago: executing program 2 (id=213): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x5c5f, &(0x7f0000000300)={0x0, 0x982b, 0x1, 0x3, 0x38e}) close(0x3) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x10000008) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) close(r2) 1m16.214247765s ago: executing program 2 (id=216): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000ff080056c1b4d700000004000000", @ANYRES32=0x0, @ANYBLOB="84d00100009e0001006dbd0d00d92ec948658291f898fbe4ccdfdc0111326b2f9dc2baebd208"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) eventfd2(0x4081, 0x800) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x7, 0x1}) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x40402) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="c2", 0x1}, {0x0, 0x500}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='\x00', 0x89901) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x63359876a88a0d12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0xfffffffd, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) socket$kcm(0x29, 0x7, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m15.769125476s ago: executing program 2 (id=219): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3f, 0x103) 1m15.473352877s ago: executing program 2 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000e40)={0x4, {{0x2, 0x2, @loopback}}, 0x1, 0x3, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}]}, 0x20c) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="580000000206010200000000000000000a0000000900020073797a3100000000050004000000000011000300686173683a6e65702c6e6574000000000c00078008001240000020e6c00896386f80000005000100060000007ea07517dcad479865711b9e58da084088b1e841d4d5c22d3816"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db43139cb57971fbd7d07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) getrlimit(0xb, &(0x7f0000000880)) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) 1m15.130518421s ago: executing program 32 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000e40)={0x4, {{0x2, 0x2, @loopback}}, 0x1, 0x3, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}]}, 0x20c) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="580000000206010200000000000000000a0000000900020073797a3100000000050004000000000011000300686173683a6e65702c6e6574000000000c00078008001240000020e6c00896386f80000005000100060000007ea07517dcad479865711b9e58da084088b1e841d4d5c22d3816"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db43139cb57971fbd7d07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) getrlimit(0xb, &(0x7f0000000880)) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) 3.334936149s ago: executing program 0 (id=737): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0x1, 0x9, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x60) 3.332581841s ago: executing program 0 (id=738): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000001640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lstat(0x0, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000015c0)='27', 0x2) socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001600)={0xe000202b, 0x300}) mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xa) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x7185, 0x800, 0x3, 0x399}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x3, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xa9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f00000003c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, &(0x7f0000000440)=@buf_512="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"}}, &(0x7f0000001440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 2.411322057s ago: executing program 4 (id=745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0x1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x18a, 0x2, 0x1, 0x1, 0xfffff000, {0x4, 0x1, 0x8, 0x316, 0xd}, {0x9, 0x0, 0x7, 0x4, 0x7, 0x80}, 0x9, 0x5, 0xa86}}]}]}}]}, 0x74}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b80)={r2, 0x20, &(0x7f0000002b40)={&(0x7f0000001b00)=""/4096, 0x1000, 0x0, &(0x7f0000002b00)=""/36, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x1, 0x1, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000640)='GPL\x00', 0x3, 0x1000, &(0x7f0000000880)=""/4096, 0x41100, 0x2, '\x00', r6, @fallback=0x1e, r2, 0x8, &(0x7f0000001a80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0xb, 0xfffffffa, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0x18, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x2, 0x3}, @release={0x40046306, 0x1}]}) 2.333745359s ago: executing program 4 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4c) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0x1, 0x9, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x60) 2.300359176s ago: executing program 4 (id=748): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'bridge_slave_1\x00', 0x0}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84040, 0x9) mmap(&(0x7f0000539000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000539000/0x4000)=nil, 0x4000, 0x4) mkdirat(r2, &(0x7f0000000100)='./bus\x00', 0x1a8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000140)=0x1, 0xfffffffffffffd14) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f00000dd000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r2, 0x38720000) r5 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) fcntl$setlease(r6, 0x400, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x8, @local, 0x5}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@flowinfo={{0x10, 0x29, 0xb, 0x8}}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4044000) ioperm(0x0, 0x40, 0x8000000000000001) creat(0x0, 0xecf86c37d53049cc) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x200002, 0x200003, 0x4, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000080000000600000000000011"], 0x0, 0x40, 0x0, 0x1, 0x8001}, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x11, &(0x7f0000000580)=0x100000001, 0x4) mkdir(&(0x7f00000005c0)='./file0/file2\x00', 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=@ipmr_newroute={0x5c, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x80, 0x14, 0x14, 0x19, 0x58787bca437c0261, 0x1, 0xc8, 0x2, 0x900}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PRIORITY={0x8, 0x6, 0x8bdb}, @RTA_IIF={0x8, 0x3, r1}, @RTA_PRIORITY={0x8, 0x6, 0xe0000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20000000) 2.201111682s ago: executing program 4 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x25cb, 0x7) socket$inet6(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) gettid() getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000427bd7000fbdbdf25f39908eb1cfb01cb000000060001002a0000000800040002f3c31f901470b982f869c2000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x24000001) close(r3) 2.168930326s ago: executing program 3 (id=750): ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x103e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.136972549s ago: executing program 0 (id=751): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000001640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lstat(0x0, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000015c0)='27', 0x2) socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001600)={0xe000202b, 0x300}) mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xa) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x7185, 0x800, 0x3, 0x399}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x3, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xa9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f00000003c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, &(0x7f0000000440)=@buf_512="09d723b6a8b08048a173d56f466dadb12d6a9f22fae6e98a3891fd5fb623bebc661cec485b5c58ef011e3904ddfcf84f3d60b804b42ab472a2ed87cb235fb6db236258737b66977a09f1590b224562f52f696848ef704b85c9d74fa07cca8217d897d557416aecc4a7db25d5bc1b3efdbdea1978d4fdab126c27c97aa1fb4ec68ac41f92d9250d8695a9505cf933b1ff7fb2614bc5f5a069844518f633d325a808bbeb29aaa91d612dac88d7e0b1c8814b9e7a77829ae02c890f910ea7c7b7909cb748a3650c96f82c4f5a5d87d3e347a138f87f19b33853e75dd1885a8f8bd7ff231cae28166cf42e733bffd37740d68c113c9fb5b8ba8313343f287465578af9aeaafb3091e28c2dfd2e14ee29a76ef6fe88fb052cb786484dcbe130b7788e3fed4f71caef25ad678a989f75a064a60a617e0685caee1819d094bd48babb6e5037af2c7b6a6bbc0bbca705434657971d95d5bd0b72489f1292b54fa2928d830894cd10a82e01e0535e25199abddf9d88f4dd5f8dcb4ec4273c84a2d7b0869bb39a98eb0fb8a074059fbcb4a074ba0cb0619f1505c0ad800360cf8663f0dac4b407603538e1d6e28ac1be99a6e263f87283f043493246689df0d5b7f84c807682a0ce6bd0bc4c0333007abf773d01b1749cf65813e53dc06fd648082a1a324778264afb7a3501dc18b3d0d5307697b51f3f167a3388d346df0977fca9102112"}}, &(0x7f0000001440)) fsopen(&(0x7f0000001480)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 2.125642615s ago: executing program 3 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000140)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[], 0x280) 1.961507511s ago: executing program 3 (id=753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, 0x0, 0x0) 1.961284102s ago: executing program 3 (id=754): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000005e000/0x4000)=nil, 0x4000, 0x300000b, 0x12, 0xffffffffffffffff, 0x681ec000) ptrace(0x10, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0108000800080000003f43491e62d7a882dd0a7d217efc38151de373587aa40ef52a54db76db8e17da1ee99646e138de4fb917b7168ce2d0015e1d602c5d016da25fcc95bd14bdfe2f9856201270f51564953730e80e69f584e4f8ccda9ae5ec55fdc0f913bc4e648d2ebc6d2b6205058229710e8e8cf8be7506e79415c3a5f4ce41ebaa72c14d"], 0xc4}}, 0x40010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd701ffedbdf25090002000000000000000000080041000000000014003300"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r7, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x2000c048}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x200, 0x8, 0x0, 0x0, 0x20e201a2, r8}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='xfs\x00', 0x2a18005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) sendfile64(r10, r10, &(0x7f0000000040)=0x7, 0xfffffff8) close_range(r10, 0xffffffffffffffff, 0x0) 1.739888112s ago: executing program 1 (id=755): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = fsopen(&(0x7f00000003c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000e4ff95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5d}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r5, r4, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={0xffffffffffffffff, r4, 0x25, 0x0, @void}, 0x10) r7 = fsmount(r2, 0x1, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r7) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000a80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r11, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x28004001) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000880)={0x90000, 0x0, {[0xc, 0xd, 0x3, 0x2, 0x87c8, 0x4, 0x27b6, 0x6]}}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000400)='ro\x00', 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x80000000}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r12 = openat$dm_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r12, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8a02, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r13}, [@snapshot={0x0, 0x2880, 0x0, 0x80, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '256', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) 1.687783941s ago: executing program 1 (id=756): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x3ff) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000000)={0x1, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000e91763047d0e5bc5a4ce00004bebd90ba6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x3, 0x10000022, 0x5, 0x9, 0x80000001, 0x85f, 0x800, 0x7}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.019433029s ago: executing program 3 (id=757): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10002, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r2, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000001c0)=0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x26d, 0x0, 0x2000000}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x6}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2, 0x8}, 0x9c) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f00000004c0)={0x0, 0xc1, 0x87e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0xfffffffc], [0x101, 0x0, 0x1, 0xb1e5], [0x6, 0xffffffffffffffff, 0x0, 0x8]}) write(r10, &(0x7f00000002c0)="4d6b6ea73e60ddbed1b9ccad0a", 0xd) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfebe}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.003506795s ago: executing program 0 (id=758): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x5c5f, &(0x7f0000000300)={0x0, 0x982b, 0x1, 0x3, 0x38e}) close(0x3) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x10000008) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) close(r2) 727.566489ms ago: executing program 1 (id=759): socket$nl_route(0x10, 0x3, 0x0) 651.460948ms ago: executing program 1 (id=760): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="f2"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2400, 0x2, 0x0, 0x0, {0x6, 0x40, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004884}, 0x4000084) (fail_nth: 5) 651.145976ms ago: executing program 1 (id=761): ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x103e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 619.520865ms ago: executing program 1 (id=762): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x5c5f, &(0x7f0000000300)={0x0, 0x982b, 0x1, 0x3, 0x38e}) close(0x3) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x10000008) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 501.230541ms ago: executing program 3 (id=763): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000001640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lstat(0x0, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000015c0)='27', 0x2) socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000001600)={0xe000202b, 0x300}) mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xa) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x7185, 0x800, 0x3, 0x399}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x3, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xa9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f00000003c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, &(0x7f0000000440)=@buf_512="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"}}, &(0x7f0000001440)) fsopen(&(0x7f0000001480)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 390.27576ms ago: executing program 4 (id=764): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048006) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}}}, 0x104) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x6004, 0x1) file_getattr(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x18, 0x100) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r0}) close(0x3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x8010) 100.229024ms ago: executing program 4 (id=765): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x240}, 0xe) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x284000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='0 0 0 0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='0\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r5) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) bind$rxrpc(r2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r7, @ANYBLOB="eb91"], 0x40c}}, 0x0) 98.832257ms ago: executing program 0 (id=766): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) sendfile64(r0, r0, &(0x7f0000000040)=0x7, 0xfffffff8) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=767): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)="656e61626c655f6576656e743a73636865643adf66fdfc3e8b167de3f340ae9cdc493fa20dfcdc6a57efaa55dfb75c380536fa490450e0a83bc42042", 0x3c) ioctl$TIOCSBRK(r2, 0x5427) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000440)={'\x00', 0x7, 0x3763a9f5, 0x97, 0xb86, 0x5, 0x0}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r12 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r12, 0x40046602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(r13, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x190 [ 130.666565][ T7833] should_fail_ex.cold+0x5/0xa [ 130.666593][ T7833] should_failslab+0xc2/0x120 [ 130.666626][ T7833] __kmalloc_cache_noprof+0x91/0x6d0 [ 130.666650][ T7833] ? wakeup_source_register+0x4c/0x3e0 [ 130.666683][ T7833] wakeup_source_register+0x4c/0x3e0 [ 130.666712][ T7833] ep_create_wakeup_source+0x1df/0x2e0 [ 130.666741][ T7833] ? __mutex_unlock_slowpath+0x35d/0x930 [ 130.666766][ T7833] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 130.666802][ T7833] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 130.666822][ T7833] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 130.666849][ T7833] do_epoll_ctl_file+0x1e26/0x36e0 [ 130.666879][ T7833] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 130.666899][ T7833] ? lock_acquire+0x1d1/0x380 [ 130.666924][ T7833] ? __fget_files+0x34/0x3d0 [ 130.666951][ T7833] ? find_held_lock+0x2b/0x80 [ 130.666971][ T7833] ? __fget_files+0x215/0x3d0 [ 130.667002][ T7833] ? __fget_files+0x21f/0x3d0 [ 130.667035][ T7833] ? do_epoll_ctl+0xfd/0x1a0 [ 130.667053][ T7833] do_epoll_ctl+0xfd/0x1a0 [ 130.667074][ T7833] ? __pfx_do_epoll_ctl+0x10/0x10 [ 130.667099][ T7833] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 130.667121][ T7833] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 130.667150][ T7833] __do_fast_syscall_32+0x14b/0x8c0 [ 130.667178][ T7833] do_fast_syscall_32+0x32/0x70 [ 130.667210][ T7833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.667236][ T7833] RIP: 0023:0xf742efbc [ 130.667253][ T7833] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 130.667272][ T7833] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 130.667292][ T7833] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 130.667304][ T7833] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 130.667316][ T7833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.667327][ T7833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.667339][ T7833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.667363][ T7833] [ 130.808052][ T7845] FAULT_INJECTION: forcing a failure. [ 130.808052][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.808072][ T7845] CPU: 2 UID: 0 PID: 7845 Comm: syz.4.465 Not tainted syzkaller #0 PREEMPT(full) [ 130.808086][ T7845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.808093][ T7845] Call Trace: [ 130.808098][ T7845] [ 130.808102][ T7845] dump_stack_lvl+0x100/0x190 [ 130.808121][ T7845] should_fail_ex.cold+0x5/0xa [ 130.808136][ T7845] _copy_from_user+0x2e/0xd0 [ 130.808149][ T7845] ctl_ioctl+0x289/0xcc0 [ 130.808161][ T7845] ? __pfx_table_load+0x10/0x10 [ 130.808175][ T7845] ? __pfx_ctl_ioctl+0x10/0x10 [ 130.808200][ T7845] ? __fget_files+0x21f/0x3d0 [ 130.808218][ T7845] dm_compat_ctl_ioctl+0x23/0x30 [ 130.808231][ T7845] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 130.808242][ T7845] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 130.808257][ T7845] __do_fast_syscall_32+0x14b/0x8c0 [ 130.808271][ T7845] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.808285][ T7845] do_fast_syscall_32+0x32/0x70 [ 130.808298][ T7845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.808313][ T7845] RIP: 0023:0xf7ff3fbc [ 130.808322][ T7845] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 130.808333][ T7845] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 130.808345][ T7845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 130.808352][ T7845] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.808358][ T7845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.808365][ T7845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.808371][ T7845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.808392][ T7845] [ 130.834296][ T6830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 130.984158][ T6830] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 130.986791][ T6830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.986808][ T6830] usb 6-1: Product: syz [ 130.986815][ T6830] usb 6-1: Manufacturer: syz [ 130.986823][ T6830] usb 6-1: SerialNumber: syz [ 130.990670][ T6830] usb 6-1: USB2VGA dongle found at address 11 [ 131.006651][ T6830] usb 6-1: Allocated 8 output buffers [ 131.007929][ T7856] device-mapper: table: 248:7: crypt: Error decoding and setting key (-EINVAL) [ 131.007950][ T7856] device-mapper: ioctl: error adding target to table [ 131.013752][ T7848] CIFS: VFS: bad security option: kÆe>IÚ…r–q‚Í^ï þņˆüŠoVm§ [ 131.059098][ C3] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 131.059134][ C3] sr 2:0:0:0: [sr0] tag#3 CDB: Release(6) [ 131.059144][ C3] sr 2:0:0:0: [sr0] tag#3 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 131.059155][ C3] sr 2:0:0:0: [sr0] tag#3 CDB[10]: 41 [ 131.171486][ T7867] bridge1: entered promiscuous mode [ 131.171509][ T7867] bridge1: entered allmulticast mode [ 131.178028][ T7867] team0: Port device bridge1 added [ 131.219215][ T7866] bridge0: port 3(team0) entered blocking state [ 131.219343][ T7866] bridge0: port 3(team0) entered disabled state [ 131.219575][ T7866] team0: entered allmulticast mode [ 131.219633][ T7866] team_slave_0: entered allmulticast mode [ 131.219652][ T7866] team_slave_1: entered allmulticast mode [ 131.223376][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.226595][ T7866] team0: entered promiscuous mode [ 131.226615][ T7866] team_slave_0: entered promiscuous mode [ 131.226883][ T7866] team_slave_1: entered promiscuous mode [ 131.227835][ T7866] bridge0: port 3(team0) entered blocking state [ 131.227983][ T7866] bridge0: port 3(team0) entered forwarding state [ 131.358572][ T7879] nbd4: detected capacity change from 0 to 63 [ 131.366652][ T7879] block nbd4: NBD_DISCONNECT [ 131.368122][ T7879] block nbd4: Disconnected due to user request. [ 131.368135][ T7879] block nbd4: shutting down sockets [ 131.373586][ C2] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.373761][ C2] Buffer I/O error on dev nbd4, logical block 0, async page read [ 131.374925][ C2] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.374980][ C2] Buffer I/O error on dev nbd4, logical block 1, async page read [ 131.375000][ C2] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.375061][ C2] Buffer I/O error on dev nbd4, logical block 2, async page read [ 131.375078][ C2] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.375138][ C2] Buffer I/O error on dev nbd4, logical block 3, async page read [ 131.378138][ T1308] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378186][ T1308] Buffer I/O error on dev nbd4, logical block 0, async page read [ 131.378321][ T1308] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378343][ T1308] Buffer I/O error on dev nbd4, logical block 1, async page read [ 131.378418][ T1308] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378437][ T1308] Buffer I/O error on dev nbd4, logical block 2, async page read [ 131.378511][ T1308] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378531][ T1308] Buffer I/O error on dev nbd4, logical block 3, async page read [ 131.378786][ T1308] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378806][ T1308] Buffer I/O error on dev nbd4, logical block 0, async page read [ 131.378880][ T1308] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.378900][ T1308] Buffer I/O error on dev nbd4, logical block 1, async page read [ 131.380112][ T6434] ldm_validate_partition_table(): Disk read failed. [ 131.381390][ T6434] Dev nbd4: unable to read RDB block 0 [ 131.383325][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 131.383918][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 131.384929][ T6434] nbd4: unable to read partition table [ 131.384936][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.384973][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.390703][ T29] usb 5-1: config 0 descriptor?? [ 131.394841][ T6434] ldm_validate_partition_table(): Disk read failed. [ 131.395527][ T6434] Dev nbd4: unable to read RDB block 0 [ 131.398620][ T6434] nbd4: unable to read partition table [ 131.400796][ T29] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 131.648081][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 131.657413][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 131.661543][ T5134] bcm5974 5-1:0.0: could not read from device [ 131.671230][ T7854] bcm5974 5-1:0.0: could not read from device [ 131.675288][ T29] usb 5-1: USB disconnect, device number 13 [ 131.678524][ T5134] bcm5974 5-1:0.0: could not read from device [ 131.724864][ T7890] FAULT_INJECTION: forcing a failure. [ 131.724864][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 131.724886][ T7890] CPU: 2 UID: 0 PID: 7890 Comm: syz.4.478 Not tainted syzkaller #0 PREEMPT(full) [ 131.724900][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.724907][ T7890] Call Trace: [ 131.724911][ T7890] [ 131.724917][ T7890] dump_stack_lvl+0x100/0x190 [ 131.724936][ T7890] should_fail_ex.cold+0x5/0xa [ 131.724989][ T7890] should_failslab+0xc2/0x120 [ 131.725020][ T7890] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.725037][ T7890] ? wakeup_source_device_create+0x46/0x2e0 [ 131.725054][ T7890] wakeup_source_device_create+0x46/0x2e0 [ 131.725066][ T7890] wakeup_source_sysfs_add+0x1c/0x90 [ 131.725077][ T7890] wakeup_source_register+0x154/0x3e0 [ 131.725094][ T7890] ep_create_wakeup_source+0x1df/0x2e0 [ 131.725112][ T7890] ? __mutex_unlock_slowpath+0x35d/0x930 [ 131.725126][ T7890] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 131.725146][ T7890] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 131.725158][ T7890] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 131.725173][ T7890] do_epoll_ctl_file+0x1e26/0x36e0 [ 131.725192][ T7890] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 131.725204][ T7890] ? lock_acquire+0x1d1/0x380 [ 131.725219][ T7890] ? __fget_files+0x34/0x3d0 [ 131.725235][ T7890] ? find_held_lock+0x2b/0x80 [ 131.725247][ T7890] ? __fget_files+0x215/0x3d0 [ 131.725265][ T7890] ? __fget_files+0x21f/0x3d0 [ 131.725283][ T7890] ? do_epoll_ctl+0xfd/0x1a0 [ 131.725294][ T7890] do_epoll_ctl+0xfd/0x1a0 [ 131.725305][ T7890] ? __pfx_do_epoll_ctl+0x10/0x10 [ 131.725321][ T7890] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 131.725334][ T7890] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 131.725365][ T7890] __do_fast_syscall_32+0x14b/0x8c0 [ 131.725381][ T7890] do_fast_syscall_32+0x32/0x70 [ 131.725395][ T7890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.725409][ T7890] RIP: 0023:0xf7ff3fbc [ 131.725420][ T7890] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 131.725432][ T7890] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 131.725444][ T7890] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 131.725452][ T7890] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 131.725458][ T7890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.725465][ T7890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.725472][ T7890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.725486][ T7890] [ 132.423840][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.423873][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.914766][ T7909] FAULT_INJECTION: forcing a failure. [ 132.914766][ T7909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.914836][ T7909] CPU: 3 UID: 0 PID: 7909 Comm: syz.4.486 Not tainted syzkaller #0 PREEMPT(full) [ 132.914850][ T7909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.914857][ T7909] Call Trace: [ 132.914861][ T7909] [ 132.914866][ T7909] dump_stack_lvl+0x100/0x190 [ 132.914886][ T7909] should_fail_ex.cold+0x5/0xa [ 132.914899][ T7909] ? prepare_alloc_pages+0x16d/0x5b0 [ 132.914917][ T7909] should_fail_alloc_page+0xeb/0x140 [ 132.914935][ T7909] prepare_alloc_pages+0x1f0/0x5b0 [ 132.914967][ T7909] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 132.914982][ T7909] ? __pfx_get_page_from_freelist+0x10/0x10 [ 132.914995][ T7909] ? prepare_alloc_pages+0x1f0/0x5b0 [ 132.915011][ T7909] ? is_bpf_text_address+0x94/0x1a0 [ 132.915029][ T7909] ? rcu_is_watching+0x13/0xc0 [ 132.915041][ T7909] ? __alloc_frozen_pages_noprof+0x562/0x32e0 [ 132.915057][ T7909] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.915074][ T7909] ? stack_trace_save+0x8e/0xc0 [ 132.915088][ T7909] ? __pfx_stack_trace_save+0x10/0x10 [ 132.915103][ T7909] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.915120][ T7909] ? kasan_save_track+0x14/0x30 [ 132.915134][ T7909] ? __kasan_slab_alloc+0x89/0x90 [ 132.915149][ T7909] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 132.915163][ T7909] ? alloc_vmap_area+0x643/0x2bc0 [ 132.915177][ T7909] ? __get_vm_area_node+0x1ed/0x350 [ 132.915192][ T7909] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 132.915209][ T7909] ? __vmalloc_node_noprof+0xad/0xf0 [ 132.915225][ T7909] ? __vmalloc_noprof+0xa3/0x120 [ 132.915240][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915255][ T7909] ? bpf_prog_alloc+0x3b/0x200 [ 132.915269][ T7909] ? bpf_prog_load+0x49e/0x2ab0 [ 132.915284][ T7909] ? __sys_bpf+0x1f46/0x4a30 [ 132.915295][ T7909] ? __ia32_sys_bpf+0xcc/0x170 [ 132.915307][ T7909] ? __do_fast_syscall_32+0x14b/0x8c0 [ 132.915320][ T7909] ? do_fast_syscall_32+0x32/0x70 [ 132.915337][ T7909] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 132.915354][ T7909] ? policy_nodemask+0xed/0x4f0 [ 132.915372][ T7909] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 132.915394][ T7909] __kasan_populate_vmalloc+0xf0/0x210 [ 132.915412][ T7909] alloc_vmap_area+0x963/0x2bc0 [ 132.915432][ T7909] ? kasan_save_track+0x14/0x30 [ 132.915446][ T7909] ? __kasan_kmalloc+0xaa/0xb0 [ 132.915461][ T7909] ? __pfx_alloc_vmap_area+0x10/0x10 [ 132.915477][ T7909] ? __get_vm_area_node+0x124/0x350 [ 132.915495][ T7909] __get_vm_area_node+0x1ed/0x350 [ 132.915513][ T7909] __vmalloc_node_range_noprof+0x268/0x1420 [ 132.915531][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915546][ T7909] ? down_write+0x141/0x1f0 [ 132.915564][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915582][ T7909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.915599][ T7909] ? __lock_acquire+0x5c0/0x1f40 [ 132.915618][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915633][ T7909] __vmalloc_node_noprof+0xad/0xf0 [ 132.915650][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915667][ T7909] __vmalloc_noprof+0xa3/0x120 [ 132.915684][ T7909] ? __pfx___vmalloc_noprof+0x10/0x10 [ 132.915700][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.915714][ T7909] ? is_bpf_text_address+0x25/0x1a0 [ 132.915730][ T7909] ? rcu_is_watching+0x13/0xc0 [ 132.915742][ T7909] ? apparmor_capable+0x1d7/0x4d0 [ 132.915756][ T7909] bpf_prog_alloc_no_stats+0x58/0x690 [ 132.915770][ T7909] ? security_capable+0x80/0x260 [ 132.915786][ T7909] bpf_prog_alloc+0x3b/0x200 [ 132.915801][ T7909] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.915818][ T7909] bpf_prog_load+0x49e/0x2ab0 [ 132.915834][ T7909] ? __lock_acquire+0x5c0/0x1f40 [ 132.915850][ T7909] ? __pfx_bpf_prog_load+0x10/0x10 [ 132.915879][ T7909] __sys_bpf+0x1f46/0x4a30 [ 132.915895][ T7909] ? __pfx___sys_bpf+0x10/0x10 [ 132.915906][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.915920][ T7909] ? get_pid_task+0x2a/0x250 [ 132.915930][ T7909] ? find_held_lock+0x2b/0x80 [ 132.915941][ T7909] ? get_pid_task+0xfc/0x250 [ 132.915951][ T7909] ? get_pid_task+0xfc/0x250 [ 132.915964][ T7909] ? proc_fail_nth_write+0x9f/0x220 [ 132.915979][ T7909] ? find_held_lock+0x2b/0x80 [ 132.915993][ T7909] ? rcu_read_lock_any_held+0x6a/0x90 [ 132.916006][ T7909] ? find_held_lock+0x2b/0x80 [ 132.916016][ T7909] ? ksys_write+0x190/0x250 [ 132.916030][ T7909] ? ksys_write+0x190/0x250 [ 132.916051][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.916065][ T7909] ? __might_fault+0xc5/0x140 [ 132.916077][ T7909] ? find_held_lock+0x2b/0x80 [ 132.916090][ T7909] ? __ia32_sys_bpf+0xcc/0x170 [ 132.916102][ T7909] __ia32_sys_bpf+0xcc/0x170 [ 132.916115][ T7909] ? __might_fault+0x111/0x140 [ 132.916127][ T7909] __do_fast_syscall_32+0x14b/0x8c0 [ 132.916140][ T7909] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.916154][ T7909] do_fast_syscall_32+0x32/0x70 [ 132.916167][ T7909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.916181][ T7909] RIP: 0023:0xf7ff3fbc [ 132.916191][ T7909] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 132.916202][ T7909] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 132.916214][ T7909] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000780 [ 132.916221][ T7909] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.916228][ T7909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.916234][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.916240][ T7909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.916255][ T7909] [ 132.916508][ T7909] syz.4.486: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.916565][ T7909] CPU: 3 UID: 0 PID: 7909 Comm: syz.4.486 Not tainted syzkaller #0 PREEMPT(full) [ 132.916582][ T7909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.916593][ T7909] Call Trace: [ 132.916599][ T7909] [ 132.916605][ T7909] dump_stack_lvl+0x100/0x190 [ 132.916640][ T7909] warn_alloc.cold+0x9e/0xb2 [ 132.916654][ T7909] ? __pfx_warn_alloc+0x10/0x10 [ 132.916667][ T7909] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.916680][ T7909] ? __get_vm_area_node+0x2f0/0x350 [ 132.916700][ T7909] ? __get_vm_area_node+0x22b/0x350 [ 132.916719][ T7909] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 132.916737][ T7909] ? down_write+0x141/0x1f0 [ 132.916754][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.916772][ T7909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.916793][ T7909] ? __lock_acquire+0x5c0/0x1f40 [ 132.916813][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.916828][ T7909] __vmalloc_node_noprof+0xad/0xf0 [ 132.916845][ T7909] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 132.916862][ T7909] __vmalloc_noprof+0xa3/0x120 [ 132.916879][ T7909] ? __pfx___vmalloc_noprof+0x10/0x10 [ 132.916895][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.916909][ T7909] ? is_bpf_text_address+0x25/0x1a0 [ 132.916926][ T7909] ? rcu_is_watching+0x13/0xc0 [ 132.916937][ T7909] ? apparmor_capable+0x1d7/0x4d0 [ 132.916951][ T7909] bpf_prog_alloc_no_stats+0x58/0x690 [ 132.916966][ T7909] ? security_capable+0x80/0x260 [ 132.916978][ T7909] bpf_prog_alloc+0x3b/0x200 [ 132.916992][ T7909] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.917009][ T7909] bpf_prog_load+0x49e/0x2ab0 [ 132.917025][ T7909] ? __lock_acquire+0x5c0/0x1f40 [ 132.917042][ T7909] ? __pfx_bpf_prog_load+0x10/0x10 [ 132.917071][ T7909] __sys_bpf+0x1f46/0x4a30 [ 132.917087][ T7909] ? __pfx___sys_bpf+0x10/0x10 [ 132.917099][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.917112][ T7909] ? get_pid_task+0x2a/0x250 [ 132.917122][ T7909] ? find_held_lock+0x2b/0x80 [ 132.917133][ T7909] ? get_pid_task+0xfc/0x250 [ 132.917143][ T7909] ? get_pid_task+0xfc/0x250 [ 132.917156][ T7909] ? proc_fail_nth_write+0x9f/0x220 [ 132.917171][ T7909] ? find_held_lock+0x2b/0x80 [ 132.917185][ T7909] ? rcu_read_lock_any_held+0x6a/0x90 [ 132.917197][ T7909] ? find_held_lock+0x2b/0x80 [ 132.917208][ T7909] ? ksys_write+0x190/0x250 [ 132.917221][ T7909] ? ksys_write+0x190/0x250 [ 132.917242][ T7909] ? lock_acquire+0x1d1/0x380 [ 132.917256][ T7909] ? __might_fault+0xc5/0x140 [ 132.917267][ T7909] ? find_held_lock+0x2b/0x80 [ 132.917281][ T7909] ? __ia32_sys_bpf+0xcc/0x170 [ 132.917293][ T7909] __ia32_sys_bpf+0xcc/0x170 [ 132.917306][ T7909] ? __might_fault+0x111/0x140 [ 132.917317][ T7909] __do_fast_syscall_32+0x14b/0x8c0 [ 132.917331][ T7909] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.917345][ T7909] do_fast_syscall_32+0x32/0x70 [ 132.917358][ T7909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.917372][ T7909] RIP: 0023:0xf7ff3fbc [ 132.917381][ T7909] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 132.917391][ T7909] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 132.917401][ T7909] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000780 [ 132.917408][ T7909] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.917415][ T7909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.917421][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.917428][ T7909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.917442][ T7909] [ 132.917482][ T7909] Mem-Info: [ 132.917489][ T7909] active_anon:40619 inactive_anon:18860 isolated_anon:0 [ 132.917489][ T7909] active_file:3624 inactive_file:4532 isolated_file:0 [ 132.917489][ T7909] unevictable:2400 dirty:406 writeback:0 [ 132.917489][ T7909] slab_reclaimable:8667 slab_unreclaimable:57501 [ 132.917489][ T7909] mapped:52149 shmem:54111 pagetables:1340 [ 132.917489][ T7909] sec_pagetables:300 bounce:0 [ 132.917489][ T7909] kernel_misc_reclaimable:0 [ 132.917489][ T7909] free:21941 free_pcp:4345 free_cma:0 [ 132.917516][ T7909] Node 0 active_anon:1960kB inactive_anon:8kB active_file:160kB inactive_file:8kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:1000kB dirty:4kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1316kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.917544][ T7909] Node 1 active_anon:160516kB inactive_anon:75432kB active_file:14336kB inactive_file:18120kB unevictable:7600kB isolated(anon):0kB isolated(file):0kB mapped:207596kB dirty:1620kB writeback:0kB shmem:212604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6356kB pagetables:4044kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.917572][ T7909] Node 0 DMA free:3152kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:4kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:44kB free_cma:0kB [ 132.917647][ T7909] lowmem_reserve[]: 0 259 259 259 259 [ 132.917669][ T7909] Node 0 DMA32 free:16940kB boost:6144kB min:17844kB low:20768kB high:23692kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1956kB inactive_anon:4kB active_file:20kB inactive_file:8kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:265260kB mlocked:0kB bounce:0kB free_pcp:11280kB local_pcp:3284kB free_cma:0kB [ 132.917699][ T7909] lowmem_reserve[]: 0 0 0 0 0 [ 132.917717][ T7909] Node 1 DMA32 free:67672kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:160516kB inactive_anon:75432kB active_file:14336kB inactive_file:18120kB unevictable:7600kB writepending:1620kB zspages:1756kB present:1048432kB managed:948208kB mlocked:5600kB bounce:0kB free_pcp:5772kB local_pcp:756kB free_cma:0kB [ 132.917748][ T7909] lowmem_reserve[]: 0 0 0 0 0 [ 132.917815][ T7909] Node 0 DMA: 170*4kB (UE) 31*8kB (UE) 15*16kB (UE) 22*32kB (UE) 14*64kB (U) 3*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3152kB [ 132.917889][ T7909] Node 0 DMA32: 339*4kB (UE) 40*8kB (UE) 4*16kB (UE) 121*32kB (UME) 25*64kB (UME) 6*128kB (UE) 5*256kB (U) 9*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 16940kB [ 132.918016][ T7909] Node 1 DMA32: 10*4kB (UE) 51*8kB (E) 28*16kB (U) 226*32kB (UME) 149*64kB (UME) 43*128kB (UME) 7*256kB (UE) 13*512kB (UM) 3*1024kB (M) 12*2048kB (UM) 2*4096kB (M) = 67456kB [ 132.918168][ T7909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.918177][ T7909] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 132.918186][ T7909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.918194][ T7909] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.918202][ T7909] 63922 total pagecache pages [ 132.918206][ T7909] 266 pages in swap cache [ 132.918210][ T7909] Free swap = 121800kB [ 132.918214][ T7909] Total swap = 124996kB [ 132.918219][ T7909] 524155 pages RAM [ 132.918222][ T7909] 0 pages HighMem/MovableOnly [ 132.918226][ T7909] 216948 pages reserved [ 132.918229][ T7909] 0 pages cma reserved [ 133.366596][ T7917] usb usb4: usbfs: process 7917 (syz.0.489) did not claim interface 0 before use [ 134.109591][ T7929] Invalid ELF header magic: != ELF [ 134.119853][ T7929] overlay: Unknown parameter '/' [ 134.125343][ T7929] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 134.278878][ T7929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.427541][ T6830] usb 6-1: Failed to early initialize device [ 134.431750][ T6830] usb 6-1: USB disconnect, device number 11 [ 134.893096][ T7937] FAULT_INJECTION: forcing a failure. [ 134.893096][ T7937] name fail_futex, interval 1, probability 0, space 0, times 1 [ 134.893119][ T7937] CPU: 2 UID: 0 PID: 7937 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 134.893140][ T7937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.893151][ T7937] Call Trace: [ 134.893157][ T7937] [ 134.893165][ T7937] dump_stack_lvl+0x100/0x190 [ 134.893191][ T7937] should_fail_ex.cold+0x5/0xa [ 134.893223][ T7937] get_futex_key+0x1c9/0x13e0 [ 134.893267][ T7937] ? __pfx_get_futex_key+0x10/0x10 [ 134.893290][ T7937] futex_wake+0xf4/0x5e0 [ 134.893304][ T7937] ? futex_wait+0x11e/0x370 [ 134.893322][ T7937] ? __pfx_futex_wake+0x10/0x10 [ 134.893339][ T7937] ? do_vfs_ioctl+0x226/0x13e0 [ 134.893355][ T7937] do_futex+0x2b2/0x440 [ 134.893368][ T7937] ? __pfx_do_futex+0x10/0x10 [ 134.893381][ T7937] ? find_held_lock+0x2b/0x80 [ 134.893393][ T7937] ? __fget_files+0x215/0x3d0 [ 134.893410][ T7937] __ia32_sys_futex_time32+0x2f4/0x470 [ 134.893425][ T7937] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 134.893440][ T7937] ? __might_fault+0xc5/0x140 [ 134.893455][ T7937] __do_fast_syscall_32+0x14b/0x8c0 [ 134.893473][ T7937] do_fast_syscall_32+0x32/0x70 [ 134.893487][ T7937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.893501][ T7937] RIP: 0023:0xf7f76fbc [ 134.893511][ T7937] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 134.893522][ T7937] RSP: 002b:00000000f54265cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 134.893534][ T7937] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 134.893542][ T7937] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 134.893550][ T7937] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 134.893558][ T7937] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.893566][ T7937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.893580][ T7937] [ 134.946626][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 135.076010][ T5834] nvme nvme0: rdma_resolve_route failed (-110). [ 135.083368][ T7947] nvme nvme0: rdma connection establishment failed (-19) [ 135.122970][ T7953] FAULT_INJECTION: forcing a failure. [ 135.122970][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 135.122992][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.4.494 Not tainted syzkaller #0 PREEMPT(full) [ 135.123005][ T7953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.123012][ T7953] Call Trace: [ 135.123016][ T7953] [ 135.123021][ T7953] dump_stack_lvl+0x100/0x190 [ 135.123042][ T7953] should_fail_ex.cold+0x5/0xa [ 135.123059][ T7953] should_failslab+0xc2/0x120 [ 135.123078][ T7953] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.123092][ T7953] ? wakeup_source_device_create+0x46/0x2e0 [ 135.123108][ T7953] wakeup_source_device_create+0x46/0x2e0 [ 135.123120][ T7953] wakeup_source_sysfs_add+0x1c/0x90 [ 135.123131][ T7953] wakeup_source_register+0x154/0x3e0 [ 135.123148][ T7953] ep_create_wakeup_source+0x1df/0x2e0 [ 135.123166][ T7953] ? __mutex_unlock_slowpath+0x35d/0x930 [ 135.123180][ T7953] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 135.123200][ T7953] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 135.123211][ T7953] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 135.123226][ T7953] do_epoll_ctl_file+0x1e26/0x36e0 [ 135.123265][ T7953] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 135.123278][ T7953] ? lock_acquire+0x1d1/0x380 [ 135.123295][ T7953] ? __fget_files+0x34/0x3d0 [ 135.123311][ T7953] ? find_held_lock+0x2b/0x80 [ 135.123325][ T7953] ? __fget_files+0x215/0x3d0 [ 135.123343][ T7953] ? __fget_files+0x21f/0x3d0 [ 135.123363][ T7953] ? do_epoll_ctl+0xfd/0x1a0 [ 135.123373][ T7953] do_epoll_ctl+0xfd/0x1a0 [ 135.123385][ T7953] ? __pfx_do_epoll_ctl+0x10/0x10 [ 135.123401][ T7953] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 135.123413][ T7953] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 135.123430][ T7953] __do_fast_syscall_32+0x14b/0x8c0 [ 135.123446][ T7953] do_fast_syscall_32+0x32/0x70 [ 135.123460][ T7953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.123480][ T7953] RIP: 0023:0xf7ff3fbc [ 135.123494][ T7953] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 135.123511][ T7953] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 135.123529][ T7953] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 135.123540][ T7953] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 135.123552][ T7953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.123563][ T7953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.123588][ T7953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.123613][ T7953] [ 135.381416][ T7965] usb usb4: usbfs: process 7965 (syz.1.501) did not claim interface 0 before use [ 135.507556][ T7971] netlink: 'syz.0.493': attribute type 6 has an invalid length. [ 136.278160][ T7977] FAULT_INJECTION: forcing a failure. [ 136.278160][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 136.278182][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) [ 136.278195][ T7977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.278202][ T7977] Call Trace: [ 136.278206][ T7977] [ 136.278211][ T7977] dump_stack_lvl+0x100/0x190 [ 136.278231][ T7977] should_fail_ex.cold+0x5/0xa [ 136.278246][ T7977] should_failslab+0xc2/0x120 [ 136.278263][ T7977] __kmalloc_cache_noprof+0x91/0x6d0 [ 136.278275][ T7977] ? lock_acquire+0x1d1/0x380 [ 136.278290][ T7977] ? rtnl_newlink+0x139/0x2620 [ 136.278309][ T7977] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.278327][ T7977] rtnl_newlink+0x139/0x2620 [ 136.278345][ T7977] ? find_held_lock+0x2b/0x80 [ 136.278360][ T7977] ? is_bpf_text_address+0x8a/0x1a0 [ 136.278377][ T7977] ? is_bpf_text_address+0x8a/0x1a0 [ 136.278393][ T7977] ? bpf_ksym_find+0x124/0x1c0 [ 136.278407][ T7977] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.278423][ T7977] ? is_bpf_text_address+0x94/0x1a0 [ 136.278439][ T7977] ? kernel_text_address+0x8d/0x100 [ 136.278451][ T7977] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 136.278467][ T7977] ? __kernel_text_address+0xd/0x30 [ 136.278479][ T7977] ? unwind_get_return_address+0x59/0xa0 [ 136.278494][ T7977] ? arch_stack_walk+0xa6/0xf0 [ 136.278513][ T7977] ? __lock_acquire+0x5c0/0x1f40 [ 136.278528][ T7977] ? stack_depot_save_flags+0x27/0x9f0 [ 136.278543][ T7977] ? stack_trace_save+0x8e/0xc0 [ 136.278557][ T7977] ? __pfx_stack_trace_save+0x10/0x10 [ 136.278573][ T7977] ? lock_acquire+0x1d1/0x380 [ 136.278587][ T7977] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 136.278604][ T7977] ? find_held_lock+0x2b/0x80 [ 136.278615][ T7977] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.278632][ T7977] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.278650][ T7977] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.278667][ T7977] rtnetlink_rcv_msg+0x95e/0xe90 [ 136.278686][ T7977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.278706][ T7977] ? __lock_acquire+0x5c0/0x1f40 [ 136.278723][ T7977] netlink_rcv_skb+0x159/0x420 [ 136.278738][ T7977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.278757][ T7977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.278776][ T7977] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.278792][ T7977] netlink_unicast+0x65f/0x950 [ 136.278809][ T7977] ? __pfx_netlink_unicast+0x10/0x10 [ 136.278827][ T7977] netlink_sendmsg+0x9ac/0x10c0 [ 136.278844][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.278862][ T7977] ? apparmor_socket_sendmsg+0x165/0x280 [ 136.278877][ T7977] ? ____sys_sendmsg+0xa4d/0xbe0 [ 136.278888][ T7977] ____sys_sendmsg+0xa4d/0xbe0 [ 136.278899][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.278914][ T7977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.278932][ T7977] ___sys_sendmsg+0x190/0x1e0 [ 136.278945][ T7977] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.278964][ T7977] ? find_held_lock+0x2b/0x80 [ 136.278984][ T7977] __sys_sendmsg+0x160/0x210 [ 136.279000][ T7977] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.279023][ T7977] __do_fast_syscall_32+0x14b/0x8c0 [ 136.279038][ T7977] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.279052][ T7977] do_fast_syscall_32+0x32/0x70 [ 136.279066][ T7977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.279080][ T7977] RIP: 0023:0xf7f76fbc [ 136.279089][ T7977] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.279100][ T7977] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 136.279108][ T7975] Bluetooth: MGMT ver 1.23 [ 136.279112][ T7977] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 136.279119][ T7977] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.279126][ T7977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.279132][ T7977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.279139][ T7977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.279152][ T7977] [ 136.452570][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 136.583356][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 136.744311][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.766434][ T29] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 136.766887][ T29] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.767118][ T29] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.767340][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.781978][ T8002] FAULT_INJECTION: forcing a failure. [ 136.781978][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 136.782000][ T8002] CPU: 3 UID: 0 PID: 8002 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(full) [ 136.782020][ T8002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.782029][ T8002] Call Trace: [ 136.782035][ T8002] [ 136.782043][ T8002] dump_stack_lvl+0x100/0x190 [ 136.782076][ T8002] should_fail_ex.cold+0x5/0xa [ 136.782096][ T8002] should_failslab+0xc2/0x120 [ 136.782147][ T8002] kmem_cache_alloc_noprof+0x92/0x6a0 [ 136.782175][ T8002] ? __kernfs_new_node+0xd2/0xa10 [ 136.782200][ T8002] __kernfs_new_node+0xd2/0xa10 [ 136.782217][ T8002] ? stack_trace_save+0x8e/0xc0 [ 136.782240][ T8002] ? __pfx_stack_trace_save+0x10/0x10 [ 136.782264][ T8002] ? __pfx___kernfs_new_node+0x10/0x10 [ 136.782286][ T8002] ? lock_acquire+0x1d1/0x380 [ 136.782308][ T8002] ? kernfs_root+0x23/0x2a0 [ 136.782331][ T8002] ? find_held_lock+0x2b/0x80 [ 136.782349][ T8002] ? kernfs_root+0xee/0x2a0 [ 136.782374][ T8002] ? kernfs_root+0xee/0x2a0 [ 136.782407][ T8002] kernfs_create_dir_ns+0xa4/0x2b0 [ 136.782426][ T8002] sysfs_create_dir_ns+0x13a/0x2b0 [ 136.782453][ T8002] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 136.782478][ T8002] ? find_held_lock+0x2b/0x80 [ 136.782496][ T8002] ? kobject_add_internal+0x25f/0x930 [ 136.782523][ T8002] ? kobject_add_internal+0x25f/0x930 [ 136.782547][ T8002] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.782575][ T8002] kobject_add_internal+0x2c8/0x930 [ 136.782606][ T8002] kobject_add+0x16a/0x1e0 [ 136.782633][ T8002] ? __pfx_kobject_add+0x10/0x10 [ 136.782656][ T8002] ? __kasan_kmalloc+0xaa/0xb0 [ 136.782682][ T8002] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 136.782702][ T8002] ? get_device_parent+0x29a/0x4c0 [ 136.782733][ T8002] get_device_parent+0x382/0x4c0 [ 136.782756][ T8002] device_add+0xc3b/0x1970 [ 136.782791][ T8002] ? __pfx_dev_set_name+0x10/0x10 [ 136.782810][ T8002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.782837][ T8002] ? __pfx_device_add+0x10/0x10 [ 136.782860][ T8002] ? lockdep_init_map_type+0x5c/0x250 [ 136.782903][ T8002] ? __init_waitqueue_head+0xca/0x150 [ 136.782939][ T8002] wakeup_source_device_create+0x243/0x2e0 [ 136.782961][ T8002] wakeup_source_sysfs_add+0x1c/0x90 [ 136.782977][ T8002] wakeup_source_register+0x154/0x3e0 [ 136.783004][ T8002] ep_create_wakeup_source+0x1df/0x2e0 [ 136.783032][ T8002] ? __mutex_unlock_slowpath+0x35d/0x930 [ 136.783054][ T8002] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 136.783082][ T8002] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 136.783101][ T8002] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 136.783126][ T8002] do_epoll_ctl_file+0x1e26/0x36e0 [ 136.783154][ T8002] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 136.783170][ T8002] ? lock_acquire+0x1d1/0x380 [ 136.783189][ T8002] ? __fget_files+0x34/0x3d0 [ 136.783213][ T8002] ? find_held_lock+0x2b/0x80 [ 136.783232][ T8002] ? __fget_files+0x215/0x3d0 [ 136.783260][ T8002] ? __fget_files+0x21f/0x3d0 [ 136.783286][ T8002] ? do_epoll_ctl+0xfd/0x1a0 [ 136.783303][ T8002] do_epoll_ctl+0xfd/0x1a0 [ 136.783323][ T8002] ? __pfx_do_epoll_ctl+0x10/0x10 [ 136.783350][ T8002] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 136.783370][ T8002] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 136.783393][ T8002] __do_fast_syscall_32+0x14b/0x8c0 [ 136.783420][ T8002] do_fast_syscall_32+0x32/0x70 [ 136.783442][ T8002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.783466][ T8002] RIP: 0023:0xf7ff3fbc [ 136.783476][ T8002] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.783493][ T8002] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 136.783513][ T8002] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 136.783524][ T8002] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 136.783536][ T8002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.783548][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.783559][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.783584][ T8002] [ 136.784221][ T8002] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 136.796466][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.919735][ T29] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 136.991789][ T6830] usb 6-1: USB disconnect, device number 12 [ 137.727078][ T8023] overlay: ./file0 is not a directory [ 138.239463][ T8026] fuse: Bad value for 'fd' [ 138.684811][ T8035] FAULT_INJECTION: forcing a failure. [ 138.684811][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 138.684843][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.3.521 Not tainted syzkaller #0 PREEMPT(full) [ 138.684868][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.684878][ T8035] Call Trace: [ 138.684889][ T8035] [ 138.684896][ T8035] dump_stack_lvl+0x100/0x190 [ 138.684929][ T8035] should_fail_ex.cold+0x5/0xa [ 138.684954][ T8035] should_failslab+0xc2/0x120 [ 138.684981][ T8035] __kmalloc_cache_noprof+0x91/0x6d0 [ 138.685003][ T8035] ? wakeup_source_device_create+0x46/0x2e0 [ 138.685026][ T8035] wakeup_source_device_create+0x46/0x2e0 [ 138.685046][ T8035] wakeup_source_sysfs_add+0x1c/0x90 [ 138.685064][ T8035] wakeup_source_register+0x154/0x3e0 [ 138.685090][ T8035] ep_create_wakeup_source+0x1df/0x2e0 [ 138.685117][ T8035] ? __mutex_unlock_slowpath+0x35d/0x930 [ 138.685140][ T8035] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 138.685171][ T8035] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 138.685189][ T8035] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 138.685214][ T8035] do_epoll_ctl_file+0x1e26/0x36e0 [ 138.685242][ T8035] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 138.685260][ T8035] ? lock_acquire+0x1d1/0x380 [ 138.685283][ T8035] ? __fget_files+0x34/0x3d0 [ 138.685306][ T8035] ? find_held_lock+0x2b/0x80 [ 138.685334][ T8035] ? __fget_files+0x215/0x3d0 [ 138.685364][ T8035] ? __fget_files+0x21f/0x3d0 [ 138.685397][ T8035] ? do_epoll_ctl+0xfd/0x1a0 [ 138.685415][ T8035] do_epoll_ctl+0xfd/0x1a0 [ 138.685435][ T8035] ? __pfx_do_epoll_ctl+0x10/0x10 [ 138.685461][ T8035] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 138.685482][ T8035] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 138.685509][ T8035] __do_fast_syscall_32+0x14b/0x8c0 [ 138.685558][ T8035] do_fast_syscall_32+0x32/0x70 [ 138.685582][ T8035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.685607][ T8035] RIP: 0023:0xf742efbc [ 138.685623][ T8035] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 138.685641][ T8035] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 138.685659][ T8035] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 138.685671][ T8035] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 138.685682][ T8035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.685693][ T8035] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.685704][ T8035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.685730][ T8035] [ 139.149324][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.149354][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.203327][ T8045] netlink: 41 bytes leftover after parsing attributes in process `syz.1.518'. [ 139.388956][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.388978][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.626987][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.523'. [ 139.632195][ T8048] 9pnet_virtio: no channels available for device syz [ 139.642178][ T8057] FAULT_INJECTION: forcing a failure. [ 139.642178][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 139.642199][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT(full) [ 139.642212][ T8057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.642219][ T8057] Call Trace: [ 139.642223][ T8057] [ 139.642227][ T8057] dump_stack_lvl+0x100/0x190 [ 139.642248][ T8057] should_fail_ex.cold+0x5/0xa [ 139.642260][ T8057] ? __netlink_lookup+0x692/0x950 [ 139.642276][ T8057] should_failslab+0xc2/0x120 [ 139.642294][ T8057] kmem_cache_alloc_noprof+0x92/0x6a0 [ 139.642309][ T8057] ? skb_clone+0x190/0x400 [ 139.642327][ T8057] skb_clone+0x190/0x400 [ 139.642344][ T8057] netlink_deliver_tap+0xaed/0xcc0 [ 139.642360][ T8057] netlink_unicast+0x6ff/0x950 [ 139.642377][ T8057] ? __pfx_netlink_unicast+0x10/0x10 [ 139.642395][ T8057] netlink_sendmsg+0x9ac/0x10c0 [ 139.642413][ T8057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.642431][ T8057] ? apparmor_socket_sendmsg+0x165/0x280 [ 139.642446][ T8057] ? ____sys_sendmsg+0xa4d/0xbe0 [ 139.642457][ T8057] ____sys_sendmsg+0xa4d/0xbe0 [ 139.642468][ T8057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.642483][ T8057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.642501][ T8057] ___sys_sendmsg+0x190/0x1e0 [ 139.642515][ T8057] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.642534][ T8057] ? find_held_lock+0x2b/0x80 [ 139.642556][ T8057] __sys_sendmsg+0x160/0x210 [ 139.642572][ T8057] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.642595][ T8057] __do_fast_syscall_32+0x14b/0x8c0 [ 139.642610][ T8057] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.642623][ T8057] do_fast_syscall_32+0x32/0x70 [ 139.642648][ T8057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.642663][ T8057] RIP: 0023:0xf7f76fbc [ 139.642672][ T8057] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 139.642683][ T8057] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 139.642694][ T8057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 139.642701][ T8057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.642708][ T8057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.642714][ T8057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.642720][ T8057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.642735][ T8057] [ 139.642748][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 139.670957][ T8059] fuse: Bad value for 'fd' [ 139.823406][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.974639][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.975560][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.975583][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.975596][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.975623][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.979949][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.003716][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 140.005130][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.043464][ T5824] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 140.186703][ T24] usb 5-1: USB disconnect, device number 14 [ 140.204401][ T5824] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.205716][ T5824] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 140.205744][ T5824] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 140.205762][ T5824] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.208570][ T5824] usb 9-1: string descriptor 0 read error: -22 [ 140.208668][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.215288][ T8065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.215445][ T8065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.215580][ T8065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.217940][ T5824] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.275139][ T8067] usb usb4: usbfs: process 8067 (syz.1.532) did not claim interface 0 before use [ 140.522143][ T6830] usb 9-1: USB disconnect, device number 9 [ 140.858782][ T8077] FAULT_INJECTION: forcing a failure. [ 140.858782][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 140.858813][ T8077] CPU: 0 UID: 0 PID: 8077 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 140.858832][ T8077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.858842][ T8077] Call Trace: [ 140.858848][ T8077] [ 140.858854][ T8077] dump_stack_lvl+0x100/0x190 [ 140.858883][ T8077] should_fail_ex.cold+0x5/0xa [ 140.858904][ T8077] should_failslab+0xc2/0x120 [ 140.858929][ T8077] __kmalloc_cache_noprof+0x91/0x6d0 [ 140.858946][ T8077] ? wakeup_source_device_create+0x46/0x2e0 [ 140.858967][ T8077] wakeup_source_device_create+0x46/0x2e0 [ 140.858984][ T8077] wakeup_source_sysfs_add+0x1c/0x90 [ 140.859000][ T8077] wakeup_source_register+0x154/0x3e0 [ 140.859023][ T8077] ep_create_wakeup_source+0x1df/0x2e0 [ 140.859047][ T8077] ? __mutex_unlock_slowpath+0x35d/0x930 [ 140.859067][ T8077] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 140.859094][ T8077] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 140.859110][ T8077] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 140.859132][ T8077] do_epoll_ctl_file+0x1e26/0x36e0 [ 140.859154][ T8077] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 140.859169][ T8077] ? lock_acquire+0x1d1/0x380 [ 140.859190][ T8077] ? __fget_files+0x34/0x3d0 [ 140.859210][ T8077] ? find_held_lock+0x2b/0x80 [ 140.859226][ T8077] ? __fget_files+0x215/0x3d0 [ 140.859250][ T8077] ? __fget_files+0x21f/0x3d0 [ 140.859275][ T8077] ? do_epoll_ctl+0xfd/0x1a0 [ 140.859289][ T8077] do_epoll_ctl+0xfd/0x1a0 [ 140.859305][ T8077] ? __pfx_do_epoll_ctl+0x10/0x10 [ 140.859327][ T8077] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 140.859368][ T8077] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 140.859394][ T8077] __do_fast_syscall_32+0x14b/0x8c0 [ 140.859417][ T8077] do_fast_syscall_32+0x32/0x70 [ 140.859438][ T8077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.859459][ T8077] RIP: 0023:0xf742efbc [ 140.859472][ T8077] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 140.859488][ T8077] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 140.859505][ T8077] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 140.859515][ T8077] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 140.859524][ T8077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.859533][ T8077] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.859543][ T8077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.859563][ T8077] [ 141.240221][ T8086] syzkaller0: entered promiscuous mode [ 141.240246][ T8086] syzkaller0: entered allmulticast mode [ 141.252711][ T8086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.535'. [ 141.480286][ T8093] fuse: Bad value for 'fd' [ 141.536351][ T8095] syzkaller0: entered promiscuous mode [ 141.536371][ T8095] syzkaller0: entered allmulticast mode [ 141.647283][ T8102] netlink: 'syz.1.542': attribute type 3 has an invalid length. [ 141.647306][ T8102] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 141.647317][ T8102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.542'. [ 142.699063][ T8115] usb usb4: usbfs: process 8115 (syz.1.545) did not claim interface 0 before use [ 143.139910][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 143.181287][ T8119] FAULT_INJECTION: forcing a failure. [ 143.181287][ T8119] name failslab, interval 1, probability 0, space 0, times 0 [ 143.181319][ T8119] CPU: 0 UID: 0 PID: 8119 Comm: syz.3.546 Not tainted syzkaller #0 PREEMPT(full) [ 143.181343][ T8119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.181355][ T8119] Call Trace: [ 143.181362][ T8119] [ 143.181370][ T8119] dump_stack_lvl+0x100/0x190 [ 143.181402][ T8119] should_fail_ex.cold+0x5/0xa [ 143.181431][ T8119] should_failslab+0xc2/0x120 [ 143.181463][ T8119] __kmalloc_cache_noprof+0x91/0x6d0 [ 143.181487][ T8119] ? wakeup_source_device_create+0x46/0x2e0 [ 143.181514][ T8119] wakeup_source_device_create+0x46/0x2e0 [ 143.181536][ T8119] wakeup_source_sysfs_add+0x1c/0x90 [ 143.181556][ T8119] wakeup_source_register+0x154/0x3e0 [ 143.181607][ T8119] ep_create_wakeup_source+0x1df/0x2e0 [ 143.181637][ T8119] ? __mutex_unlock_slowpath+0x35d/0x930 [ 143.181663][ T8119] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 143.181698][ T8119] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 143.181720][ T8119] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 143.181747][ T8119] do_epoll_ctl_file+0x1e26/0x36e0 [ 143.181778][ T8119] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 143.181798][ T8119] ? lock_acquire+0x1d1/0x380 [ 143.181824][ T8119] ? __fget_files+0x34/0x3d0 [ 143.181850][ T8119] ? find_held_lock+0x2b/0x80 [ 143.181871][ T8119] ? __fget_files+0x215/0x3d0 [ 143.181902][ T8119] ? __fget_files+0x21f/0x3d0 [ 143.181935][ T8119] ? do_epoll_ctl+0xfd/0x1a0 [ 143.181953][ T8119] do_epoll_ctl+0xfd/0x1a0 [ 143.181974][ T8119] ? __pfx_do_epoll_ctl+0x10/0x10 [ 143.182003][ T8119] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 143.182025][ T8119] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 143.182055][ T8119] __do_fast_syscall_32+0x14b/0x8c0 [ 143.182083][ T8119] do_fast_syscall_32+0x32/0x70 [ 143.182141][ T8119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.182166][ T8119] RIP: 0023:0xf742efbc [ 143.182182][ T8119] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 143.182200][ T8119] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 143.182221][ T8119] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000001 [ 143.182234][ T8119] RDX: 0000000000000005 RSI: 0000000080001600 RDI: 0000000000000000 [ 143.182245][ T8119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.182257][ T8119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.182269][ T8119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.182294][ T8119] [ 143.538389][ T8129] FAULT_INJECTION: forcing a failure. [ 143.538389][ T8129] name failslab, interval 1, probability 0, space 0, times 0 [ 143.538416][ T8129] CPU: 0 UID: 0 PID: 8129 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) [ 143.538430][ T8129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.538438][ T8129] Call Trace: [ 143.538442][ T8129] [ 143.538447][ T8129] dump_stack_lvl+0x100/0x190 [ 143.538467][ T8129] should_fail_ex.cold+0x5/0xa [ 143.538484][ T8129] should_failslab+0xc2/0x120 [ 143.538515][ T8129] __kmalloc_cache_noprof+0x91/0x6d0 [ 143.538529][ T8129] ? x509_cert_parse+0x50/0x910 [ 143.538551][ T8129] x509_cert_parse+0x50/0x910 [ 143.538570][ T8129] x509_key_preparse+0x65/0x9c0 [ 143.538585][ T8129] asymmetric_key_preparse+0xce/0x1d0 [ 143.538601][ T8129] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 143.538618][ T8129] __key_create_or_update+0x40e/0xe20 [ 143.538637][ T8129] ? __pfx___key_create_or_update+0x10/0x10 [ 143.538654][ T8129] ? lookup_user_key+0x3ee/0x1300 [ 143.538675][ T8129] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 143.538692][ T8129] key_create_or_update+0x42/0x60 [ 143.538710][ T8129] __do_sys_add_key+0x2e8/0x460 [ 143.538727][ T8129] ? __might_fault+0xc5/0x140 [ 143.538739][ T8129] ? __pfx___do_sys_add_key+0x10/0x10 [ 143.538765][ T8129] __do_fast_syscall_32+0x14b/0x8c0 [ 143.538782][ T8129] do_fast_syscall_32+0x32/0x70 [ 143.538796][ T8129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.538811][ T8129] RIP: 0023:0xf742efbc [ 143.538821][ T8129] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 143.538832][ T8129] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 143.538844][ T8129] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000 [ 143.538852][ T8129] RDX: 0000000080000300 RSI: 0000000000000006 RDI: 00000000ffffffff [ 143.538858][ T8129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.538865][ T8129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.538873][ T8129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.538889][ T8129] [ 143.862486][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.320623][ T8127] macvlan0: entered allmulticast mode [ 144.327674][ T8127] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 144.531063][ T8156] FAULT_INJECTION: forcing a failure. [ 144.531063][ T8156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.531097][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT(full) [ 144.531120][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.531131][ T8156] Call Trace: [ 144.531139][ T8156] [ 144.531147][ T8156] dump_stack_lvl+0x100/0x190 [ 144.531176][ T8156] should_fail_ex.cold+0x5/0xa [ 144.531203][ T8156] _copy_to_user+0x32/0xd0 [ 144.531226][ T8156] bpf_test_finish.isra.0+0x4aa/0x650 [ 144.531248][ T8156] ? lock_acquire+0x1d1/0x380 [ 144.531272][ T8156] ? bpf_test_timer_continue+0x1e8/0x630 [ 144.531294][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531314][ T8156] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 144.531343][ T8156] ? ktime_get+0x22c/0x320 [ 144.531370][ T8156] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.531393][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531411][ T8156] ? bpf_prog_test_run_flow_dissector+0x4b0/0x980 [ 144.531436][ T8156] ? bpf_prog_test_run_flow_dissector+0x4b0/0x980 [ 144.531464][ T8156] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 144.531498][ T8156] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 144.531523][ T8156] ? __fget_files+0x34/0x3d0 [ 144.531550][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531569][ T8156] ? __fget_files+0x215/0x3d0 [ 144.531600][ T8156] ? __fget_files+0x21f/0x3d0 [ 144.531630][ T8156] ? fput+0x7c/0x100 [ 144.531657][ T8156] ? __bpf_prog_get+0x97/0x290 [ 144.531685][ T8156] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 144.531711][ T8156] __sys_bpf+0x2265/0x4a30 [ 144.531742][ T8156] ? __pfx___sys_bpf+0x10/0x10 [ 144.531761][ T8156] ? lock_acquire+0x1d1/0x380 [ 144.531785][ T8156] ? get_pid_task+0x2a/0x250 [ 144.531805][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531823][ T8156] ? get_pid_task+0xfc/0x250 [ 144.531839][ T8156] ? get_pid_task+0xfc/0x250 [ 144.531865][ T8156] ? proc_fail_nth_write+0x9f/0x220 [ 144.531893][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531919][ T8156] ? rcu_read_lock_any_held+0x6a/0x90 [ 144.531941][ T8156] ? find_held_lock+0x2b/0x80 [ 144.531961][ T8156] ? ksys_write+0x190/0x250 [ 144.531983][ T8156] ? ksys_write+0x190/0x250 [ 144.532023][ T8156] ? lock_acquire+0x1d1/0x380 [ 144.532047][ T8156] ? __might_fault+0xc5/0x140 [ 144.532069][ T8156] ? find_held_lock+0x2b/0x80 [ 144.532094][ T8156] ? __ia32_sys_bpf+0xcc/0x170 [ 144.532115][ T8156] __ia32_sys_bpf+0xcc/0x170 [ 144.532139][ T8156] ? __might_fault+0x111/0x140 [ 144.532160][ T8156] __do_fast_syscall_32+0x14b/0x8c0 [ 144.532183][ T8156] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.532207][ T8156] do_fast_syscall_32+0x32/0x70 [ 144.532231][ T8156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.532255][ T8156] RIP: 0023:0xf7f76fbc [ 144.532273][ T8156] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 144.532292][ T8156] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 144.532312][ T8156] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 144.532330][ T8156] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 144.532342][ T8156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.532353][ T8156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.532366][ T8156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.532393][ T8156] [ 144.607028][ T8161] loop0: detected capacity change from 0 to 3904 [ 144.613796][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 144.625938][ T8159] usb usb4: usbfs: process 8159 (syz.1.558) did not claim interface 0 before use [ 145.558462][ T8180] process 'syz.3.561' launched './file0' with NULL argv: empty string added [ 145.691879][ T8186] binder: BINDER_SET_CONTEXT_MGR already set [ 145.691895][ T8186] binder: 8185:8186 ioctl 4018620d 80000400 returned -16 [ 145.846489][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 145.937482][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 146.859055][ T8229] FAULT_INJECTION: forcing a failure. [ 146.859055][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 146.859174][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.1.576 Not tainted syzkaller #0 PREEMPT(full) [ 146.859210][ T8229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.859222][ T8229] Call Trace: [ 146.859233][ T8229] [ 146.859242][ T8229] dump_stack_lvl+0x100/0x190 [ 146.859273][ T8229] should_fail_ex.cold+0x5/0xa [ 146.859294][ T8229] ? __netlink_lookup+0x692/0x950 [ 146.859320][ T8229] should_failslab+0xc2/0x120 [ 146.859349][ T8229] kmem_cache_alloc_noprof+0x92/0x6a0 [ 146.859375][ T8229] ? skb_clone+0x190/0x400 [ 146.859407][ T8229] skb_clone+0x190/0x400 [ 146.859430][ T8229] netlink_deliver_tap+0xaed/0xcc0 [ 146.859459][ T8229] netlink_unicast+0x6ff/0x950 [ 146.859488][ T8229] ? __pfx_netlink_unicast+0x10/0x10 [ 146.859520][ T8229] netlink_sendmsg+0x9ac/0x10c0 [ 146.859567][ T8229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.859597][ T8229] ? apparmor_socket_sendmsg+0x165/0x280 [ 146.859622][ T8229] ? ____sys_sendmsg+0xa4d/0xbe0 [ 146.859650][ T8229] ____sys_sendmsg+0xa4d/0xbe0 [ 146.859668][ T8229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.859695][ T8229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.859728][ T8229] ___sys_sendmsg+0x190/0x1e0 [ 146.859751][ T8229] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.859786][ T8229] ? find_held_lock+0x2b/0x80 [ 146.859824][ T8229] __sys_sendmsg+0x160/0x210 [ 146.859852][ T8229] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.859893][ T8229] __do_fast_syscall_32+0x14b/0x8c0 [ 146.859917][ T8229] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.859941][ T8229] do_fast_syscall_32+0x32/0x70 [ 146.859964][ T8229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.859987][ T8229] RIP: 0023:0xf7f76fbc [ 146.860003][ T8229] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 146.860020][ T8229] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 146.860039][ T8229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 146.860052][ T8229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.860063][ T8229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.860074][ T8229] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.860086][ T8229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.860112][ T8229] [ 146.920201][ T8234] binder: 8233:8234 ioctl c0401273 80000000 returned -22 [ 147.037076][ T8237] binder: 8233:8237 ioctl c0306201 80000740 returned -14 [ 147.868576][ T8252] netlink: 'syz.4.582': attribute type 10 has an invalid length. [ 147.868594][ T8252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.582'. [ 147.868839][ T8252] dummy0: entered promiscuous mode [ 147.870769][ T8252] bridge0: port 4(dummy0) entered blocking state [ 147.871022][ T8252] bridge0: port 4(dummy0) entered disabled state [ 147.871139][ T8252] dummy0: entered allmulticast mode [ 147.873967][ T8252] bridge0: port 4(dummy0) entered blocking state [ 147.874045][ T8252] bridge0: port 4(dummy0) entered forwarding state [ 147.878039][ T8252] fuse: Bad value for 'fd' [ 148.373403][ T6830] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 148.535147][ T6830] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 148.535183][ T6830] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 148.536407][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.536444][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.536465][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.537473][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.537507][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.537665][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.538711][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.538744][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.538764][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.539784][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.539818][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.539838][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.540853][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.540887][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.540907][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.541932][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.541967][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.541987][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.543037][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.543080][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.543099][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.545903][ T6830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.545939][ T6830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.545958][ T6830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.548131][ T6830] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 148.548151][ T6830] usb 9-1: Product: syz [ 148.548162][ T6830] usb 9-1: Manufacturer: syz [ 148.548174][ T6830] usb 9-1: SerialNumber: syz [ 148.553036][ T6830] usb 9-1: config 0 descriptor?? [ 148.559627][ T6830] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 148.847250][ T8266] bridge0: port 4(dummy0) entered disabled state [ 148.847344][ T8266] bridge0: port 3(team0) entered disabled state [ 148.847496][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.847730][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.905826][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.909953][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.996567][ T8283] create_pit_timer: 25 callbacks suppressed [ 148.996587][ T8283] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.071832][ T5848] usb 9-1: USB disconnect, device number 10 [ 149.077174][ T5848] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 149.113388][ T5786] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.113459][ T5786] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.113478][ T5786] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.113495][ T5786] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.319133][ T8292] FAULT_INJECTION: forcing a failure. [ 149.319133][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.319164][ T8292] CPU: 3 UID: 0 PID: 8292 Comm: syz.3.592 Not tainted syzkaller #0 PREEMPT(full) [ 149.319186][ T8292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.319198][ T8292] Call Trace: [ 149.319205][ T8292] [ 149.319213][ T8292] dump_stack_lvl+0x100/0x190 [ 149.319242][ T8292] should_fail_ex.cold+0x5/0xa [ 149.319268][ T8292] _copy_from_user+0x2e/0xd0 [ 149.319290][ T8292] ctl_ioctl+0xf3/0xcc0 [ 149.319312][ T8292] ? __pfx_ctl_ioctl+0x10/0x10 [ 149.319361][ T8292] ? __fget_files+0x21f/0x3d0 [ 149.319392][ T8292] dm_compat_ctl_ioctl+0x23/0x30 [ 149.319411][ T8292] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 149.319430][ T8292] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 149.319456][ T8292] __do_fast_syscall_32+0x14b/0x8c0 [ 149.319478][ T8292] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.319500][ T8292] do_fast_syscall_32+0x32/0x70 [ 149.319523][ T8292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.319545][ T8292] RIP: 0023:0xf742efbc [ 149.319561][ T8292] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 149.319577][ T8292] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 149.319596][ T8292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 149.319609][ T8292] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.319619][ T8292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.319629][ T8292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.319640][ T8292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.319665][ T8292] [ 149.470168][ T8297] usb usb4: usbfs: process 8297 (syz.0.597) did not claim interface 0 before use [ 149.876313][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 149.927163][ T8276] Process accounting resumed [ 150.523199][ T8323] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 2, id = 0 [ 150.632289][ T8328] FAULT_INJECTION: forcing a failure. [ 150.632289][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.632313][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT(full) [ 150.632326][ T8328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.632333][ T8328] Call Trace: [ 150.632338][ T8328] [ 150.632343][ T8328] dump_stack_lvl+0x100/0x190 [ 150.632364][ T8328] should_fail_ex.cold+0x5/0xa [ 150.632380][ T8328] _copy_to_user+0x32/0xd0 [ 150.632393][ T8328] bpf_test_finish.isra.0+0x4db/0x650 [ 150.632408][ T8328] ? rcu_is_watching+0x13/0xc0 [ 150.632420][ T8328] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 150.632433][ T8328] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 150.632448][ T8328] ? ___migrate_enable+0x90/0xc0 [ 150.632464][ T8328] ? __pfx____migrate_enable+0x10/0x10 [ 150.632479][ T8328] ? rcu_is_watching+0x13/0xc0 [ 150.632493][ T8328] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 150.632513][ T8328] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 150.632528][ T8328] ? __fget_files+0x34/0x3d0 [ 150.632542][ T8328] ? find_held_lock+0x2b/0x80 [ 150.632555][ T8328] ? __fget_files+0x215/0x3d0 [ 150.632571][ T8328] ? __fget_files+0x21f/0x3d0 [ 150.632588][ T8328] ? fput+0x7c/0x100 [ 150.632604][ T8328] ? __bpf_prog_get+0x97/0x290 [ 150.632619][ T8328] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 150.632635][ T8328] __sys_bpf+0x2265/0x4a30 [ 150.632651][ T8328] ? __pfx___sys_bpf+0x10/0x10 [ 150.632675][ T8328] ? lock_acquire+0x1d1/0x380 [ 150.632689][ T8328] ? get_pid_task+0x2a/0x250 [ 150.632700][ T8328] ? find_held_lock+0x2b/0x80 [ 150.632711][ T8328] ? get_pid_task+0xfc/0x250 [ 150.632720][ T8328] ? get_pid_task+0xfc/0x250 [ 150.632734][ T8328] ? proc_fail_nth_write+0x9f/0x220 [ 150.632754][ T8328] ? find_held_lock+0x2b/0x80 [ 150.632768][ T8328] ? rcu_read_lock_any_held+0x6a/0x90 [ 150.632780][ T8328] ? find_held_lock+0x2b/0x80 [ 150.632791][ T8328] ? ksys_write+0x190/0x250 [ 150.632804][ T8328] ? ksys_write+0x190/0x250 [ 150.632825][ T8328] ? lock_acquire+0x1d1/0x380 [ 150.632839][ T8328] ? __might_fault+0xc5/0x140 [ 150.632851][ T8328] ? find_held_lock+0x2b/0x80 [ 150.632864][ T8328] ? __ia32_sys_bpf+0xcc/0x170 [ 150.632876][ T8328] __ia32_sys_bpf+0xcc/0x170 [ 150.632889][ T8328] ? __might_fault+0x111/0x140 [ 150.632901][ T8328] __do_fast_syscall_32+0x14b/0x8c0 [ 150.632914][ T8328] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.632928][ T8328] do_fast_syscall_32+0x32/0x70 [ 150.632941][ T8328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.632956][ T8328] RIP: 0023:0xf7f76fbc [ 150.632965][ T8328] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 150.632976][ T8328] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 150.632987][ T8328] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 150.632995][ T8328] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.633001][ T8328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.633008][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.633014][ T8328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.633029][ T8328] [ 150.678127][ T8330] fuse: Bad value for 'fd' [ 151.043518][ T8343] FAULT_INJECTION: forcing a failure. [ 151.043518][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 151.043552][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.4.602 Not tainted syzkaller #0 PREEMPT(full) [ 151.043575][ T8343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.043587][ T8343] Call Trace: [ 151.043595][ T8343] [ 151.043603][ T8343] dump_stack_lvl+0x100/0x190 [ 151.043637][ T8343] should_fail_ex.cold+0x5/0xa [ 151.043665][ T8343] should_failslab+0xc2/0x120 [ 151.043698][ T8343] __kmalloc_cache_noprof+0x91/0x6d0 [ 151.043721][ T8343] ? wakeup_source_register+0x4c/0x3e0 [ 151.043762][ T8343] wakeup_source_register+0x4c/0x3e0 [ 151.043792][ T8343] ep_create_wakeup_source+0x1df/0x2e0 [ 151.043824][ T8343] ? __mutex_unlock_slowpath+0x35d/0x930 [ 151.043850][ T8343] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 151.043885][ T8343] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 151.043906][ T8343] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 151.043933][ T8343] do_epoll_ctl_file+0x1e26/0x36e0 [ 151.043965][ T8343] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 151.043985][ T8343] ? lock_acquire+0x1d1/0x380 [ 151.044011][ T8343] ? __fget_files+0x34/0x3d0 [ 151.044037][ T8343] ? find_held_lock+0x2b/0x80 [ 151.044058][ T8343] ? __fget_files+0x215/0x3d0 [ 151.044090][ T8343] ? __fget_files+0x21f/0x3d0 [ 151.044123][ T8343] ? do_epoll_ctl+0xfd/0x1a0 [ 151.044142][ T8343] do_epoll_ctl+0xfd/0x1a0 [ 151.044163][ T8343] ? __pfx_do_epoll_ctl+0x10/0x10 [ 151.044192][ T8343] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 151.044214][ T8343] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 151.044243][ T8343] __do_fast_syscall_32+0x14b/0x8c0 [ 151.044271][ T8343] do_fast_syscall_32+0x32/0x70 [ 151.044295][ T8343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.044321][ T8343] RIP: 0023:0xf7ff3fbc [ 151.044337][ T8343] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 151.044356][ T8343] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 151.044376][ T8343] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 151.044389][ T8343] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 151.044401][ T8343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.044413][ T8343] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.044424][ T8343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.044451][ T8343] [ 151.583094][ T8353] fuse: Bad value for 'fd' [ 152.670551][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 152.884442][ T8392] fuse: Bad value for 'fd' [ 152.889856][ T8390] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.891974][ T8395] fuse: Bad value for 'fd' [ 152.907243][ T8397] FAULT_INJECTION: forcing a failure. [ 152.907243][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 152.907273][ T8397] CPU: 2 UID: 0 PID: 8397 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) [ 152.907295][ T8397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.907307][ T8397] Call Trace: [ 152.907314][ T8397] [ 152.907322][ T8397] dump_stack_lvl+0x100/0x190 [ 152.907353][ T8397] should_fail_ex.cold+0x5/0xa [ 152.907379][ T8397] should_failslab+0xc2/0x120 [ 152.907408][ T8397] kmem_cache_alloc_noprof+0x92/0x6a0 [ 152.907432][ T8397] ? bpf_ksym_find+0x124/0x1c0 [ 152.907455][ T8397] ? skb_clone+0x190/0x400 [ 152.907487][ T8397] skb_clone+0x190/0x400 [ 152.907516][ T8397] nfnetlink_rcv_batch+0x1c8/0x2880 [ 152.907556][ T8397] ? stack_trace_save+0x8e/0xc0 [ 152.907583][ T8397] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 152.907618][ T8397] ? kasan_save_stack+0x3f/0x50 [ 152.907643][ T8397] ? kasan_save_stack+0x30/0x50 [ 152.907667][ T8397] ? kasan_save_track+0x14/0x30 [ 152.907690][ T8397] ? __kasan_slab_alloc+0x89/0x90 [ 152.907715][ T8397] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 152.907749][ T8397] ? __lock_acquire+0x5c0/0x1f40 [ 152.907793][ T8397] ? __asan_memset+0x23/0x50 [ 152.907815][ T8397] ? __nla_validate_parse+0x1e7/0x28b0 [ 152.907840][ T8397] ? __lock_acquire+0x5c0/0x1f40 [ 152.907866][ T8397] ? __pfx___nla_validate_parse+0x10/0x10 [ 152.907891][ T8397] ? rcu_is_watching+0x13/0xc0 [ 152.907911][ T8397] ? apparmor_capable+0x1d7/0x4d0 [ 152.907939][ T8397] ? __nla_parse+0x40/0x60 [ 152.907962][ T8397] nfnetlink_rcv+0x3bd/0x440 [ 152.907992][ T8397] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 152.908028][ T8397] netlink_unicast+0x65f/0x950 [ 152.908057][ T8397] ? __pfx_netlink_unicast+0x10/0x10 [ 152.908089][ T8397] netlink_sendmsg+0x9ac/0x10c0 [ 152.908118][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.908150][ T8397] ? apparmor_socket_sendmsg+0x165/0x280 [ 152.908180][ T8397] ? ____sys_sendmsg+0xa4d/0xbe0 [ 152.908198][ T8397] ____sys_sendmsg+0xa4d/0xbe0 [ 152.908217][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.908243][ T8397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.908275][ T8397] ___sys_sendmsg+0x190/0x1e0 [ 152.908299][ T8397] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.908333][ T8397] ? find_held_lock+0x2b/0x80 [ 152.908368][ T8397] __sys_sendmsg+0x160/0x210 [ 152.908411][ T8397] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.908451][ T8397] __do_fast_syscall_32+0x14b/0x8c0 [ 152.908475][ T8397] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.908498][ T8397] do_fast_syscall_32+0x32/0x70 [ 152.908521][ T8397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.908542][ T8397] RIP: 0023:0xf7ff3fbc [ 152.908553][ T8397] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 152.908564][ T8397] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 152.908576][ T8397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 152.908583][ T8397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.908590][ T8397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.908597][ T8397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.908603][ T8397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.908617][ T8397] [ 153.359322][ T6830] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 153.563307][ T6830] usb 9-1: Using ep0 maxpacket: 8 [ 153.563755][ T6830] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.564531][ T6830] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 153.564554][ T6830] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.564566][ T6830] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.564578][ T6830] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.564589][ T6830] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.564609][ T6830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.788762][ T6830] usb 9-1: GET_CAPABILITIES returned 0 [ 153.788939][ T6830] usbtmc 9-1:16.0: can't read capabilities [ 153.844986][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 153.845004][ T42] audit: type=1326 audit(1792658538.713:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.845113][ T42] audit: type=1326 audit(1792658538.713:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.845512][ T42] audit: type=1326 audit(1792658538.713:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.845536][ T42] audit: type=1326 audit(1792658538.713:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.845556][ T42] audit: type=1326 audit(1792658538.713:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.845833][ T42] audit: type=1326 audit(1792658538.713:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.846616][ T42] audit: type=1326 audit(1792658538.713:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.846751][ T42] audit: type=1326 audit(1792658538.713:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.847981][ T42] audit: type=1326 audit(1792658538.713:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70f77ab code=0x7ffc0000 [ 153.848008][ T42] audit: type=1326 audit(1792658538.713:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.0.628" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f05fbc code=0x7ffc0000 [ 153.994233][ T6830] usb 9-1: USB disconnect, device number 11 [ 154.108361][ T8435] fuse: Bad value for 'fd' [ 154.204365][ T8438] usb usb4: usbfs: process 8438 (syz.3.632) did not claim interface 0 before use [ 155.934396][ T8468] fuse: Bad value for 'fd' [ 155.948905][ T8476] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 155.991856][ T8480] FAULT_INJECTION: forcing a failure. [ 155.991856][ T8480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.991887][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) [ 155.991909][ T8480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.991919][ T8480] Call Trace: [ 155.991926][ T8480] [ 155.991933][ T8480] dump_stack_lvl+0x100/0x190 [ 155.991963][ T8480] should_fail_ex.cold+0x5/0xa [ 155.991989][ T8480] _copy_from_iter+0x1f4/0x1690 [ 155.992013][ T8480] ? __asan_memset+0x23/0x50 [ 155.992037][ T8480] ? __pfx__copy_from_iter+0x10/0x10 [ 155.992056][ T8480] ? __pfx___alloc_skb+0x10/0x10 [ 155.992090][ T8480] netlink_sendmsg+0x8f5/0x10c0 [ 155.992119][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.992150][ T8480] ? apparmor_socket_sendmsg+0x165/0x280 [ 155.992174][ T8480] ? ____sys_sendmsg+0xa4d/0xbe0 [ 155.992194][ T8480] ____sys_sendmsg+0xa4d/0xbe0 [ 155.992212][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.992237][ T8480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.992275][ T8480] ___sys_sendmsg+0x190/0x1e0 [ 155.992298][ T8480] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.992331][ T8480] ? find_held_lock+0x2b/0x80 [ 155.992366][ T8480] __sys_sendmsg+0x160/0x210 [ 155.992393][ T8480] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.992430][ T8480] __do_fast_syscall_32+0x14b/0x8c0 [ 155.992450][ T8480] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.992470][ T8480] do_fast_syscall_32+0x32/0x70 [ 155.992490][ T8480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.992511][ T8480] RIP: 0023:0xf7ff3fbc [ 155.992526][ T8480] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 155.992544][ T8480] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 155.992563][ T8480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 155.992575][ T8480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.992586][ T8480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.992596][ T8480] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.992607][ T8480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.992631][ T8480] [ 156.026147][ T5099] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 156.026169][ T5099] CPU: 0 UID: 0 PID: 5099 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 156.026209][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.026235][ T5099] Workqueue: hci3 hci_rx_work [ 156.026286][ T5099] Call Trace: [ 156.026294][ T5099] [ 156.026303][ T5099] dump_stack_lvl+0x100/0x190 [ 156.026335][ T5099] sysfs_warn_dup.cold+0x1c/0x28 [ 156.026379][ T5099] sysfs_create_dir_ns+0x24b/0x2b0 [ 156.026420][ T5099] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.026448][ T5099] ? find_held_lock+0x2b/0x80 [ 156.026480][ T5099] ? kobject_add_internal+0x25f/0x930 [ 156.026513][ T5099] ? kobject_add_internal+0x25f/0x930 [ 156.026557][ T5099] ? do_raw_spin_unlock+0x145/0x1e0 [ 156.026600][ T5099] kobject_add_internal+0x2c8/0x930 [ 156.026656][ T5099] kobject_add+0x16a/0x1e0 [ 156.026698][ T5099] ? __pfx_kobject_add+0x10/0x10 [ 156.026736][ T5099] ? class_to_subsys+0x10f/0x150 [ 156.026761][ T5099] ? kobject_put+0xb9/0x640 [ 156.026797][ T5099] ? _raw_spin_unlock+0x28/0x50 [ 156.026847][ T5099] device_add+0x294/0x1970 [ 156.026879][ T5099] ? __pfx_dev_set_name+0x10/0x10 [ 156.026911][ T5099] ? __pfx_device_add+0x10/0x10 [ 156.026942][ T5099] ? mgmt_send_event_skb+0x2fb/0x460 [ 156.026980][ T5099] hci_conn_add_sysfs+0x1a3/0x260 [ 156.027005][ T5099] le_conn_complete_evt+0x122f/0x2130 [ 156.027056][ T5099] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.027098][ T5099] ? hci_event_packet+0x186/0xcd0 [ 156.027127][ T5099] ? hci_event_packet+0x186/0xcd0 [ 156.027171][ T5099] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 156.027211][ T5099] ? skb_pull_data+0x15f/0x1e0 [ 156.027236][ T5099] hci_le_meta_evt+0x34a/0x5f0 [ 156.027272][ T5099] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 156.027310][ T5099] hci_event_packet+0x51c/0xcd0 [ 156.027351][ T5099] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.027383][ T5099] ? __pfx_hci_event_packet+0x10/0x10 [ 156.027420][ T5099] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.027459][ T5099] hci_rx_work+0x451/0xfc0 [ 156.027496][ T5099] process_one_work+0xac7/0x1b10 [ 156.027541][ T5099] ? __pfx_process_one_work+0x10/0x10 [ 156.027567][ T5099] ? lock_acquire+0x1d1/0x380 [ 156.027612][ T5099] ? __pfx_hci_rx_work+0x10/0x10 [ 156.027655][ T5099] worker_thread+0x5ef/0xe50 [ 156.027687][ T5099] ? __pfx_worker_thread+0x10/0x10 [ 156.027721][ T5099] ? kthread+0x13a/0x450 [ 156.027741][ T5099] ? __pfx_worker_thread+0x10/0x10 [ 156.027772][ T5099] kthread+0x373/0x450 [ 156.027792][ T5099] ? __pfx_kthread+0x10/0x10 [ 156.027815][ T5099] ret_from_fork+0x730/0xd60 [ 156.027849][ T5099] ? __pfx_ret_from_fork+0x10/0x10 [ 156.027873][ T5099] ? __switch_to+0x800/0x10e0 [ 156.027913][ T5099] ? __pfx_kthread+0x10/0x10 [ 156.027937][ T5099] ret_from_fork_asm+0x1a/0x30 [ 156.027981][ T5099] [ 156.029777][ T5099] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.029816][ T5099] Bluetooth: hci3: failed to register connection device [ 156.263733][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 156.350341][ T8488] FAULT_INJECTION: forcing a failure. [ 156.350341][ T8488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.350377][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.4.648 Not tainted syzkaller #0 PREEMPT(full) [ 156.350399][ T8488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.350411][ T8488] Call Trace: [ 156.350418][ T8488] [ 156.350426][ T8488] dump_stack_lvl+0x100/0x190 [ 156.350459][ T8488] should_fail_ex.cold+0x5/0xa [ 156.350483][ T8488] ? prepare_alloc_pages+0x16d/0x5b0 [ 156.350514][ T8488] should_fail_alloc_page+0xeb/0x140 [ 156.350545][ T8488] prepare_alloc_pages+0x1f0/0x5b0 [ 156.350572][ T8488] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.350603][ T8488] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 156.350628][ T8488] ? unwind_get_return_address+0x59/0xa0 [ 156.350655][ T8488] ? arch_stack_walk+0xa6/0xf0 [ 156.350686][ T8488] ? __lock_acquire+0x5c0/0x1f40 [ 156.350714][ T8488] ? stack_trace_save+0x8e/0xc0 [ 156.350739][ T8488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.350768][ T8488] ? lock_acquire+0x1d1/0x380 [ 156.350791][ T8488] ? __update_page_owner_handle+0x63/0x530 [ 156.350825][ T8488] ? __lock_acquire+0x5c0/0x1f40 [ 156.350854][ T8488] ? __lock_acquire+0x5c0/0x1f40 [ 156.350883][ T8488] ? __lock_acquire+0x5c0/0x1f40 [ 156.350907][ T8488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.350938][ T8488] ? policy_nodemask+0xed/0x4f0 [ 156.350970][ T8488] alloc_pages_mpol+0x201/0x550 [ 156.351002][ T8488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 156.351034][ T8488] ? do_raw_spin_lock+0x128/0x260 [ 156.351064][ T8488] ? find_held_lock+0x2b/0x80 [ 156.351083][ T8488] ? swap_cache_alloc_folio+0x374/0xc50 [ 156.351112][ T8488] folio_alloc_mpol_noprof+0x36/0x260 [ 156.351136][ T8488] swap_cache_alloc_folio+0x3d7/0xc50 [ 156.351167][ T8488] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 156.351192][ T8488] ? swap_cache_get_folio+0x28d/0x360 [ 156.351218][ T8488] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 156.351241][ T8488] ? find_held_lock+0x2b/0x80 [ 156.351267][ T8488] ? is_bpf_text_address+0x8a/0x1a0 [ 156.351297][ T8488] ? is_bpf_text_address+0x8a/0x1a0 [ 156.351327][ T8488] ? bpf_ksym_find+0x124/0x1c0 [ 156.351356][ T8488] swap_cache_read_folio+0x47/0x140 [ 156.351387][ T8488] swap_cluster_readahead+0x477/0x5d0 [ 156.351416][ T8488] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 156.351443][ T8488] ? swap_table_get+0x28/0x2c0 [ 156.351474][ T8488] swapin_readahead+0xf0/0x260 [ 156.351496][ T8488] ? __pfx_swapin_readahead+0x10/0x10 [ 156.351520][ T8488] ? __pfx_get_swap_device+0x10/0x10 [ 156.351557][ T8488] do_swap_page+0xf6d/0x5570 [ 156.351590][ T8488] ? __pfx_do_swap_page+0x10/0x10 [ 156.351608][ T8488] ? lock_acquire+0x1d1/0x380 [ 156.351632][ T8488] ? __pte_offset_map+0x2f/0x310 [ 156.351665][ T8488] ? rcu_is_watching+0x13/0xc0 [ 156.351688][ T8488] ? __pte_offset_map+0x179/0x310 [ 156.351719][ T8488] __handle_mm_fault+0x15bd/0x2f60 [ 156.351746][ T8488] ? __pfx___handle_mm_fault+0x10/0x10 [ 156.351764][ T8488] ? __pfx_mt_find+0x10/0x10 [ 156.351806][ T8488] ? find_vma+0xbf/0x140 [ 156.351832][ T8488] ? __pfx_find_vma+0x10/0x10 [ 156.351863][ T8488] handle_mm_fault+0x363/0xa20 [ 156.351890][ T8488] do_user_addr_fault+0x745/0x12f0 [ 156.351924][ T8488] exc_page_fault+0x6f/0xd0 [ 156.351947][ T8488] asm_exc_page_fault+0x26/0x30 [ 156.351966][ T8488] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 156.351995][ T8488] Code: c9 75 f6 e9 52 c4 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 156.352014][ T8488] RSP: 0000:ffffc900040bfaf8 EFLAGS: 00050246 [ 156.352032][ T8488] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 156.352047][ T8488] RDX: 0000000000080000 RSI: ffffffff826140f1 RDI: 00000000f5484c40 [ 156.352060][ T8488] RBP: ffff888044a18000 R08: 0000000000071172 R09: 00000000000001d9 [ 156.352072][ T8488] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 156.352084][ T8488] R13: 00000000f5484a40 R14: 00000000f54849d0 R15: ffff888044a19ac0 [ 156.352106][ T8488] ? __might_fault+0x111/0x140 [ 156.352132][ T8488] copy_fpstate_to_sigframe+0x178/0xb60 [ 156.352167][ T8488] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 156.352204][ T8488] ? x86_task_fpu+0x5f/0x90 [ 156.352232][ T8488] get_sigframe+0x3fb/0x940 [ 156.352272][ T8488] ? __pfx_get_sigframe+0x10/0x10 [ 156.352300][ T8488] ? rcu_is_watching+0x13/0xc0 [ 156.352324][ T8488] ? siginfo_layout+0x156/0x290 [ 156.352359][ T8488] ia32_setup_rt_frame+0xe7/0xaf0 [ 156.352388][ T8488] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 