last executing test programs: 5.615608127s ago: executing program 1 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000003c0), 0x0, 0x6c00c2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="dd58de9033b2b8c15cec839fda5186c75186057b3622ade02a9a648a4eb8377e5939e3de7e4e426e8f4081042b6bcf554a69303e0e5282b0d33a25e1eef19d4afe1f4a0eee721be6c59bd0d08c76f2ebf1bf5d80aad546647e5bef58bb128504becf0d955a747e9ca6e7aad34d85d35b", &(0x7f0000000180)=""/35, &(0x7f00000001c0)="cf885cbe4b39652722839f1274d736d3c55818bdb0d94610fdc5c6acda6e97d5cd32f8c63b823b2702a3c46337d4af6dc7a8d80af9e48c35435df40f6e74df0a11d0313d6383035f50da7fe1dcdbc48b64b71df3ce6d9547a697ca7f72c803de5e6e4d236c7ffad385fd260e2d94cd7d1453734e18876c01ef7162b01e5e3e8cb4af4c3c1b0e9cc9e2e7a8cf412d1de840ac5396b755c2c9822d", &(0x7f0000000300)="e5c83dbf54d4024468dabe0832a2ea4277af21664b57354e7c843bebcefd33183710289860f658b1178c554ff6b3080c7d1b9f1d93d0ed4dca13ee4997af5a910969d72a19947085acaa835719c6019d509be5ef0c5603b8fdce6aa4b848ef1840feef460586d1113a4334a79fc825c90ab2498946e64ad5515dd8e505e54a9d72782492d5172233eecc1d38ca5ed62a8c74eef55a272a00", 0x8000, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r4, 0x1, 0x9, &(0x7f0000000000)="67a06cad", 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xf, 0xffe0}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x90, '\x00', 0xf9b, 0x120, 0xfe, 0xd34}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x401, 0x80, 0xd, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x0, 0xe, 0xc4f, 0x5}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r7, &(0x7f0000000180), 0x1000) 5.459551347s ago: executing program 1 (id=548): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(0x0, 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd0}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) 4.398457019s ago: executing program 2 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x16}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file1\x00', 0x2000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x5, 0x0, 0x0, 'queue0\x00', 0x12}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0xfffffffd, 0x1, {0x3, 0x2, 0x2, 0x0, 0x4}}) mprotect(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000001000080000000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000000000000000000000000000254b1c342aaff09cceace900c319f917d7b2f0726b2cd18d05e3a9bea76b4142709cd7474943fad6288c8156859fa228b191e23c055607676c8ecadee4068db8f6a6d262ac44ae3ff746a5a459f6e36f56c55a265e01c5365d847bf3eb436d3cae16386bc14022b6d56275c0e468aa869c0a569d03265f82801fa8bfbadca8c988c5dd9119f30d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) chdir(&(0x7f00000000c0)='./bus/file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) close(0x3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xffffffffffffffc1, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000080)=0x80) getdents(r3, &(0x7f0000000340)=""/151, 0x97) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000000)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.352910364s ago: executing program 2 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setresuid(0x0, r3, r3) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r3, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x10f, 0xf2, 0x6, 0x4, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xe}, {0xfff3}, {0xb, 0xc}}, [{0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000002040)={'geneve0\x00', @ifru_data=0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000880), 0xf504, r4}, 0x38) 3.399096325s ago: executing program 2 (id=560): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1f04, &(0x7f0000000400)={0x0, 0x78, 0x3cd0, 0x1, 0x220}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0xa4d1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7b000801"}, 0x0, 0x1, {}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x73b2abab56ff3d7e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYRES16=0x0], 0x74}}, 0x48008) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x80002, r7}, 0x38) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r7}, 0x64) syz_usbip_server_init(0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000300), 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r10 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f0000000000)=[0x1, 0x4]) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) 3.39894371s ago: executing program 0 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x6, @any, 0x5}, 0xe) read$FUSE(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 2.689884537s ago: executing program 2 (id=562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x6, @any, 0x5}, 0xe) read$FUSE(r3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 2.419824339s ago: executing program 1 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="9110bb000000000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5d831, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=@flushsa={0x21c, 0x1c, 0x2, 0x70bd28, 0x25dfdbff, {0x33}, [@sec_ctx={0x2d, 0x8, {0x29, 0x8, 0x1, 0x6, 0x21, "a31d3fccbcbb27cf49f46f816c07ba07a5295758e31603bcab17a8b846ffa11f6a"}}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in=@multicast2, 0xa, 0x9, 0x9}}, @coaddr={0x14, 0xe, @in6=@loopback}, @sa_dir={0x5, 0x21, 0x1}, @replay_esn_val={0x3c, 0x17, {0x8, 0x101, 0x70bd25, 0x70bd25, 0x70bd27, 0x4, [0x5, 0x400, 0xfffffff8, 0xff, 0x9d5, 0x1, 0x8, 0x5]}}, @srcaddr={0x14, 0xd, @in6=@private0}, @algo_crypt={0x112, 0x2, {{'ctr(twofish)\x00'}, 0x650, "30dfe1a39d21e771ff021b678c5f0d303a3ed0ab0268aefeb9f736d8df6773a9523ae3f31f24044fa18923386e3113c6846ddd90965bf2b5e2daf309de82d8ee8ffc8c0790088a570e3d1a8defef33956884b4e836889f8a5d4df5d8655698aca1d9a952084183de9863a30349615c86e5a862771eb9e39aecca6338dca32605035311e667e6ce5dc46cc250463ef52632595ec440259711dc7de5e98fb210cb1ef84d73c25f0b13217a79b7939fb113db5fb9d47822aea0d3188094a9919752b974d0053c210ba38a54"}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@loopback, 0x2, 0x4, 0x7}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10000084}, 0x8000) r1 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000dc0)=[{0x9, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000740)=""/129, 0x81}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/58, 0x3a}, {&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000b00)=""/133, 0x85}, {&(0x7f0000000bc0)=""/206, 0xce}, {&(0x7f0000000cc0)=""/186, 0xba}]}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/82, 0x52}], 0x8, 0x4, 0x9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000f40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xc4, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6000}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf225}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) socket(0x10, 0x803, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x0, 0x0, 0x10000, 0x4000003, 0x4002004c2, 0x7, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8000000000008d], 0x54000, 0x2c08c6}) 2.254834603s ago: executing program 0 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r2, 0x2}) 2.25449854s ago: executing program 1 (id=565): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10400, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb70}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$CDROMPLAYMSF(r7, 0x5303, &(0x7f0000000c40)={0x7a, 0xfa, 0x6, 0x80, 0x40, 0x8}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.128129482s ago: executing program 0 (id=567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x6, @any, 0x5}, 0xe) read$FUSE(r3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 1.644573642s ago: executing program 2 (id=570): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008006}, 0xab8a4bbc278eee69) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000340)={r0, 0x8, 0x0, 0x3}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000480)="c74424000d000000c7442402bb580000c7442406000000000f011424b805000000b9130000000f01c1c74424000000c0fec7442402c0e492ae8d442406009700000000011c240f01c32e0f350f01dfb805000000b940f300000f01c165f000774d67660fc7b10a0066baf80cb858ea808aef66bafc0ced", 0xfffffffffffffd62}], 0x1, 0x78, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2c8402, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESOCT=r4]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r6, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2800) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000280)={0x19, 0x73, &(0x7f0000000200)="eaed336d72b03c36757f087528d91b02bf8a9c707bae16b2ff6999ce72201b13ea4b69acacecd3e6b61e9df590ce66fdc3fdaefcfa3daf37320542d3cc8ddf348b6b1d694e393f13af330a2012b49f9d1d99d51bc4f467b7f4f960adb2ed65a20df0ad51826e42b0fc506511fa479e85acc874"}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0xe84, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfe, 0xfe, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x10000000000, 0x2004cb, 0x4, 0xfffffffffffffe, 0xfdfffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x2, 0x200306}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x6dd88c200ed552e0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.499845856s ago: executing program 2 (id=571): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(0x0, 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd0}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) 1.417328858s ago: executing program 1 (id=572): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@remote, 0x400000}) prctl$PR_SET_TIMERSLACK(0x1d, 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r0}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[], 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000c00)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @loopback}}, 0xd, 0x16e3}, &(0x7f00000002c0)=0x88) r4 = syz_io_uring_setup(0x1895, &(0x7f00000003c0)={0x0, 0x854d, 0x1000, 0x1, 0x2b9}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)="180c4552", 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) r10 = syz_io_uring_setup(0x7143, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000180)=0x0) io_uring_enter(r10, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r10, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r10, 0xed4, 0x3768, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_io_uring_submit(r5, r6, r7, &(0x7f00000008c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x21, r2, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=@phonet={0x23, 0x8, 0x17, 0x8}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="d6fa8ef8c1bd6e7cb9fc7f8802a0a0d12a87cceafe4c7fa646909090fc4c44a54d80f461d064918052f87eee6e78fe97e6e43950ee962111030ed16076103a607771767328151842bfddf5044a56165b276b7acc60739b044e548254169ce10474ae9ee6b8871b65f07022b6", 0x6c}, {0x0}], 0x2, &(0x7f0000000640)=[{0xc8, 0x101, 0x1000, "bd121167b4f3f7880f0e1e5bbf7ee4df55a7aa805951d4e17eb3642939488201ca5a4763cff072d53c3abc38b04dad6030ee747e429a2c115c6ea65a6065ab24843df732938f8a7e4cb649a68b01a30a209284489862ee8db1dee4e134edd24c13b423a1081ed184856222f88a48b632bfecc327b06887f357eb7ec870062cfc539dd530dcfcb47e68d38c53b21fe9281cae50fcd123efb9c5e818bbc3314a1d167d178528bb445cc7266c7aab7aeddf494acfc1a3c51c45c6"}, {0x58, 0x104, 0x5, "f5d18e68db3e45333ab263aefd4d584d90d4c9ae51379b763eb508747d01dfdd8639a88cdfc5a63206d16fe60ce7164e571fc7401a120284ecf3dbec3099953851724e6c6ff5a05404"}, {0xc4, 0x109, 0x1, "2db520ddb831a22515dc8fba45de553ffcaa2d94527488db066ecf4379d6a7f11a134069246aced1920ddf99037f2f66d3ea0e2dec28b0660ecd66a5c502cd805f68c6ed73731117c7123269dca673461719fab886dbb0b7a4033e6a86fc094ebde108e51519ce442802cd0d2b967d1bbf69188418384c35ecc073cfbed4bd72ede58d89d23a2289c8edd9d8c9bc223c396c2ea94b532e9661bccb9879898ba9ed477965f899e865dee031b3faf4b4b366d8825683c54ca0"}], 0x1e4}, 0x9, 0x810, 0x1, {0x0, r12}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 775.579161ms ago: executing program 0 (id=581): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@remote, 0x400000}) prctl$PR_SET_TIMERSLACK(0x1d, 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r0}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[], 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000c00)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @loopback}}, 0xd, 0x16e3}, &(0x7f00000002c0)=0x88) r4 = syz_io_uring_setup(0x1895, &(0x7f00000003c0)={0x0, 0x854d, 0x1000, 0x1, 0x2b9}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)="180c4552", 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) r10 = syz_io_uring_setup(0x7143, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000180)=0x0) io_uring_enter(r10, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r10, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r10, 0xed4, 0x3768, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_io_uring_submit(r5, r6, r7, &(0x7f00000008c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x21, r2, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=@phonet={0x23, 0x8, 0x17, 0x8}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="d6fa8ef8c1bd6e7cb9fc7f8802a0a0d12a87cceafe4c7fa646909090fc4c44a54d80f461d064918052f87eee6e78fe97e6e43950ee962111030ed16076103a607771767328151842bfddf5044a56165b276b7acc60739b044e548254169ce10474ae9ee6b8871b65f07022b6", 0x6c}, {0x0}], 0x2, &(0x7f0000000640)=[{0xc8, 0x101, 0x1000, "bd121167b4f3f7880f0e1e5bbf7ee4df55a7aa805951d4e17eb3642939488201ca5a4763cff072d53c3abc38b04dad6030ee747e429a2c115c6ea65a6065ab24843df732938f8a7e4cb649a68b01a30a209284489862ee8db1dee4e134edd24c13b423a1081ed184856222f88a48b632bfecc327b06887f357eb7ec870062cfc539dd530dcfcb47e68d38c53b21fe9281cae50fcd123efb9c5e818bbc3314a1d167d178528bb445cc7266c7aab7aeddf494acfc1a3c51c45c6"}, {0x58, 0x104, 0x5, "f5d18e68db3e45333ab263aefd4d584d90d4c9ae51379b763eb508747d01dfdd8639a88cdfc5a63206d16fe60ce7164e571fc7401a120284ecf3dbec3099953851724e6c6ff5a05404"}, {0xc4, 0x109, 0x1, "2db520ddb831a22515dc8fba45de553ffcaa2d94527488db066ecf4379d6a7f11a134069246aced1920ddf99037f2f66d3ea0e2dec28b0660ecd66a5c502cd805f68c6ed73731117c7123269dca673461719fab886dbb0b7a4033e6a86fc094ebde108e51519ce442802cd0d2b967d1bbf69188418384c35ecc073cfbed4bd72ede58d89d23a2289c8edd9d8c9bc223c396c2ea94b532e9661bccb9879898ba9ed477965f899e865dee031b3faf4b4b366d8825683c54ca0"}], 0x1e4}, 0x9, 0x810, 0x1, {0x0, r12}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 774.096916ms ago: executing program 1 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01020000aaaac0e086b457aaaaaa121000"], 0x1d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x400006, 0x3, 0xfffffffe}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x800, 0xfffffffd}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 404.277183ms ago: executing program 3 (id=575): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e21, @remote}, 0x10) setns(0xc9, 0x20000000) r0 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 319.613718ms ago: executing program 3 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000003c0), 0x0, 0x6c00c2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="dd58de9033b2b8c15cec839fda5186c75186057b3622ade02a9a648a4eb8377e5939e3de7e4e426e8f4081042b6bcf554a69303e0e5282b0d33a25e1eef19d4afe1f4a0eee721be6c59bd0d08c76f2ebf1bf5d80aad546647e5bef58bb128504becf0d955a747e9ca6e7aad34d85d35b", &(0x7f0000000180)=""/35, &(0x7f00000001c0)="cf885cbe4b39652722839f1274d736d3c55818bdb0d94610fdc5c6acda6e97d5cd32f8c63b823b2702a3c46337d4af6dc7a8d80af9e48c35435df40f6e74df0a11d0313d6383035f50da7fe1dcdbc48b64b71df3ce6d9547a697ca7f72c803de5e6e4d236c7ffad385fd260e2d94cd7d1453734e18876c01ef7162b01e5e3e8cb4af4c3c1b0e9cc9e2e7a8cf412d1de840ac5396b755c2c9822d1ee69f0bd06ed58d423c7ad614b6770d5e5f17cee8f2ea6a2bc4", &(0x7f0000000300)="e5c83dbf54d4024468dabe0832a2ea4277af21664b57354e7c843bebcefd33183710289860f658b1178c554ff6b3080c7d1b9f1d93d0ed4dca13ee4997af5a910969d72a19947085acaa835719c6019d509be5ef0c5603b8fdce6aa4b848ef1840feef460586d1113a4334a79fc825c90ab2498946e64ad5515dd8e505e54a9d72782492d5172233eecc1d38ca5ed62a8c74eef55a272a00", 0x8000, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r4, 0x1, 0x9, &(0x7f0000000000)="67a06cad", 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xf, 0xffe0}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x90, '\x00', 0xf9b, 0x120, 0xfe, 0xd34}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x401, 0x80, 0xd, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x0, 0xe, 0xc4f, 0x5}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r7, &(0x7f0000000180), 0x1000) 199.508256ms ago: executing program 3 (id=577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vcsu(&(0x7f0000000040), 0x2ab6, 0x80200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 197.850943ms ago: executing program 3 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000003c0), 0x0, 0x6c00c2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="dd58de9033b2b8c15cec839fda5186c75186057b3622ade02a9a648a4eb8377e5939e3de7e4e426e8f4081042b6bcf554a69303e0e5282b0d33a25e1eef19d4afe1f4a0eee721be6c59bd0d08c76f2ebf1bf5d80aad546647e5bef58bb128504becf0d955a747e9ca6e7aad34d85d35b", &(0x7f0000000180)=""/35, &(0x7f00000001c0)="cf885cbe4b39652722839f1274d736d3c55818bdb0d94610fdc5c6acda6e97d5cd32f8c63b823b2702a3c46337d4af6dc7a8d80af9e48c35435df40f6e74df0a11d0313d6383035f50da7fe1dcdbc48b64b71df3ce6d9547a697ca7f72c803de5e6e4d236c7ffad385fd260e2d94cd7d1453734e18876c01ef7162b01e5e3e8cb4af4c3c1b0e9cc9e2e7a8cf412d1de840ac5396b755c2c9822d1ee69f0bd06ed58d423c7ad614b6770d5e5f17cee8f2ea6a2bc4", &(0x7f0000000300)="e5c83dbf54d4024468dabe0832a2ea4277af21664b57354e7c843bebcefd33183710289860f658b1178c554ff6b3080c7d1b9f1d93d0ed4dca13ee4997af5a910969d72a19947085acaa835719c6019d509be5ef0c5603b8fdce6aa4b848ef1840feef460586d1113a4334a79fc825c90ab2498946e64ad5515dd8e505e54a9d72782492d5172233eecc1d38ca5ed62a8c74eef55a272a00", 0x8000, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r4, 0x1, 0x9, &(0x7f0000000000)="67a06cad", 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xf, 0xffe0}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x90, '\x00', 0xf9b, 0x120, 0xfe, 0xd34}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x401, 0x80, 0xd, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x0, 0xe, 0xc4f, 0x5}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r7, &(0x7f0000000180), 0x1000) 39.208714ms ago: executing program 0 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vcsu(&(0x7f0000000040), 0x2ab6, 0x80200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d00402c00003be97c0e25aa6fdc66b5000000bf9c8c38e189b10e47f4ed9d8c786ce38d0f2bb9a08b7278281c41eee3573d4fcc4885d292fb491c5248bc1437056de6e0c11af2d1f5db161a65f9aebbf88fd61e44ac7b5d50a710068a126b333baa721aa406113a4fb507ae82a7583aa18788d694bc7aa8f82295ad31650665f03dbb0882204c36d6c97f6066517c0453d80b2501171c898c7eb80761b31856b42a9697c9f242a577cec4ddcd6a376cfba323"], 0x10}}, 0x0) 38.977682ms ago: executing program 3 (id=579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xfebb) 38.701108ms ago: executing program 3 (id=580): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r1, &(0x7f0000000140)='off\n', 0x4) write(r1, &(0x7f0000000180)='on', 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x6b09, 0x1, 0x0, "adbdeec74e9e4aeabde9eefaff7a78cda902552f08cefca462dda36c7451f8e5"}) 0s ago: executing program 0 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setresuid(0x0, r3, r3) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r3, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x10f, 0xf2, 0x6, 0x4, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xe}, {0xfff3}, {0xb, 0xc}}, [{0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000002040)={'geneve0\x00', @ifru_data=0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000880), 0xf504, r4}, 0x38) kernel console output (not intermixed with test programs): ng state [ 39.744706][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.745060][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.754352][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.754428][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.811634][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.831121][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.845950][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.845994][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.867223][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.869138][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.869214][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.913209][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.925736][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.925781][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.937286][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.937331][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.131529][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.135679][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.170643][ T5739] veth0_vlan: entered promiscuous mode [ 40.178209][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.178579][ T5739] veth1_vlan: entered promiscuous mode [ 40.190854][ T5748] veth0_vlan: entered promiscuous mode [ 40.198681][ T5748] veth1_vlan: entered promiscuous mode [ 40.225271][ T5740] veth0_vlan: entered promiscuous mode [ 40.226289][ T5739] veth0_macvtap: entered promiscuous mode [ 40.231628][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.232801][ T5739] veth1_macvtap: entered promiscuous mode [ 40.240967][ T5740] veth1_vlan: entered promiscuous mode [ 40.242641][ T5748] veth0_macvtap: entered promiscuous mode [ 40.244864][ T5748] veth1_macvtap: entered promiscuous mode [ 40.251059][ T5752] Bluetooth: hci2: command tx timeout [ 40.251183][ T5752] Bluetooth: hci1: command tx timeout [ 40.251241][ T5752] Bluetooth: hci3: command tx timeout [ 40.251292][ T5752] Bluetooth: hci0: command tx timeout [ 40.252817][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.255326][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.280798][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.286842][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.297855][ T5740] veth0_macvtap: entered promiscuous mode [ 40.308318][ T5740] veth1_macvtap: entered promiscuous mode [ 40.317282][ T5738] veth0_vlan: entered promiscuous mode [ 40.338377][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.342098][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.342110][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.344542][ T5738] veth1_vlan: entered promiscuous mode [ 40.351942][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.365109][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387111][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.387131][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.400775][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.400803][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.400822][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.406037][ T5738] veth0_macvtap: entered promiscuous mode [ 40.406338][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.406350][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.420598][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420752][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420776][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420794][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420811][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420835][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420852][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420869][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.421495][ T5738] veth1_macvtap: entered promiscuous mode [ 40.440332][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.442762][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.451328][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.454470][ T5739] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.457158][ T5739] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.457734][ T5739] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.460624][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.460635][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.475145][ T5739] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.524645][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.524665][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.569844][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.569871][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.569889][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.569907][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.582355][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.582366][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.642997][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.643011][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.668781][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.668797][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.039413][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.209388][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 41.212198][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 41.212224][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 41.213758][ T10] usb 5-1: config 4 has an invalid interface number: 251 but max is 0 [ 41.213772][ T10] usb 5-1: config 4 has no interface number 0 [ 41.213786][ T10] usb 5-1: config 4 interface 251 has no altsetting 0 [ 41.216432][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.216444][ T10] usb 5-1: Product: syz [ 41.216451][ T10] usb 5-1: Manufacturer: syz [ 41.216458][ T10] usb 5-1: SerialNumber: syz [ 41.443916][ T10] usb-storage 5-1:4.251: USB Mass Storage device detected [ 41.523013][ T10] usb 5-1: USB disconnect, device number 2 [ 41.785722][ T5919] tipc: Started in network mode [ 41.785737][ T5919] tipc: Node identity 4, cluster identity 4711 [ 41.785743][ T5919] tipc: Node number set to 4 [ 41.787215][ T5919] FAULT_INJECTION: forcing a failure. [ 41.787215][ T5919] name failslab, interval 1, probability 0, space 0, times 1 [ 41.787236][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 41.787248][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.787255][ T5919] Call Trace: [ 41.787259][ T5919] [ 41.787263][ T5919] dump_stack_lvl+0x100/0x190 [ 41.787281][ T5919] should_fail_ex.cold+0x5/0xa [ 41.787296][ T5919] should_failslab+0xc2/0x120 [ 41.787313][ T5919] __kmalloc_cache_noprof+0x91/0x6d0 [ 41.787325][ T5919] ? find_held_lock+0x2b/0x80 [ 41.787338][ T5919] ? tipc_conn_alloc+0x48/0x590 [ 41.787354][ T5919] tipc_conn_alloc+0x48/0x590 [ 41.787366][ T5919] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 41.787381][ T5919] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 41.787395][ T5919] ? net_generic+0xea/0x2a0 [ 41.787411][ T5919] tipc_group_create+0x4ab/0x660 [ 41.787426][ T5919] tipc_setsockopt+0x611/0xe30 [ 41.787444][ T5919] ? __pfx_tipc_setsockopt+0x10/0x10 [ 41.787459][ T5919] ? lock_acquire+0x1d1/0x380 [ 41.787475][ T5919] ? __fget_files+0x34/0x3d0 [ 41.787494][ T5919] ? __pfx_tipc_setsockopt+0x10/0x10 [ 41.787510][ T5919] do_sock_setsockopt+0xf3/0x1d0 [ 41.787526][ T5919] __sys_setsockopt+0x119/0x190 [ 41.787551][ T5919] __ia32_sys_setsockopt+0xbc/0x160 [ 41.787561][ T5919] ? __do_fast_syscall_32+0xb3/0x8b0 [ 41.787575][ T5919] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.787589][ T5919] __do_fast_syscall_32+0x13a/0x8b0 [ 41.787603][ T5919] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.787617][ T5919] do_fast_syscall_32+0x32/0x70 [ 41.787632][ T5919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.787647][ T5919] RIP: 0023:0xf707efec [ 41.787659][ T5919] Code: Unable to access opcode bytes at 0xf707efc2. [ 41.787664][ T5919] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 41.787675][ T5919] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000010f [ 41.787682][ T5919] RDX: 0000000000000087 RSI: 0000000080000440 RDI: 0000000000000010 [ 41.787688][ T5919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.787694][ T5919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.787700][ T5919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.787713][ T5919] [ 42.003670][ T5927] evm: overlay not supported [ 42.323523][ T5100] Bluetooth: hci2: command tx timeout [ 42.323581][ T5752] Bluetooth: hci1: command tx timeout [ 42.323629][ T5756] Bluetooth: hci3: command tx timeout [ 42.335005][ T5756] Bluetooth: hci0: command tx timeout [ 44.409887][ T5756] Bluetooth: hci1: command tx timeout [ 44.409916][ T5756] Bluetooth: hci3: command tx timeout [ 44.409928][ T5100] Bluetooth: hci2: command tx timeout [ 44.409980][ T5752] Bluetooth: hci0: command tx timeout [ 46.479742][ T5743] Bluetooth: hci2: command tx timeout [ 46.479768][ T5743] Bluetooth: hci0: command tx timeout [ 46.479780][ T5743] Bluetooth: hci3: command tx timeout [ 46.479793][ T5743] Bluetooth: hci1: command tx timeout [ 48.009442][ T6053] input: syz0 as /devices/virtual/input/input5 [ 48.016482][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 48.137587][ T6057] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.307005][ T6055] Zero length message leads to an empty skb [ 50.089258][ T6099] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 51.141345][ T6124] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 51.255506][ T6131] kvm: pic: non byte read [ 51.256423][ T6131] kvm: pic: non byte read [ 51.257312][ T6131] kvm: pic: non byte read [ 51.258397][ T6131] kvm: pic: non byte read [ 51.259423][ T6131] kvm: pic: non byte read [ 51.260488][ T6131] kvm: pic: non byte read [ 51.261656][ T6131] kvm: pic: non byte read [ 52.557178][ T1347] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.278496][ T6203] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 53.278524][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.285522][ T6203] vhci_hcd vhci_hcd.0: Device attached [ 53.292856][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 53.292871][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 53.292878][ T6203] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 53.292886][ T6203] iwpm_hello_cb: Unable to parse nlmsg [ 53.430317][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 53.449735][ T44] audit: type=1326 audit(1791052708.378:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.449778][ T44] audit: type=1326 audit(1791052708.388:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.450247][ T44] audit: type=1326 audit(1791052708.388:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.450328][ T44] audit: type=1326 audit(1791052708.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.450543][ T44] audit: type=1326 audit(1791052708.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.452610][ T44] audit: type=1326 audit(1791052708.388:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.452650][ T44] audit: type=1326 audit(1791052708.388:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.452682][ T44] audit: type=1326 audit(1791052708.388:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.452712][ T44] audit: type=1326 audit(1791052708.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.452759][ T44] audit: type=1326 audit(1791052708.