156.352410][ T8488] ? __pfx_force_sig_fault+0x10/0x10 [ 156.352442][ T8488] arch_do_signal_or_restart+0x459/0x7a0 [ 156.352472][ T8488] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 156.352517][ T8488] irqentry_exit+0x542/0xab0 [ 156.352545][ T8488] asm_exc_page_fault+0x26/0x30 [ 156.352563][ T8488] RIP: 0023:0xf70d16fe [ 156.352579][ T8488] Code: e8 17 ec ff ff 81 c3 1b c9 3a 00 83 ec 1c 8b 7c 24 30 8b 54 24 34 8b 4c 24 38 8b 6c 24 3c 8b 44 24 40 8b 74 24 44 89 74 24 0c <8b> 70 38 81 4e 18 80 00 00 00 50 55 51 52 e8 4f ff ff ff 83 c4 0c [ 156.352596][ T8488] RSP: 002b:00000000f54854f0 EFLAGS: 00010286 [ 156.352611][ T8488] RAX: 0000000000000000 RBX: 00000000f747dff4 RCX: 0000000000000000 [ 156.352623][ T8488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 156.352635][ T8488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.352647][ T8488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.352660][ T8488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.352687][ T8488] [ 156.434730][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 156.434751][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 156.435569][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.435601][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 156.435632][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.441493][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 156.446865][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 156.446953][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 156.452739][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 156.459608][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 156.459694][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 156.465264][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 156.676082][ T8484] netlink: 'syz.0.647': attribute type 11 has an invalid length. [ 156.676103][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 156.770792][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 156.857699][ T9] usb 5-1: USB disconnect, device number 15 [ 156.868608][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 156.880369][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 156.880782][ T9] keyspan 5-1:1.0: device disconnected [ 156.904247][ T8503] usb usb4: usbfs: process 8503 (syz.4.651) did not claim interface 0 before use [ 157.210743][ T8514] fuse: fd is not a fuse device [ 157.223340][ T29] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 157.404669][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.405679][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.405710][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 157.405729][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 157.405758][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.417382][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.576541][ T29] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 157.647239][ T62] usb 8-1: USB disconnect, device number 13 [ 157.740525][ T8537] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 157.755347][ T8537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.760645][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 157.869985][ T8542] fuse: fd is not a fuse device [ 157.923128][ T8546] FAULT_INJECTION: forcing a failure. [ 157.923128][ T8546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.923161][ T8546] CPU: 3 UID: 0 PID: 8546 Comm: syz.0.658 Not tainted syzkaller #0 PREEMPT(full) [ 157.923183][ T8546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.923194][ T8546] Call Trace: [ 157.923201][ T8546] [ 157.923209][ T8546] dump_stack_lvl+0x100/0x190 [ 157.923255][ T8546] should_fail_ex.cold+0x5/0xa [ 157.923286][ T8546] save_fsave_header+0x14c/0x310 [ 157.923314][ T8546] ? __pfx_save_fsave_header+0x10/0x10 [ 157.923351][ T8546] ? copy_fpstate_to_sigframe+0x2b8/0xb60 [ 157.923381][ T8546] ? __local_bh_enable_ip+0xa5/0x120 [ 157.923409][ T8546] copy_fpstate_to_sigframe+0x799/0xb60 [ 157.923434][ T8546] ? find_held_lock+0x2b/0x80 [ 157.923455][ T8546] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 157.923481][ T8546] ? do_raw_spin_unlock+0x145/0x1e0 [ 157.923519][ T8546] ? rcu_is_watching+0x13/0xc0 [ 157.923539][ T8546] ? irqentry_exit+0x202/0xab0 [ 157.923560][ T8546] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.923578][ T8546] ? x86_task_fpu+0x5f/0x90 [ 157.923604][ T8546] get_sigframe+0x3fb/0x940 [ 157.923633][ T8546] ? __pfx_get_sigframe+0x10/0x10 [ 157.923660][ T8546] ? siginfo_layout+0x156/0x290 [ 157.923688][ T8546] ia32_setup_rt_frame+0xe7/0xaf0 [ 157.923712][ T8546] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 157.923732][ T8546] ? __pfx_force_sig_fault+0x10/0x10 [ 157.923761][ T8546] arch_do_signal_or_restart+0x459/0x7a0 [ 157.923787][ T8546] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.923827][ T8546] irqentry_exit+0x542/0xab0 [ 157.923851][ T8546] asm_exc_page_fault+0x26/0x30 [ 157.923869][ T8546] RIP: 0023:0xf6fe16fe [ 157.923884][ T8546] Code: e8 17 ec ff ff 81 c3 1b c9 3a 00 83 ec 1c 8b 7c 24 30 8b 54 24 34 8b 4c 24 38 8b 6c 24 3c 8b 44 24 40 8b 74 24 44 89 74 24 0c <8b> 70 38 81 4e 18 80 00 00 00 50 55 51 52 e8 4f ff ff ff 83 c4 0c [ 157.923901][ T8546] RSP: 002b:00000000f53744f0 EFLAGS: 00010286 [ 157.923918][ T8546] RAX: 0000000000000000 RBX: 00000000f738dff4 RCX: 0000000000000000 [ 157.923930][ T8546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 157.923941][ T8546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.923953][ T8546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.923965][ T8546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.923990][ T8546] [ 158.521559][ T8531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.521667][ T8531] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.536919][ T5099] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 158.841233][ T8561] fuse: fd is not a fuse device qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 159.843341][ T5737] Bluetooth: hci1: command 0x0406 tx timeout [ 160.093729][ T5737] Bluetooth: hci3: command 0x0406 tx timeout [ 160.563446][ T66] Bluetooth: hci0: command 0x1407 tx timeout [ 160.570200][ T8531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.570427][ T8531] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.580426][ T8531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.580464][ T8531] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.584708][ T8531] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.588494][ T8531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.588531][ T8531] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.595221][ T8531] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.640574][ T8586] fuse: Invalid rootmode [ 160.869711][ T8595] fuse: Bad value for 'group_id' [ 160.869724][ T8595] fuse: Bad value for 'group_id' [ 160.943509][ T62] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 161.094350][ T62] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.095316][ T62] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 161.095343][ T62] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 161.095363][ T62] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.097942][ T62] usb 8-1: string descriptor 0 read error: -22 [ 161.098063][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.103629][ T8591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.103774][ T8591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.103906][ T8591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.109867][ T62] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 161.308474][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 161.318744][ T62] usb 8-1: USB disconnect, device number 14 [ 161.647550][ T8606] ±ÿ)”ëfl: renamed from lo (while UP) [ 161.923521][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 162.127279][ T8621] fuse: Bad value for 'rootmode' [ 162.385635][ T8628] fuse: fd is not a fuse device [ 162.422254][ T8631] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 162.643507][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 162.643544][ T66] Bluetooth: hci0: command 0x1407 tx timeout [ 162.643618][ T5099] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.834545][ T8653] fuse: fd is not a fuse device [ 164.670492][ T8686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.671176][ T8686] bond2: entered promiscuous mode [ 164.672157][ T8686] bond0: (slave bond2): Enslaving as an active interface with an up link [ 164.724791][ T5099] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.724819][ T5099] Bluetooth: hci0: command 0x1407 tx timeout [ 164.724835][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 165.103855][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 165.103872][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 165.274731][ T8699] fuse: fd is not a fuse device [ 165.514291][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 165.994960][ T8710] usb usb4: usbfs: process 8710 (syz.3.703) did not claim interface 0 before use [ 166.803387][ T5099] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.803445][ T5737] Bluetooth: hci3: command 0x0406 tx timeout [ 167.136732][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 168.419913][ T8751] fuse: Unknown parameter 'use00000000000000000000' [ 168.594453][ T8755] fuse: fd is not a fuse device [ 169.609612][ T8774] fuse: fd is not a fuse device [ 169.705333][ T8784] 9pnet_virtio: no channels available for device syz [ 169.858464][ T8789] usb usb4: usbfs: process 8789 (syz.3.719) did not claim interface 0 before use [ 170.968724][ T8803] fuse: fd is not a fuse device [ 170.975131][ T8806] FAULT_INJECTION: forcing a failure. [ 170.975131][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 170.975151][ T8806] CPU: 2 UID: 0 PID: 8806 Comm: syz.0.726 Not tainted syzkaller #0 PREEMPT(full) [ 170.975163][ T8806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.975170][ T8806] Call Trace: [ 170.975174][ T8806] [ 170.975179][ T8806] dump_stack_lvl+0x100/0x190 [ 170.975212][ T8806] should_fail_ex.cold+0x5/0xa [ 170.975227][ T8806] should_failslab+0xc2/0x120 [ 170.975245][ T8806] __kmalloc_noprof+0xfc/0x840 [ 170.975259][ T8806] ? __kernel_text_address+0xd/0x30 [ 170.975272][ T8806] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 170.975293][ T8806] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 170.975313][ T8806] genl_family_rcv_msg_doit+0xc7/0x300 [ 170.975332][ T8806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 170.975360][ T8806] ? genl_get_cmd+0x3e7/0x760 [ 170.975379][ T8806] ? netlink_sendmsg+0x755/0x10c0 [ 170.975404][ T8806] ? ____sys_sendmsg+0xa4d/0xbe0 [ 170.975418][ T8806] ? __radix_tree_lookup+0x217/0x2b0 [ 170.975433][ T8806] genl_rcv_msg+0x560/0x800 [ 170.975452][ T8806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.975468][ T8806] ? __lock_acquire+0x5c0/0x1f40 [ 170.975482][ T8806] ? __pfx_ethnl_tunnel_info_doit+0x10/0x10 [ 170.975498][ T8806] ? __lock_acquire+0x5c0/0x1f40 [ 170.975515][ T8806] netlink_rcv_skb+0x159/0x420 [ 170.975530][ T8806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.975547][ T8806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.975569][ T8806] ? netlink_deliver_tap+0x1ae/0xcc0 [ 170.975585][ T8806] genl_rcv+0x28/0x40 [ 170.975600][ T8806] netlink_unicast+0x65f/0x950 [ 170.975617][ T8806] ? __pfx_netlink_unicast+0x10/0x10 [ 170.975635][ T8806] netlink_sendmsg+0x9ac/0x10c0 [ 170.975652][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.975670][ T8806] ? apparmor_socket_sendmsg+0x165/0x280 [ 170.975685][ T8806] ? ____sys_sendmsg+0xa4d/0xbe0 [ 170.975696][ T8806] ____sys_sendmsg+0xa4d/0xbe0 [ 170.975706][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.975722][ T8806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.975740][ T8806] ___sys_sendmsg+0x190/0x1e0 [ 170.975754][ T8806] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.975774][ T8806] ? find_held_lock+0x2b/0x80 [ 170.975794][ T8806] __sys_sendmsg+0x160/0x210 [ 170.975811][ T8806] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.975835][ T8806] __do_fast_syscall_32+0x14b/0x8c0 [ 170.975848][ T8806] ? lockdep_hardirqs_on+0x7d/0x110 [ 170.975861][ T8806] do_fast_syscall_32+0x32/0x70 [ 170.975875][ T8806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.975889][ T8806] RIP: 0023:0xf7f05fbc [ 170.975898][ T8806] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 170.975909][ T8806] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 170.975921][ T8806] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 170.975928][ T8806] RDX: 0000000020048006 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.975935][ T8806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.975941][ T8806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.975947][ T8806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.975961][ T8806] [ 171.131559][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 171.325295][ T8822] FAULT_INJECTION: forcing a failure. [ 171.325295][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 171.325326][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 171.325347][ T8822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.325358][ T8822] Call Trace: [ 171.325383][ T8822] [ 171.325391][ T8822] dump_stack_lvl+0x100/0x190 [ 171.325420][ T8822] should_fail_ex.cold+0x5/0xa [ 171.325445][ T8822] should_failslab+0xc2/0x120 [ 171.325474][ T8822] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.325495][ T8822] ? lock_acquire+0x1d1/0x380 [ 171.325518][ T8822] ? rtnl_newlink+0x139/0x2620 [ 171.325548][ T8822] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.325578][ T8822] rtnl_newlink+0x139/0x2620 [ 171.325608][ T8822] ? find_held_lock+0x2b/0x80 [ 171.325634][ T8822] ? is_bpf_text_address+0x8a/0x1a0 [ 171.325662][ T8822] ? is_bpf_text_address+0x8a/0x1a0 [ 171.325688][ T8822] ? bpf_ksym_find+0x124/0x1c0 [ 171.325711][ T8822] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.325739][ T8822] ? is_bpf_text_address+0x94/0x1a0 [ 171.325766][ T8822] ? kernel_text_address+0x8d/0x100 [ 171.325786][ T8822] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.325811][ T8822] ? __kernel_text_address+0xd/0x30 [ 171.325847][ T8822] ? unwind_get_return_address+0x59/0xa0 [ 171.325873][ T8822] ? arch_stack_walk+0xa6/0xf0 [ 171.325905][ T8822] ? __lock_acquire+0x5c0/0x1f40 [ 171.325931][ T8822] ? stack_depot_save_flags+0x27/0x9f0 [ 171.325980][ T8822] ? stack_trace_save+0x8e/0xc0 [ 171.326005][ T8822] ? __pfx_stack_trace_save+0x10/0x10 [ 171.326033][ T8822] ? lock_acquire+0x1d1/0x380 [ 171.326058][ T8822] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 171.326087][ T8822] ? find_held_lock+0x2b/0x80 [ 171.326105][ T8822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 171.326131][ T8822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 171.326161][ T8822] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.326190][ T8822] rtnetlink_rcv_msg+0x95e/0xe90 [ 171.326221][ T8822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.326254][ T8822] ? __lock_acquire+0x5c0/0x1f40 [ 171.326284][ T8822] netlink_rcv_skb+0x159/0x420 [ 171.326309][ T8822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.326340][ T8822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.326371][ T8822] ? netlink_deliver_tap+0x1ae/0xcc0 [ 171.326400][ T8822] netlink_unicast+0x65f/0x950 [ 171.326429][ T8822] ? __pfx_netlink_unicast+0x10/0x10 [ 171.326459][ T8822] netlink_sendmsg+0x9ac/0x10c0 [ 171.326487][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.326517][ T8822] ? apparmor_socket_sendmsg+0x165/0x280 [ 171.326541][ T8822] ? ____sys_sendmsg+0xa4d/0xbe0 [ 171.326559][ T8822] ____sys_sendmsg+0xa4d/0xbe0 [ 171.326577][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.326602][ T8822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.326639][ T8822] ___sys_sendmsg+0x190/0x1e0 [ 171.326662][ T8822] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.326694][ T8822] ? find_held_lock+0x2b/0x80 [ 171.326728][ T8822] __sys_sendmsg+0x160/0x210 [ 171.326755][ T8822] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.326793][ T8822] __do_fast_syscall_32+0x14b/0x8c0 [ 171.326816][ T8822] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.326838][ T8822] do_fast_syscall_32+0x32/0x70 [ 171.326861][ T8822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.326884][ T8822] RIP: 0023:0xf7ff3fbc [ 171.326901][ T8822] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 171.326918][ T8822] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 171.326938][ T8822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 171.326950][ T8822] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.326961][ T8822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.326972][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.326984][ T8822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.327009][ T8822] [ 171.524681][ T1163] IPVS: starting estimator thread 0... [ 171.532093][ T8828] netlink: 88 bytes leftover after parsing attributes in process `syz.4.734'. [ 