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 53.522870][ T1138] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 53.533814][ T6238] i2c i2c-0: delete_device: Can't find device in list [ 53.564806][ T5826] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 53.721757][ T5826] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.722161][ T5826] usb 7-1: config 0 has no interfaces? [ 53.722178][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.723743][ T5826] usb 7-1: config 0 descriptor?? [ 53.987164][ T6208] bridge0: port 3(macvlan2) entered blocking state [ 53.987247][ T6208] bridge0: port 3(macvlan2) entered disabled state [ 53.987311][ T6208] macvlan2: entered allmulticast mode [ 53.987320][ T6208] bridge0: entered allmulticast mode [ 53.987357][ T6208] bridge0: entered promiscuous mode [ 53.994197][ T6208] macvlan2: left allmulticast mode [ 53.994218][ T6208] bridge0: left allmulticast mode [ 54.009182][ T5826] bridge0: left promiscuous mode [ 54.049405][ T1138] usb 41-1: device descriptor read/64, error -71 [ 54.067314][ T5826] usb 7-1: USB disconnect, device number 4 [ 54.069382][ T6211] vhci_hcd: connection closed [ 54.072309][ T5851] vhci_hcd vhci_hcd.2: stop threads [ 54.072501][ T5851] vhci_hcd vhci_hcd.2: release socket [ 54.073896][ T5851] vhci_hcd vhci_hcd.2: disconnect device [ 54.229595][ T1138] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 54.661307][ T6254] FAULT_INJECTION: forcing a failure. [ 54.661307][ T6254] name fail_futex, interval 1, probability 0, space 0, times 1 [ 54.661340][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 54.661360][ T6254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.661371][ T6254] Call Trace: [ 54.661377][ T6254] [ 54.661385][ T6254] dump_stack_lvl+0x100/0x190 [ 54.661432][ T6254] should_fail_ex.cold+0x5/0xa [ 54.661449][ T6254] get_futex_key+0x1d0/0x14f0 [ 54.661463][ T6254] ? __pfx_get_futex_key+0x10/0x10 [ 54.661476][ T6254] ? ___sys_sendmsg+0x127/0x1e0 [ 54.661493][ T6254] futex_wake+0xf4/0x5e0 [ 54.661507][ T6254] ? futex_wait+0x11e/0x370 [ 54.661522][ T6254] ? __pfx_futex_wake+0x10/0x10 [ 54.661539][ T6254] ? find_held_lock+0x2b/0x80 [ 54.661556][ T6254] do_futex+0x2b2/0x440 [ 54.661569][ T6254] ? __pfx_do_futex+0x10/0x10 [ 54.661582][ T6254] ? fput+0x7c/0x100 [ 54.661599][ T6254] __ia32_sys_futex_time32+0x2f4/0x470 [ 54.661615][ T6254] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 54.661634][ T6254] __do_fast_syscall_32+0x13a/0x8b0 [ 54.661649][ T6254] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.661671][ T6254] do_fast_syscall_32+0x32/0x70 [ 54.661694][ T6254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.661718][ T6254] RIP: 0023:0xf6feefec [ 54.661741][ T6254] Code: Unable to access opcode bytes at 0xf6feefc2. [ 54.661749][ T6254] RSP: 002b:00000000f53dd5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 54.661767][ T6254] RAX: ffffffffffffffda RBX: 00000000f73e4f8c RCX: 0000000000000081 [ 54.661778][ T6254] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 54.661789][ T6254] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 54.661798][ T6254] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.661805][ T6254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.661820][ T6254] [ 54.703291][ T6257] 9p: Bad value for 'rfdno' [ 55.660868][ T6284] FAULT_INJECTION: forcing a failure. [ 55.660868][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 55.660888][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 55.660901][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.660908][ T6284] Call Trace: [ 55.660912][ T6284] [ 55.660916][ T6284] dump_stack_lvl+0x100/0x190 [ 55.660935][ T6284] should_fail_ex.cold+0x5/0xa [ 55.660950][ T6284] should_failslab+0xc2/0x120 [ 55.660968][ T6284] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.660982][ T6284] ? dst_alloc+0x99/0x1a0 [ 55.661001][ T6284] dst_alloc+0x99/0x1a0 [ 55.661019][ T6284] rt_dst_alloc+0x35/0x3a0 [ 55.661032][ T6284] ip_route_input_slow+0x15b8/0x3fa0 [ 55.661050][ T6284] ? __pfx_ip_route_input_slow+0x10/0x10 [ 55.661065][ T6284] ? __lock_acquire+0x5c0/0x1f40 [ 55.661093][ T6284] ip_route_input_noref+0x122/0x2e0 [ 55.661109][ T6284] ? __pfx_ip_route_input_noref+0x10/0x10 [ 55.661126][ T6284] ? __pfx_ip_rcv_finish+0x10/0x10 [ 55.661142][ T6284] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 55.661160][ T6284] ip_rcv_finish_core+0x459/0x2c30 [ 55.661180][ T6284] ip_rcv+0x1c0/0x3c0 [ 55.661196][ T6284] ? __pfx_ip_rcv+0x10/0x10 [ 55.661211][ T6284] __netif_receive_skb_one_core+0x197/0x1e0 [ 55.661228][ T6284] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 55.661245][ T6284] ? lock_acquire+0x1d1/0x380 [ 55.661264][ T6284] __netif_receive_skb+0x1f/0x120 [ 55.661281][ T6284] netif_receive_skb+0x139/0x7d0 [ 55.661297][ T6284] ? __pfx_netif_receive_skb+0x10/0x10 [ 55.661317][ T6284] tun_rx_batched.isra.0+0x3f6/0x750 [ 55.661335][ T6284] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 55.661360][ T6284] ? tun_get_user+0x1e1e/0x3cc0 [ 55.661379][ T6284] tun_get_user+0x1f53/0x3cc0 [ 55.661401][ T6284] ? __lock_acquire+0x5c0/0x1f40 [ 55.661417][ T6284] ? __pfx_tun_get_user+0x10/0x10 [ 55.661435][ T6284] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 55.661451][ T6284] ? find_held_lock+0x2b/0x80 [ 55.661463][ T6284] ? tun_get+0x191/0x370 [ 55.661478][ T6284] ? tun_get+0x191/0x370 [ 55.661497][ T6284] tun_chr_write_iter+0xdc/0x200 [ 55.661508][ T6284] vfs_write+0x6af/0x1050 [ 55.661522][ T6284] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 55.661540][ T6284] ? __pfx_vfs_write+0x10/0x10 [ 55.661552][ T6284] ? find_held_lock+0x2b/0x80 [ 55.661572][ T6284] ksys_write+0x12a/0x250 [ 55.661585][ T6284] ? __pfx_ksys_write+0x10/0x10 [ 55.661602][ T6284] do_int80_emulation+0x166/0x650 [ 55.661618][ T6284] asm_int80_emulation+0x1a/0x20 [ 55.661630][ T6284] RIP: 0023:0xf71075ab [ 55.661639][ T6284] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 55.661649][ T6284] RSP: 002b:00000000f53bd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 55.661661][ T6284] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000680 [ 55.661668][ T6284] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 55.661674][ T6284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.661680][ T6284] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.661686][ T6284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.661699][ T6284] [ 57.311608][ T6314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'. [ 57.830928][ T6325] FAULT_INJECTION: forcing a failure. [ 57.830928][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.830949][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 57.830961][ T6325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.830968][ T6325] Call Trace: [ 57.830972][ T6325] [ 57.830977][ T6325] dump_stack_lvl+0x100/0x190 [ 57.831008][ T6325] should_fail_ex.cold+0x5/0xa [ 57.831023][ T6325] __kvm_read_guest_page+0x186/0x250 [ 57.831038][ T6325] kvm_fetch_guest_virt+0x10d/0x180 [ 57.831054][ T6325] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 57.831069][ T6325] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 57.831082][ T6325] ? __lock_acquire+0x5c0/0x1f40 [ 57.831103][ T6325] x86_decode_insn+0x3ca/0x6da0 [ 57.831123][ T6325] ? vmx_segment_cache_test_set+0x151/0x400 [ 57.831137][ T6325] ? __pfx_x86_decode_insn+0x10/0x10 [ 57.831153][ T6325] ? vmx_cache_reg+0x535/0x700 [ 57.831169][ T6325] ? init_decode_cache+0xd/0x2b0 [ 57.831184][ T6325] ? init_emulate_ctxt+0x3fb/0x6b0 [ 57.831196][ T6325] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 57.831208][ T6325] ? kvm_mmu_do_page_fault+0x3ba/0x6c0 [ 57.831225][ T6325] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 57.831244][ T6325] x86_emulate_instruction+0x1047/0x1d50 [ 57.831265][ T6325] kvm_mmu_page_fault+0xb9b/0x1ab0 [ 57.831280][ T6325] ? trace_rcu_utilization+0x14b/0x240 [ 57.831296][ T6325] ? rcu_qs+0x6/0xc0 [ 57.831308][ T6325] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 57.831318][ T6325] ? __lock_acquire+0x5c0/0x1f40 [ 57.831334][ T6325] ? vmx_vcpu_enter_exit+0x130/0x1e0 [ 57.831350][ T6325] ? rcu_is_watching+0x13/0xc0 [ 57.831361][ T6325] ? __vmx_complete_interrupts+0x129/0x570 [ 57.831374][ T6325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.831395][ T6325] handle_ept_violation+0x3a5/0x860 [ 57.831407][ T6325] ? __pfx_handle_ept_violation+0x10/0x10 [ 57.831420][ T6325] vmx_handle_exit+0x4c8/0x1d30 [ 57.831434][ T6325] vcpu_run+0x3725/0x61a0 [ 57.831445][ T6325] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 57.831465][ T6325] ? __pfx_vcpu_run+0x10/0x10 [ 57.831480][ T6325] ? complete_emulated_mmio+0x102/0x710 [ 57.831502][ T6325] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 57.831514][ T6325] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 57.831530][ T6325] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 57.831549][ T6325] kvm_vcpu_ioctl+0x730/0x1700 [ 57.831564][ T6325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.831579][ T6325] ? tomoyo_path_number_perm+0x188/0x580 [ 57.831592][ T6325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.831604][ T6325] ? get_pid_task+0x106/0x250 [ 57.831619][ T6325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.831636][ T6325] ? do_vfs_ioctl+0x226/0x13e0 [ 57.831649][ T6325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 57.831663][ T6325] ? __fget_files+0x34/0x3d0 [ 57.831679][ T6325] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 57.831694][ T6325] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 57.831709][ T6325] ? __fget_files+0x21f/0x3d0 [ 57.831725][ T6325] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 57.831740][ T6325] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 57.831754][ T6325] __do_fast_syscall_32+0x13a/0x8b0 [ 57.831768][ T6325] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.831782][ T6325] do_fast_syscall_32+0x32/0x70 [ 57.831797][ T6325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.831811][ T6325] RIP: 0023:0xf6fcefec [ 57.831830][ T6325] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 57.831837][ T6325] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 57.831854][ T6325] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 57.831864][ T6325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.831872][ T6325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.831881][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.831890][ T6325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.831912][ T6325] [ 57.960227][ T6330] FAULT_INJECTION: forcing a failure. [ 57.960227][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.960249][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.2.134 Not tainted syzkaller #0 PREEMPT(full) [ 57.960264][ T6330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.960273][ T6330] Call Trace: [ 57.960277][ T6330] [ 57.960283][ T6330] dump_stack_lvl+0x100/0x190 [ 57.960305][ T6330] should_fail_ex.cold+0x5/0xa [ 57.960321][ T6330] _copy_from_iter+0x1f4/0x1690 [ 57.960341][ T6330] ? kmalloc_reserve+0xf9/0x350 [ 57.960358][ T6330] ? __pfx__copy_from_iter+0x10/0x10 [ 57.960376][ T6330] ? __alloc_skb+0x4e9/0x710 [ 57.960393][ T6330] ? __alloc_skb+0x5b7/0x710 [ 57.960411][ T6330] ? __pfx___alloc_skb+0x10/0x10 [ 57.960429][ T6330] ? aa_sock_msg_perm+0x11e/0x200 [ 57.960447][ T6330] pfkey_sendmsg+0x1ce/0x840 [ 57.960463][ T6330] ____sys_sendmsg+0xa4d/0xbe0 [ 57.960476][ T6330] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 57.960490][ T6330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.960506][ T6330] ? plist_check_list+0x1b8/0x280 [ 57.960517][ T6330] ? plist_del+0x308/0x510 [ 57.960528][ T6330] ___sys_sendmsg+0x190/0x1e0 [ 57.960544][ T6330] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.960561][ T6330] ? futex_wake+0x220/0x5e0 [ 57.960581][ T6330] ? find_held_lock+0x2b/0x80 [ 57.960602][ T6330] __sys_sendmsg+0x160/0x210 [ 57.960614][ T6330] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.960631][ T6330] __do_fast_syscall_32+0x13a/0x8b0 [ 57.960646][ T6330] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.960660][ T6330] do_fast_syscall_32+0x32/0x70 [ 57.960675][ T6330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.960689][ T6330] RIP: 0023:0xf6fcefec [ 57.960703][ T6330] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 57.960708][ T6330] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 57.960728][ T6330] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800014c0 [ 57.960736][ T6330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.960743][ T6330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.960750][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.960758][ T6330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.960772][ T6330] [ 58.615331][ T6347] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 58.618039][ T6347] @0: renamed from bond_slave_1 (while UP) [ 58.720539][ T856] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.764563][ T6353] FAULT_INJECTION: forcing a failure. [ 58.764563][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.764584][ T6353] CPU: 2 UID: 0 PID: 6353 Comm: syz.0.143 Not tainted syzkaller #0 PREEMPT(full) [ 58.764596][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.764603][ T6353] Call Trace: [ 58.764607][ T6353] [ 58.764611][ T6353] dump_stack_lvl+0x100/0x190 [ 58.764631][ T6353] should_fail_ex.cold+0x5/0xa [ 58.764646][ T6353] _copy_from_iter+0x1f4/0x1690 [ 58.764665][ T6353] ? kmalloc_reserve+0xf9/0x350 [ 58.764680][ T6353] ? __pfx__copy_from_iter+0x10/0x10 [ 58.764696][ T6353] ? __alloc_skb+0x4e9/0x710 [ 58.764712][ T6353] ? __alloc_skb+0x5b7/0x710 [ 58.764728][ T6353] ? __pfx___alloc_skb+0x10/0x10 [ 58.764747][ T6353] ? aa_sock_msg_perm+0x11e/0x200 [ 58.764765][ T6353] pfkey_sendmsg+0x1ce/0x840 [ 58.764781][ T6353] ____sys_sendmsg+0xa4d/0xbe0 [ 58.764794][ T6353] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 58.764808][ T6353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.764835][ T6353] ___sys_sendmsg+0x190/0x1e0 [ 58.764852][ T6353] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.764868][ T6353] ? futex_wait+0x11e/0x370 [ 58.764888][ T6353] ? find_held_lock+0x2b/0x80 [ 58.764911][ T6353] __sys_sendmsg+0x160/0x210 [ 58.764923][ T6353] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.764942][ T6353] __do_fast_syscall_32+0x13a/0x8b0 [ 58.764957][ T6353] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.764972][ T6353] do_fast_syscall_32+0x32/0x70 [ 58.764986][ T6353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.765001][ T6353] RIP: 0023:0xf702efec [ 58.765014][ T6353] Code: Unable to access opcode bytes at 0xf702efc2. [ 58.765035][ T6353] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 58.765048][ T6353] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800014c0 [ 58.765056][ T6353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.765063][ T6353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.765069][ T6353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.765076][ T6353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.765091][ T6353] [ 59.334064][ T6376] 9p: Bad value for 'rfdno' [ 59.336290][ T6376] jffs2: notice: (6376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.856064][ T6405] jffs2: notice: (6405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.877531][ T6405] ======================================================= [ 59.877531][ T6405] WARNING: The mand mount option has been deprecated and [ 59.877531][ T6405] and is ignored by this kernel. Remove the mand [ 59.877531][ T6405] option from the mount to silence this warning. [ 59.877531][ T6405] ======================================================= [ 59.894860][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.165'. [ 60.292582][ T6421] process 'syz.2.170' launched './file2' with NULL argv: empty string added [ 60.326614][ T6423] FAULT_INJECTION: forcing a failure. [ 60.326614][ T6423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.326637][ T6423] CPU: 2 UID: 0 PID: 6423 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT(full) [ 60.326650][ T6423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.326657][ T6423] Call Trace: [ 60.326661][ T6423] [ 60.326666][ T6423] dump_stack_lvl+0x100/0x190 [ 60.326711][ T6423] should_fail_ex.cold+0x5/0xa [ 60.326729][ T6423] _copy_from_iter+0x1f4/0x1690 [ 60.326750][ T6423] ? kmalloc_reserve+0xf9/0x350 [ 60.326765][ T6423] ? __pfx__copy_from_iter+0x10/0x10 [ 60.326782][ T6423] ? __alloc_skb+0x4e9/0x710 [ 60.326798][ T6423] ? __alloc_skb+0x5b7/0x710 [ 60.326816][ T6423] ? __pfx___alloc_skb+0x10/0x10 [ 60.326835][ T6423] ? aa_sock_msg_perm+0x11e/0x200 [ 60.326853][ T6423] pfkey_sendmsg+0x1ce/0x840 [ 60.326869][ T6423] ____sys_sendmsg+0xa4d/0xbe0 [ 60.326882][ T6423] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 60.326896][ T6423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.326916][ T6423] ___sys_sendmsg+0x190/0x1e0 [ 60.326931][ T6423] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.326946][ T6423] ? futex_wait+0x11e/0x370 [ 60.326980][ T6423] ? find_held_lock+0x2b/0x80 [ 60.327004][ T6423] __sys_sendmsg+0x160/0x210 [ 60.327015][ T6423] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.327034][ T6423] __do_fast_syscall_32+0x13a/0x8b0 [ 60.327048][ T6423] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.327063][ T6423] do_fast_syscall_32+0x32/0x70 [ 60.327078][ T6423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.327094][ T6423] RIP: 0023:0xf6feefec [ 60.327107][ T6423] Code: Unable to access opcode bytes at 0xf6feefc2. [ 60.327112][ T6423] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 60.327123][ T6423] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800014c0 [ 60.327130][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.327137][ T6423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.327143][ T6423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.327149][ T6423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.327162][ T6423] [ 61.237391][ T6450] Bluetooth: MGMT ver 1.23 [ 61.238002][ T6450] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 62.491049][ T6478] binder: 6477:6478 ioctl c00c6f3e 800002c0 returned -22 [ 62.593428][ T6480] FAULT_INJECTION: forcing a failure. [ 62.593428][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 62.593462][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) [ 62.593484][ T6480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.593495][ T6480] Call Trace: [ 62.593502][ T6480] [ 62.593511][ T6480] dump_stack_lvl+0x100/0x190 [ 62.593542][ T6480] should_fail_ex.cold+0x5/0xa [ 62.593568][ T6480] should_failslab+0xc2/0x120 [ 62.593598][ T6480] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 62.593624][ T6480] ? __alloc_skb+0x5b7/0x710 [ 62.593654][ T6480] ? __alloc_skb+0x140/0x710 [ 62.593687][ T6480] __alloc_skb+0x140/0x710 [ 62.593715][ T6480] ? __alloc_skb+0x5b7/0x710 [ 62.593744][ T6480] ? __pfx___alloc_skb+0x10/0x10 [ 62.593782][ T6480] ? aa_sock_msg_perm+0x11e/0x200 [ 62.593814][ T6480] pfkey_sendmsg+0x161/0x840 [ 62.593844][ T6480] ____sys_sendmsg+0xa4d/0xbe0 [ 62.593867][ T6480] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 62.593893][ T6480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.593930][ T6480] ___sys_sendmsg+0x190/0x1e0 [ 62.593958][ T6480] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.593983][ T6480] ? futex_wait+0x11e/0x370 [ 62.594016][ T6480] ? find_held_lock+0x2b/0x80 [ 62.594054][ T6480] __sys_sendmsg+0x160/0x210 [ 62.594074][ T6480] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.594107][ T6480] __do_fast_syscall_32+0x13a/0x8b0 [ 62.594132][ T6480] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.594157][ T6480] do_fast_syscall_32+0x32/0x70 [ 62.594182][ T6480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.594218][ T6480] RIP: 0023:0xf707efec [ 62.594238][ T6480] Code: Unable to access opcode bytes at 0xf707efc2. [ 62.594247][ T6480] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 62.594268][ T6480] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800014c0 [ 62.594281][ T6480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.594292][ T6480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.594303][ T6480] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.594314][ T6480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.594338][ T6480] [ 63.314088][ T6498] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 63.846018][ T6514] kAFS: No cell specified [ 64.473354][ T6528] FAULT_INJECTION: forcing a failure. [ 64.473354][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 64.473384][ T6528] CPU: 3 UID: 0 PID: 6528 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) [ 64.473404][ T6528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.473414][ T6528] Call Trace: [ 64.473420][ T6528] [ 64.473427][ T6528] dump_stack_lvl+0x100/0x190 [ 64.473446][ T6528] should_fail_ex.cold+0x5/0xa [ 64.473461][ T6528] should_failslab+0xc2/0x120 [ 64.473478][ T6528] __kmalloc_noprof+0xfc/0x840 [ 64.473491][ T6528] ? __might_fault+0xc5/0x140 [ 64.473502][ T6528] ? bpf_uprobe_multi_link_fill_link_info+0x304/0x870 [ 64.473523][ T6528] bpf_uprobe_multi_link_fill_link_info+0x304/0x870 [ 64.473543][ T6528] ? __pfx_bpf_uprobe_multi_link_fill_link_info+0x10/0x10 [ 64.473566][ T6528] __sys_bpf+0x3589/0x4a30 [ 64.473591][ T6528] ? __pfx___sys_bpf+0x10/0x10 [ 64.473611][ T6528] ? lock_acquire+0x1d1/0x380 [ 64.473635][ T6528] ? get_pid_task+0x2a/0x250 [ 64.473656][ T6528] ? find_held_lock+0x2b/0x80 [ 64.473675][ T6528] ? get_pid_task+0xfc/0x250 [ 64.473687][ T6528] ? get_pid_task+0xfc/0x250 [ 64.473709][ T6528] ? proc_fail_nth_write+0x9f/0x220 [ 64.473725][ T6528] ? find_held_lock+0x2b/0x80 [ 64.473742][ T6528] ? ksys_write+0x190/0x250 [ 64.473760][ T6528] ? lock_acquire+0x1d1/0x380 [ 64.473787][ T6528] ? fput+0x7c/0x100 [ 64.473803][ T6528] ? __ia32_sys_bpf+0xcc/0x170 [ 64.473816][ T6528] __ia32_sys_bpf+0xcc/0x170 [ 64.473831][ T6528] ? __do_fast_syscall_32+0xb3/0x8b0 [ 64.473856][ T6528] __do_fast_syscall_32+0x13a/0x8b0 [ 64.473880][ T6528] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.473902][ T6528] do_fast_syscall_32+0x32/0x70 [ 64.473926][ T6528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.473948][ T6528] RIP: 0023:0xf6feefec [ 64.473964][ T6528] Code: Unable to access opcode bytes at 0xf6feefc2. [ 64.473969][ T6528] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 64.473980][ T6528] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000340 [ 64.473987][ T6528] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.473993][ T6528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.473999][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.474005][ T6528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.474018][ T6528] [ 65.209443][ T856] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.369961][ T856] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 65.369985][ T856] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 65.371358][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.371380][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.371393][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.372142][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.372163][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.372175][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.372927][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.372947][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.372960][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.373699][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.373728][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.373740][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.374457][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.374476][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.374488][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.375234][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.375254][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.375266][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.375984][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.376003][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.376016][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.376736][ T856] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.376755][ T856] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.376767][ T856] usb 8-1: config 0 interface 0 has no altsetting 0 [ 65.378590][ T856] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 65.378602][ T856] usb 8-1: Product: syz [ 65.378609][ T856] usb 8-1: Manufacturer: syz [ 65.378616][ T856] usb 8-1: SerialNumber: syz [ 65.383918][ T856] usb 8-1: config 0 descriptor?? [ 65.392979][ T856] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 65.632845][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.634357][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.703219][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.708606][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.777262][ T856] usb 8-1: USB disconnect, device number 5 [ 65.783365][ T856] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 65.829464][ T5851] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.829494][ T5851] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.829511][ T5851] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.829528][ T5851] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.882632][ T6558] FAULT_INJECTION: forcing a failure. [ 65.882632][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.882682][ T6558] CPU: 3 UID: 0 PID: 6558 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(full) [ 65.882701][ T6558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.882711][ T6558] Call Trace: [ 65.882718][ T6558] [ 65.882725][ T6558] dump_stack_lvl+0x100/0x190 [ 65.882752][ T6558] should_fail_ex.cold+0x5/0xa [ 65.882774][ T6558] _copy_from_user+0x2e/0xd0 [ 65.882801][ T6558] futex_parse_waitv+0xf2/0x510 [ 65.882818][ T6558] ? __pfx_futex_wake_mark+0x10/0x10 [ 65.882839][ T6558] ? __pfx_futex_parse_waitv+0x10/0x10 [ 65.882859][ T6558] ? __kmalloc_noprof+0x350/0x840 [ 65.882881][ T6558] ? __do_sys_futex_waitv+0x204/0x2b0 [ 65.882904][ T6558] __do_sys_futex_waitv+0x22c/0x2b0 [ 65.882919][ T6558] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 65.882944][ T6558] ? ksys_write+0x1ac/0x250 [ 65.882978][ T6558] ? __pfx_ksys_write+0x10/0x10 [ 65.883004][ T6558] __do_fast_syscall_32+0x13a/0x8b0 [ 65.883022][ T6558] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.883044][ T6558] do_fast_syscall_32+0x32/0x70 [ 65.883066][ T6558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.883087][ T6558] RIP: 0023:0xf6fcefec [ 65.883106][ T6558] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 65.883110][ T6558] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001c1 [ 65.883125][ T6558] RAX: ffffffffffffffda RBX: 0000000080001b00 RCX: 0000000000000001 [ 65.883136][ T6558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 65.883145][ T6558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.883155][ T6558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.883165][ T6558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.883186][ T6558] [ 65.955441][ T6562] FAULT_INJECTION: forcing a failure. [ 65.955441][ T6562] name failslab, interval 1, probability 0, space 0, times 0 [ 65.955464][ T6562] CPU: 3 UID: 0 PID: 6562 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT(full) [ 65.955477][ T6562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.955483][ T6562] Call Trace: [ 65.955487][ T6562] [ 65.955492][ T6562] dump_stack_lvl+0x100/0x190 [ 65.955512][ T6562] should_fail_ex.cold+0x5/0xa [ 65.955528][ T6562] should_failslab+0xc2/0x120 [ 65.955547][ T6562] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.955562][ T6562] ? rcu_read_lock_any_held+0x31/0x90 [ 65.955576][ T6562] ? do_getname+0x35/0x390 [ 65.955589][ T6562] do_getname+0x35/0x390 [ 65.955600][ T6562] do_sys_openat2+0xc7/0x1e0 [ 65.955619][ T6562] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.955638][ T6562] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.955659][ T6562] ? irqentry_exit+0x24d/0xa10 [ 65.955680][ T6562] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.955705][ T6562] __ia32_compat_sys_openat+0x12d/0x210 [ 65.955719][ T6562] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 65.955745][ T6562] do_int80_emulation+0x166/0x650 [ 65.955771][ T6562] asm_int80_emulation+0x1a/0x20 [ 65.955789][ T6562] RIP: 0023:0xf71075ab [ 65.955803][ T6562] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 65.955819][ T6562] RSP: 002b:00000000f53bd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 65.955833][ T6562] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53bd100 [ 65.955844][ T6562] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.955856][ T6562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.955866][ T6562] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.955876][ T6562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.955898][ T6562] [ 65.997954][ T6564] FAT-fs (nbd2): unable to read boot sector [ 66.569640][ T6553] Process accounting resumed [ 66.749775][ T6584] FAULT_INJECTION: forcing a failure. [ 66.749775][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 66.749796][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.3.228 Not tainted syzkaller #0 PREEMPT(full) [ 66.749808][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.749815][ T6584] Call Trace: [ 66.749819][ T6584] [ 66.749824][ T6584] dump_stack_lvl+0x100/0x190 [ 66.749843][ T6584] should_fail_ex.cold+0x5/0xa [ 66.749857][ T6584] should_failslab+0xc2/0x120 [ 66.749876][ T6584] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.749892][ T6584] ? rcu_read_lock_any_held+0x6a/0x90 [ 66.749910][ T6584] ? do_getname+0x35/0x390 [ 66.749923][ T6584] do_getname+0x35/0x390 [ 66.749935][ T6584] do_sys_openat2+0xc7/0x1e0 [ 66.749953][ T6584] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.749969][ T6584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.749988][ T6584] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 66.750002][ T6584] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 66.750017][ T6584] __ia32_compat_sys_openat+0x12d/0x210 [ 66.750029][ T6584] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 66.750045][ T6584] do_int80_emulation+0x166/0x650 [ 66.750061][ T6584] asm_int80_emulation+0x1a/0x20 [ 66.750074][ T6584] RIP: 0023:0xf71275ab [ 66.750084][ T6584] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 66.750096][ T6584] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 66.750108][ T6584] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100 [ 66.750115][ T6584] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.750122][ T6584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.750128][ T6584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.750134][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.750147][ T6584] [ 66.787976][ T6586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 67.099444][ T5744] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.147274][ T6596] wg0: entered allmulticast mode [ 67.256731][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 67.269866][ T5744] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.270679][ T5744] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.270692][ T5744] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.270701][ T5744] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.270731][ T5744] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.271892][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.271904][ T5744] usb 8-1: Product: syz [ 67.271911][ T5744] usb 8-1: Manufacturer: syz [ 67.276721][ T5744] cdc_wdm 8-1:1.0: skipping garbage [ 67.276732][ T5744] cdc_wdm 8-1:1.0: skipping garbage [ 67.279729][ T5744] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 67.279739][ T5744] cdc_wdm 8-1:1.0: Unknown control protocol [ 67.352152][ T6606] FAULT_INJECTION: forcing a failure. [ 67.352152][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 67.352173][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.1.238 Not tainted syzkaller #0 PREEMPT(full) [ 67.352191][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.352198][ T6606] Call Trace: [ 67.352203][ T6606] [ 67.352208][ T6606] dump_stack_lvl+0x100/0x190 [ 67.352227][ T6606] should_fail_ex.cold+0x5/0xa [ 67.352242][ T6606] should_failslab+0xc2/0x120 [ 67.352262][ T6606] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.352278][ T6606] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.352292][ T6606] ? do_getname+0x35/0x390 [ 67.352305][ T6606] do_getname+0x35/0x390 [ 67.352316][ T6606] do_sys_openat2+0xc7/0x1e0 [ 67.352336][ T6606] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.352354][ T6606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.352372][ T6606] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 67.352385][ T6606] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 67.352400][ T6606] __ia32_compat_sys_openat+0x12d/0x210 [ 67.352412][ T6606] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 67.352429][ T6606] do_int80_emulation+0x166/0x650 [ 67.352445][ T6606] asm_int80_emulation+0x1a/0x20 [ 67.352457][ T6606] RIP: 0023:0xf71b75ab [ 67.352468][ T6606] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 67.352480][ T6606] RSP: 002b:00000000f546d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 67.352491][ T6606] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f546d100 [ 67.352498][ T6606] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.352505][ T6606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.352511][ T6606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.352518][ T6606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.352531][ T6606] [ 67.476435][ T9] usb 8-1: USB disconnect, device number 6 [ 67.919583][ T5532] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.976243][ T6618] FAULT_INJECTION: forcing a failure. [ 67.976243][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.976263][ T6618] CPU: 3 UID: 0 PID: 6618 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT(full) [ 67.976276][ T6618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.976283][ T6618] Call Trace: [ 67.976287][ T6618] [ 67.976291][ T6618] dump_stack_lvl+0x100/0x190 [ 67.976309][ T6618] should_fail_ex.cold+0x5/0xa [ 67.976324][ T6618] _copy_from_user+0x2e/0xd0 [ 67.976341][ T6618] get_compat_msghdr+0xb3/0x480 [ 67.976356][ T6618] ? __pfx_get_compat_msghdr+0x10/0x10 [ 67.976375][ T6618] ___sys_sendmsg+0x1b6/0x1e0 [ 67.976390][ T6618] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.976410][ T6618] ? find_held_lock+0x2b/0x80 [ 67.976431][ T6618] __sys_sendmsg+0x160/0x210 [ 67.976443][ T6618] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.976457][ T6618] ? __pfx_ksys_write+0x10/0x10 [ 67.976487][ T6618] __do_fast_syscall_32+0x13a/0x8b0 [ 67.976503][ T6618] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.976517][ T6618] do_fast_syscall_32+0x32/0x70 [ 67.976532][ T6618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.976545][ T6618] RIP: 0023:0xf702efec [ 67.976559][ T6618] Code: Unable to access opcode bytes at 0xf702efc2. [ 67.976564][ T6618] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 67.976574][ T6618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 67.976581][ T6618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.976587][ T6618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.976593][ T6618] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.976599][ T6618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.976612][ T6618] [ 68.070287][ T5532] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.071191][ T5532] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.071205][ T5532] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.071214][ T5532] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.071233][ T5532] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.073969][ T5532] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.073983][ T5532] usb 8-1: Product: syz [ 68.073990][ T5532] usb 8-1: Manufacturer: syz [ 68.078154][ T5532] cdc_wdm 8-1:1.0: skipping garbage [ 68.078163][ T5532] cdc_wdm 8-1:1.0: skipping garbage [ 68.080681][ T5532] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 68.080691][ T5532] cdc_wdm 8-1:1.0: Unknown control protocol [ 68.444817][ T6589] overlay: ./file0 is not a directory [ 68.656508][ T6641] FAULT_INJECTION: forcing a failure. [ 68.656508][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 68.656538][ T6641] CPU: 3 UID: 0 PID: 6641 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT(full) [ 68.656558][ T6641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.656569][ T6641] Call Trace: [ 68.656576][ T6641] [ 68.656584][ T6641] dump_stack_lvl+0x100/0x190 [ 68.656615][ T6641] should_fail_ex.cold+0x5/0xa [ 68.656640][ T6641] should_failslab+0xc2/0x120 [ 68.656668][ T6641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.656694][ T6641] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.656719][ T6641] ? do_getname+0x35/0x390 [ 68.656739][ T6641] do_getname+0x35/0x390 [ 68.656757][ T6641] do_sys_openat2+0xc7/0x1e0 [ 68.656784][ T6641] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.656812][ T6641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.656841][ T6641] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 68.656875][ T6641] __ia32_compat_sys_openat+0x12d/0x210 [ 68.656896][ T6641] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 68.656925][ T6641] do_int80_emulation+0x166/0x650 [ 68.656953][ T6641] asm_int80_emulation+0x1a/0x20 [ 68.656971][ T6641] RIP: 0023:0xf71075ab [ 68.656986][ T6641] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 68.657003][ T6641] RSP: 002b:00000000f53bd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 68.657022][ T6641] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53bd100 [ 68.657035][ T6641] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.657046][ T6641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.657056][ T6641] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.657067][ T6641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.657089][ T6641] [ 69.085421][ T6651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 70.192601][ T6668] FAULT_INJECTION: forcing a failure. [ 70.192601][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.192623][ T6668] CPU: 3 UID: 0 PID: 6668 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(full) [ 70.192637][ T6668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.192643][ T6668] Call Trace: [ 70.192647][ T6668] [ 70.192652][ T6668] dump_stack_lvl+0x100/0x190 [ 70.192672][ T6668] should_fail_ex.cold+0x5/0xa [ 70.192687][ T6668] strncpy_from_user+0x3b/0x2d0 [ 70.192719][ T6668] do_getname+0x78/0x390 [ 70.192732][ T6668] do_sys_openat2+0xc7/0x1e0 [ 70.192750][ T6668] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.192767][ T6668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.192785][ T6668] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 70.192798][ T6668] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 70.192813][ T6668] __ia32_compat_sys_openat+0x12d/0x210 [ 70.192825][ T6668] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 70.192842][ T6668] do_int80_emulation+0x166/0x650 [ 70.192858][ T6668] asm_int80_emulation+0x1a/0x20 [ 70.192869][ T6668] RIP: 0023:0xf71075ab [ 70.192879][ T6668] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 70.192891][ T6668] RSP: 002b:00000000f53bd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 70.192903][ T6668] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53bd100 [ 70.192911][ T6668] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.192917][ T6668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.192923][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.192930][ T6668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.192943][ T6668] [ 70.445290][ T5532] usb 8-1: USB disconnect, device number 7 [ 70.518908][ T6687] FAULT_INJECTION: forcing a failure. [ 70.518908][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.518929][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.3.269 Not tainted syzkaller #0 PREEMPT(full) [ 70.518941][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.518947][ T6687] Call Trace: [ 70.518951][ T6687] [ 70.518956][ T6687] dump_stack_lvl+0x100/0x190 [ 70.518974][ T6687] should_fail_ex.cold+0x5/0xa [ 70.518989][ T6687] _copy_to_user+0x32/0xd0 [ 70.519007][ T6687] simple_read_from_buffer+0xcb/0x170 [ 70.519023][ T6687] proc_fail_nth_read+0x1af/0x230 [ 70.519037][ T6687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.519051][ T6687] ? rw_verify_area+0xce/0x6d0 [ 70.519063][ T6687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.519076][ T6687] vfs_read+0x1e4/0xb40 [ 70.519089][ T6687] ? lock_acquire+0x1d1/0x380 [ 70.519105][ T6687] ? __fget_files+0x34/0x3d0 [ 70.519119][ T6687] ? __pfx_vfs_read+0x10/0x10 [ 70.519131][ T6687] ? find_held_lock+0x2b/0x80 [ 70.519144][ T6687] ? __fget_files+0x215/0x3d0 [ 70.519160][ T6687] ? __fget_files+0x21f/0x3d0 [ 70.519177][ T6687] ksys_read+0x12a/0x250 [ 70.519203][ T6687] ? __pfx_ksys_read+0x10/0x10 [ 70.519221][ T6687] do_int80_emulation+0x166/0x650 [ 70.519238][ T6687] asm_int80_emulation+0x1a/0x20 [ 70.519249][ T6687] RIP: 0023:0xf71275ab [ 70.519263][ T6687] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 70.519273][ T6687] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.519284][ T6687] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dd5d0 [ 70.519291][ T6687] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 70.519297][ T6687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.519303][ T6687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.519309][ T6687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.519323][ T6687] [ 70.546518][ T6688] kvm [6686]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000400 [ 70.900109][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.900148][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.095371][ T30] cfg80211: failed to load regulatory.db [ 71.114138][ T6705] FAULT_INJECTION: forcing a failure. [ 71.114138][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 71.114172][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 71.114185][ T6705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.114191][ T6705] Call Trace: [ 71.114195][ T6705] [ 71.114200][ T6705] dump_stack_lvl+0x100/0x190 [ 71.114219][ T6705] should_fail_ex.cold+0x5/0xa [ 71.114235][ T6705] should_failslab+0xc2/0x120 [ 71.114254][ T6705] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.114273][ T6705] ? rcu_read_lock_any_held+0x6a/0x90 [ 71.114287][ T6705] ? do_getname+0x35/0x390 [ 71.114301][ T6705] do_getname+0x35/0x390 [ 71.114326][ T6705] do_sys_openat2+0xc7/0x1e0 [ 71.114347][ T6705] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.114364][ T6705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.114383][ T6705] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 71.114400][ T6705] __ia32_compat_sys_openat+0x12d/0x210 [ 71.114413][ T6705] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 71.114430][ T6705] do_int80_emulation+0x166/0x650 [ 71.114446][ T6705] asm_int80_emulation+0x1a/0x20 [ 71.114457][ T6705] RIP: 0023:0xf71275ab [ 71.114467][ T6705] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 71.114478][ T6705] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 71.114490][ T6705] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100 [ 71.114498][ T6705] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.114505][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.114511][ T6705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.114518][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.114531][ T6705] [ 71.974070][ T6716] FAULT_INJECTION: forcing a failure. [ 71.974070][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.974093][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(full) [ 71.974105][ T6716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.974112][ T6716] Call Trace: [ 71.974116][ T6716] [ 71.974120][ T6716] dump_stack_lvl+0x100/0x190 [ 71.974139][ T6716] should_fail_ex.cold+0x5/0xa [ 71.974163][ T6716] _copy_from_iter+0x1f4/0x1690 [ 71.974184][ T6716] ? __pfx__copy_from_iter+0x10/0x10 [ 71.974200][ T6716] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.974218][ T6716] ? lock_acquire+0x1d1/0x380 [ 71.974237][ T6716] copy_page_from_iter+0x238/0x300 [ 71.974255][ T6716] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 71.974277][ T6716] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 71.974296][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 71.974317][ T6716] ? aa_file_perm+0x197/0x14d0 [ 71.974332][ T6716] ? find_held_lock+0x2b/0x80 [ 71.974346][ T6716] tun_get_user+0x1674/0x3cc0 [ 71.974368][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 71.974383][ T6716] ? __pfx_tun_get_user+0x10/0x10 [ 71.974401][ T6716] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 71.974417][ T6716] ? find_held_lock+0x2b/0x80 [ 71.974429][ T6716] ? tun_get+0x191/0x370 [ 71.974444][ T6716] ? tun_get+0x191/0x370 [ 71.974463][ T6716] tun_chr_write_iter+0xdc/0x200 [ 71.974474][ T6716] vfs_write+0x6af/0x1050 [ 71.974487][ T6716] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 71.974506][ T6716] ? __pfx_vfs_write+0x10/0x10 [ 71.974518][ T6716] ? find_held_lock+0x2b/0x80 [ 71.974538][ T6716] ksys_write+0x12a/0x250 [ 71.974551][ T6716] ? __pfx_ksys_write+0x10/0x10 [ 71.974568][ T6716] do_int80_emulation+0x166/0x650 [ 71.974585][ T6716] asm_int80_emulation+0x1a/0x20 [ 71.974596][ T6716] RIP: 0023:0xf71275ab [ 71.974605][ T6716] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 71.974615][ T6716] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 71.974627][ T6716] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000640 [ 71.974654][ T6716] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 71.974660][ T6716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.974666][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.974673][ T6716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.974686][ T6716] [ 72.314207][ T6729] FAULT_INJECTION: forcing a failure. [ 72.314207][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 72.314229][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(full) [ 72.314241][ T6729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.314248][ T6729] Call Trace: [ 72.314252][ T6729] [ 72.314256][ T6729] dump_stack_lvl+0x100/0x190 [ 72.314276][ T6729] should_fail_ex.cold+0x5/0xa [ 72.314293][ T6729] should_failslab+0xc2/0x120 [ 72.314312][ T6729] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.314327][ T6729] ? rcu_read_lock_any_held+0x6a/0x90 [ 72.314347][ T6729] ? do_getname+0x35/0x390 [ 72.314360][ T6729] do_getname+0x35/0x390 [ 72.314371][ T6729] do_sys_openat2+0xc7/0x1e0 [ 72.314390][ T6729] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.314408][ T6729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.314428][ T6729] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 72.314444][ T6729] __ia32_compat_sys_openat+0x12d/0x210 [ 72.314456][ T6729] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 72.314472][ T6729] do_int80_emulation+0x166/0x650 [ 72.314489][ T6729] asm_int80_emulation+0x1a/0x20 [ 72.314500][ T6729] RIP: 0023:0xf71275ab [ 72.314510][ T6729] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.314521][ T6729] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 72.314534][ T6729] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100 [ 72.314541][ T6729] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.314548][ T6729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.314555][ T6729] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.314562][ T6729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.314575][ T6729] [ 72.612875][ T6743] 9p: Bad value for 'rfdno' [ 72.613237][ T6743] bpf: Bad value for 'mode' [ 73.096486][ T6754] FAULT_INJECTION: forcing a failure. [ 73.096486][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 73.096507][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 73.096520][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.096526][ T6754] Call Trace: [ 73.096531][ T6754] [ 73.096536][ T6754] dump_stack_lvl+0x100/0x190 [ 73.096556][ T6754] should_fail_ex.cold+0x5/0xa [ 73.096572][ T6754] should_failslab+0xc2/0x120 [ 73.096592][ T6754] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.096607][ T6754] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.096622][ T6754] ? do_getname+0x35/0x390 [ 73.096636][ T6754] do_getname+0x35/0x390 [ 73.096647][ T6754] do_sys_openat2+0xc7/0x1e0 [ 73.096665][ T6754] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.096682][ T6754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.096700][ T6754] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 73.096713][ T6754] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 73.096728][ T6754] __ia32_compat_sys_openat+0x12d/0x210 [ 73.096740][ T6754] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.096757][ T6754] do_int80_emulation+0x166/0x650 [ 73.096773][ T6754] asm_int80_emulation+0x1a/0x20 [ 73.096784][ T6754] RIP: 0023:0xf71275ab [ 73.096794][ T6754] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 73.096806][ T6754] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 73.096823][ T6754] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100 [ 73.096830][ T6754] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.096838][ T6754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.096845][ T6754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.096852][ T6754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.096867][ T6754] [ 73.155576][ T6758] tmpfs: Bad value for 'mpol' [ 73.355002][ T6769] FAULT_INJECTION: forcing a failure. [ 73.355002][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 73.355022][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 73.355035][ T6769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.355042][ T6769] Call Trace: [ 73.355046][ T6769] [ 73.355051][ T6769] dump_stack_lvl+0x100/0x190 [ 73.355070][ T6769] should_fail_ex.cold+0x5/0xa [ 73.355086][ T6769] should_failslab+0xc2/0x120 [ 73.355104][ T6769] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 73.355120][ T6769] ? find_held_lock+0x2b/0x80 [ 73.355135][ T6769] ? sock_alloc_inode+0x26/0x2c0 [ 73.355153][ T6769] ? __pfx_sock_alloc_inode+0x10/0x10 [ 73.355168][ T6769] sock_alloc_inode+0x26/0x2c0 [ 73.355182][ T6769] ? __pfx_sock_alloc_inode+0x10/0x10 [ 73.355195][ T6769] alloc_inode+0x68/0x250 [ 73.355208][ T6769] sock_alloc+0x44/0x280 [ 73.355220][ T6769] ? security_socket_create+0x7f/0x250 [ 73.355240][ T6769] __sock_create+0xc2/0x860 [ 73.355256][ T6769] __sys_socket+0x14d/0x260 [ 73.355270][ T6769] ? fput+0x7c/0x100 [ 73.355286][ T6769] ? __pfx___sys_socket+0x10/0x10 [ 73.355300][ T6769] ? ksys_write+0x1ac/0x250 [ 73.355313][ T6769] ? __pfx_ksys_write+0x10/0x10 [ 73.355329][ T6769] __ia32_sys_socket+0x72/0xb0 [ 73.355343][ T6769] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.355357][ T6769] __do_fast_syscall_32+0x13a/0x8b0 [ 73.355374][ T6769] do_fast_syscall_32+0x32/0x70 [ 73.355389][ T6769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.355403][ T6769] RIP: 0023:0xf6feefec [ 73.355416][ T6769] Code: Unable to access opcode bytes at 0xf6feefc2. [ 73.355421][ T6769] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 73.355434][ T6769] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 73.355441][ T6769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.355448][ T6769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.355454][ T6769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.355460][ T6769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.355473][ T6769] [ 73.355585][ T6769] socket: no more sockets [ 73.771445][ T6785] FAULT_INJECTION: forcing a failure. [ 73.771445][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 73.771466][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.0.304 Not tainted syzkaller #0 PREEMPT(full) [ 73.771479][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.771486][ T6785] Call Trace: [ 73.771490][ T6785] [ 73.771495][ T6785] dump_stack_lvl+0x100/0x190 [ 73.771514][ T6785] should_fail_ex.cold+0x5/0xa [ 73.771528][ T6785] should_failslab+0xc2/0x120 [ 73.771547][ T6785] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.771563][ T6785] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.771578][ T6785] ? do_getname+0x35/0x390 [ 73.771590][ T6785] do_getname+0x35/0x390 [ 73.771602][ T6785] do_sys_openat2+0xc7/0x1e0 [ 73.771619][ T6785] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.771636][ T6785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.771668][ T6785] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 73.771685][ T6785] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 73.771706][ T6785] __ia32_compat_sys_openat+0x12d/0x210 [ 73.771725][ T6785] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.771751][ T6785] do_int80_emulation+0x166/0x650 [ 73.771775][ T6785] asm_int80_emulation+0x1a/0x20 [ 73.771793][ T6785] RIP: 0023:0xf71675ab [ 73.771807][ T6785] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 73.771820][ T6785] RSP: 002b:00000000f541d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 73.771831][ T6785] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541d100 [ 73.771838][ T6785] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.771845][ T6785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.771851][ T6785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.771858][ T6785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.771871][ T6785] [ 74.274061][ T6810] xt_MASQUERADE: bad rangesize 29 [ 74.309702][ T6815] FAULT_INJECTION: forcing a failure. [ 74.309702][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 74.309770][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.1.316 Not tainted syzkaller #0 PREEMPT(full) [ 74.309784][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.309790][ T6815] Call Trace: [ 74.309794][ T6815] [ 74.309799][ T6815] dump_stack_lvl+0x100/0x190 [ 74.309818][ T6815] should_fail_ex.cold+0x5/0xa [ 74.309832][ T6815] should_failslab+0xc2/0x120 [ 74.309849][ T6815] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 74.309864][ T6815] ? __alloc_skb+0x5b7/0x710 [ 74.309880][ T6815] ? __alloc_skb+0x140/0x710 [ 74.309899][ T6815] __alloc_skb+0x140/0x710 [ 74.309915][ T6815] ? __alloc_skb+0x5b7/0x710 [ 74.309931][ T6815] ? __pfx___alloc_skb+0x10/0x10 [ 74.309948][ T6815] ? process_measurement+0x1f4/0x2350 [ 74.309967][ T6815] alloc_skb_with_frags+0xdd/0x760 [ 74.309982][ T6815] sock_alloc_send_pskb+0x801/0x980 [ 74.310003][ T6815] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 74.310019][ T6815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.310036][ T6815] ? is_bpf_text_address+0x8a/0x1a0 [ 74.310056][ T6815] l2cap_sock_alloc_skb_cb+0xc3/0x500 [ 74.310070][ T6815] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 74.310085][ T6815] ? rcu_is_watching+0x13/0xc0 [ 74.310097][ T6815] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 74.310112][ T6815] l2cap_chan_send+0x745/0x2d60 [ 74.310128][ T6815] ? l2cap_sock_sendmsg+0x3d4/0x4b0 [ 74.310141][ T6815] ? mark_held_locks+0x40/0x70 [ 74.310159][ T6815] ? trace_contention_end+0x190/0x1a0 [ 74.310170][ T6815] ? __pfx_l2cap_chan_send+0x10/0x10 [ 74.310190][ T6815] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 74.310208][ T6815] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 74.310224][ T6815] l2cap_sock_sendmsg+0x3e7/0x4b0 [ 74.310237][ T6815] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 74.310252][ T6815] ? apparmor_socket_sendmsg+0x165/0x280 [ 74.310271][ T6815] __sys_sendto+0x48b/0x4e0 [ 74.310287][ T6815] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 74.310301][ T6815] ? __pfx___sys_sendto+0x10/0x10 [ 74.310321][ T6815] ? lock_acquire+0x1d1/0x380 [ 74.310344][ T6815] __ia32_compat_sys_socketcall+0x59a/0x770 [ 74.310360][ T6815] ? __fget_files+0x21f/0x3d0 [ 74.310373][ T6815] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 74.310390][ T6815] ? fput+0x7c/0x100 [ 74.310410][ T6815] do_int80_emulation+0x166/0x650 [ 74.310426][ T6815] asm_int80_emulation+0x1a/0x20 [ 74.310437][ T6815] RIP: 0023:0xf71b75ab [ 74.310446][ T6815] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 74.310457][ T6815] RSP: 002b:00000000f546c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 74.310468][ T6815] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f546c3f4 [ 74.310474][ T6815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.310481][ T6815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.310486][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.310493][ T6815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.310505][ T6815] [ 75.341659][ T6836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.325'. [ 75.665866][ T6847] FAULT_INJECTION: forcing a failure. [ 75.665866][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.665886][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.2.328 Not tainted syzkaller #0 PREEMPT(full) [ 75.665898][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.665905][ T6847] Call Trace: [ 75.665909][ T6847] [ 75.665913][ T6847] dump_stack_lvl+0x100/0x190 [ 75.665932][ T6847] should_fail_ex.cold+0x5/0xa [ 75.665947][ T6847] _copy_to_user+0x32/0xd0 [ 75.665964][ T6847] simple_read_from_buffer+0xcb/0x170 [ 75.665980][ T6847] proc_fail_nth_read+0x1af/0x230 [ 75.665994][ T6847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.666008][ T6847] ? rw_verify_area+0xce/0x6d0 [ 75.666019][ T6847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.666032][ T6847] vfs_read+0x1e4/0xb40 [ 75.666045][ T6847] ? lock_acquire+0x1d1/0x380 [ 75.666062][ T6847] ? __fget_files+0x34/0x3d0 [ 75.666075][ T6847] ? __pfx_vfs_read+0x10/0x10 [ 75.666087][ T6847] ? find_held_lock+0x2b/0x80 [ 75.666100][ T6847] ? __fget_files+0x215/0x3d0 [ 75.666116][ T6847] ? __fget_files+0x21f/0x3d0 [ 75.666133][ T6847] ksys_read+0x12a/0x250 [ 75.666146][ T6847] ? __pfx_ksys_read+0x10/0x10 [ 75.666168][ T6847] do_int80_emulation+0x166/0x650 [ 75.666184][ T6847] asm_int80_emulation+0x1a/0x20 [ 75.666195][ T6847] RIP: 0023:0xf71075ab [ 75.666204][ T6847] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 75.666215][ T6847] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.666226][ T6847] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53bd5d0 [ 75.666233][ T6847] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 75.666239][ T6847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.666245][ T6847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.666251][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.666264][ T6847] [ 76.078722][ T6854] FAULT_INJECTION: forcing a failure. [ 76.078722][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.078743][ T6854] CPU: 3 UID: 0 PID: 6854 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(full) [ 76.078756][ T6854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.078762][ T6854] Call Trace: [ 76.078766][ T6854] [ 76.078771][ T6854] dump_stack_lvl+0x100/0x190 [ 76.078789][ T6854] should_fail_ex.cold+0x5/0xa [ 76.078804][ T6854] _copy_to_user+0x32/0xd0 [ 76.078821][ T6854] simple_read_from_buffer+0xcb/0x170 [ 76.078837][ T6854] proc_fail_nth_read+0x1af/0x230 [ 76.078851][ T6854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.078865][ T6854] ? rw_verify_area+0xce/0x6d0 [ 76.078877][ T6854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.078890][ T6854] vfs_read+0x1e4/0xb40 [ 76.078903][ T6854] ? lock_acquire+0x1d1/0x380 [ 76.078920][ T6854] ? __fget_files+0x34/0x3d0 [ 76.078934][ T6854] ? __pfx_vfs_read+0x10/0x10 [ 76.078946][ T6854] ? find_held_lock+0x2b/0x80 [ 76.078959][ T6854] ? __fget_files+0x215/0x3d0 [ 76.078975][ T6854] ? __fget_files+0x21f/0x3d0 [ 76.078993][ T6854] ksys_read+0x12a/0x250 [ 76.079017][ T6854] ? __pfx_ksys_read+0x10/0x10 [ 76.079036][ T6854] do_int80_emulation+0x166/0x650 [ 76.079052][ T6854] asm_int80_emulation+0x1a/0x20 [ 76.079064][ T6854] RIP: 0023:0xf71b75ab [ 76.079073][ T6854] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 76.079083][ T6854] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 76.079094][ T6854] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f546d5d0 [ 76.079101][ T6854] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 76.079107][ T6854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.079113][ T6854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.079119][ T6854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.079133][ T6854] [ 77.143673][ T6876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.339'. [ 77.144156][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 77.779436][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 77.939382][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 77.942069][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 77.943080][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 77.943098][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 77.943117][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 77.943130][ T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 77.943142][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 77.945215][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 77.945227][ T9] usb 8-1: Product: syz [ 77.945234][ T9] usb 8-1: Manufacturer: syz [ 77.945241][ T9] usb 8-1: SerialNumber: syz [ 77.946503][ T9] usb 8-1: config 0 descriptor?? [ 77.947849][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 77.982080][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.259752][ T6899] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 78.262655][ T9] usb 8-1: USB disconnect, device number 12 [ 78.262722][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 78.263604][ T6909] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 78.267137][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 80.891202][ T7013] FAULT_INJECTION: forcing a failure. [ 80.891202][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 80.891223][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 80.891236][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.891242][ T7013] Call Trace: [ 80.891246][ T7013] [ 80.891256][ T7013] dump_stack_lvl+0x100/0x190 [ 80.891274][ T7013] should_fail_ex.cold+0x5/0xa [ 80.891289][ T7013] should_failslab+0xc2/0x120 [ 80.891305][ T7013] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.891320][ T7013] ? do_epoll_ctl_file+0x237d/0x36e0 [ 80.891339][ T7013] do_epoll_ctl_file+0x237d/0x36e0 [ 80.891360][ T7013] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 80.891377][ T7013] ? lock_acquire+0x1d1/0x380 [ 80.891393][ T7013] ? __fget_files+0x34/0x3d0 [ 80.891407][ T7013] ? find_held_lock+0x2b/0x80 [ 80.891421][ T7013] ? __fget_files+0x215/0x3d0 [ 80.891436][ T7013] ? __fget_files+0x21f/0x3d0 [ 80.891453][ T7013] ? do_epoll_ctl+0xfd/0x1a0 [ 80.891469][ T7013] do_epoll_ctl+0xfd/0x1a0 [ 80.891486][ T7013] ? __pfx_do_epoll_ctl+0x10/0x10 [ 80.891507][ T7013] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 80.891524][ T7013] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 80.891541][ T7013] ? ksys_write+0x1ac/0x250 [ 80.891554][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 80.891570][ T7013] __do_fast_syscall_32+0x13a/0x8b0 [ 80.891584][ T7013] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.891599][ T7013] do_fast_syscall_32+0x32/0x70 [ 80.891613][ T7013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.891627][ T7013] RIP: 0023:0xf6feefec [ 80.891640][ T7013] Code: Unable to access opcode bytes at 0xf6feefc2. [ 80.891645][ T7013] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 80.891656][ T7013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 80.891663][ T7013] RDX: 0000000000000004 RSI: 0000000080000040 RDI: 0000000000000000 [ 80.891669][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.891675][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.891681][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.891694][ T7013] [ 82.722268][ T30] libceph: connect (1)[c::]:6789 error -101 [ 82.722447][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 82.726141][ T7054] ceph: No mds server is up or the cluster is laggy [ 83.551970][ T7078] FAULT_INJECTION: forcing a failure. [ 83.551970][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 83.551994][ T7078] CPU: 3 UID: 0 PID: 7078 Comm: syz.2.413 Not tainted syzkaller #0 PREEMPT(full) [ 83.552010][ T7078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.552017][ T7078] Call Trace: [ 83.552021][ T7078] [ 83.552026][ T7078] dump_stack_lvl+0x100/0x190 [ 83.552047][ T7078] should_fail_ex.cold+0x5/0xa [ 83.552063][ T7078] should_failslab+0xc2/0x120 [ 83.552083][ T7078] kmem_cache_alloc_noprof+0x92/0x6a0 [ 83.552099][ T7078] ? fdb_create+0x22f/0x1920 [ 83.552120][ T7078] fdb_create+0x22f/0x1920 [ 83.552141][ T7078] ? br_fdb_find+0x77/0x240 [ 83.552162][ T7078] ? __pfx_fdb_create+0x10/0x10 [ 83.552184][ T7078] fdb_add_local+0x155/0x1c0 [ 83.552203][ T7078] br_fdb_changeaddr+0x19b/0x520 [ 83.552225][ T7078] br_device_event+0x866/0xa00 [ 83.552241][ T7078] ? __pfx_br_device_event+0x10/0x10 [ 83.552259][ T7078] ? lockdep_rtnl_is_held+0x26/0x40 [ 83.552278][ T7078] notifier_call_chain+0x99/0x3f0 [ 83.552314][ T7078] call_netdevice_notifiers_info+0xbe/0x110 [ 83.552333][ T7078] call_netdevice_notifiers+0x7c/0xb0 [ 83.552351][ T7078] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 83.552371][ T7078] dev_ifsioc+0x128e/0x1ee0 [ 83.552385][ T7078] ? __pfx_dev_ifsioc+0x10/0x10 [ 83.552395][ T7078] ? __pfx___mutex_lock+0x10/0x10 [ 83.552413][ T7078] ? lock_acquire+0x1d1/0x380 [ 83.552433][ T7078] ? dev_load+0x8e/0x240 [ 83.552444][ T7078] ? dev_load+0x8e/0x240 [ 83.552457][ T7078] dev_ioctl+0x342/0x1070 [ 83.552470][ T7078] sock_do_ioctl+0x1a0/0x280 [ 83.552486][ T7078] ? __pfx_sock_do_ioctl+0x10/0x10 [ 83.552502][ T7078] ? do_vfs_ioctl+0x226/0x13e0 [ 83.552515][ T7078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.552534][ T7078] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 83.552551][ T7078] ? unix_ioctl+0x9c/0x570 [ 83.552567][ T7078] compat_sock_ioctl+0x568/0x760 [ 83.552585][ T7078] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 83.552601][ T7078] ? hook_file_ioctl_common+0x140/0x440 [ 83.552625][ T7078] ? __fget_files+0x21f/0x3d0 [ 83.552644][ T7078] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 83.552663][ T7078] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 83.552680][ T7078] __do_fast_syscall_32+0x13a/0x8b0 [ 83.552698][ T7078] do_fast_syscall_32+0x32/0x70 [ 83.552714][ T7078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.552730][ T7078] RIP: 0023:0xf6fcefec [ 83.552744][ T7078] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 83.552749][ T7078] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 83.552762][ T7078] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008937 [ 83.552770][ T7078] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.552776][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.552783][ T7078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.552790][ T7078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.552805][ T7078] [ 84.439803][ T7101] syzkaller0: entered promiscuous mode [ 84.439817][ T7101] syzkaller0: entered allmulticast mode [ 84.443986][ T7101] tipc: Started in network mode [ 84.444004][ T7101] tipc: Node identity ee652b1eca36, cluster identity 4711 [ 84.444101][ T7101] tipc: Enabled bearer , priority 0 [ 84.445850][ T7101] tipc: Resetting bearer [ 84.511517][ T7106] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 85.262450][ T7100] tipc: Resetting bearer [ 85.272381][ T7100] tipc: Disabling bearer [ 85.308274][ T7120] FAULT_INJECTION: forcing a failure. [ 85.308274][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.308306][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 85.308328][ T7120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.308339][ T7120] Call Trace: [ 85.308346][ T7120] [ 85.308353][ T7120] dump_stack_lvl+0x100/0x190 [ 85.308384][ T7120] should_fail_ex.cold+0x5/0xa [ 85.308411][ T7120] _copy_from_iter+0x1f4/0x1690 [ 85.308446][ T7120] ? __pfx__copy_from_iter+0x10/0x10 [ 85.308474][ T7120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.308505][ T7120] ? lock_acquire+0x1d1/0x380 [ 85.308538][ T7120] copy_page_from_iter+0x238/0x300 [ 85.308570][ T7120] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 85.308609][ T7120] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 85.308657][ T7120] ? __lock_acquire+0x5c0/0x1f40 [ 85.308701][ T7120] ? aa_file_perm+0x197/0x14d0 [ 85.308725][ T7120] ? find_held_lock+0x2b/0x80 [ 85.308750][ T7120] tun_get_user+0x1674/0x3cc0 [ 85.308787][ T7120] ? __lock_acquire+0x5c0/0x1f40 [ 85.308813][ T7120] ? __pfx_tun_get_user+0x10/0x10 [ 85.308842][ T7120] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 85.308870][ T7120] ? find_held_lock+0x2b/0x80 [ 85.308890][ T7120] ? tun_get+0x191/0x370 [ 85.308915][ T7120] ? tun_get+0x191/0x370 [ 85.308946][ T7120] tun_chr_write_iter+0xdc/0x200 [ 85.308966][ T7120] vfs_write+0x6af/0x1050 [ 85.308989][ T7120] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 85.309019][ T7120] ? __pfx_vfs_write+0x10/0x10 [ 85.309038][ T7120] ? find_held_lock+0x2b/0x80 [ 85.309074][ T7120] ksys_write+0x12a/0x250 [ 85.309095][ T7120] ? __pfx_ksys_write+0x10/0x10 [ 85.309124][ T7120] do_int80_emulation+0x166/0x650 [ 85.309151][ T7120] asm_int80_emulation+0x1a/0x20 [ 85.309169][ T7120] RIP: 0023:0xf71b75ab [ 85.309183][ T7120] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 85.309200][ T7120] RSP: 002b:00000000f546d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 85.309219][ T7120] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000640 [ 85.309231][ T7120] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 85.309240][ T7120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.309250][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.309272][ T7120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.309296][ T7120] [ 85.591427][ T7133] binfmt_misc: register: failed to install interpreter ./file0 [ 85.741718][ T5826] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.809429][ T1138] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.959420][ T1138] usb 5-1: Using ep0 maxpacket: 32 [ 87.961017][ T1138] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.961985][ T1138] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 87.963747][ T1138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.963764][ T1138] usb 5-1: Product: ᐄ [ 87.963774][ T1138] usb 5-1: Manufacturer: Ќ [ 87.963785][ T1138] usb 5-1: SerialNumber: syz [ 88.320197][ T1141] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 88.320224][ T1141] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 88.320244][ T1141] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 88.320263][ T1141] sr 2:0:0:0: [sr0] tag#15 CDB: Rezero Unit/Rewind 01 00 00 00 00 00 00 [ 88.357182][ T1138] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 88.357199][ T1138] usb 5-1: 1:1 : sample bitwidth 181 in over sample bytes 1 [ 88.357211][ T1138] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 88.358035][ T1138] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.410578][ T1138] usb 5-1: USB disconnect, device number 8 [ 88.440007][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.371737][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 89.389785][ T7223] SQUASHFS error: Failed to read block 0x0: -5 [ 89.389812][ T7223] unable to read squashfs_super_block [ 89.393283][ T7223] FAULT_INJECTION: forcing a failure. [ 89.393283][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 89.393303][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.1.463 Not tainted syzkaller #0 PREEMPT(full) [ 89.393316][ T7223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.393323][ T7223] Call Trace: [ 89.393327][ T7223] [ 89.393332][ T7223] dump_stack_lvl+0x100/0x190 [ 89.393351][ T7223] should_fail_ex.cold+0x5/0xa [ 89.393366][ T7223] should_failslab+0xc2/0x120 [ 89.393385][ T7223] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.393399][ T7223] ? rcu_read_lock_any_held+0x6a/0x90 [ 89.393414][ T7223] ? do_getname+0x35/0x390 [ 89.393426][ T7223] do_getname+0x35/0x390 [ 89.393437][ T7223] do_sys_openat2+0xc7/0x1e0 [ 89.393456][ T7223] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.393473][ T7223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.393491][ T7223] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 89.393506][ T7223] __ia32_compat_sys_openat+0x12d/0x210 [ 89.393518][ T7223] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 89.393534][ T7223] do_int80_emulation+0x166/0x650 [ 89.393551][ T7223] asm_int80_emulation+0x1a/0x20 [ 89.393563][ T7223] RIP: 0023:0xf71b75ab [ 89.393573][ T7223] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 89.393584][ T7223] RSP: 002b:00000000f546d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 89.393598][ T7223] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f546d100 [ 89.393606][ T7223] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.393612][ T7223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.393618][ T7223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.393624][ T7223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.393637][ T7223] [ 89.757987][ T7237] FAULT_INJECTION: forcing a failure. [ 89.757987][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 89.758018][ T7237] CPU: 2 UID: 0 PID: 7237 Comm: syz.3.469 Not tainted syzkaller #0 PREEMPT(full) [ 89.758040][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.758052][ T7237] Call Trace: [ 89.758059][ T7237] [ 89.758067][ T7237] dump_stack_lvl+0x100/0x190 [ 89.758098][ T7237] should_fail_ex.cold+0x5/0xa [ 89.758123][ T7237] should_failslab+0xc2/0x120 [ 89.758152][ T7237] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 89.758175][ T7237] ? lock_acquire+0x1d1/0x380 [ 89.758203][ T7237] ? sock_alloc_inode+0x26/0x2c0 [ 89.758227][ T7237] ? __pfx_sock_alloc_inode+0x10/0x10 [ 89.758251][ T7237] sock_alloc_inode+0x26/0x2c0 [ 89.758273][ T7237] ? __pfx_sock_alloc_inode+0x10/0x10 [ 89.758294][ T7237] alloc_inode+0x68/0x250 [ 89.758313][ T7237] sock_alloc+0x44/0x280 [ 89.758332][ T7237] ? security_socket_create+0x7f/0x250 [ 89.758363][ T7237] __sock_create+0xc2/0x860 [ 89.758391][ T7237] __sys_socketpair+0x1e4/0x5b0 [ 89.758419][ T7237] ? __pfx___sys_socketpair+0x10/0x10 [ 89.758446][ T7237] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 89.758471][ T7237] ? __pfx_ksys_write+0x10/0x10 [ 89.758497][ T7237] __ia32_sys_socketpair+0x95/0x100 [ 89.758522][ T7237] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.758545][ T7237] __do_fast_syscall_32+0x13a/0x8b0 [ 89.758599][ T7237] do_fast_syscall_32+0x32/0x70 [ 89.758625][ T7237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.758651][ T7237] RIP: 0023:0xf6feefec [ 89.758676][ T7237] Code: Unable to access opcode bytes at 0xf6feefc2. [ 89.758685][ T7237] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 89.758703][ T7237] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 89.758716][ T7237] RDX: 0000000000000000 RSI: 0000000080000800 RDI: 0000000000000000 [ 89.758728][ T7237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.758739][ T7237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.758749][ T7237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.758773][ T7237] [ 89.758783][ T7237] socket: no more sockets [ 89.852480][ T7242] atomic_op ffff8880130d69e0 conn xmit_atomic 0000000000000000 [ 89.890766][ T1164] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.891774][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.894232][ T7242] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 89.990772][ T7251] FAULT_INJECTION: forcing a failure. [ 89.990772][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 89.990799][ T7251] CPU: 3 UID: 0 PID: 7251 Comm: syz.2.475 Not tainted syzkaller #0 PREEMPT(full) [ 89.990819][ T7251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.990829][ T7251] Call Trace: [ 89.990835][ T7251] [ 89.990842][ T7251] dump_stack_lvl+0x100/0x190 [ 89.990870][ T7251] should_fail_ex.cold+0x5/0xa [ 89.990907][ T7251] should_failslab+0xc2/0x120 [ 89.990933][ T7251] __kmalloc_cache_noprof+0x91/0x6d0 [ 89.990951][ T7251] ? __request_module+0x2b7/0x6a0 [ 89.990975][ T7251] __request_module+0x2b7/0x6a0 [ 89.990994][ T7251] ? __pfx___request_module+0x10/0x10 [ 89.991022][ T7251] ? find_held_lock+0x2b/0x80 [ 89.991043][ T7251] ? __might_fault+0xc5/0x140 [ 89.991061][ T7251] ? __might_fault+0xc5/0x140 [ 89.991087][ T7251] do_vcc_ioctl+0x1f5/0x730 [ 89.991113][ T7251] ? __pfx_vcc_compat_ioctl+0x10/0x10 [ 89.991137][ T7251] vcc_compat_ioctl+0x37/0x280 [ 89.991160][ T7251] ? __pfx_vcc_compat_ioctl+0x10/0x10 [ 89.991183][ T7251] compat_sock_ioctl+0x179/0x760 [ 89.991211][ T7251] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 89.991233][ T7251] ? hook_file_ioctl_common+0x140/0x440 [ 89.991259][ T7251] ? __fget_files+0x21f/0x3d0 [ 89.991287][ T7251] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 89.991313][ T7251] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 89.991337][ T7251] __do_fast_syscall_32+0x13a/0x8b0 [ 89.991361][ T7251] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.991385][ T7251] do_fast_syscall_32+0x32/0x70 [ 89.991409][ T7251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.991431][ T7251] RIP: 0023:0xf6fcefec [ 89.991450][ T7251] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 89.991459][ T7251] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 89.991478][ T7251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400261f3 [ 89.991490][ T7251] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.991500][ T7251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.991511][ T7251] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.991521][ T7251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.991544][ T7251] [ 90.721272][ T7264] FAULT_INJECTION: forcing a failure. [ 90.721272][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 90.721302][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 90.721322][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.721333][ T7264] Call Trace: [ 90.721340][ T7264] [ 90.721347][ T7264] dump_stack_lvl+0x100/0x190 [ 90.721374][ T7264] should_fail_ex.cold+0x5/0xa [ 90.721402][ T7264] should_failslab+0xc2/0x120 [ 90.721429][ T7264] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 90.721457][ T7264] ? __alloc_skb+0x5b7/0x710 [ 90.721482][ T7264] ? __alloc_skb+0x140/0x710 [ 90.721512][ T7264] __alloc_skb+0x140/0x710 [ 90.721536][ T7264] ? __alloc_skb+0x5b7/0x710 [ 90.721562][ T7264] ? __pfx___alloc_skb+0x10/0x10 [ 90.721588][ T7264] ? aa_sk_perm+0x389/0xab0 [ 90.721611][ T7264] netlink_alloc_large_skb+0x69/0x150 [ 90.721656][ T7264] netlink_sendmsg+0x680/0xda0 [ 90.721684][ T7264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.721701][ T7264] ? apparmor_socket_sendmsg+0x165/0x280 [ 90.721721][ T7264] ____sys_sendmsg+0xa4d/0xbe0 [ 90.721734][ T7264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.721751][ T7264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.721773][ T7264] ___sys_sendmsg+0x190/0x1e0 [ 90.721789][ T7264] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.721809][ T7264] ? find_held_lock+0x2b/0x80 [ 90.721830][ T7264] __sys_sendmsg+0x160/0x210 [ 90.721842][ T7264] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.721856][ T7264] ? __pfx_ksys_write+0x10/0x10 [ 90.721872][ T7264] __do_fast_syscall_32+0x13a/0x8b0 [ 90.721887][ T7264] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.721902][ T7264] do_fast_syscall_32+0x32/0x70 [ 90.721919][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.721939][ T7264] RIP: 0023:0xf6fcefec [ 90.721960][ T7264] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 90.721969][ T7264] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 90.721990][ T7264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 90.722002][ T7264] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.722013][ T7264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.722024][ T7264] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.722035][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.722058][ T7264] [ 91.919420][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 91.920675][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.240910][ T1138] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.389424][ T1138] usb 5-1: Using ep0 maxpacket: 32 [ 92.391092][ T1138] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.392044][ T1138] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 92.393924][ T1138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.393944][ T1138] usb 5-1: Product: ᐄ [ 92.393956][ T1138] usb 5-1: Manufacturer: Ќ [ 92.393968][ T1138] usb 5-1: SerialNumber: syz [ 93.050670][ T1141] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 93.050706][ T1141] sr 2:0:0:0: [sr0] tag#19 Sense Key : Illegal Request [current] [ 93.050733][ T1141] sr 2:0:0:0: [sr0] tag#19 Add. Sense: Invalid command operation code [ 93.050759][ T1141] sr 2:0:0:0: [sr0] tag#19 CDB: Rezero Unit/Rewind 01 00 00 00 00 00 00 [ 93.077260][ T1138] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 93.077278][ T1138] usb 5-1: 1:1 : sample bitwidth 181 in over sample bytes 1 [ 93.077290][ T1138] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 93.078991][ T1138] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 93.102384][ T1138] usb 5-1: USB disconnect, device number 10 [ 93.308018][ T7299] FAULT_INJECTION: forcing a failure. [ 93.308018][ T7299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 93.308054][ T7299] CPU: 3 UID: 0 PID: 7299 Comm: syz.1.491 Not tainted syzkaller #0 PREEMPT(full) [ 93.308079][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.308089][ T7299] Call Trace: [ 93.308096][ T7299] [ 93.308105][ T7299] dump_stack_lvl+0x100/0x190 [ 93.308136][ T7299] should_fail_ex.cold+0x5/0xa [ 93.308163][ T7299] get_futex_key+0x1d0/0x14f0 [ 93.308187][ T7299] ? __pfx_get_futex_key+0x10/0x10 [ 93.308211][ T7299] ? ___sys_sendmsg+0x127/0x1e0 [ 93.308241][ T7299] futex_wake+0xf4/0x5e0 [ 93.308265][ T7299] ? futex_wait+0x11e/0x370 [ 93.308294][ T7299] ? __pfx_futex_wake+0x10/0x10 [ 93.308323][ T7299] ? find_held_lock+0x2b/0x80 [ 93.308353][ T7299] do_futex+0x2b2/0x440 [ 93.308376][ T7299] ? __pfx_do_futex+0x10/0x10 [ 93.308400][ T7299] ? fput+0x7c/0x100 [ 93.308430][ T7299] __ia32_sys_futex_time32+0x2f4/0x470 [ 93.308459][ T7299] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 93.308495][ T7299] __do_fast_syscall_32+0x13a/0x8b0 [ 93.308526][ T7299] do_fast_syscall_32+0x32/0x70 [ 93.308552][ T7299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.308577][ T7299] RIP: 0023:0xf707efec [ 93.308605][ T7299] Code: Unable to access opcode bytes at 0xf707efc2. [ 93.308615][ T7299] RSP: 002b:00000000f546d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 93.308636][ T7299] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081 [ 93.308650][ T7299] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 93.308664][ T7299] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 93.308677][ T7299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.308690][ T7299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.308715][ T7299] [ 94.201808][ T7323] FAULT_INJECTION: forcing a failure. [ 94.201808][ T7323] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.201831][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.0.500 Not tainted syzkaller #0 PREEMPT(full) [ 94.201845][ T7323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.201852][ T7323] Call Trace: [ 94.201856][ T7323] [ 94.201860][ T7323] dump_stack_lvl+0x100/0x190 [ 94.201880][ T7323] should_fail_ex.cold+0x5/0xa [ 94.201896][ T7323] get_futex_key+0x1d0/0x14f0 [ 94.201910][ T7323] ? __pfx_get_futex_key+0x10/0x10 [ 94.201923][ T7323] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 94.201943][ T7323] futex_wake+0xf4/0x5e0 [ 94.201957][ T7323] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 94.201975][ T7323] ? rcu_is_watching+0x13/0xc0 [ 94.201987][ T7323] ? __pfx_futex_wake+0x10/0x10 [ 94.202002][ T7323] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 94.202020][ T7323] ? rcu_is_watching+0x13/0xc0 [ 94.202032][ T7323] ? trace_sched_exit_tp+0x120/0x160 [ 94.202046][ T7323] do_futex+0x2b2/0x440 [ 94.202058][ T7323] ? __pfx_do_futex+0x10/0x10 [ 94.202072][ T7323] ? fput+0x7c/0x100 [ 94.202094][ T7323] __ia32_sys_futex_time32+0x2f4/0x470 [ 94.202111][ T7323] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 94.202126][ T7323] ? rcu_is_watching+0x13/0xc0 [ 94.202143][ T7323] __do_fast_syscall_32+0x13a/0x8b0 [ 94.202161][ T7323] do_fast_syscall_32+0x32/0x70 [ 94.202177][ T7323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.202191][ T7323] RIP: 0023:0xf702efec [ 94.202204][ T7323] Code: Unable to access opcode bytes at 0xf702efc2. [ 94.202209][ T7323] RSP: 002b:00000000f541d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 94.202222][ T7323] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 94.202229][ T7323] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 94.202236][ T7323] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 94.202243][ T7323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.202250][ T7323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.202268][ T7323] [ 94.349835][ T7329] FAULT_INJECTION: forcing a failure. [ 94.349835][ T7329] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.349856][ T7329] CPU: 3 UID: 0 PID: 7329 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 94.349870][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.349877][ T7329] Call Trace: [ 94.349881][ T7329] [ 94.349886][ T7329] dump_stack_lvl+0x100/0x190 [ 94.349906][ T7329] should_fail_ex.cold+0x5/0xa [ 94.349921][ T7329] get_futex_key+0x1d0/0x14f0 [ 94.349936][ T7329] ? __pfx_get_futex_key+0x10/0x10 [ 94.349949][ T7329] ? ___sys_sendmsg+0x127/0x1e0 [ 94.349967][ T7329] futex_wake+0xf4/0x5e0 [ 94.349980][ T7329] ? futex_wait+0x11e/0x370 [ 94.349996][ T7329] ? __pfx_futex_wake+0x10/0x10 [ 94.350012][ T7329] ? find_held_lock+0x2b/0x80 [ 94.350029][ T7329] do_futex+0x2b2/0x440 [ 94.350042][ T7329] ? __pfx_do_futex+0x10/0x10 [ 94.350055][ T7329] ? fput+0x7c/0x100 [ 94.350073][ T7329] __ia32_sys_futex_time32+0x2f4/0x470 [ 94.350090][ T7329] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 94.350109][ T7329] __do_fast_syscall_32+0x13a/0x8b0 [ 94.350126][ T7329] do_fast_syscall_32+0x32/0x70 [ 94.350141][ T7329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.350159][ T7329] RIP: 0023:0xf702efec [ 94.350171][ T7329] Code: Unable to access opcode bytes at 0xf702efc2. [ 94.350177][ T7329] RSP: 002b:00000000f541d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 94.350189][ T7329] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 94.350196][ T7329] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 94.350203][ T7329] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 94.350210][ T7329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.350216][ T7329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.350229][ T7329] [ 94.599466][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 94.749474][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 94.751271][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.752428][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 94.754582][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.754602][ T10] usb 7-1: Product: ᐄ [ 94.754615][ T10] usb 7-1: Manufacturer: Ќ [ 94.754627][ T10] usb 7-1: SerialNumber: syz [ 95.130128][ T1141] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 95.130162][ T1141] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 95.130182][ T1141] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 95.130238][ T1141] sr 2:0:0:0: [sr0] tag#0 CDB: Rezero Unit/Rewind 01 00 00 00 00 00 00 [ 95.133105][ T10] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 95.133120][ T10] usb 7-1: 1:1 : sample bitwidth 181 in over sample bytes 1 [ 95.133131][ T10] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 95.135340][ T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.152977][ T10] usb 7-1: USB disconnect, device number 11 [ 95.364008][ T7341] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20001 [ 95.528105][ T7345] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 95.532692][ T7345] team0: Device wg2 is of different type [ 97.255082][ T7384] netlink: 6 bytes leftover after parsing attributes in process `syz.2.520'. [ 98.420769][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 98.427847][ T44] kauditd_printk_skb: 52 callbacks suppressed [ 98.427859][ T44] audit: type=1326 audit(1791052753.358:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.427933][ T44] audit: type=1326 audit(1791052753.358:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.433735][ T44] audit: type=1326 audit(1791052753.368:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.433981][ T44] audit: type=1326 audit(1791052753.368:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.435069][ T44] audit: type=1326 audit(1791052753.368:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.436417][ T44] audit: type=1326 audit(1791052753.368:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.438573][ T44] audit: type=1326 audit(1791052753.368:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.439135][ T44] audit: type=1326 audit(1791052753.368:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.441858][ T44] audit: type=1326 audit(1791052753.378:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.451186][ T44] audit: type=1326 audit(1791052753.388:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 98.616242][ T7420] i2c i2c-0: delete_device: Can't find device in list [ 101.749475][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 102.799281][ T7483] input: syz0 as /devices/virtual/input/input8 [ 102.812678][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 103.436565][ T7500] FAULT_INJECTION: forcing a failure. [ 103.436565][ T7500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 103.436587][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) [ 103.436601][ T7500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.436608][ T7500] Call Trace: [ 103.436612][ T7500] [ 103.436617][ T7500] dump_stack_lvl+0x100/0x190 [ 103.436638][ T7500] should_fail_ex.cold+0x5/0xa [ 103.436653][ T7500] get_futex_key+0x1d0/0x14f0 [ 103.436668][ T7500] ? __pfx_get_futex_key+0x10/0x10 [ 103.436686][ T7500] futex_wait_setup+0x91/0x540 [ 103.436706][ T7500] __futex_wait+0x19f/0x300 [ 103.436722][ T7500] ? __pfx___futex_wait+0x10/0x10 [ 103.436736][ T7500] ? __pfx_try_to_wake_up+0x10/0x10 [ 103.436752][ T7500] ? futex_hash+0x311/0x400 [ 103.436764][ T7500] ? __pfx_futex_wake_mark+0x10/0x10 [ 103.436780][ T7500] ? find_held_lock+0x2b/0x80 [ 103.436794][ T7500] ? futex_wake+0x4ea/0x5e0 [ 103.436812][ T7500] futex_wait+0xe6/0x370 [ 103.436828][ T7500] ? __pfx_futex_wait+0x10/0x10 [ 103.436846][ T7500] ? find_held_lock+0x2b/0x80 [ 103.436861][ T7500] do_futex+0x265/0x440 [ 103.436874][ T7500] ? __pfx_do_futex+0x10/0x10 [ 103.436887][ T7500] ? fput+0x7c/0x100 [ 103.436904][ T7500] __ia32_sys_futex_time32+0x2f4/0x470 [ 103.436920][ T7500] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 103.436940][ T7500] __do_fast_syscall_32+0x13a/0x8b0 [ 103.436955][ T7500] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.436969][ T7500] do_fast_syscall_32+0x32/0x70 [ 103.436985][ T7500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.436999][ T7500] RIP: 0023:0xf6feefec [ 103.437011][ T7500] Code: Unable to access opcode bytes at 0xf6feefc2. [ 103.437017][ T7500] RSP: 002b:00000000f53dd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 103.437029][ T7500] RAX: ffffffffffffffda RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 103.437037][ T7500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 103.437044][ T7500] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 103.437051][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.437058][ T7500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.437071][ T7500] [ 105.124050][ T7526] FAULT_INJECTION: forcing a failure. [ 105.124050][ T7526] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.124071][ T7526] CPU: 3 UID: 0 PID: 7526 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) [ 105.124084][ T7526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.124091][ T7526] Call Trace: [ 105.124096][ T7526] [ 105.124101][ T7526] dump_stack_lvl+0x100/0x190 [ 105.124121][ T7526] should_fail_ex.cold+0x5/0xa [ 105.124137][ T7526] get_futex_key+0x1d0/0x14f0 [ 105.124152][ T7526] ? __pfx_get_futex_key+0x10/0x10 [ 105.124169][ T7526] futex_wait_setup+0x91/0x540 [ 105.124189][ T7526] __futex_wait+0x19f/0x300 [ 105.124206][ T7526] ? __pfx___futex_wait+0x10/0x10 [ 105.124220][ T7526] ? __pfx_try_to_wake_up+0x10/0x10 [ 105.124236][ T7526] ? futex_hash+0x311/0x400 [ 105.124248][ T7526] ? __pfx_futex_wake_mark+0x10/0x10 [ 105.124265][ T7526] ? find_held_lock+0x2b/0x80 [ 105.124279][ T7526] ? futex_wake+0x4ea/0x5e0 [ 105.124296][ T7526] futex_wait+0xe6/0x370 [ 105.124312][ T7526] ? __pfx_futex_wait+0x10/0x10 [ 105.124331][ T7526] ? find_held_lock+0x2b/0x80 [ 105.124347][ T7526] do_futex+0x265/0x440 [ 105.124360][ T7526] ? __pfx_do_futex+0x10/0x10 [ 105.124373][ T7526] ? fput+0x7c/0x100 [ 105.124390][ T7526] __ia32_sys_futex_time32+0x2f4/0x470 [ 105.124406][ T7526] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 105.124425][ T7526] __do_fast_syscall_32+0x13a/0x8b0 [ 105.124439][ T7526] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.124454][ T7526] do_fast_syscall_32+0x32/0x70 [ 105.124469][ T7526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.124485][ T7526] RIP: 0023:0xf702efec [ 105.124496][ T7526] Code: Unable to access opcode bytes at 0xf702efc2. [ 105.124501][ T7526] RSP: 002b:00000000f541d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 105.124513][ T7526] RAX: ffffffffffffffda RBX: 00000000f7424f88 RCX: 0000000000000080 [ 105.124520][ T7526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 105.124527][ T7526] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 105.124534][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.124541][ T7526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.124554][ T7526] [ 105.197801][ T7527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 105.197817][ T7527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.198773][ T7527] vhci_hcd vhci_hcd.0: Device attached [ 105.204601][ T7530] vhci_hcd: connection closed [ 105.206358][ T13] vhci_hcd vhci_hcd.2: stop threads [ 105.206374][ T13] vhci_hcd vhci_hcd.2: release socket [ 105.206385][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 105.609409][ T5856] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 106.455641][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 106.812075][ T7576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 108.317506][ T7607] FAULT_INJECTION: forcing a failure. [ 108.317506][ T7607] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.317541][ T7607] CPU: 2 UID: 0 PID: 7607 Comm: syz.3.577 Not tainted syzkaller #0 PREEMPT(full) [ 108.317564][ T7607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.317576][ T7607] Call Trace: [ 108.317583][ T7607] [ 108.317592][ T7607] dump_stack_lvl+0x100/0x190 [ 108.317639][ T7607] should_fail_ex.cold+0x5/0xa [ 108.317667][ T7607] get_futex_key+0x1d0/0x14f0 [ 108.317693][ T7607] ? __pfx_get_futex_key+0x10/0x10 [ 108.317712][ T7607] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 108.317745][ T7607] ? __smp_call_single_queue+0x17e/0x450 [ 108.317778][ T7607] ? __pfx___smp_call_single_queue+0x10/0x10 [ 108.317815][ T7607] futex_wait_setup+0x91/0x540 [ 108.317848][ T7607] __futex_wait+0x19f/0x300 [ 108.317877][ T7607] ? __pfx___futex_wait+0x10/0x10 [ 108.317902][ T7607] ? __pfx_try_to_wake_up+0x10/0x10 [ 108.317931][ T7607] ? futex_hash+0x311/0x400 [ 108.317954][ T7607] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.317985][ T7607] ? find_held_lock+0x2b/0x80 [ 108.318009][ T7607] ? futex_wake+0x4ea/0x5e0 [ 108.318040][ T7607] futex_wait+0xe6/0x370 [ 108.318074][ T7607] ? __pfx_futex_wait+0x10/0x10 [ 108.318108][ T7607] ? find_held_lock+0x2b/0x80 [ 108.318138][ T7607] do_futex+0x265/0x440 [ 108.318165][ T7607] ? __pfx_do_futex+0x10/0x10 [ 108.318191][ T7607] ? fput+0x7c/0x100 [ 108.318224][ T7607] __ia32_sys_futex_time32+0x2f4/0x470 [ 108.318253][ T7607] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 108.318288][ T7607] __do_fast_syscall_32+0x13a/0x8b0 [ 108.318316][ T7607] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.318342][ T7607] do_fast_syscall_32+0x32/0x70 [ 108.318370][ T7607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.318396][ T7607] RIP: 0023:0xf6feefec [ 108.318417][ T7607] Code: Unable to access opcode bytes at 0xf6feefc2. [ 108.318427][ T7607] RSP: 002b:00000000f53dd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 108.318448][ T7607] RAX: ffffffffffffffda RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 108.318482][ T7607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 108.318501][ T7607] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 108.318515][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.318526][ T7607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.318547][ T7607] [ 108.599222][ C1] select_fallback_rq: 30 callbacks suppressed [ 108.599237][ C1] process 7591 (syz.1.574) no longer affine to cpu1 [ 108.617660][ T7591] process 7592 (syz.1.574) no longer affine to cpu1 [ 108.635324][ T7618] smpboot: CPU 1 is now offline [ 108.776000][ T7618] smpboot: CPU 3 is now offline [ 108.799350][ T7615] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 108.803172][ T20] ------------[ cut here ]------------ [ 108.803181][ T20] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 108.803189][ T20] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/20 [ 108.813596][ T20] Modules linked in: [ 108.814946][ T20] CPU: 0 UID: 0 PID: 20 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 108.817808][ T20] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.820941][ T20] Stopper: 0x0 <- 0x0 [ 108.822208][ T20] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 108.824188][ T20] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 108.830085][ T20] RSP: 0000:ffffc9000046fc30 EFLAGS: 00010046 [ 108.831996][ T20] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 108.834488][ T20] RDX: 0000000000000046 RSI: ffffffff8e36be9b RDI: ffffffff8c624080 [ 108.836789][ T20] RBP: ffffc9000046fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 108.839315][ T20] R10: ffff88802b23cbd8 R11: 00000019552b5000 R12: ffffffff9145bbe4 [ 108.841797][ T20] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 108.844299][ T20] FS: 0000000000000000(0000) GS:ffff888096952000(0000) knlGS:0000000000000000 [ 108.847063][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.849189][ T20] CR2: 000000008000f000 CR3: 000000004f0cf000 CR4: 0000000000352ef0 [ 108.851684][ T20] Call Trace: [ 108.852912][ T20] [ 108.854076][ T20] __schedule+0x1c69/0x6920 [ 108.855543][ T20] ? __lock_acquire+0x5c0/0x1f40 [ 108.857107][ T20] ? __pfx___schedule+0x10/0x10 [ 108.858685][ T20] ? find_held_lock+0x2b/0x80 [ 108.860164][ T20] ? schedule+0x225/0x2c0 [ 108.861535][ T20] schedule+0xdd/0x2c0 [ 108.862845][ T20] smpboot_thread_fn+0x8a0/0xab0 [ 108.864422][ T20] ? kthread+0x13a/0x450 [ 108.865755][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 108.867465][ T20] kthread+0x373/0x450 [ 108.868804][ T20] ? __pfx_kthread+0x10/0x10 [ 108.870264][ T20] ret_from_fork+0x730/0xd60 [ 108.871742][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 108.873708][ T20] ? __switch_to+0x800/0x10f0 [ 108.875307][ T20] ? __pfx_kthread+0x10/0x10 [ 108.876782][ T20] ret_from_fork_asm+0x1a/0x30 [ 108.878291][ T20] [ 108.879344][ T20] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.881610][ T20] CPU: 0 UID: 0 PID: 20 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 108.884469][ T20] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.887578][ T20] Stopper: 0x0 <- 0x0 [ 108.888891][ T20] Call Trace: [ 108.889950][ T20] [ 108.890926][ T20] dump_stack_lvl+0x100/0x190 [ 108.892469][ T20] vpanic+0x553/0x970 [ 108.893866][ T20] ? __pfx_vpanic+0x10/0x10 [ 108.895337][ T20] panic+0xd1/0xe0 [ 108.896523][ T20] ? __pfx_panic+0x10/0x10 [ 108.897933][ T20] check_panic_on_warn.cold+0x19/0x34 [ 108.899677][ T20] ? update_rq_clock+0x40a/0xd20 [ 108.901241][ T20] __warn.cold+0x191/0x318 [ 108.902747][ T20] __report_bug+0x30f/0x440 [ 108.904385][ T20] ? update_rq_clock+0x40a/0xd20 [ 108.905960][ T20] ? __pfx___report_bug+0x10/0x10 [ 108.907552][ T20] ? pick_eevdf+0x23e/0x880 [ 108.909002][ T20] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 108.910756][ T20] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 108.912526][ T20] ? update_rq_clock+0x40a/0xd20 [ 108.914148][ T20] report_bug+0xb3/0x220 [ 108.915492][ T20] ? update_rq_clock+0x40a/0xd20 [ 108.917086][ T20] handle_bug+0x16a/0x2a0 [ 108.918450][ T20] exc_invalid_op+0x17/0x50 [ 108.919950][ T20] asm_exc_invalid_op+0x1a/0x20 [ 108.921500][ T20] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 108.923309][ T20] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 108.929226][ T20] RSP: 0000:ffffc9000046fc30 EFLAGS: 00010046 [ 108.931172][ T20] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 108.933898][ T20] RDX: 0000000000000046 RSI: ffffffff8e36be9b RDI: ffffffff8c624080 [ 108.936366][ T20] RBP: ffffc9000046fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 108.938808][ T20] R10: ffff88802b23cbd8 R11: 00000019552b5000 R12: ffffffff9145bbe4 [ 108.941310][ T20] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 108.943859][ T20] __schedule+0x1c69/0x6920 [ 108.945293][ T20] ? __lock_acquire+0x5c0/0x1f40 [ 108.946857][ T20] ? __pfx___schedule+0x10/0x10 [ 108.948373][ T20] ? find_held_lock+0x2b/0x80 [ 108.949890][ T20] ? schedule+0x225/0x2c0 [ 108.951256][ T20] schedule+0xdd/0x2c0 [ 108.952662][ T20] smpboot_thread_fn+0x8a0/0xab0 [ 108.954255][ T20] ? kthread+0x13a/0x450 [ 108.955588][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 108.957281][ T20] kthread+0x373/0x450 [ 108.958570][ T20] ? __pfx_kthread+0x10/0x10 [ 108.960018][ T20] ret_from_fork+0x730/0xd60 [ 108.961467][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 108.963070][ T20] ? __switch_to+0x800/0x10f0 [ 108.964555][ T20] ? __pfx_kthread+0x10/0x10 [ 108.966001][ T20] ret_from_fork_asm+0x1a/0x30 [ 108.967518][ T20] [ 110.037014][ T20] Shutting down cpus with NMI [ 110.039095][ T20] Kernel Offset: disabled [ 110.040472][ T20] Rebooting in 86400 seconds..