171.613543][ T8829] IPVS: using max 43 ests per chain, 103200 per kthread [ 171.987002][ T8833] fuse: Unknown parameter 'user_i00000000000000000000' [ 172.461039][ T8846] fuse: fd is not a fuse device [ 172.461697][ T42] kauditd_printk_skb: 118 callbacks suppressed [ 172.461708][ T42] audit: type=1326 audit(1792658557.323:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.461820][ T42] audit: type=1326 audit(1792658557.323:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462326][ T42] audit: type=1326 audit(1792658557.323:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462423][ T42] audit: type=1326 audit(1792658557.323:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462537][ T42] audit: type=1326 audit(1792658557.323:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462630][ T42] audit: type=1326 audit(1792658557.323:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462739][ T42] audit: type=1326 audit(1792658557.323:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.462832][ T42] audit: type=1326 audit(1792658557.323:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.463005][ T42] audit: type=1326 audit(1792658557.323:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.463104][ T42] audit: type=1326 audit(1792658557.323:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.740" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3fbc code=0x7ffc0000 [ 172.659689][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 172.790177][ T8856] FAULT_INJECTION: forcing a failure. [ 172.790177][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 172.790206][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.0.738 Not tainted syzkaller #0 PREEMPT(full) [ 172.790228][ T8856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.790238][ T8856] Call Trace: [ 172.790245][ T8856] [ 172.790253][ T8856] dump_stack_lvl+0x100/0x190 [ 172.790287][ T8856] should_fail_ex.cold+0x5/0xa [ 172.790310][ T8856] should_failslab+0xc2/0x120 [ 172.790329][ T8856] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.790343][ T8856] ? wakeup_source_device_create+0x46/0x2e0 [ 172.790360][ T8856] wakeup_source_device_create+0x46/0x2e0 [ 172.790374][ T8856] wakeup_source_sysfs_add+0x1c/0x90 [ 172.790385][ T8856] wakeup_source_register+0x154/0x3e0 [ 172.790402][ T8856] ep_create_wakeup_source+0x1df/0x2e0 [ 172.790420][ T8856] ? __mutex_unlock_slowpath+0x35d/0x930 [ 172.790434][ T8856] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 172.790455][ T8856] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 172.790466][ T8856] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 172.790481][ T8856] do_epoll_ctl_file+0x1e26/0x36e0 [ 172.790498][ T8856] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 172.790515][ T8856] ? lock_acquire+0x1d1/0x380 [ 172.790531][ T8856] ? __fget_files+0x34/0x3d0 [ 172.790546][ T8856] ? find_held_lock+0x2b/0x80 [ 172.790560][ T8856] ? __fget_files+0x215/0x3d0 [ 172.790577][ T8856] ? __fget_files+0x21f/0x3d0 [ 172.790597][ T8856] ? do_epoll_ctl+0xfd/0x1a0 [ 172.790608][ T8856] do_epoll_ctl+0xfd/0x1a0 [ 172.790622][ T8856] ? __pfx_do_epoll_ctl+0x10/0x10 [ 172.790638][ T8856] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 172.790652][ T8856] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 172.790669][ T8856] __do_fast_syscall_32+0x14b/0x8c0 [ 172.790686][ T8856] do_fast_syscall_32+0x32/0x70 [ 172.790700][ T8856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.790714][ T8856] RIP: 0023:0xf7f05fbc [ 172.790724][ T8856] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 172.790735][ T8856] RSP: 002b:00000000f537450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 172.790747][ T8856] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 172.790754][ T8856] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 172.790761][ T8856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.790767][ T8856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.790774][ T8856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.790789][ T8856] [ 173.403445][ T41] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 173.564195][ T41] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.565288][ T41] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.565315][ T41] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.565346][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.569142][ T8874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 173.572483][ T41] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.647683][ T8896] FAULT_INJECTION: forcing a failure. [ 173.647683][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 173.647716][ T8896] CPU: 3 UID: 0 PID: 8896 Comm: syz.0.751 Not tainted syzkaller #0 PREEMPT(full) [ 173.647738][ T8896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.647750][ T8896] Call Trace: [ 173.647758][ T8896] [ 173.647765][ T8896] dump_stack_lvl+0x100/0x190 [ 173.647798][ T8896] should_fail_ex.cold+0x5/0xa [ 173.647826][ T8896] should_failslab+0xc2/0x120 [ 173.647855][ T8896] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.647878][ T8896] ? wakeup_source_device_create+0x46/0x2e0 [ 173.647926][ T8896] wakeup_source_device_create+0x46/0x2e0 [ 173.647949][ T8896] wakeup_source_sysfs_add+0x1c/0x90 [ 173.647969][ T8896] wakeup_source_register+0x154/0x3e0 [ 173.648000][ T8896] ep_create_wakeup_source+0x1df/0x2e0 [ 173.648029][ T8896] ? __mutex_unlock_slowpath+0x35d/0x930 [ 173.648053][ T8896] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 173.648087][ T8896] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 173.648107][ T8896] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 173.648133][ T8896] do_epoll_ctl_file+0x1e26/0x36e0 [ 173.648170][ T8896] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 173.648191][ T8896] ? lock_acquire+0x1d1/0x380 [ 173.648217][ T8896] ? __fget_files+0x34/0x3d0 [ 173.648244][ T8896] ? find_held_lock+0x2b/0x80 [ 173.648266][ T8896] ? __fget_files+0x215/0x3d0 [ 173.648294][ T8896] ? __fget_files+0x21f/0x3d0 [ 173.648326][ T8896] ? do_epoll_ctl+0xfd/0x1a0 [ 173.648343][ T8896] do_epoll_ctl+0xfd/0x1a0 [ 173.648365][ T8896] ? __pfx_do_epoll_ctl+0x10/0x10 [ 173.648393][ T8896] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 173.648415][ T8896] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 173.648443][ T8896] __do_fast_syscall_32+0x14b/0x8c0 [ 173.648469][ T8896] do_fast_syscall_32+0x32/0x70 [ 173.648494][ T8896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.648520][ T8896] RIP: 0023:0xf7f05fbc [ 173.648537][ T8896] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 173.648554][ T8896] RSP: 002b:00000000f537450c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 173.648575][ T8896] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 173.648585][ T8896] RDX: 0000000000000006 RSI: 0000000080001600 RDI: 0000000000000000 [ 173.648595][ T8896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.648604][ T8896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.648614][ T8896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.648636][ T8896] [ 174.217014][ T5824] usb 9-1: USB disconnect, device number 12 [ 174.747580][ T8917] fuse: fd is not a fuse device [ 175.121490][ T8925] FAULT_INJECTION: forcing a failure. [ 175.121490][ T8925] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.121527][ T8925] CPU: 0 UID: 0 PID: 8925 Comm: syz.3.763 Not tainted syzkaller #0 PREEMPT(full) [ 175.121547][ T8925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.121558][ T8925] Call Trace: [ 175.121565][ T8925] [ 175.121572][ T8925] dump_stack_lvl+0x100/0x190 [ 175.121603][ T8925] should_fail_ex.cold+0x5/0xa [ 175.121623][ T8925] ? __might_fault+0xc5/0x140 [ 175.121644][ T8925] get_futex_key+0x1c9/0x13e0 [ 175.121674][ T8925] ? __pfx_get_futex_key+0x10/0x10 [ 175.121702][ T8925] ? __copy_siginfo_to_user32+0xb1/0x100 [ 175.121732][ T8925] futex_wake+0xf4/0x5e0 [ 175.121756][ T8925] ? __pfx_futex_wake+0x10/0x10 [ 175.121779][ T8925] ? signal_setup_done+0x12d/0x5c0 [ 175.121804][ T8925] ? __pfx_signal_setup_done+0x10/0x10 [ 175.121831][ T8925] do_futex+0x2b2/0x440 [ 175.121849][ T8925] ? __pfx_do_futex+0x10/0x10 [ 175.121869][ T8925] ? __local_bh_enable_ip+0xa5/0x120 [ 175.121896][ T8925] __ia32_sys_futex_time32+0x2f4/0x470 [ 175.121920][ T8925] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 175.121969][ T8925] ? __might_fault+0xc5/0x140 [ 175.121997][ T8925] __do_fast_syscall_32+0x14b/0x8c0 [ 175.122024][ T8925] do_fast_syscall_32+0x32/0x70 [ 175.122046][ T8925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.122066][ T8925] RIP: 0023:0xf742efbc [ 175.122081][ T8925] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 175.122099][ T8925] RSP: 002b:00000000f54045cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 175.122118][ T8925] RAX: ffffffffffffffda RBX: 00000000f74550bc RCX: 0000000000000081 [ 175.122130][ T8925] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 175.122160][ T8925] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 175.122171][ T8925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.122182][ T8925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.122206][ T8925] [ 175.409861][ T8935] ioremap: invalid physical address 8000000000000000 [ 175.409970][ T8935] ------------[ cut here ]------------ [ 175.409979][ T8935] 1 [ 175.409986][ T8935] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#1: syz.4.765/8935 [ 175.420707][ T8935] Modules linked in: [ 175.422454][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(full) [ 175.426246][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.430354][ T8935] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.433135][ T8935] Code: 48 8b 34 24 48 c7 c7 00 2e ec 8b e8 2a 22 01 00 e9 fb 10 9a 00 e8 90 b9 ea 00 4c 89 ee 48 c7 c7 60 2c ec 8b e8 11 22 01 00 90 <0f> 0b 90 e9 db 10 9a 00 e8 73 b9 ea 00 41 0f b6 d7 4c 89 ee 48 c7 [ 175.441093][ T8935] RSP: 0018:ffffc90003fdf8b8 EFLAGS: 00010286 [ 175.443061][ T8935] RAX: 0000000000000032 RBX: 1ffff920007fbf1b RCX: 0000000000000000 [ 175.445828][ T8935] RDX: 0000000000000032 RSI: ffffffff81e9c189 RDI: fffff520007fbf08 [ 175.448311][ T8935] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 175.450964][ T8935] R10: 8000000000000000 R11: 0000000000000001 R12: 8000000000000fff [ 175.453589][ T8935] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 175.456417][ T8935] FS: 0000000000000000(0000) GS:ffff888095838000(0063) knlGS:00000000f5485b40 [ 175.459313][ T8935] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 175.461586][ T8935] CR2: 000000000c4027cc CR3: 000000004377f000 CR4: 0000000000352ef0 [ 175.464252][ T8935] Call Trace: [ 175.465358][ T8935] [ 175.466331][ T8935] ? register_device+0x1bb/0x6a0 [ 175.467902][ T8935] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 175.469817][ T8935] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 175.471694][ T8935] ? register_device+0x164/0x6a0 [ 175.473615][ T8935] register_device+0x1bb/0x6a0 [ 175.475251][ T8935] phram_setup+0x3b1/0x4c0 [ 175.477180][ T8935] ? __pfx_phram_setup+0x10/0x10 [ 175.479081][ T8935] ? trace_contention_end+0x126/0x160 [ 175.480792][ T8935] ? param_attr_store+0xec/0x300 [ 175.482420][ T8935] ? __pfx___mutex_lock+0x10/0x10 [ 175.484135][ T8935] phram_param_call+0xa6/0xd0 [ 175.485645][ T8935] param_attr_store+0x199/0x300 [ 175.487198][ T8935] ? __pfx_param_attr_store+0x10/0x10 [ 175.488912][ T8935] module_attr_store+0x58/0x80 [ 175.490420][ T8935] ? __pfx_module_attr_store+0x10/0x10 [ 175.492288][ T8935] sysfs_kf_write+0xf2/0x150 [ 175.493811][ T8935] kernfs_fop_write_iter+0x3e0/0x5f0 [ 175.495545][ T8935] ? __pfx_sysfs_kf_write+0x10/0x10 [ 175.497251][ T8935] vfs_write+0x6af/0x1050 [ 175.498641][ T8935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.500503][ T8935] ? __pfx_vfs_write+0x10/0x10 [ 175.502055][ T8935] ? find_held_lock+0x2b/0x80 [ 175.503620][ T8935] ksys_write+0x12a/0x250 [ 175.504956][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 175.506502][ T8935] __do_fast_syscall_32+0x14b/0x8c0 [ 175.508136][ T8935] do_fast_syscall_32+0x32/0x70 [ 175.509690][ T8935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.511873][ T8935] RIP: 0023:0xf7ff3fbc [ 175.513335][ T8935] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 175.519360][ T8935] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 175.522010][ T8935] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800006c0 [ 175.524528][ T8935] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 175.527003][ T8935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.529514][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.532023][ T8935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.534561][ T8935] [ 175.535542][ T8935] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.537803][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(full) [ 175.540668][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.544081][ T8935] Call Trace: [ 175.545314][ T8935] [ 175.546284][ T8935] dump_stack_lvl+0x100/0x190 [ 175.547767][ T8935] vpanic+0x553/0x970 [ 175.549344][ T8935] ? __pfx_vpanic+0x10/0x10 [ 175.550851][ T8935] panic+0xd1/0xe0 [ 175.552208][ T8935] ? __pfx_panic+0x10/0x10 [ 175.553726][ T8935] check_panic_on_warn.cold+0x19/0x34 [ 175.555568][ T8935] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.557616][ T8935] __warn.cold+0x191/0x318 [ 175.559361][ T8935] __report_bug+0x30f/0x440 [ 175.560930][ T8935] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.562896][ T8935] ? __pfx___report_bug+0x10/0x10 [ 175.564703][ T8935] ? irq_work_queue+0xd1/0x100 [ 175.566269][ T8935] ? __wake_up_klogd+0xe5/0x140 [ 175.567898][ T8935] ? vprintk_emit+0x1c9/0x6b0 [ 175.569617][ T8935] ? __pfx_vprintk_emit+0x10/0x10 [ 175.571390][ T8935] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.573559][ T8935] report_bug+0xb3/0x220 [ 175.575128][ T8935] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.577121][ T8935] handle_bug+0x16a/0x2a0 [ 175.578633][ T8935] exc_invalid_op+0x17/0x50 [ 175.580228][ T8935] asm_exc_invalid_op+0x1a/0x20 [ 175.582060][ T8935] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 175.584771][ T8935] Code: 48 8b 34 24 48 c7 c7 00 2e ec 8b e8 2a 22 01 00 e9 fb 10 9a 00 e8 90 b9 ea 00 4c 89 ee 48 c7 c7 60 2c ec 8b e8 11 22 01 00 90 <0f> 0b 90 e9 db 10 9a 00 e8 73 b9 ea 00 41 0f b6 d7 4c 89 ee 48 c7 [ 175.591321][ T8935] RSP: 0018:ffffc90003fdf8b8 EFLAGS: 00010286 [ 175.593800][ T8935] RAX: 0000000000000032 RBX: 1ffff920007fbf1b RCX: 0000000000000000 [ 175.597079][ T8935] RDX: 0000000000000032 RSI: ffffffff81e9c189 RDI: fffff520007fbf08 [ 175.600312][ T8935] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 175.603579][ T8935] R10: 8000000000000000 R11: 0000000000000001 R12: 8000000000000fff [ 175.606820][ T8935] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 175.610068][ T8935] ? vprintk_emit+0x1c9/0x6b0 [ 175.612061][ T8935] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 175.614520][ T8935] ? register_device+0x1bb/0x6a0 [ 175.616584][ T8935] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 175.619077][ T8935] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 175.621379][ T8935] ? register_device+0x164/0x6a0 [ 175.623503][ T8935] register_device+0x1bb/0x6a0 [ 175.625405][ T8935] phram_setup+0x3b1/0x4c0 [ 175.626959][ T8935] ? __pfx_phram_setup+0x10/0x10 [ 175.628523][ T8935] ? trace_contention_end+0x126/0x160 [ 175.630231][ T8935] ? param_attr_store+0xec/0x300 [ 175.631828][ T8935] ? __pfx___mutex_lock+0x10/0x10 [ 175.633417][ T8935] phram_param_call+0xa6/0xd0 [ 175.634921][ T8935] param_attr_store+0x199/0x300 [ 175.636483][ T8935] ? __pfx_param_attr_store+0x10/0x10 [ 175.638273][ T8935] module_attr_store+0x58/0x80 [ 175.640195][ T8935] ? __pfx_module_attr_store+0x10/0x10 [ 175.642387][ T8935] sysfs_kf_write+0xf2/0x150 [ 175.644011][ T8935] kernfs_fop_write_iter+0x3e0/0x5f0 [ 175.645676][ T8935] ? __pfx_sysfs_kf_write+0x10/0x10 [ 175.647622][ T8935] vfs_write+0x6af/0x1050 [ 175.649053][ T8935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.651479][ T8935] ? __pfx_vfs_write+0x10/0x10 [ 175.653511][ T8935] ? find_held_lock+0x2b/0x80 [ 175.655560][ T8935] ksys_write+0x12a/0x250 [ 175.657365][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 175.659312][ T8935] __do_fast_syscall_32+0x14b/0x8c0 [ 175.661164][ T8935] do_fast_syscall_32+0x32/0x70 [ 175.662773][ T8935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.665086][ T8935] RIP: 0023:0xf7ff3fbc [ 175.666412][ T8935] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 175.673175][ T8935] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 175.676567][ T8935] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800006c0 [ 175.679800][ T8935] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 175.682998][ T8935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.686344][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.689697][ T8935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.692827][ T8935] [ 175.694801][ T8935] Kernel Offset: disabled [ 175.696667][ T8935] Rebooting in 86400 seconds..